
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232332e36342e302f31382d3138203d3e203535393630.roa
File: 35342e3232332e36342e302f31382d3138203d3e203535393630.roa (raw, json)
Hash identifier: wVBR+0IL2QIm83CmsGXbop+FlP3902LkAca2EiED3xg=
Subject key identifier: 44:B5:E2:23:A9:CF:FB:8F:62:C2:A8:3A:A4:0F:D6:C5:E9:99:04:96
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 2EF8E6DB09A7A576C70A64C7BA9435770706E03D
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232332e36342e302f31382d3138203d3e203535393630.roa
Signing time: Tue 19 May 2026 03:03:06 +0000
ROA not before: Tue 19 May 2026 02:58:06 +0000
ROA not after: Tue 18 May 2027 03:03:06 +0000
asID: 55960
IP address blocks: 54.223.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f8:e6:db:09:a7:a5:76:c7:0a:64:c7:ba:94:35:77:07:06:e0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 02:58:06 2026 GMT
Not After : May 18 03:03:06 2027 GMT
Subject: CN=44B5E223A9CFFB8F62C2A83AA40FD6C5E9990496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:e5:f4:2e:75:11:62:05:ce:dc:e3:10:1c:
e3:f2:5b:ae:a3:a8:e2:dd:9c:63:7f:49:aa:64:30:
78:7b:33:9b:6c:bc:1d:f3:4c:7b:54:de:f7:2a:2d:
23:3b:59:7a:11:e1:75:66:8f:54:37:f4:f1:19:d5:
c9:b4:d3:7a:42:d3:ea:24:f4:8c:cb:b5:af:8a:3d:
be:56:6b:05:21:35:fa:a6:9c:13:78:9f:d8:68:82:
d7:4a:86:56:a1:0f:70:ca:a2:f6:84:d5:3b:93:2a:
11:3b:fb:bd:03:87:bd:91:22:a5:b8:b7:b9:10:fd:
49:04:46:47:64:30:7e:c3:35:c2:b5:ba:59:20:c8:
d4:bc:40:f5:f9:60:fd:d8:d0:9a:9b:f6:09:2a:a4:
b1:83:04:89:69:f4:f0:0e:5b:a7:ef:8a:4e:b7:aa:
07:6c:39:9d:04:3a:c6:cb:3d:25:a7:8a:3c:9b:79:
6d:1a:da:23:38:f5:ef:fa:4d:b4:34:a5:f9:56:00:
c2:2c:06:e8:21:11:b4:94:17:3f:17:2f:62:93:99:
b2:d3:d5:ef:e4:c5:a1:b2:51:fb:d7:e4:bc:19:4a:
5a:c6:d1:e1:29:9a:ee:34:6e:eb:87:c9:08:5b:7c:
30:87:20:fa:ba:06:11:65:69:fe:5c:57:49:39:d9:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:E2:23:A9:CF:FB:8F:62:C2:A8:3A:A4:0F:D6:C5:E9:99:04:96
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232332e36342e302f31382d3138203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
44:55:94:f1:c3:12:e5:8c:45:26:29:3f:f8:ce:8d:c8:2e:67:
ab:c0:ca:8c:86:f5:fe:fe:a8:4c:8f:b5:b3:d0:35:a4:f7:5b:
2d:b1:c8:df:1a:b5:39:dd:35:a0:b1:c6:dd:c9:e7:88:86:53:
0e:db:cb:6c:76:c9:9e:16:9a:b1:00:52:d4:71:09:6d:29:26:
ba:20:eb:24:5e:29:ad:fa:62:e3:98:d4:a9:0f:44:06:b3:ab:
94:85:b7:96:04:96:d1:97:f8:82:9b:b7:6a:4d:80:5d:20:ca:
2b:13:3f:e8:5c:6f:3b:27:00:d6:a0:6e:c8:ef:1f:a6:57:bf:
8e:d1:74:f1:a2:d6:f7:49:dd:4e:f0:cb:28:8f:13:9b:3f:73:
68:88:4e:23:18:77:43:87:d9:50:7a:a5:28:58:15:3d:33:f3:
71:c6:1b:49:de:f2:f4:c5:ec:dd:6a:e5:4e:a9:5d:1a:fa:3d:
57:f9:9a:f3:a2:4e:c7:1c:46:3e:dd:65:04:1d:fb:8f:21:3e:
f1:ce:7e:65:3d:4e:59:c3:0c:4d:a8:82:ee:85:b7:c7:fd:ff:
e4:fb:4f:35:1a:95:4f:23:b4:72:36:a6:8e:85:99:93:45:fa:
1a:9b:01:3f:37:f6:78:aa:98:01:1b:62:2e:0a:68:b5:c3:53:
66:91:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client