
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34352e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e34352e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: hLhWhZq7RBoCSZ5jDPGwJmpwLo8UM+u/rx76oJUXipE=
Subject key identifier: E3:0A:C5:64:B7:45:53:8C:C8:0B:BD:A7:C6:65:19:6C:FF:AA:B1:AA
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 6C83052FB38B5AAE37D16172A49EF9F3EF7FD8FF
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34352e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:50:48 +0000
ROA not before: Tue 19 May 2026 02:45:48 +0000
ROA not after: Tue 18 May 2027 02:50:48 +0000
asID: 55960
IP address blocks: 54.222.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:83:05:2f:b3:8b:5a:ae:37:d1:61:72:a4:9e:f9:f3:ef:7f:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:45:48 2026 GMT
Not After : May 18 02:50:48 2027 GMT
Subject: CN=E30AC564B745538CC80BBDA7C665196CFFAAB1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:db:da:75:13:97:cb:f5:3c:2e:41:ba:72:
94:df:ce:5f:a3:99:ff:94:47:2b:b7:b4:dc:f8:d6:
5a:a3:4a:ee:a7:4a:c8:67:f8:c8:33:e0:38:55:47:
8b:70:d7:3b:75:ff:b0:ea:6e:89:7e:b8:b5:62:3e:
fe:1d:bc:84:70:df:0a:13:51:e9:e3:bf:fe:1c:75:
ad:f1:6c:2e:56:bc:72:c3:a3:c7:ce:81:74:49:12:
a2:c8:c1:d0:aa:48:22:88:91:e9:9b:f8:fa:2f:41:
ba:1d:4d:61:2b:16:9c:33:32:f9:b4:f2:0d:3d:34:
ec:20:a8:bf:48:06:10:95:c2:2c:09:cb:82:c6:1d:
92:c8:64:55:1b:97:49:47:33:d7:03:3b:cc:94:40:
20:c0:e5:f9:e6:bf:e6:17:88:9d:23:9b:d8:f2:26:
11:3a:21:9e:b5:2c:7f:ba:b6:fa:73:9c:1a:61:ce:
9a:4b:18:20:2b:10:38:c1:39:d9:bf:31:ac:e7:ff:
cb:57:12:9d:d9:75:90:ed:5c:57:88:06:fc:08:af:
c9:19:30:c1:e4:ee:5e:00:c2:fd:81:90:bd:56:92:
25:a8:8f:bd:7b:61:61:78:d4:c7:8e:eb:32:9f:33:
85:e8:d6:bf:b0:45:b3:03:61:44:fe:b7:69:aa:73:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:C5:64:B7:45:53:8C:C8:0B:BD:A7:C6:65:19:6C:FF:AA:B1:AA
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34352e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.45.0/24
Signature Algorithm: sha256WithRSAEncryption
35:eb:c8:ee:f3:a9:42:7a:91:c6:13:e0:1a:09:fd:33:2c:66:
80:58:76:93:15:02:00:a2:da:b4:6b:95:d8:50:f3:30:c2:5a:
13:95:ea:2d:28:c7:72:58:2f:44:a2:5e:56:3e:94:16:c2:d9:
40:54:9d:07:7e:e3:f9:67:7b:e5:d9:26:bf:e3:89:12:37:99:
99:34:de:8e:99:30:15:58:bc:fa:7c:ef:58:7f:fe:9e:a9:c2:
4f:86:37:d2:9b:6d:b0:43:76:17:69:17:78:7b:ee:47:d6:f8:
61:fc:16:8d:4e:da:b4:4b:1d:aa:2c:a3:19:f8:c1:67:8c:ba:
19:49:e2:75:f0:75:67:a0:04:b6:5f:61:67:04:e4:63:25:46:
c3:12:1b:f7:58:e1:5c:ab:61:ce:bf:e1:19:2e:9d:ec:87:49:
b6:d9:fc:ec:34:3f:8a:f6:c7:22:13:b8:46:0c:54:03:c2:b3:
ce:f0:26:31:f8:a2:ea:bf:fc:26:f0:de:68:24:6d:49:c4:5c:
a1:b4:33:d2:91:98:b7:44:06:15:cb:87:1c:e2:0d:76:2c:c6:
fd:8b:b0:24:c6:4a:37:5f:c6:c9:3c:56:07:f9:51:1c:02:28:
1d:de:60:f3:fc:7e:cf:d0:6e:68:a0:cb:3d:a0:58:d1:93:68:
5e:b7:60:56
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUbIMFL7OLWq430WFypJ758+9/2P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjQ1NDhaFw0yNzA1MTgwMjUwNDhaMDMxMTAvBgNV
BAMTKEUzMEFDNTY0Qjc0NTUzOENDODBCQkRBN0M2NjUxOTZDRkZBQUIxQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs89vadROXy/U8LkG6cpTfzl+j
mf+URyu3tNz41lqjSu6nSshn+Mgz4DhVR4tw1zt1/7Dqbol+uLViPv4dvIRw3woT
Uenjv/4cda3xbC5WvHLDo8fOgXRJEqLIwdCqSCKIkemb+PovQbodTWErFpwzMvm0
8g09NOwgqL9IBhCVwiwJy4LGHZLIZFUbl0lHM9cDO8yUQCDA5fnmv+YXiJ0jm9jy
JhE6IZ61LH+6tvpznBphzppLGCArEDjBOdm/Mazn/8tXEp3ZdZDtXFeIBvwIr8kZ
MMHk7l4Awv2BkL1WkiWoj717YWF41MeO6zKfM4Xo1r+wRbMDYUT+t2mqc2ZPAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU4wrFZLdFU4zIC72nxmUZbP+qsaowHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADbeLTANBgkqhkiG9w0BAQsFAAOCAQEANevI7vOpQnqRxhPgGgn9MyxmgFh2
kxUCAKLatGuV2FDzMMJaE5XqLSjHclgvRKJeVj6UFsLZQFSdB37j+Wd75dkmv+OJ
EjeZmTTejpkwFVi8+nzvWH/+nqnCT4Y30pttsEN2F2kXeHvuR9b4YfwWjU7atEsd
qiyjGfjBZ4y6GUnidfB1Z6AEtl9hZwTkYyVGwxIb91jhXKthzr/hGS6d7IdJttn8
7DQ/ivbHIhO4RgxUA8KzzvAmMfii6r/8JvDeaCRtScRcobQz0pGYt0QGFcuHHOIN
dizG/YuwJMZKN1/GyTxWB/lRHAIoHd5g8/x+z9BuaKDLPaBY0ZNoXrdgVg==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:13 2026 by rpki-client