Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32322d3232203d3e203535393630.roa
File:                     35342e3232322e3130302e302f32322d3232203d3e203535393630.roa (raw, json)
Hash identifier:          Pz/1L+vtAuX36MRd0yWJO2FfMAXxZmN5Lyr/aPQbIzw=
Subject key identifier:   41:93:A0:C8:E1:02:8E:C7:0F:71:0F:8E:CD:EA:12:5E:2D:48:00:B7
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       269FB492AB8962E77883823D5604A9531B99C6AC
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32322d3232203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:58:13 +0000
ROA not before:           Tue 19 May 2026 02:53:13 +0000
ROA not after:            Tue 18 May 2027 02:58:13 +0000
asID:                     55960
IP address blocks:        54.222.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9f:b4:92:ab:89:62:e7:78:83:82:3d:56:04:a9:53:1b:99:c6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:53:13 2026 GMT
            Not After : May 18 02:58:13 2027 GMT
        Subject: CN=4193A0C8E1028EC70F710F8ECDEA125E2D4800B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:fe:0a:64:b5:41:3e:bd:3c:f9:dd:ba:c1:
                    a2:82:be:42:31:37:b7:0c:db:73:01:01:4e:35:e3:
                    1a:a5:c2:eb:bd:60:be:21:76:9c:d1:6c:3e:a1:98:
                    4e:6e:d6:30:03:40:78:b3:91:8f:9e:8b:86:e8:47:
                    61:7c:e3:ea:66:2e:4d:de:96:df:bc:a0:6c:54:d8:
                    6a:44:8e:55:69:d1:5d:ea:b7:e2:7c:8b:73:8e:46:
                    8a:2d:21:18:d0:34:36:e3:d8:22:04:7c:c6:9f:03:
                    38:4a:45:b3:90:e4:b7:e9:47:75:26:1d:01:ef:7f:
                    da:fb:8b:86:41:a4:74:68:85:46:19:ca:18:4d:4f:
                    f6:12:8b:05:c2:4f:bc:b9:8c:7e:50:1f:01:a1:04:
                    70:87:87:93:e3:05:d9:5e:c1:75:03:5a:13:3d:63:
                    6b:55:4d:c8:e0:0e:b1:ad:7f:03:29:42:9a:dd:8a:
                    65:f2:e6:8a:97:93:c0:ea:b9:f0:8b:79:51:b2:e8:
                    3a:4b:aa:e1:4a:35:f2:98:69:10:36:05:23:09:6f:
                    3e:a8:78:e4:31:b4:57:75:ee:e5:5d:5a:24:35:db:
                    f0:ca:b9:75:4e:9a:4f:15:75:ad:49:16:d1:db:7b:
                    40:c0:bd:05:e9:c6:2a:90:0f:bf:64:f9:21:5c:44:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:93:A0:C8:E1:02:8E:C7:0F:71:0F:8E:CD:EA:12:5E:2D:48:00:B7
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32322d3232203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:b3:cd:ca:ad:20:ea:8e:b7:f3:c2:b0:50:83:98:17:08:
         97:6d:f0:2c:34:b0:fe:cf:03:60:4f:49:f1:45:2e:5a:22:42:
         72:0d:6f:51:53:ec:e2:4b:93:a1:1e:46:f6:91:66:c8:81:fe:
         d5:aa:a6:58:34:86:92:6a:8c:5a:ce:b7:e6:06:4a:a7:2a:f7:
         7b:73:d7:47:e1:95:cc:cd:5b:37:81:4a:bb:41:a8:42:a7:84:
         75:3a:79:29:d8:76:ce:c7:46:d2:42:1d:b5:ef:12:67:91:b3:
         d8:a9:83:5d:29:ad:cf:a8:37:d2:15:04:05:75:7a:72:ee:ed:
         26:1e:cf:0a:18:57:34:12:82:a4:20:91:8b:dd:0d:f2:29:cc:
         16:86:6a:b7:b9:55:92:f1:da:b4:e8:df:2b:5c:47:db:6a:02:
         47:50:60:53:62:c8:81:5c:f1:49:21:3a:ce:30:58:4e:2a:ea:
         00:c2:97:51:38:47:0d:0a:40:6b:c3:76:f6:db:ca:69:a6:9d:
         65:bc:76:94:f9:ba:15:06:a1:9b:58:87:f4:5a:f5:15:7e:0b:
         fc:30:c4:b6:5a:05:d5:19:2f:95:9b:03:f6:99:3d:fc:03:4b:
         47:bd:3a:59:b3:c1:8f:8a:18:2b:28:df:84:48:1d:d3:57:67:
         93:1a:a4:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:13 2026 by rpki-client