$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e392e302f32342d3234203d3e203535393630.roa File: 35342e3232322e392e302f32342d3234203d3e203535393630.roa (raw, json) Hash identifier: 59T5UPLMaa/o4UcHHeBp7lnQXg1xHojnYX8mCaXC+lI= Subject key identifier: 1D:8C:71:26:77:BA:5E:B9:18:F3:30:F5:5B:F7:66:32:B0:C6:AA:73 Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 02135E4C5B0283AE3DC903BFA76CD223DBB72619 Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e392e302f32342d3234203d3e203535393630.roa Signing time: Tue 19 May 2026 02:47:11 +0000 ROA not before: Tue 19 May 2026 02:42:11 +0000 ROA not after: Tue 18 May 2027 02:47:11 +0000 asID: 55960 IP address blocks: 54.222.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:13:5e:4c:5b:02:83:ae:3d:c9:03:bf:a7:6c:d2:23:db:b7:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: May 19 02:42:11 2026 GMT Not After : May 18 02:47:11 2027 GMT Subject: CN=1D8C712677BA5EB918F330F55BF76632B0C6AA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:c8:d5:e4:ef:ac:40:4e:63:ec:db:9b:a6: a3:fc:a1:2a:16:0e:21:c4:15:52:8b:4d:d6:1d:27: bd:57:20:79:97:55:36:d6:ad:73:35:25:1f:32:7d: 93:0d:70:cf:68:d8:f2:03:2c:73:3e:0d:39:27:5a: 56:9b:37:d1:3a:07:e9:f1:21:02:21:36:3c:67:c9: 2c:e5:74:65:dc:ae:57:cc:95:98:82:ae:89:e5:34: 9d:ac:32:62:60:b6:7f:a9:90:df:c1:56:b9:09:66: a3:5d:21:b6:f9:e4:27:50:05:7b:53:8a:90:c7:75: c3:a4:d0:b7:2a:dc:5d:90:fb:f8:f6:77:7b:c1:30: f1:f2:d4:d2:9d:d7:f9:f7:aa:da:de:2c:9b:ff:9e: 2b:a1:fa:ea:c9:38:af:26:78:d7:ad:ae:be:e1:94: 5e:99:14:13:96:49:c5:08:0c:f4:b2:86:00:e8:93: 9b:c8:9f:48:60:04:5c:c4:d6:68:8e:c8:84:cf:66: 17:19:20:96:1a:17:f5:ff:11:d1:8d:78:87:f5:14: d0:74:cb:20:6f:65:e7:35:bb:85:7b:20:bb:0d:c9: 5b:48:1b:2c:e3:50:1c:06:23:c7:d3:f4:20:4b:6f: b4:63:87:7d:13:4a:2e:6e:1e:e3:72:b4:e0:2e:dc: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8C:71:26:77:BA:5E:B9:18:F3:30:F5:5B:F7:66:32:B0:C6:AA:73 X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e392e302f32342d3234203d3e203535393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.9.0/24 Signature Algorithm: sha256WithRSAEncryption 97:13:c3:94:12:93:f9:9d:8a:cc:8c:45:4a:82:59:f6:2b:57: 40:ed:14:ca:fe:aa:94:8e:ef:b9:a8:f6:73:52:26:9f:21:7b: 8f:99:17:0a:02:a5:46:07:3e:45:ae:e2:f1:6b:d7:d8:c5:10: e5:da:39:9d:c2:eb:79:63:50:86:79:1d:f6:76:0d:3b:72:d5: 83:7f:bd:e0:7e:3b:5b:b0:33:42:1e:9d:bd:cb:4b:a4:37:83: 2f:ed:8a:3a:4d:2b:4c:84:56:86:4b:10:20:00:9a:e4:2b:90: 24:00:6e:be:bd:bc:b6:9e:82:af:c0:8f:01:5c:74:74:77:e9: 0e:3f:bb:03:6e:d0:6a:aa:9c:d2:37:d8:ec:2f:45:87:b5:59: 1d:a9:0d:a1:88:68:a2:0e:37:c4:ef:e4:bc:29:93:78:82:c5: 5a:d3:60:7a:22:a8:65:b1:f8:39:99:8e:5f:19:0f:5a:f3:b9: 15:be:22:f8:89:52:fc:4d:57:d7:f1:f7:fa:4b:4b:7e:9e:51: 8d:96:14:07:a2:5a:90:0d:92:01:68:ef:b3:24:3a:a9:d8:29: e8:2c:82:80:89:97:df:41:c7:4d:61:88:83:b6:41:a5:fd:7f: 7b:65:c5:b4:92:3b:70:3e:c5:44:8c:16:c2:5f:96:98:c0:97: 10:2c:70:3a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAhNeTFsCg649yQO/p2zSI9u3JhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA1MTkwMjQyMTFaFw0yNzA1MTgwMjQ3MTFaMDMxMTAvBgNV BAMTKDFEOEM3MTI2NzdCQTVFQjkxOEYzMzBGNTVCRjc2NjMyQjBDNkFBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9sjV5O+sQE5j7NubpqP8oSoW DiHEFVKLTdYdJ71XIHmXVTbWrXM1JR8yfZMNcM9o2PIDLHM+DTknWlabN9E6B+nx IQIhNjxnySzldGXcrlfMlZiCronlNJ2sMmJgtn+pkN/BVrkJZqNdIbb55CdQBXtT ipDHdcOk0Lcq3F2Q+/j2d3vBMPHy1NKd1/n3qtreLJv/niuh+urJOK8meNetrr7h lF6ZFBOWScUIDPSyhgDok5vIn0hgBFzE1miOyITPZhcZIJYaF/X/EdGNeIf1FNB0 yyBvZec1u4V7ILsNyVtIGyzjUBwGI8fT9CBLb7Rjh30TSi5uHuNytOAu3N7ZAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUHYxxJne6XrkY8zD1W/dmMrDGqnMwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzUzOTM2MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA23gkwDQYJKoZIhvcNAQELBQADggEBAJcTw5QSk/mdisyMRUqCWfYrV0DtFMr+ qpSO77mo9nNSJp8he4+ZFwoCpUYHPkWu4vFr19jFEOXaOZ3C63ljUIZ5HfZ2DTty 1YN/veB+O1uwM0Ienb3LS6Q3gy/tijpNK0yEVoZLECAAmuQrkCQAbr69vLaegq/A jwFcdHR36Q4/uwNu0GqqnNI32OwvRYe1WR2pDaGIaKION8Tv5Lwpk3iCxVrTYHoi qGWx+DmZjl8ZD1rzuRW+IviJUvxNV9fx9/pLS36eUY2WFAeiWpANkgFo77MkOqnY KegsgoCJl99Bx01hiIO2QaX9f3tlxbSSO3A+xUSMFsJflpjAlxAscDo= -----END CERTIFICATE-----Generated at Sat May 30 01:22:41 2026 by rpki-client