Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS54994.roa
File:                     AS54994.roa (raw, json)
Hash identifier:          9DefOK5XxXnJzTec5kqRFcozhtzg8e+5NjI/KjSCGRo=
Subject key identifier:   43:C5:63:F1:EE:AD:45:62:D5:17:19:80:B1:69:41:41:26:CC:8E:40
Certificate issuer:       /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial:       372B00058FABAE03FCCC4272D8E7EA0134529390
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS54994.roa
Signing time:             Tue 30 Jun 2026 06:56:39 +0000
ROA not before:           Tue 30 Jun 2026 06:51:39 +0000
ROA not after:            Tue 29 Jun 2027 06:56:39 +0000
asID:                     54994
IP address blocks:        203.130.50.0/24 maxlen: 24
                          203.130.52.0/24 maxlen: 24
                          220.242.7.0/24 maxlen: 24
                          220.243.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 07:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:00:05:8f:ab:ae:03:fc:cc:42:72:d8:e7:ea:01:34:52:93:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
        Validity
            Not Before: Jun 30 06:51:39 2026 GMT
            Not After : Jun 29 06:56:39 2027 GMT
        Subject: CN=43C563F1EEAD4562D5171980B169414126CC8E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:41:c6:98:87:3b:39:79:80:19:31:b3:f5:
                    8e:8c:5d:4c:6d:9c:c9:0e:91:a4:eb:f2:90:ef:e5:
                    ac:eb:f4:eb:b6:e4:70:2e:76:1b:12:2b:69:8c:c8:
                    6d:bd:2f:3e:1b:0a:98:26:12:01:02:9e:8f:00:8b:
                    b9:b8:21:15:2b:9f:37:b1:e4:94:b8:f9:88:da:fa:
                    1a:ef:c1:15:bb:c8:8e:c7:30:33:e3:85:9b:25:98:
                    84:82:ab:cf:dd:fe:f8:dd:18:6e:32:69:01:d7:15:
                    28:83:6b:da:92:54:c1:d1:42:06:a7:9d:2a:5a:46:
                    8e:53:e5:6d:8c:bd:72:64:d8:97:3f:d5:86:24:14:
                    ce:14:20:5c:4c:10:b5:6f:bd:bf:81:7d:d6:73:97:
                    e5:49:dc:55:cc:2d:07:90:7a:43:47:b5:84:e8:57:
                    0f:b1:27:0b:fc:98:62:09:02:15:a9:ba:da:85:7d:
                    13:b3:1f:5f:e5:0c:4e:a6:da:6a:c1:20:ff:17:c6:
                    eb:fa:b4:72:b9:00:22:b3:db:34:b7:17:71:2d:0f:
                    07:c0:48:70:7d:29:91:85:3c:1c:88:f0:9c:58:18:
                    13:b0:47:31:2d:20:48:fc:41:24:ad:85:c2:73:6a:
                    2b:95:2d:61:b4:a7:d1:d5:16:6f:59:ff:08:9e:14:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C5:63:F1:EE:AD:45:62:D5:17:19:80:B1:69:41:41:26:CC:8E:40
            X509v3 Authority Key Identifier:
                keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS54994.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.50.0/24
                  203.130.52.0/24
                  220.242.7.0/24
                  220.243.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:62:8d:e2:b0:a6:29:a9:7c:b7:07:0f:f0:75:6c:8e:20:
         f0:a8:b2:be:95:f8:91:0f:df:e0:f3:4f:55:ef:37:b0:39:77:
         96:14:18:e7:e8:87:7f:0d:7c:af:2a:17:3b:9b:6e:47:83:b2:
         69:9e:45:49:87:b7:f0:d4:c1:1b:95:ef:79:92:72:70:87:d6:
         60:8e:18:08:4b:6d:b2:e8:9e:45:dc:d9:e8:bf:0d:02:dd:ef:
         c8:82:0a:31:6b:24:ad:c7:f6:97:6f:30:19:fe:cb:9e:07:17:
         9c:c1:eb:4e:d8:b3:5a:48:7d:1f:66:4f:21:e9:59:82:3c:69:
         db:9e:99:ff:b8:19:cd:8a:bd:e6:d2:4e:51:5c:50:2c:35:f8:
         e4:54:32:d4:b6:91:c2:43:af:1a:48:a8:d3:3d:93:00:d4:f9:
         9c:60:ef:b2:ea:4c:d1:e7:17:1b:8e:1b:5d:5b:fb:63:8f:d4:
         54:f4:b3:be:6a:9d:b5:74:4c:76:c1:37:f5:b7:d2:30:62:ba:
         20:30:5d:20:e1:97:9e:b5:d8:5e:f9:8c:93:0d:e0:45:c6:01:
         81:df:81:e3:1a:64:1b:97:0a:e2:b4:6b:8f:2e:94:80:67:7e:
         26:56:e1:47:ba:88:b5:a8:88:12:be:44:64:e5:90:06:24:e8:
         30:da:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:49:51 2026 by rpki-client