Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e3130302e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          wo4GX20aGQhsSk4362kE93OE7gC79yLx8bPdUTO15Ug=
Subject key identifier:   26:64:43:1C:19:6B:D8:31:A4:DA:C1:F2:86:09:5E:2A:2C:A9:64:B5
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       6CC68D76E99D053BBFA4C4F231327B8C1DE2805D
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:57:07 +0000
ROA not before:           Tue 19 May 2026 02:52:07 +0000
ROA not after:            Tue 18 May 2027 02:57:07 +0000
asID:                     55960
IP address blocks:        54.222.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:8d:76:e9:9d:05:3b:bf:a4:c4:f2:31:32:7b:8c:1d:e2:80:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:52:07 2026 GMT
            Not After : May 18 02:57:07 2027 GMT
        Subject: CN=2664431C196BD831A4DAC1F286095E2A2CA964B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:a8:1c:e1:30:80:1a:1e:86:96:7f:47:49:
                    c2:9a:2e:01:74:d7:46:99:b7:dd:9c:db:44:a7:c2:
                    0e:48:d4:ea:f0:1b:16:2f:c8:1f:b2:bd:23:43:b8:
                    5e:16:2c:ed:ce:89:45:3a:17:29:52:78:fd:03:55:
                    89:3d:b4:72:78:90:c8:de:0a:7f:61:1a:40:99:fb:
                    c4:9b:57:f0:ee:26:21:7a:2b:c8:96:72:06:17:e5:
                    55:b1:f5:00:43:db:f3:89:9c:c7:e1:71:64:51:ab:
                    e9:bb:9e:30:28:51:cf:ec:dc:54:a3:4b:2d:50:1a:
                    fb:c8:30:21:ee:4a:94:10:34:72:49:4e:55:1c:58:
                    a0:63:1f:8d:f7:c3:c0:e8:4f:2e:7c:70:0f:fa:2b:
                    4e:1b:bb:22:f5:d9:c6:91:7d:ff:58:8d:01:1c:ce:
                    6d:8e:8b:5e:b8:01:af:dd:ee:cc:2c:d5:73:6c:a6:
                    18:ee:5c:c7:e4:9b:d0:bb:eb:12:ff:97:a0:f1:c2:
                    13:74:22:4a:15:e5:93:02:16:fb:b5:2b:06:b0:16:
                    8a:82:34:43:e2:07:35:db:a9:8a:8f:0d:10:ce:35:
                    bf:89:53:8e:3c:f3:ac:57:dd:35:a5:ca:65:e1:be:
                    d9:a8:d8:8d:3c:ee:74:ef:0a:f2:c7:a8:57:84:e9:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:43:1C:19:6B:D8:31:A4:DA:C1:F2:86:09:5E:2A:2C:A9:64:B5
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130302e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:93:fc:a3:e2:ad:4a:f2:97:34:06:1c:88:e9:8e:77:10:
         45:f3:9d:33:23:0d:2e:3f:24:d0:3e:b7:4a:60:27:8a:b7:65:
         ab:a5:7f:b7:2d:6d:20:96:c8:e0:ca:81:a1:ef:bb:b7:59:4b:
         91:5e:a8:3b:e2:cd:bf:08:3d:1a:2f:f6:2f:25:cf:fd:ea:0a:
         9d:92:e2:3f:7a:b9:c6:cc:68:7e:c7:dd:62:1c:85:b8:a3:f7:
         aa:a5:3f:cb:fe:81:3e:f3:16:20:c0:9e:60:b7:32:05:e9:83:
         69:5e:7f:d1:b2:01:c5:69:ab:c1:3b:e4:7c:6d:c3:2d:b4:23:
         2d:2e:49:6b:f8:3b:0d:f0:2e:46:81:aa:b3:47:9b:5a:b9:19:
         bd:32:b5:4c:80:43:81:7a:32:3d:47:dd:81:16:5a:4b:49:f8:
         40:43:de:be:a9:c1:90:17:ea:f3:8b:53:16:d9:86:8c:11:43:
         78:ae:e5:5c:70:da:9b:2b:5d:2a:f1:1e:17:60:05:c5:60:1b:
         e9:ac:ae:e7:6e:5a:4b:bc:ec:5d:77:31:30:7d:df:e0:72:35:
         03:6d:80:99:92:c9:62:2a:9f:ce:94:bb:35:96:83:6a:fa:5f:
         0d:2c:af:42:9d:97:08:b2:66:63:cb:61:6c:13:b6:f5:5f:b2:
         c1:db:9b:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:20 2026 by rpki-client