$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232332e3132382e302f31372d3137203d3e203535393630.roa File: 35342e3232332e3132382e302f31372d3137203d3e203535393630.roa (raw, json) Hash identifier: G66Rq0g31NLA+iUvnD8tFewqK9ZjsPFyojCe9aK6WeM= Subject key identifier: C6:5F:3D:6B:45:31:A0:0C:F5:FF:6C:B0:65:EE:08:69:FA:08:69:C6 Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 1D27773E2031DE952326BE6B4E0FFFCA1737A2FD Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232332e3132382e302f31372d3137203d3e203535393630.roa Signing time: Tue 19 May 2026 03:03:06 +0000 ROA not before: Tue 19 May 2026 02:58:06 +0000 ROA not after: Tue 18 May 2027 03:03:06 +0000 asID: 55960 IP address blocks: 54.223.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:27:77:3e:20:31:de:95:23:26:be:6b:4e:0f:ff:ca:17:37:a2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: May 19 02:58:06 2026 GMT Not After : May 18 03:03:06 2027 GMT Subject: CN=C65F3D6B4531A00CF5FF6CB065EE0869FA0869C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:f2:1a:be:3f:ce:38:93:92:2f:e6:61:96: 15:3f:14:ca:26:c9:9e:bd:e4:dc:38:35:d7:57:ee: ee:db:7f:41:7b:4c:4b:9f:d3:81:ba:39:2f:85:23: d9:6e:2c:60:b2:de:50:98:2e:fd:4b:ad:46:4f:6a: 48:97:39:76:2b:59:72:98:5b:85:ba:cf:bc:37:73: 29:8c:0d:f3:b9:36:d8:06:e8:9c:ba:7a:8a:21:e1: 1d:0f:60:a0:29:de:c3:25:54:4b:35:e6:c1:06:2f: 6a:47:ac:a0:d0:6f:ef:8b:6a:2b:1c:6f:2e:55:d5: b6:f5:3c:c9:c0:cd:58:d7:86:36:de:2f:e6:62:9a: 91:19:a9:79:3e:36:b3:2d:da:66:fd:2e:eb:39:01: 18:80:48:09:7e:0a:5c:58:51:e0:06:68:0f:45:e3: db:ec:2f:86:10:ff:04:a5:fb:35:bf:28:51:f5:a1: ed:11:66:c8:f5:5b:1a:32:db:3e:1d:d1:4c:0e:2b: f1:b3:1b:80:d8:8c:2b:cf:78:4a:5d:25:db:3a:02: 47:32:42:7d:35:c0:f8:78:54:47:da:e2:04:70:a1: ab:8c:bd:55:43:55:84:b3:be:f4:33:1d:99:9b:72: 03:d3:5e:5c:9e:46:2e:8c:f3:d6:92:21:bf:e5:a1: ae:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5F:3D:6B:45:31:A0:0C:F5:FF:6C:B0:65:EE:08:69:FA:08:69:C6 X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232332e3132382e302f31372d3137203d3e203535393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.223.128.0/17 Signature Algorithm: sha256WithRSAEncryption a1:a3:56:07:1e:96:bd:6a:ed:95:bd:dc:b6:4d:29:c9:ac:48: c2:14:8e:34:87:90:69:b6:51:c9:5a:74:87:90:37:b1:7b:d3: 4b:1b:b5:e8:77:2e:8b:32:24:ed:e1:25:f1:21:48:fc:a5:c7: a8:b6:a3:32:1c:d3:cf:18:4b:ca:89:49:e2:61:ff:f7:27:1e: 46:a2:89:32:65:c5:5f:79:b5:fe:ef:3f:43:5b:6a:9c:6e:05: 13:01:01:f5:ea:8a:09:fd:09:04:12:9e:e1:6c:a8:49:54:40: f2:5b:d2:e5:bd:46:09:4f:c2:6c:2f:51:bc:1f:42:fd:07:d4: 78:61:92:7c:af:71:cb:d3:2e:55:26:8d:91:0a:a0:f8:16:66: e7:47:d1:71:6f:e2:e9:aa:96:54:d5:40:a9:39:32:4e:9f:0c: 44:ee:c5:0e:8f:80:15:75:6b:81:0b:c7:d3:ff:7a:68:96:c9: 0b:c1:bc:06:5c:36:ad:47:99:26:2c:bf:d5:19:30:d7:e9:ca: e7:dc:e7:3b:ba:ff:17:de:72:c0:cb:dd:5a:d5:30:c7:45:f3: 8f:44:d8:08:17:8a:2b:41:c0:a4:85:48:3d:74:c6:a8:c7:9d: b9:25:c7:a9:f8:03:a4:48:ad:76:8f:d9:a3:d0:1e:a3:05:35: 10:65:6c:42 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHSd3PiAx3pUjJr5rTg//yhc3ov0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA1MTkwMjU4MDZaFw0yNzA1MTgwMzAzMDZaMDMxMTAvBgNV BAMTKEM2NUYzRDZCNDUzMUEwMENGNUZGNkNCMDY1RUUwODY5RkEwODY5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRPIavj/OOJOSL+ZhlhU/FMom yZ695Nw4NddX7u7bf0F7TEuf04G6OS+FI9luLGCy3lCYLv1LrUZPakiXOXYrWXKY W4W6z7w3cymMDfO5NtgG6Jy6eooh4R0PYKAp3sMlVEs15sEGL2pHrKDQb++Laisc by5V1bb1PMnAzVjXhjbeL+ZimpEZqXk+NrMt2mb9Lus5ARiASAl+ClxYUeAGaA9F 49vsL4YQ/wSl+zW/KFH1oe0RZsj1Wxoy2z4d0UwOK/GzG4DYjCvPeEpdJds6Akcy Qn01wPh4VEfa4gRwoauMvVVDVYSzvvQzHZmbcgPTXlyeRi6M89aSIb/loa57AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxl89a0UxoAz1/2ywZe4IafoIacYwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwODY3NzQzNTM5NTY3MDAzNy8wLzM1MzQyZTMyMzIz MzJlMzEzMjM4MmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzUzNTM5MzYzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBzbfgDANBgkqhkiG9w0BAQsFAAOCAQEAoaNWBx6WvWrtlb3ctk0pyaxI whSONIeQabZRyVp0h5A3sXvTSxu16HcuizIk7eEl8SFI/KXHqLajMhzTzxhLyolJ 4mH/9yceRqKJMmXFX3m1/u8/Q1tqnG4FEwEB9eqKCf0JBBKe4WyoSVRA8lvS5b1G CU/CbC9RvB9C/QfUeGGSfK9xy9MuVSaNkQqg+BZm50fRcW/i6aqWVNVAqTkyTp8M RO7FDo+AFXVrgQvH0/96aJbJC8G8Blw2rUeZJiy/1Rkw1+nK59znO7r/F95ywMvd WtUwx0Xzj0TYCBeKK0HApIVIPXTGqMeduSXHqfgDpEitdo/Zo9AeowU1EGVsQg== -----END CERTIFICATE-----Generated at Sat May 30 01:23:20 2026 by rpki-client