$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34362e302f32332d3233203d3e2039383038.roa File: 35342e3232322e34362e302f32332d3233203d3e2039383038.roa (raw, json) Hash identifier: XDsEBz0/qPnCsDZQxklC2JX8yMNLxZm6K4goC68u+s4= Subject key identifier: 86:7B:75:D8:C3:2A:31:FB:A7:D5:25:6C:1B:02:7F:14:C5:91:FC:84 Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 52CA2D86CB90392E419839ECAF4C2682878E4AF6 Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34362e302f32332d3233203d3e2039383038.roa Signing time: Tue 19 May 2026 02:41:51 +0000 ROA not before: Tue 19 May 2026 02:36:51 +0000 ROA not after: Tue 18 May 2027 02:41:51 +0000 asID: 9808 IP address blocks: 54.222.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ca:2d:86:cb:90:39:2e:41:98:39:ec:af:4c:26:82:87:8e:4a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: May 19 02:36:51 2026 GMT Not After : May 18 02:41:51 2027 GMT Subject: CN=867B75D8C32A31FBA7D5256C1B027F14C591FC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:8c:c4:08:b4:3a:45:d1:9d:96:17:05:85: af:e9:50:a7:33:00:31:f5:85:96:c0:b5:69:a7:11: 4e:c0:7e:2e:5d:39:9b:c9:58:26:f5:3a:82:6b:65: 38:17:54:b3:ab:32:ce:18:45:27:7c:16:45:e5:ec: c7:86:91:48:ad:9d:9b:0e:56:5e:3e:10:43:c1:52: 7b:31:21:80:fb:22:0a:3f:59:7a:64:3d:69:e6:21: 4a:d0:6d:52:c0:45:82:61:c5:03:67:d4:bd:b6:7a: 71:c8:0b:82:bd:33:7a:44:c6:1e:19:ae:ee:3d:75: 8b:2f:f5:0a:70:c4:cc:28:f0:99:31:be:b6:ea:a2: 5a:39:77:42:79:d9:ea:13:65:97:58:e2:2b:18:1e: 37:00:8c:5f:62:ae:16:f3:46:ce:a5:9f:19:6d:1f: 8a:f8:4b:57:80:b4:07:70:af:a5:94:ca:66:6c:72: ca:22:0d:ba:9c:8c:7d:de:15:e4:ae:78:da:e9:43: 0b:14:ce:28:26:33:aa:b8:82:a8:2d:ae:49:b9:90: ce:1d:fe:7a:99:4f:6b:bb:e3:47:a9:53:32:ec:ea: c6:a9:dd:4e:4c:8c:05:0d:7e:f1:20:37:98:e1:20: f9:19:50:2b:3a:25:54:b1:66:bf:15:aa:9e:9e:9b: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7B:75:D8:C3:2A:31:FB:A7:D5:25:6C:1B:02:7F:14:C5:91:FC:84 X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34362e302f32332d3233203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.46.0/23 Signature Algorithm: sha256WithRSAEncryption 60:a8:06:36:8e:28:8e:0a:97:ae:46:31:83:3b:ae:f3:65:57: 5e:af:55:dd:bb:16:3f:d2:92:2d:a8:cc:ce:06:9c:27:09:bb: ac:a0:48:74:96:bf:5d:df:cd:59:44:bb:32:b6:a6:4e:d4:05: c0:79:e4:c0:b2:93:5b:43:be:c5:33:4c:fa:bf:10:0f:6d:57: 70:9c:21:8a:da:d2:ae:6a:8a:c5:b4:78:b6:25:26:f4:c3:6d: 18:b6:71:9a:a5:6d:64:13:93:3e:b9:24:5d:98:ff:45:d5:3c: 7a:ca:a9:96:6b:69:ee:45:61:f9:8c:81:c2:b3:95:8a:a4:a5: 1c:cf:d2:c3:dc:93:d8:81:c7:be:62:db:7a:90:08:ff:e1:48: 22:9a:c2:a7:a9:ae:70:b6:aa:2d:22:0f:13:bb:a8:91:b0:23: 84:06:79:c7:d0:a0:f4:51:55:1a:74:c3:f0:5d:13:91:7d:ac: 40:71:44:71:c5:ac:d6:f7:1d:33:29:80:e4:d9:63:99:8a:1e: f5:e2:76:eb:4d:be:53:2b:6d:c0:71:ea:4f:e3:70:2f:fd:40: 96:2c:09:ba:87:81:b7:5e:cd:8c:3e:e3:f4:71:db:6f:d3:2c: e3:37:b5:cf:36:54:69:f1:ec:ba:8f:97:44:51:66:ff:9b:81: 7c:1f:27:09 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUUsothsuQOS5BmDnsr0wmgoeOSvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA1MTkwMjM2NTFaFw0yNzA1MTgwMjQxNTFaMDMxMTAvBgNV BAMTKDg2N0I3NUQ4QzMyQTMxRkJBN0Q1MjU2QzFCMDI3RjE0QzU5MUZDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/J4zECLQ6RdGdlhcFha/pUKcz ADH1hZbAtWmnEU7Afi5dOZvJWCb1OoJrZTgXVLOrMs4YRSd8FkXl7MeGkUitnZsO Vl4+EEPBUnsxIYD7Igo/WXpkPWnmIUrQbVLARYJhxQNn1L22enHIC4K9M3pExh4Z ru49dYsv9QpwxMwo8Jkxvrbqolo5d0J52eoTZZdY4isYHjcAjF9irhbzRs6lnxlt H4r4S1eAtAdwr6WUymZscsoiDbqcjH3eFeSueNrpQwsUzigmM6q4gqgtrkm5kM4d /nqZT2u740epUzLs6sap3U5MjAUNfvEgN5jhIPkZUCs6JVSxZr8Vqp6em5knAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUhnt12MMqMfun1SVsGwJ/FMWR/IQwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy MmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAE23i4wDQYJKoZIhvcNAQELBQADggEBAGCoBjaOKI4Kl65GMYM7rvNlV16vVd27 Fj/Ski2ozM4GnCcJu6ygSHSWv13fzVlEuzK2pk7UBcB55MCyk1tDvsUzTPq/EA9t V3CcIYra0q5qisW0eLYlJvTDbRi2cZqlbWQTkz65JF2Y/0XVPHrKqZZrae5FYfmM gcKzlYqkpRzP0sPck9iBx75i23qQCP/hSCKawqeprnC2qi0iDxO7qJGwI4QGecfQ oPRRVRp0w/BdE5F9rEBxRHHFrNb3HTMpgOTZY5mKHvXidutNvlMrbcBx6k/jcC/9 QJYsCbqHgbdezYw+4/Rx22/TLOM3tc82VGnx7LqPl0RRZv+bgXwfJwk= -----END CERTIFICATE-----Generated at Sat May 30 00:41:51 2026 by rpki-client