$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37302e302f32342d3234203d3e203535393630.roa File: 35342e3232322e37302e302f32342d3234203d3e203535393630.roa (raw, json) Hash identifier: z0ynRE3kaO88tQfPCz9wqRofezYBYKHSZ0Xx3mlX3zc= Subject key identifier: 4F:B6:9D:DC:4B:4F:3F:9B:7E:F1:B3:B2:05:4F:86:21:74:71:2A:4E Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 3278E6CAE4E171C1FDBEB4B15FC514657C56704B Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37302e302f32342d3234203d3e203535393630.roa Signing time: Tue 19 May 2026 02:55:10 +0000 ROA not before: Tue 19 May 2026 02:50:10 +0000 ROA not after: Tue 18 May 2027 02:55:10 +0000 asID: 55960 IP address blocks: 54.222.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:78:e6:ca:e4:e1:71:c1:fd:be:b4:b1:5f:c5:14:65:7c:56:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: May 19 02:50:10 2026 GMT Not After : May 18 02:55:10 2027 GMT Subject: CN=4FB69DDC4B4F3F9B7EF1B3B2054F862174712A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:61:c1:7d:dc:d0:1f:46:18:43:74:34:98: 4e:2a:dc:a0:03:a5:3f:e7:ad:ab:f1:f3:be:16:f7: 13:63:72:5c:ef:f9:27:a8:06:13:e9:1b:5d:d3:aa: 62:8a:2f:cc:f3:fb:00:3c:77:e1:a0:6a:34:fb:aa: 41:92:f6:9c:f1:aa:18:b9:f1:a8:9c:db:c1:13:5b: ed:d2:c0:8a:b2:4e:74:cd:6e:a4:9a:35:ec:2d:56: f4:2b:1d:76:cd:2f:5c:98:56:90:c0:b4:7d:0f:ce: ea:3c:4f:fb:b3:14:96:9f:44:0f:11:90:5f:0f:a8: 42:73:34:8c:59:f0:1f:5e:4f:7f:05:ae:b4:aa:4b: 97:9b:a7:fb:bc:82:05:45:f2:6f:73:4e:68:64:50: c4:36:95:b9:c7:9d:49:77:83:75:b2:ae:61:f8:30: 71:4e:ce:b0:37:55:cb:20:02:41:84:e4:f9:ff:9f: f5:98:39:96:4a:82:76:1f:60:f8:fc:61:bf:64:48: c2:57:95:c1:17:3f:90:bc:b9:5d:24:20:08:82:c5: 03:7e:b1:77:fb:d6:22:4a:a2:c3:8e:2a:4d:fc:a9: b2:6b:01:8e:67:3b:fb:85:d7:39:cd:ae:aa:7c:cb: fd:5b:e5:c4:27:17:92:5e:58:5e:72:84:48:c2:87: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:9D:DC:4B:4F:3F:9B:7E:F1:B3:B2:05:4F:86:21:74:71:2A:4E X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37302e302f32342d3234203d3e203535393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.70.0/24 Signature Algorithm: sha256WithRSAEncryption ab:ff:25:9c:0f:ae:35:e9:92:0a:a9:61:af:7a:e4:7c:36:5a: e2:87:45:24:bd:3a:fa:ea:9d:8f:bc:54:c6:c1:1c:b5:77:ca: b0:fd:55:24:7c:7f:37:d2:fb:ac:41:69:6f:cf:2d:d0:2a:ab: 83:1d:9f:07:a5:79:99:10:8d:d1:09:95:25:be:4c:75:25:a6: eb:87:a3:bc:9d:93:dc:0b:97:d1:b0:28:16:8a:5a:03:d4:c1: 56:e3:b7:ef:26:a3:b7:a9:74:9a:b2:2b:1e:b5:b2:50:51:1b: 89:13:87:45:c5:99:87:fb:1f:89:9d:a5:40:3b:df:58:ac:10: 74:e3:d5:66:a3:9d:27:8b:47:f1:5f:b9:a8:38:c9:b5:d4:b4: 5d:4c:e3:62:45:1f:8e:40:79:6b:57:ef:a1:9e:3e:fd:89:da: 63:91:c7:d2:b9:e1:d0:ae:38:89:3f:52:f8:d2:ba:5d:82:f4: 37:2e:c6:aa:98:8e:ba:c4:24:62:73:a7:c6:e1:06:05:69:2e: 14:25:c7:2b:e9:73:37:5c:df:80:db:a7:0e:3d:b7:67:6d:65: a7:2f:3a:bc:14:cb:ff:4b:71:2b:91:d6:38:63:a1:45:37:f7: d6:e6:ef:19:8d:27:55:a2:83:ec:5b:3b:70:29:84:e3:ee:ee: e5:74:c9:8f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMnjmyuThccH9vrSxX8UUZXxWcEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA1MTkwMjUwMTBaFw0yNzA1MTgwMjU1MTBaMDMxMTAvBgNV BAMTKDRGQjY5RERDNEI0RjNGOUI3RUYxQjNCMjA1NEY4NjIxNzQ3MTJBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN6mHBfdzQH0YYQ3Q0mE4q3KAD pT/nravx874W9xNjclzv+SeoBhPpG13TqmKKL8zz+wA8d+GgajT7qkGS9pzxqhi5 8aic28ETW+3SwIqyTnTNbqSaNewtVvQrHXbNL1yYVpDAtH0Pzuo8T/uzFJafRA8R kF8PqEJzNIxZ8B9eT38FrrSqS5ebp/u8ggVF8m9zTmhkUMQ2lbnHnUl3g3WyrmH4 MHFOzrA3VcsgAkGE5Pn/n/WYOZZKgnYfYPj8Yb9kSMJXlcEXP5C8uV0kIAiCxQN+ sXf71iJKosOOKk38qbJrAY5nO/uF1znNrqp8y/1b5cQnF5JeWF5yhEjChzbBAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUT7ad3EtPP5t+8bOyBU+GIXRxKk4wHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy MmUzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADbeRjANBgkqhkiG9w0BAQsFAAOCAQEAq/8lnA+uNemSCqlhr3rkfDZa4odF JL06+uqdj7xUxsEctXfKsP1VJHx/N9L7rEFpb88t0Cqrgx2fB6V5mRCN0QmVJb5M dSWm64ejvJ2T3AuX0bAoFopaA9TBVuO37yajt6l0mrIrHrWyUFEbiROHRcWZh/sf iZ2lQDvfWKwQdOPVZqOdJ4tH8V+5qDjJtdS0XUzjYkUfjkB5a1fvoZ4+/YnaY5HH 0rnh0K44iT9S+NK6XYL0Ny7GqpiOusQkYnOnxuEGBWkuFCXHK+lzN1zfgNunDj23 Z21lpy86vBTL/0txK5HWOGOhRTf31ubvGY0nVaKD7Fs7cCmE4+7u5XTJjw== -----END CERTIFICATE-----Generated at Sat May 30 01:22:51 2026 by rpki-client