Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e302e302f31392d3139203d3e203535393630.roa
File:                     35342e3232322e302e302f31392d3139203d3e203535393630.roa (raw, json)
Hash identifier:          KCQQQWUMlFNoOBX+J3ck0tC36kxK2gqxGzRcElpEvcQ=
Subject key identifier:   C6:DA:95:3B:7B:1A:1F:63:91:4A:4C:3B:46:C4:0A:F4:32:20:A7:F5
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       067D0BD01BB2EAF01309ECB4383439F57A9F6769
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e302e302f31392d3139203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:50:48 +0000
ROA not before:           Tue 19 May 2026 02:45:48 +0000
ROA not after:            Tue 18 May 2027 02:50:48 +0000
asID:                     55960
IP address blocks:        54.222.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:0b:d0:1b:b2:ea:f0:13:09:ec:b4:38:34:39:f5:7a:9f:67:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:45:48 2026 GMT
            Not After : May 18 02:50:48 2027 GMT
        Subject: CN=C6DA953B7B1A1F63914A4C3B46C40AF43220A7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:ed:6a:dd:bd:d9:25:eb:35:01:1e:6f:29:
                    9b:3f:4b:6e:01:52:18:e9:6f:01:ae:d2:c8:99:88:
                    9d:42:65:93:89:20:d9:57:19:d4:55:b4:93:29:7c:
                    7a:33:68:99:05:98:55:af:c8:e5:9d:66:ff:ab:ab:
                    39:a1:1e:c7:95:59:8c:0c:51:0b:0f:64:cc:02:1a:
                    02:75:60:de:fa:ba:93:28:62:5f:f3:f0:59:ae:99:
                    47:86:97:a6:c8:2b:c1:71:09:ad:cf:3f:e3:bd:87:
                    72:4c:e5:61:b1:df:30:ba:c4:28:17:de:cc:2f:81:
                    5d:e0:34:0f:3b:3d:89:7a:0f:6c:f2:bc:a2:06:99:
                    e6:5c:59:5a:8c:13:95:a8:e2:d1:fc:fb:1e:42:9e:
                    cd:ce:37:89:e5:80:ee:e8:da:c1:11:ac:bf:d8:d4:
                    88:44:12:e7:c0:b8:26:a0:b6:4b:85:44:27:04:30:
                    27:33:4b:13:e4:f0:77:59:66:25:e1:94:07:fd:97:
                    77:5e:a4:11:64:53:90:4f:e4:93:cb:69:bd:5d:13:
                    76:d2:11:f2:44:13:e4:4b:6f:2e:61:65:eb:5e:2e:
                    19:62:76:cf:80:37:25:cc:cb:b6:6b:f6:75:eb:75:
                    77:f8:e9:ce:09:07:a9:21:4a:9f:2c:9e:6a:40:a0:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:95:3B:7B:1A:1F:63:91:4A:4C:3B:46:C4:0A:F4:32:20:A7:F5
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e302e302f31392d3139203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:97:db:50:df:7e:dc:31:eb:c7:f5:c7:d8:0e:b6:14:be:a0:
         f3:38:fb:36:4b:53:a3:62:d6:63:2f:c1:2f:aa:b2:56:65:28:
         a2:dc:9c:14:b7:b1:b9:7c:8a:0a:69:e5:f6:92:ce:45:13:4d:
         3f:59:fd:55:6e:19:b4:27:03:f2:2c:72:0e:89:07:51:a1:cb:
         f7:7e:b5:c2:4d:a2:02:01:59:3c:e3:59:3b:19:86:5f:ae:59:
         72:c0:94:03:0f:28:c9:15:0c:1c:10:ed:31:55:42:82:80:60:
         2f:33:49:a5:7c:80:cd:14:20:bc:f5:ec:fa:dc:4d:e5:cb:c8:
         83:91:7a:f0:6e:ea:55:30:e4:f4:31:c6:65:40:93:74:90:6c:
         90:b9:35:c9:96:17:e1:83:ff:95:4c:3d:da:16:a8:12:48:07:
         b9:31:1b:1b:fc:d3:6a:e5:59:16:69:53:5f:5e:3d:62:b1:39:
         92:cd:bf:bd:ca:c4:f7:fe:fc:9e:5a:39:3b:0e:c6:f9:ee:f0:
         51:b1:63:2d:ad:ad:0e:6b:fd:b0:ec:d6:02:d8:8c:20:51:c9:
         f1:24:65:5a:1d:5b:51:83:f3:0c:fd:4b:d1:f2:a5:1e:ac:98:
         f7:ff:4b:32:fb:27:b3:03:5a:a0:56:97:67:aa:9a:f8:57:98:
         2c:e7:3a:55
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUBn0L0Buy6vATCey0ODQ59XqfZ2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjQ1NDhaFw0yNzA1MTgwMjUwNDhaMDMxMTAvBgNV
BAMTKEM2REE5NTNCN0IxQTFGNjM5MTRBNEMzQjQ2QzQwQUY0MzIyMEE3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpu1q3b3ZJes1AR5vKZs/S24B
UhjpbwGu0siZiJ1CZZOJINlXGdRVtJMpfHozaJkFmFWvyOWdZv+rqzmhHseVWYwM
UQsPZMwCGgJ1YN76upMoYl/z8FmumUeGl6bIK8FxCa3PP+O9h3JM5WGx3zC6xCgX
3swvgV3gNA87PYl6D2zyvKIGmeZcWVqME5Wo4tH8+x5Cns3ON4nlgO7o2sERrL/Y
1IhEEufAuCagtkuFRCcEMCczSxPk8HdZZiXhlAf9l3depBFkU5BP5JPLab1dE3bS
EfJEE+RLby5hZeteLhlids+ANyXMy7Zr9nXrdXf46c4JB6khSp8snmpAoH4NAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUxtqVO3saH2ORSkw7RsQK9DIgp/UwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzMDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDM1MzUzOTM2MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAU23gAwDQYJKoZIhvcNAQELBQADggEBAGaX21Dfftwx68f1x9gOthS+oPM4+zZL
U6Ni1mMvwS+qslZlKKLcnBS3sbl8igpp5faSzkUTTT9Z/VVuGbQnA/Iscg6JB1Gh
y/d+tcJNogIBWTzjWTsZhl+uWXLAlAMPKMkVDBwQ7TFVQoKAYC8zSaV8gM0UILz1
7PrcTeXLyIORevBu6lUw5PQxxmVAk3SQbJC5NcmWF+GD/5VMPdoWqBJIB7kxGxv8
02rlWRZpU19ePWKxOZLNv73KxPf+/J5aOTsOxvnu8FGxYy2trQ5r/bDs1gLYjCBR
yfEkZVodW1GD8wz9S9HypR6smPf/SzL7J7MDWqBWl2eqmvhXmCznOlU=
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client