
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38302e302f32312d3231203d3e203535393630.roa
File: 35342e3232322e38302e302f32312d3231203d3e203535393630.roa (raw, json)
Hash identifier: 5l83DrR/jGcEsyuqhPQekkokvJHkfiSOpHG048vzJJQ=
Subject key identifier: BB:F4:07:DE:BA:38:B4:22:D3:C3:46:DC:93:E8:C0:5E:B5:92:D1:DF
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 54EA8B71E25766AF6B89A5853C52B36E562ABC8B
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38302e302f32312d3231203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:55:09 +0000
ROA not before: Tue 19 May 2026 02:50:09 +0000
ROA not after: Tue 18 May 2027 02:55:09 +0000
asID: 55960
IP address blocks: 54.222.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ea:8b:71:e2:57:66:af:6b:89:a5:85:3c:52:b3:6e:56:2a:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:50:09 2026 GMT
Not After : May 18 02:55:09 2027 GMT
Subject: CN=BBF407DEBA38B422D3C346DC93E8C05EB592D1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:e1:c8:de:32:55:b4:f0:57:c8:30:6c:4f:
79:e9:ec:fd:4f:74:eb:3b:07:9f:5c:50:c9:4b:08:
3d:a3:90:00:e9:a3:a6:39:5c:5f:96:ce:d9:90:e2:
4d:e6:64:b0:7a:69:80:6b:ee:2a:a5:f9:ec:93:76:
0f:64:f3:59:f9:7e:b8:51:3b:55:3c:39:24:a6:d4:
b1:f6:18:69:5a:3d:72:17:4e:e0:32:42:c3:bb:e3:
70:43:6e:b2:32:6b:ee:77:f5:20:8e:cf:e5:8e:6d:
1e:b1:3a:ca:11:df:d0:18:e2:52:b6:b7:be:2d:05:
8e:3b:6a:c0:fc:b8:28:3a:ad:7c:78:0a:93:0f:35:
7b:79:2d:e9:52:20:3e:f4:fb:ca:ab:dd:de:90:ed:
42:d1:98:f1:94:18:bc:80:0a:59:a3:b3:8e:32:2e:
7c:0d:4b:14:ed:bf:59:39:80:2b:dd:e0:d2:95:c8:
11:9c:bf:cd:77:46:4a:8c:3b:5e:0c:31:e3:c9:c1:
e1:e0:2c:a2:a2:61:a6:c9:14:41:81:5b:3f:d9:2a:
02:3b:1b:92:04:fb:b3:8c:ee:71:33:a2:19:27:46:
c8:04:19:be:5e:49:bd:b5:4b:a1:11:aa:1e:be:94:
06:8d:62:ea:a7:3a:2a:ad:63:75:22:c1:2f:db:53:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:07:DE:BA:38:B4:22:D3:C3:46:DC:93:E8:C0:5E:B5:92:D1:DF
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38302e302f32312d3231203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.80.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:ca:05:95:78:3f:7d:c3:90:53:c8:1b:a2:ee:58:5c:1e:ca:
3e:ad:ac:f6:79:47:9e:ad:46:30:75:82:e8:a0:d6:ee:54:9e:
37:31:1f:63:eb:6b:73:7f:cb:75:b6:42:b2:42:9f:62:ca:5b:
87:da:37:90:14:af:fb:21:33:13:63:d0:a0:35:a1:fe:92:92:
de:9e:16:a7:4b:60:8b:e2:d5:ab:c3:01:7b:a6:3a:97:43:71:
80:da:e9:7c:c0:cf:b5:67:12:bf:e4:de:03:b3:f2:5b:6e:a5:
55:e4:7a:51:3f:2f:b6:3d:40:52:4a:3c:bc:8f:ac:17:79:a9:
ca:b7:87:7b:d8:9f:8e:17:d2:23:a9:b3:17:fd:37:53:c4:52:
d2:17:18:58:e0:07:a8:2f:2b:73:5b:0f:55:a9:f5:25:b4:52:
dc:8c:82:3f:41:fa:4b:75:73:d1:77:b1:60:f4:d6:21:e1:1b:
57:bd:9a:0f:98:a2:6e:59:aa:91:1d:5a:0d:13:ee:fe:4b:90:
99:51:36:1d:a3:31:03:d7:19:88:a2:a7:d0:ba:c2:a3:db:23:
ae:36:cc:af:01:95:fd:01:cf:fe:ba:6a:5e:7a:b3:94:a1:24:
a5:61:33:24:7d:cd:41:bc:f4:43:17:4a:0b:07:ad:47:13:20:
bd:ac:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:52 2026 by rpki-client