
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131342e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e3131342e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: nBLae/BYH5qRT4YLty0sY2vU1eZEEsLkMfQ7MXtycoM=
Subject key identifier: 96:48:80:D9:E2:E6:92:FA:73:10:F4:41:45:FE:F2:81:73:FC:F2:64
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 496371AF0196201AA22C3341D94D4793C2C4195E
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131342e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 03:00:30 +0000
ROA not before: Tue 19 May 2026 02:55:30 +0000
ROA not after: Tue 18 May 2027 03:00:30 +0000
asID: 55960
IP address blocks: 54.222.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:63:71:af:01:96:20:1a:a2:2c:33:41:d9:4d:47:93:c2:c4:19:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:55:30 2026 GMT
Not After : May 18 03:00:30 2027 GMT
Subject: CN=964880D9E2E692FA7310F44145FEF28173FCF264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:b3:28:b6:de:d4:4d:a6:ce:59:42:62:67:
73:3a:4c:c5:6e:f3:e8:e4:e8:da:59:d8:df:47:29:
f2:22:6d:ac:20:fe:cd:29:38:3a:30:a3:c4:7c:ee:
79:ed:6b:e7:53:98:dc:b1:d0:4d:23:c6:16:36:7d:
7b:34:2e:4d:6c:76:aa:35:89:6a:c3:8d:6e:6b:7e:
f0:5f:d9:97:63:c0:98:f3:de:10:e2:4d:c8:f7:ad:
79:5b:2a:d1:65:da:96:9b:88:99:00:30:96:a1:7f:
67:e9:3a:c9:4b:c8:26:e9:4d:42:d7:0c:fb:12:83:
74:ca:b4:79:ff:40:9d:d3:f2:cc:ed:e6:7e:1c:b2:
a4:e2:46:3e:53:57:84:72:68:bc:f9:60:d1:e7:d2:
e6:14:f1:84:ce:27:c8:91:75:85:a5:06:20:f5:68:
53:44:01:a2:14:76:57:1b:96:03:49:9a:b3:6f:1f:
61:fb:f2:9e:3c:8b:fe:6a:74:2b:dc:6d:3c:1b:62:
d4:96:b7:5c:04:e8:3d:c5:d7:81:94:05:3c:cd:16:
58:5e:45:ed:a7:60:ff:94:18:68:ae:93:76:8e:7b:
ad:78:45:2a:b8:9e:4e:70:94:cf:96:11:30:0d:b6:
ee:3e:dd:c4:51:d9:bd:aa:d6:db:06:12:64:9f:e5:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:48:80:D9:E2:E6:92:FA:73:10:F4:41:45:FE:F2:81:73:FC:F2:64
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131342e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:52:38:b8:a8:09:95:4d:04:00:b0:89:20:8a:8e:1c:10:a8:
f1:81:cd:61:37:f5:60:fd:d8:e7:31:19:42:e9:84:88:dc:6a:
d8:f1:00:6f:3e:bb:f9:1e:b8:46:85:38:7e:37:08:72:bf:ff:
bc:69:d9:78:d0:ee:ba:d1:04:0c:d2:54:7d:39:5c:ac:b7:c1:
26:90:0a:2c:8f:ad:6c:7a:ea:83:13:a1:ba:6a:76:dc:e8:1c:
fc:43:29:cb:62:43:52:30:48:56:f2:4a:a7:72:9c:cc:1e:a9:
1b:ca:e7:09:a6:15:19:c6:a8:14:26:c6:75:77:c5:6f:6a:f8:
ff:55:78:0c:60:7d:ec:7b:74:05:85:c1:25:33:28:87:81:6f:
fd:b1:d2:a6:84:7c:f8:99:f9:32:bb:b0:b9:f3:3a:aa:dc:6a:
d7:a6:43:47:2d:bb:66:fb:8a:8f:b3:99:7f:5e:7d:c7:ff:c4:
4b:fc:ad:1e:b4:7b:12:0d:0a:be:b0:d5:68:67:42:9f:83:8c:
75:7b:c3:82:c4:6a:4e:b7:27:35:bd:6f:21:35:ad:31:bd:a1:
1f:dd:c6:33:28:03:97:6b:d2:52:7d:9a:f1:eb:15:e9:d5:cb:
84:8f:9e:91:9c:12:5b:6a:81:d8:58:2f:fe:28:93:a1:36:08:
38:d7:df:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:10 2026 by rpki-client