
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131352e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e3131352e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: 0uvRgMKr+1mm5Dekd2lCbbCw0pYdIpDAMzRlk34Ocsc=
Subject key identifier: 00:E7:C5:45:93:09:60:7D:55:C6:1B:1A:C4:1A:96:D2:9A:BA:99:45
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 66F809FADC8ED89D5072B82B6751C40AD5B35BEC
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131352e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 03:00:30 +0000
ROA not before: Tue 19 May 2026 02:55:30 +0000
ROA not after: Tue 18 May 2027 03:00:30 +0000
asID: 55960
IP address blocks: 54.222.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f8:09:fa:dc:8e:d8:9d:50:72:b8:2b:67:51:c4:0a:d5:b3:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:55:30 2026 GMT
Not After : May 18 03:00:30 2027 GMT
Subject: CN=00E7C5459309607D55C61B1AC41A96D29ABA9945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:e1:bd:a6:14:31:12:95:63:61:aa:0c:f4:
90:8d:e5:38:2c:26:16:71:b8:1c:77:3a:55:8c:63:
7c:49:a5:eb:c3:ab:c1:47:89:19:f4:27:23:4c:7e:
d6:9a:e5:e2:b2:97:e3:15:18:b9:81:57:3f:16:14:
64:0a:36:d5:2b:cb:d7:80:bd:ef:7f:f4:b3:aa:cf:
ab:e4:38:cf:e6:72:6b:07:28:02:a6:81:06:69:92:
70:35:21:47:1e:b7:3e:53:cd:8a:54:a4:d7:d8:eb:
d6:5f:91:73:81:a1:1d:65:8c:01:40:2e:0c:b4:57:
60:90:ae:9d:53:a9:3d:7f:82:27:c5:37:25:6a:6a:
97:10:07:b0:82:bc:b4:88:3c:6a:2e:bc:e3:d8:b8:
3f:7a:7b:90:36:18:3d:5c:37:85:e2:d1:c3:c0:1c:
d3:af:de:91:4f:c5:0e:e4:1a:45:a8:4a:de:96:66:
ba:2f:9e:22:52:14:cc:b4:f4:b5:7c:79:e3:33:7a:
59:17:4e:54:4f:67:04:b5:bd:da:c4:6a:f1:f5:f1:
a2:d9:9b:ad:d9:e1:fa:c8:60:68:3c:b0:53:58:f3:
27:1f:2f:ef:41:6a:1a:d1:7c:02:bd:d3:5d:f9:a1:
ce:59:f5:78:05:40:66:75:af:98:22:d2:b2:58:1d:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E7:C5:45:93:09:60:7D:55:C6:1B:1A:C4:1A:96:D2:9A:BA:99:45
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131352e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.115.0/24
Signature Algorithm: sha256WithRSAEncryption
85:77:00:fd:57:0b:16:cb:16:8c:3d:06:d9:bd:8c:12:fb:3f:
e0:a9:2c:7f:66:e2:94:40:96:77:a0:d6:03:12:cb:81:a3:11:
7f:1b:44:c9:ab:04:fe:32:99:0c:12:46:e8:15:e7:6b:90:ba:
48:46:51:4e:22:e8:db:3d:b4:95:aa:e5:f4:f2:ea:27:65:33:
90:9a:2c:2b:72:bd:3d:63:07:60:e8:7f:c6:51:13:0e:dd:65:
f2:f1:26:2b:50:2b:eb:0b:4b:6f:70:f7:b4:d9:aa:d3:66:49:
0f:ec:26:19:c8:7d:0d:e8:c1:32:7c:e9:e7:0d:aa:1c:a2:79:
9f:ac:72:c2:d8:12:ab:b1:9a:64:1b:a7:63:a6:d4:63:0c:55:
21:38:a8:5a:4f:ff:be:2d:17:b8:c0:b2:a9:18:ca:4b:d4:38:
b6:d1:82:40:d6:f8:78:af:fc:8a:60:c9:82:78:83:ac:a4:6a:
8a:84:9b:d6:8f:c7:57:a7:c5:03:6f:50:b0:21:98:28:6e:ed:
01:d8:79:1a:ff:ed:ce:ef:8b:db:fa:7c:ed:b1:73:4a:55:d8:
ee:74:26:c2:f7:32:91:13:81:65:46:c8:31:63:32:ed:01:fb:
73:2f:a0:db:a1:a1:3b:41:67:84:b5:19:33:0d:bf:52:2f:aa:
05:90:6a:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:32 2026 by rpki-client