
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131332e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e3131332e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: 3pdx0S1rBYD94DLYV4vP2dSk+y6VMVNat/bhVWlsu78=
Subject key identifier: AA:47:A2:96:F1:30:15:7A:28:3D:C1:9F:B6:5D:BC:06:6A:22:9C:F7
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 1B596CFB1BFA4459B16DBBA8EB701E9FDE430D22
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131332e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:59:53 +0000
ROA not before: Tue 19 May 2026 02:54:53 +0000
ROA not after: Tue 18 May 2027 02:59:53 +0000
asID: 55960
IP address blocks: 54.222.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:59:6c:fb:1b:fa:44:59:b1:6d:bb:a8:eb:70:1e:9f:de:43:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:54:53 2026 GMT
Not After : May 18 02:59:53 2027 GMT
Subject: CN=AA47A296F130157A283DC19FB65DBC066A229CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:99:11:a3:cc:9b:45:1b:12:6a:7c:ad:46:
85:06:af:02:7e:92:23:cd:96:1e:16:fc:c9:96:a3:
3d:59:88:35:26:a1:8c:cf:27:ab:9c:53:26:a1:57:
38:25:f1:61:ca:bf:10:41:e6:6f:a9:fa:aa:24:dc:
f6:6a:33:cc:aa:8a:1c:a5:87:7b:ee:5f:e5:3b:20:
ac:39:02:13:95:8b:8e:d1:a1:5a:b6:44:42:9e:fb:
bf:e7:5c:54:d4:95:72:37:e6:d0:16:79:2e:10:52:
cb:4a:77:ae:d3:dd:61:c2:17:ec:d4:fb:69:4f:48:
c8:a0:a8:f4:10:0f:b7:05:57:fa:a3:15:56:e4:6f:
03:ca:8e:61:d4:66:af:2e:8a:03:dd:fd:96:b9:8e:
ca:11:2c:90:78:70:2b:68:c5:84:5b:ec:57:f5:2f:
98:58:8c:1d:46:f6:0f:59:26:9b:43:6b:36:15:c2:
6d:6f:fa:53:86:f3:4d:1c:5f:2e:ed:cc:eb:fd:51:
9b:2f:43:75:bb:8e:1c:82:95:5a:2c:3b:63:37:7f:
59:da:06:c0:2b:5f:0f:aa:da:11:6f:af:91:72:99:
f2:ed:40:40:c6:48:52:42:4b:2a:59:9f:ef:86:ca:
be:8f:f3:fe:d1:cd:b2:8a:d9:6c:74:c4:4a:c2:9c:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:A2:96:F1:30:15:7A:28:3D:C1:9F:B6:5D:BC:06:6A:22:9C:F7
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131332e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5d:ee:8b:87:e7:e0:e0:8b:eb:49:7e:b3:6d:e9:44:b0:2a:
68:e0:a7:f4:22:db:1c:b4:75:73:16:91:6c:1e:69:b3:cf:b5:
5a:56:20:ad:67:a5:83:f3:69:7c:4a:01:61:43:e8:c8:43:bd:
e9:7b:b2:b8:ec:c1:56:53:79:48:99:e5:1b:0a:4f:94:59:64:
9f:44:bc:60:da:05:e7:bf:82:9b:e0:9b:f5:67:72:1b:2a:b7:
f1:f4:67:76:3f:2d:88:71:c7:b0:a8:0a:c2:0a:e0:59:bd:9e:
33:98:0e:7d:52:bb:90:c0:16:f4:73:b2:40:1a:ee:62:ac:c0:
a9:c2:5c:64:c0:f0:6e:43:d2:3a:8d:15:10:df:86:d5:5b:ae:
d0:1e:55:9e:d1:4b:0d:2a:5f:d4:4e:01:c9:53:cc:d2:e1:7d:
6c:e1:08:db:73:15:5c:09:b9:e7:3f:68:00:f5:0b:5e:f9:c7:
2a:e9:7a:30:94:7c:43:8e:54:63:d9:3c:3b:6f:b5:50:ee:a1:
5e:00:8b:b6:2f:7c:4b:9e:80:8f:ca:40:23:69:57:15:20:02:
c3:ba:b8:1a:80:d0:7b:9d:48:50:6e:dc:c0:fd:0e:2e:2b:18:
21:36:10:b3:70:b2:40:21:38:b8:71:47:c6:f7:70:11:ae:44:
98:b3:60:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:32 2026 by rpki-client