Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130322e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e3130322e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          kvn3CKMBSLtn8aQsZlSuE8NNwGFygb7K8Atptp3VHfA=
Subject key identifier:   83:B1:A9:E8:A0:8F:98:16:5E:07:02:34:A5:F0:59:A9:54:3A:08:7C
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       11B219094DCC444C3147E030BE647DC024136971
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130322e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:57:07 +0000
ROA not before:           Tue 19 May 2026 02:52:07 +0000
ROA not after:            Tue 18 May 2027 02:57:07 +0000
asID:                     55960
IP address blocks:        54.222.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:19:09:4d:cc:44:4c:31:47:e0:30:be:64:7d:c0:24:13:69:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:52:07 2026 GMT
            Not After : May 18 02:57:07 2027 GMT
        Subject: CN=83B1A9E8A08F98165E070234A5F059A9543A087C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:d2:9b:ea:46:b1:42:01:40:64:93:81:86:
                    68:ff:40:05:bd:21:ba:e2:42:d5:f5:1a:36:da:a6:
                    84:61:be:36:73:ed:7f:2e:3d:b1:dd:ef:5e:53:d5:
                    93:fe:1d:55:af:85:43:fd:9f:e0:44:d5:66:65:90:
                    ce:66:ff:bd:0d:bc:01:fc:57:e6:6a:82:4f:ef:71:
                    a5:cb:8f:17:e4:1b:da:0c:c4:d8:ee:82:26:82:d2:
                    85:ba:fe:62:7f:4c:fb:fb:8f:bd:9f:cd:f8:cc:79:
                    b4:4e:76:8a:37:3d:ba:8f:2a:eb:f4:5d:6e:cb:42:
                    5c:e2:82:32:38:9d:da:d1:e3:bb:d9:1c:3f:d2:0d:
                    24:24:f8:b3:2f:b6:36:7e:ae:e4:aa:73:3c:9f:11:
                    68:3c:56:8d:cb:3b:e0:20:44:70:76:d7:c2:5a:9b:
                    81:ec:b0:09:86:7c:78:14:54:dc:9a:e3:b0:6b:3c:
                    19:16:11:03:9e:f4:99:dd:59:1c:61:27:1b:b9:4b:
                    c0:05:11:35:18:19:50:46:75:86:bf:2f:0a:83:c7:
                    84:5b:61:c0:31:0c:74:b8:75:14:4c:99:f9:ee:6b:
                    ad:0a:03:e8:05:1f:fb:db:81:6c:e3:0d:c2:fa:d1:
                    08:fc:2e:a2:ee:fc:8f:f0:3e:66:7e:79:7c:97:62:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:A9:E8:A0:8F:98:16:5E:07:02:34:A5:F0:59:A9:54:3A:08:7C
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130322e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:05:b7:40:80:a3:9d:3e:d9:17:62:b0:79:0a:62:67:ca:c0:
         70:9d:69:5f:1c:9c:34:09:4b:a5:3e:b1:28:97:30:d7:ca:f0:
         d8:15:c8:e1:28:b0:6f:5e:46:83:de:88:8a:7e:83:bf:5b:fa:
         c4:6d:0a:67:08:bc:c8:70:1a:ef:e6:48:4d:9a:1f:54:3a:90:
         80:39:cc:3e:18:b3:01:82:b7:ac:4f:19:5e:c4:4c:01:cb:c7:
         ab:18:08:e4:31:e6:b3:be:8d:d6:81:44:38:76:d9:8b:11:3f:
         62:91:01:47:80:c2:b7:a4:c8:cc:9c:ec:9a:8a:f8:3f:8d:92:
         a0:91:ba:2d:60:77:37:f7:e2:f7:28:66:96:c6:59:8e:ef:48:
         4b:a7:15:54:a1:76:98:8c:a7:ec:45:d9:c8:32:31:e8:79:8e:
         1f:51:47:90:46:c7:b1:28:e0:84:fd:8c:ed:87:d8:75:a4:b2:
         19:6d:ee:e3:b6:1f:c7:78:96:34:44:ea:b5:41:e5:47:51:dc:
         fd:3b:b5:a4:09:73:21:d4:33:b1:94:bf:98:90:b1:a7:a2:fe:
         d0:a4:b4:5b:e3:be:d2:98:72:e3:77:c3:b6:38:94:c6:b0:b7:
         d6:49:85:21:3d:75:38:6e:c2:40:5b:33:82:76:9d:97:c6:f7:
         e6:be:79:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:42 2026 by rpki-client