
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131342e302f32332d3233203d3e203535393630.roa
File: 35342e3232322e3131342e302f32332d3233203d3e203535393630.roa (raw, json)
Hash identifier: GxODqOo5e/amDkZwETkUqvjaB7mJobwodz7rYIdcilA=
Subject key identifier: EF:E6:2F:4A:25:2D:6D:C3:19:3C:15:B7:2E:B4:A2:9E:C7:19:F5:80
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 0C5A63B1F3F40FC4717ABB07D447833B07B4C9B9
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131342e302f32332d3233203d3e203535393630.roa
Signing time: Tue 19 May 2026 03:01:06 +0000
ROA not before: Tue 19 May 2026 02:56:06 +0000
ROA not after: Tue 18 May 2027 03:01:06 +0000
asID: 55960
IP address blocks: 54.222.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5a:63:b1:f3:f4:0f:c4:71:7a:bb:07:d4:47:83:3b:07:b4:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:56:06 2026 GMT
Not After : May 18 03:01:06 2027 GMT
Subject: CN=EFE62F4A252D6DC3193C15B72EB4A29EC719F580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:05:f8:23:58:63:47:4b:90:f0:70:65:e5:
7e:74:93:a9:e9:76:c2:a2:b2:4e:3e:af:43:c9:1c:
d3:cd:c0:05:c4:a6:29:56:48:00:b6:b8:74:03:d1:
0a:db:29:dd:67:46:f8:34:49:a0:08:4c:c8:67:0b:
69:9d:88:b1:72:32:53:a2:7b:ed:59:cf:1f:81:15:
37:3d:ac:b9:c5:d7:87:21:f0:bd:42:a0:8b:a6:25:
d8:c4:a2:01:65:6c:ad:ce:f7:ee:69:2b:6a:84:c8:
2f:31:96:1e:eb:ae:dd:4f:7d:b6:5d:a8:93:fb:ed:
b6:a6:df:43:e9:2d:49:da:9f:fe:7b:1c:15:e6:2e:
54:40:de:77:50:d5:b9:f1:fc:da:01:2b:6c:9f:86:
5c:4b:e9:7f:59:f6:7e:f6:5b:46:60:36:dd:02:94:
9d:a4:94:49:39:dc:ec:71:21:8c:cb:3d:d2:25:a2:
67:54:94:ee:41:25:de:c0:60:b5:4d:58:5d:02:5f:
4a:43:8a:ca:4d:c3:38:64:b3:f0:e3:f7:99:fc:b3:
c6:b0:ea:82:6d:ae:72:d6:de:63:cc:32:53:c4:33:
e4:2b:0a:94:04:89:b4:c3:be:7f:86:06:32:11:0c:
31:40:7a:f6:bd:c2:3c:05:72:c2:d3:4c:b6:b0:4f:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:2F:4A:25:2D:6D:C3:19:3C:15:B7:2E:B4:A2:9E:C7:19:F5:80
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131342e302f32332d3233203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.114.0/23
Signature Algorithm: sha256WithRSAEncryption
67:6a:61:c5:35:5a:25:16:75:19:9d:08:3a:26:3c:24:a9:9a:
05:c0:18:99:3a:e0:0c:a4:5e:8a:33:0d:ce:ef:63:db:8d:c3:
57:19:ee:15:83:14:91:1c:85:db:d0:7d:5a:5b:87:aa:27:a7:
87:35:3c:da:69:01:73:49:f0:25:e9:91:1c:d6:ee:f5:45:fc:
0e:a7:df:88:f2:90:5c:05:80:37:67:07:5f:e4:8b:af:9a:a6:
fa:29:4d:f1:ee:89:23:1a:e4:d1:54:9f:fb:53:e4:13:bf:24:
7d:fd:7b:59:9b:6f:bc:30:39:4b:ce:e7:44:b3:d0:03:6c:b7:
fd:71:39:cd:ff:41:b2:1b:8d:fd:4e:72:54:37:53:8a:10:5f:
17:47:17:a1:5f:ed:da:64:ed:ef:36:d6:6c:36:87:09:a5:7a:
fc:e2:2b:7c:ec:c7:fc:b7:bd:30:0c:93:89:79:e8:35:bf:3a:
ea:24:08:1f:d8:66:22:5f:6a:1c:11:9b:fb:59:55:ee:2f:87:
7e:9b:a6:05:25:11:2b:ad:e1:be:df:99:3f:44:23:8f:62:83:
e7:48:19:18:e9:51:19:4c:b4:94:4e:80:1e:39:c9:e6:e6:04:
25:00:c0:b2:c3:8b:fd:bc:51:a1:09:b1:44:cd:5d:7c:44:b8:
c3:e2:e8:f4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDFpjsfP0D8RxersH1EeDOwe0ybkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjU2MDZaFw0yNzA1MTgwMzAxMDZaMDMxMTAvBgNV
BAMTKEVGRTYyRjRBMjUyRDZEQzMxOTNDMTVCNzJFQjRBMjlFQzcxOUY1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVwX4I1hjR0uQ8HBl5X50k6np
dsKisk4+r0PJHNPNwAXEpilWSAC2uHQD0QrbKd1nRvg0SaAITMhnC2mdiLFyMlOi
e+1Zzx+BFTc9rLnF14ch8L1CoIumJdjEogFlbK3O9+5pK2qEyC8xlh7rrt1PfbZd
qJP77bam30PpLUnan/57HBXmLlRA3ndQ1bnx/NoBK2yfhlxL6X9Z9n72W0ZgNt0C
lJ2klEk53OxxIYzLPdIlomdUlO5BJd7AYLVNWF0CX0pDispNwzhks/Dj95n8s8aw
6oJtrnLW3mPMMlPEM+QrCpQEibTDvn+GBjIRDDFAeva9wjwFcsLTTLawT1RLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU7+YvSiUtbcMZPBW3LrSinscZ9YAwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwODY3NzQzNTM5NTY3MDAzNy8wLzM1MzQyZTMyMzIz
MjJlMzEzMTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNTM5MzYzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEATbecjANBgkqhkiG9w0BAQsFAAOCAQEAZ2phxTVaJRZ1GZ0IOiY8JKma
BcAYmTrgDKReijMNzu9j243DVxnuFYMUkRyF29B9WluHqienhzU82mkBc0nwJemR
HNbu9UX8DqffiPKQXAWAN2cHX+SLr5qm+ilN8e6JIxrk0VSf+1PkE78kff17WZtv
vDA5S87nRLPQA2y3/XE5zf9BshuN/U5yVDdTihBfF0cXoV/t2mTt7zbWbDaHCaV6
/OIrfOzH/Le9MAyTiXnoNb866iQIH9hmIl9qHBGb+1lV7i+HfpumBSURK63hvt+Z
P0Qjj2KD50gZGOlRGUy0lE6AHjnJ5uYEJQDAssOL/bxRoQmxRM1dfES4w+Lo9A==
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:11 2026 by rpki-client