
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37362e302f32322d3232203d3e203535393630.roa
File: 35342e3232322e37362e302f32322d3232203d3e203535393630.roa (raw, json)
Hash identifier: zC22KcCnajT6QAim0HNPTrTzXj1sdHRZvWjKiOOYb8w=
Subject key identifier: BD:00:55:10:DD:06:E0:66:08:2D:16:D9:9C:65:67:A5:75:42:6C:91
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 7CB68956CD1FFFDA62CD37D00DF19E969D12236F
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37362e302f32322d3232203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:55:10 +0000
ROA not before: Tue 19 May 2026 02:50:10 +0000
ROA not after: Tue 18 May 2027 02:55:10 +0000
asID: 55960
IP address blocks: 54.222.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b6:89:56:cd:1f:ff:da:62:cd:37:d0:0d:f1:9e:96:9d:12:23:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:50:10 2026 GMT
Not After : May 18 02:55:10 2027 GMT
Subject: CN=BD005510DD06E066082D16D99C6567A575426C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:97:0c:e4:c3:38:d6:a7:0a:44:eb:8a:8e:dc:
58:52:ff:8e:9b:c8:bb:6c:26:25:24:14:ec:ca:70:
9d:a1:42:cf:f8:25:61:0e:b4:16:8d:70:3a:0f:e9:
b2:23:51:46:33:89:a1:ae:49:f9:4d:d8:f3:ea:3b:
c0:3a:fa:c4:49:4d:f5:b1:59:c4:1d:f0:b2:80:1f:
e2:7f:a7:26:4f:b9:bc:ec:f4:cc:0c:e7:a4:5e:24:
fd:02:4b:96:0f:d9:b4:fd:19:bd:ae:c6:11:55:2c:
2a:19:48:e9:bc:8b:2f:f2:da:07:6d:bb:03:d2:0b:
11:59:b8:8b:d3:6b:36:93:7b:cf:c0:24:83:a1:49:
db:f6:3a:13:bf:87:36:d6:d6:6c:a5:2f:a0:cc:73:
a1:f3:7a:e1:50:06:b4:0d:8e:b3:94:c2:07:1b:75:
57:49:4e:cd:77:00:57:70:73:73:62:68:ff:1f:c2:
1e:fc:be:27:b4:96:17:92:38:8f:a3:6d:6b:a8:c2:
a8:fc:96:5d:66:67:0a:d2:c8:26:53:0c:36:4d:6c:
f3:71:10:59:8a:9c:79:b7:d8:1d:93:1c:26:d6:50:
31:e0:9c:2d:e3:e4:6f:53:88:2d:3b:e9:c9:33:de:
48:e4:2b:6b:25:cb:ce:19:e6:50:d1:36:b1:ec:29:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:55:10:DD:06:E0:66:08:2D:16:D9:9C:65:67:A5:75:42:6C:91
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e37362e302f32322d3232203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.76.0/22
Signature Algorithm: sha256WithRSAEncryption
31:7e:da:0d:11:51:75:d1:20:5b:fd:1a:08:78:15:28:5c:c6:
45:89:bd:07:ee:87:cb:7e:17:84:34:f8:74:06:9e:6e:4b:70:
34:94:98:6d:37:16:17:a8:b6:fb:e7:1b:e9:4a:ef:03:56:07:
5e:82:37:ac:b4:28:a9:87:70:c4:86:61:5d:41:9f:75:62:d8:
30:42:d5:28:71:d8:d8:7c:17:2e:aa:05:66:19:bb:7c:04:20:
9f:1e:0c:31:d4:fd:32:b1:e9:a1:d9:21:86:2b:ef:d0:57:9e:
8c:70:72:38:fb:40:dd:6b:d2:ed:66:fa:08:c8:b7:59:74:3d:
d5:7e:31:06:68:7a:df:25:dc:48:58:ec:67:91:19:35:76:b1:
03:b0:d8:98:c6:50:84:df:e6:3f:8d:6f:b2:64:fe:68:7f:10:
82:7c:ef:c4:a8:37:de:d3:ae:00:08:c8:fe:98:be:f5:f6:23:
c4:65:ae:aa:07:5a:bd:05:95:36:ba:88:18:6b:ec:6e:47:7c:
70:d0:19:68:18:f9:95:ad:f8:03:47:78:9d:30:d7:c4:89:0a:
60:ae:0d:55:ab:eb:e0:6d:d4:24:8c:2b:91:3e:d8:c6:9c:fe:
7c:b3:06:63:bf:4e:ca:39:41:14:4b:54:66:39:41:d0:0d:38:
5d:91:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:52 2026 by rpki-client