
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131362e302f32332d3233203d3e203535393630.roa
File: 35342e3232322e3131362e302f32332d3233203d3e203535393630.roa (raw, json)
Hash identifier: p/I/mixk62t3KGWOrrZSwMaoZSKHuqFqQj9R76mpNbE=
Subject key identifier: 36:1E:5C:A6:8B:B2:F5:F6:07:9B:B7:2A:26:C4:B1:30:8F:EA:72:D5
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 77122E6C015E159AED8F592B9EF5A26063006F77
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131362e302f32332d3233203d3e203535393630.roa
Signing time: Tue 19 May 2026 03:03:06 +0000
ROA not before: Tue 19 May 2026 02:58:06 +0000
ROA not after: Tue 18 May 2027 03:03:06 +0000
asID: 55960
IP address blocks: 54.222.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:12:2e:6c:01:5e:15:9a:ed:8f:59:2b:9e:f5:a2:60:63:00:6f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:58:06 2026 GMT
Not After : May 18 03:03:06 2027 GMT
Subject: CN=361E5CA68BB2F5F6079BB72A26C4B1308FEA72D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:3a:d7:67:27:00:e8:53:7b:21:93:f8:d8:
7d:21:87:52:b0:46:ce:f6:63:d4:7a:9f:00:43:11:
b5:f5:da:55:bb:1f:e9:eb:a3:06:a9:06:b7:b9:58:
5f:95:29:97:5b:14:8c:3e:fe:aa:18:6c:87:84:71:
b8:29:d5:7c:f0:47:10:46:65:5b:41:3f:ae:3a:ce:
cb:2d:e8:18:8a:21:ac:27:51:a7:db:12:01:ed:85:
1c:49:a3:7c:c9:1a:67:23:df:ef:5a:54:62:51:1f:
db:b9:29:af:0f:74:fd:81:0e:1a:51:53:95:15:b4:
fc:05:c4:2d:b2:10:2e:4a:ce:4a:79:fd:03:04:d9:
53:65:82:e6:0a:bf:52:75:4a:64:73:17:aa:44:7c:
d7:cd:7c:53:a2:ef:76:5f:10:9d:76:9d:4b:2f:83:
47:3f:f4:93:0b:48:c8:2d:a3:0f:78:1b:f3:9b:50:
2b:f5:52:e7:df:bc:68:3b:c1:0d:94:7a:3b:31:22:
2d:92:38:ba:a3:bc:82:7b:1b:f6:9d:05:85:04:0a:
ae:05:c7:17:9a:e8:11:a4:60:6f:b9:ed:a5:07:6e:
91:9c:cc:2a:73:8d:ac:86:85:6c:3f:67:2e:8e:08:
72:47:25:52:80:f9:2c:c6:ef:65:de:1f:92:0c:b5:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:5C:A6:8B:B2:F5:F6:07:9B:B7:2A:26:C4:B1:30:8F:EA:72:D5
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131362e302f32332d3233203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:ae:5d:94:24:cc:80:76:64:7e:3e:ac:3b:37:62:ed:c3:93:
da:0f:4a:1d:4c:e6:74:22:2c:4c:b7:50:6e:ea:57:8d:93:76:
a6:5d:dd:52:53:ee:f8:78:36:58:2d:e4:08:1f:8a:eb:9c:d1:
e7:4f:a5:f0:4d:1f:a0:33:02:f2:72:c6:41:8e:8a:bc:45:bf:
b6:87:95:10:2c:20:f5:e6:fc:73:ac:b1:ce:08:30:52:1f:61:
49:91:50:9f:cb:f3:76:eb:55:88:53:1b:79:96:c7:28:22:bf:
d0:1e:f7:9b:07:90:a7:be:dc:f6:8f:a0:35:dc:d0:1e:6a:f5:
35:a8:95:54:bc:4e:2c:a0:b9:ce:de:83:81:28:bd:23:f7:25:
f1:8f:56:85:93:46:c7:43:39:a3:a2:75:ec:ca:b2:98:38:41:
48:1e:b2:12:53:19:2e:b9:30:dd:7d:90:b6:bb:0c:1d:5f:01:
42:f5:42:ec:31:23:ea:d9:70:a5:04:1c:ac:14:cd:cc:27:f2:
97:b2:0e:09:65:36:a7:be:ec:f4:8f:11:24:70:06:7a:36:3e:
ac:3b:be:f3:f3:e7:b3:03:88:8f:40:fa:da:d4:eb:a1:8c:67:
e7:de:d9:34:c3:9b:03:bd:9f:04:d2:bd:c5:11:d9:6e:5a:7c:
71:ba:ed:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:52 2026 by rpki-client