
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37312e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e37312e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: O4InhH7jr4N8uAcMqn2RaWEVWrxLE0trfPWi2sOwyGY=
Subject key identifier: 7F:E9:EC:FF:2A:F9:41:E0:55:B9:7A:CB:4C:DA:50:41:92:F6:80:E4
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 59FADDECED71DDEB8433D43FCDE13A9D7E493B7B
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37312e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:55:09 +0000
ROA not before: Tue 19 May 2026 02:50:09 +0000
ROA not after: Tue 18 May 2027 02:55:09 +0000
asID: 55960
IP address blocks: 54.222.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fa:dd:ec:ed:71:dd:eb:84:33:d4:3f:cd:e1:3a:9d:7e:49:3b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:50:09 2026 GMT
Not After : May 18 02:55:09 2027 GMT
Subject: CN=7FE9ECFF2AF941E055B97ACB4CDA504192F680E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:f8:8a:fb:58:93:79:34:07:38:3f:61:39:
f1:56:95:e2:13:fa:69:cf:14:6b:c0:32:15:88:ab:
86:36:1a:e9:d7:89:49:c6:8a:af:6b:c3:94:de:8c:
e1:d9:f6:c3:71:fd:0c:18:b0:56:60:4f:b7:1b:74:
3e:1f:e6:4e:b0:3b:8f:a3:70:cb:c5:a3:9d:ee:8d:
44:0f:fd:68:e8:f9:d6:b6:01:bd:d3:2f:8b:cc:99:
0e:b4:8c:c8:cf:35:9e:e6:bf:0f:2b:8d:7b:8b:36:
e2:4b:ef:b4:09:a1:23:9f:c6:bb:53:9d:6e:11:eb:
ae:a8:c2:ef:93:5b:de:be:1a:e1:b4:d2:65:8b:85:
03:09:01:58:b8:6c:66:a8:83:39:ca:dc:a4:03:c2:
24:c8:f1:7f:b2:a2:41:12:bd:8c:5d:4d:d1:50:3b:
6a:b0:5c:9a:fd:a3:3b:2c:e2:b7:d2:c0:5d:8f:0f:
3d:0b:af:c3:5b:3d:6b:77:07:0a:c4:78:aa:60:a9:
de:36:d2:42:14:31:25:52:d2:32:66:35:39:7b:b3:
1c:a0:6a:60:34:61:7b:2d:3b:14:c3:38:1b:98:f8:
c9:8a:d2:29:96:8b:ba:73:05:6d:bb:6e:ed:ad:e8:
5f:88:97:7a:bf:33:f4:fc:17:df:9a:c4:14:0b:e9:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:EC:FF:2A:F9:41:E0:55:B9:7A:CB:4C:DA:50:41:92:F6:80:E4
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37312e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.71.0/24
Signature Algorithm: sha256WithRSAEncryption
98:73:f3:9f:30:3d:40:3c:56:19:dc:2d:e3:31:d2:c8:70:21:
6a:af:73:51:82:db:d8:e5:9c:a5:8f:a1:75:e3:bc:98:c9:55:
1b:ea:cf:bd:fa:f5:3e:96:43:a6:91:48:d1:72:c2:5e:60:eb:
94:f8:ec:f4:7d:d3:19:9c:25:b1:a9:5f:1d:96:61:fc:b7:e5:
75:0e:e9:db:81:f2:41:40:d0:2e:57:38:8d:c0:c7:25:df:fc:
7b:3a:ea:f1:99:c0:9f:44:32:b2:66:80:23:fa:af:c9:b5:8a:
63:be:cd:de:85:e3:ec:e1:40:51:d1:93:52:ec:9a:e5:d5:f6:
ee:ab:30:3d:8a:0b:0e:2c:51:95:69:da:b5:e8:32:df:7c:ee:
df:05:a3:45:e9:ec:5d:46:c9:5f:a6:0c:e4:42:f2:47:77:bc:
58:e4:07:55:98:8e:89:bb:27:14:ed:a4:a7:0b:e8:ed:0f:f7:
01:b5:00:fd:e5:88:ed:23:5e:1b:02:34:9a:55:bb:ae:1b:a2:
99:dd:ba:41:61:70:22:ab:85:c5:6a:2e:7d:59:ac:52:4e:38:
49:9b:9e:e6:9f:12:4e:ce:da:42:5e:ba:0a:e1:18:14:f6:97:
70:b2:88:7f:9d:75:73:00:9a:bd:c7:96:e1:4f:2e:6e:07:7a:
1e:e3:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:23:12 2026 by rpki-client