
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39362e302f32342d3234203d3e203535393630.roa
File: 35342e3232322e39362e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier: 6vBHXptDrB4ppoveDI0zKeqgYm+pna1vkZ7+QhjF1OE=
Subject key identifier: 83:9C:54:8F:55:A9:A0:DC:53:01:51:D7:7B:84:20:A7:1A:80:15:85
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 31F4388BAAFD7CF1B25AA774CC3335AAA8057E77
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39362e302f32342d3234203d3e203535393630.roa
Signing time: Tue 19 May 2026 02:57:07 +0000
ROA not before: Tue 19 May 2026 02:52:07 +0000
ROA not after: Tue 18 May 2027 02:57:07 +0000
asID: 55960
IP address blocks: 54.222.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f4:38:8b:aa:fd:7c:f1:b2:5a:a7:74:cc:33:35:aa:a8:05:7e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:52:07 2026 GMT
Not After : May 18 02:57:07 2027 GMT
Subject: CN=839C548F55A9A0DC530151D77B8420A71A801585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2a:dc:9f:93:c0:b3:71:70:0f:56:79:e1:a7:
ec:a5:f5:1e:22:b5:d3:13:6b:db:85:f8:08:5d:f9:
c5:5b:73:db:85:56:15:4e:4f:73:60:f9:c6:93:61:
0a:90:07:25:ad:30:51:46:a3:1f:fb:82:77:c4:e9:
e2:86:52:6d:c1:78:19:84:09:48:36:4b:ba:fe:91:
13:3c:14:5b:36:42:22:03:26:89:57:75:32:16:10:
0d:3d:8b:93:b4:8a:24:ce:97:9c:4a:70:69:d5:86:
48:0f:5f:dd:70:72:8e:8d:9d:61:13:59:e0:32:e6:
8d:c6:2c:f2:25:53:8f:bb:ae:44:1d:61:4d:e9:53:
94:1f:61:de:7b:24:25:60:d2:ce:a7:4b:71:51:34:
2a:a8:45:b1:56:1d:f7:fc:fa:f8:ee:fb:f0:30:2b:
e3:4a:2a:ca:43:d5:23:ca:7e:5a:4c:69:c2:d4:0e:
86:94:8e:9c:0b:ac:12:62:b0:8a:fd:c2:14:e6:2c:
c8:59:32:85:fa:3b:28:2b:0d:86:bc:1b:79:61:4e:
4a:4d:e3:9c:fb:46:0d:c3:9d:4b:69:13:db:3f:da:
9a:e3:d7:76:76:48:ec:62:bd:ca:c0:9b:36:a1:1a:
3f:4c:f7:8d:19:28:fc:0c:30:7a:c0:d5:7a:c2:5d:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:54:8F:55:A9:A0:DC:53:01:51:D7:7B:84:20:A7:1A:80:15:85
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39362e302f32342d3234203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6f:21:57:81:63:c6:87:77:88:65:3c:89:70:fa:53:d4:03:
92:ef:b8:c4:6c:61:f4:c3:8f:32:aa:76:1e:5b:32:1a:ed:96:
6a:b2:23:d9:3c:ca:7d:47:e9:a1:91:a2:74:a7:56:15:cb:8f:
cf:b7:20:e1:3f:06:59:bb:df:af:56:2f:e8:5f:76:dd:43:08:
c0:1b:a0:18:f7:3c:5a:3f:ce:0c:5d:39:75:fb:b1:c6:57:53:
a7:cd:cb:7b:c5:1a:36:85:fe:1a:07:cb:9d:57:6e:28:f9:d0:
a6:60:90:f0:86:a2:1d:1a:84:f1:0e:26:7b:8b:bb:b0:22:d1:
a0:1f:a4:63:db:57:c7:39:f5:1b:92:da:77:bf:56:4b:ec:c1:
22:46:f4:15:43:dc:3a:84:c5:34:4b:86:bf:b5:72:91:b9:dc:
25:df:cc:dd:ef:16:52:0f:5f:0a:2c:41:97:de:3c:bf:0e:c9:
c1:81:be:1d:80:23:80:84:51:44:a9:06:0f:42:98:9b:ce:6b:
83:6f:21:bc:0e:63:a6:df:d3:07:3f:00:32:1f:e7:23:f6:c7:
af:1f:fd:c2:cf:0a:5c:e9:10:0d:92:74:ef:c0:b3:0a:60:c7:
d5:f5:70:e5:d5:0f:41:be:8b:86:a4:a7:75:0b:16:6f:c6:63:
6c:5f:0a:85
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMfQ4i6r9fPGyWqd0zDM1qqgFfncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjUyMDdaFw0yNzA1MTgwMjU3MDdaMDMxMTAvBgNV
BAMTKDgzOUM1NDhGNTVBOUEwREM1MzAxNTFENzdCODQyMEE3MUE4MDE1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7Ktyfk8CzcXAPVnnhp+yl9R4i
tdMTa9uF+Ahd+cVbc9uFVhVOT3Ng+caTYQqQByWtMFFGox/7gnfE6eKGUm3BeBmE
CUg2S7r+kRM8FFs2QiIDJolXdTIWEA09i5O0iiTOl5xKcGnVhkgPX91wco6NnWET
WeAy5o3GLPIlU4+7rkQdYU3pU5QfYd57JCVg0s6nS3FRNCqoRbFWHff8+vju+/Aw
K+NKKspD1SPKflpMacLUDoaUjpwLrBJisIr9whTmLMhZMoX6OygrDYa8G3lhTkpN
45z7Rg3DnUtpE9s/2prj13Z2SOxivcrAmzahGj9M940ZKPwMMHrA1XrCXUGlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUg5xUj1WpoNxTAVHXe4QgpxqAFYUwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADbeYDANBgkqhkiG9w0BAQsFAAOCAQEAV28hV4Fjxod3iGU8iXD6U9QDku+4
xGxh9MOPMqp2HlsyGu2WarIj2TzKfUfpoZGidKdWFcuPz7cg4T8GWbvfr1Yv6F92
3UMIwBugGPc8Wj/ODF05dfuxxldTp83Le8UaNoX+GgfLnVduKPnQpmCQ8IaiHRqE
8Q4me4u7sCLRoB+kY9tXxzn1G5Lad79WS+zBIkb0FUPcOoTFNEuGv7VykbncJd/M
3e8WUg9fCixBl948vw7JwYG+HYAjgIRRRKkGD0KYm85rg28hvA5jpt/TBz8AMh/n
I/bHrx/9ws8KXOkQDZJ078CzCmDH1fVw5dUPQb6LhqSndQsWb8ZjbF8KhQ==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:12 2026 by rpki-client