Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130382e302f32322d3232203d3e203535393630.roa
File:                     35342e3232322e3130382e302f32322d3232203d3e203535393630.roa (raw, json)
Hash identifier:          Y1ygBVXjma2xajJzsGkduXLVm49nZ417OosLfY2eskA=
Subject key identifier:   C0:5A:6D:47:75:2C:C9:0B:39:BF:5F:DE:10:68:1D:09:03:02:93:C4
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       511CE7EA390556FE82C9F3A5E517A52974F49594
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130382e302f32322d3232203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:59:53 +0000
ROA not before:           Tue 19 May 2026 02:54:53 +0000
ROA not after:            Tue 18 May 2027 02:59:53 +0000
asID:                     55960
IP address blocks:        54.222.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:e7:ea:39:05:56:fe:82:c9:f3:a5:e5:17:a5:29:74:f4:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:54:53 2026 GMT
            Not After : May 18 02:59:53 2027 GMT
        Subject: CN=C05A6D47752CC90B39BF5FDE10681D09030293C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:82:24:28:ad:fc:50:a3:13:93:65:1f:a8:
                    f9:0f:54:72:50:c0:8f:6f:6b:ee:65:1b:51:24:a3:
                    63:a5:2e:64:b0:2d:ec:49:98:1f:f6:e6:9c:22:2a:
                    53:4f:bc:b8:c3:3f:54:7e:20:32:9b:6a:19:df:6f:
                    bd:79:77:a2:4f:be:7a:1f:37:d0:56:9c:95:1a:c6:
                    66:64:dd:a0:aa:46:dc:3a:28:b4:e3:81:ac:4b:47:
                    37:eb:9f:4f:4d:e8:0d:43:95:66:cb:04:36:54:ef:
                    03:ab:b3:9e:de:b4:d3:3d:05:23:35:b1:82:ed:fb:
                    f6:37:45:ca:18:05:b2:ca:e9:21:55:2e:2f:f4:66:
                    70:3b:35:08:60:e0:fe:45:57:4c:a5:1a:62:8a:91:
                    95:65:ef:03:6a:ba:f4:3c:50:9c:ae:e3:28:cb:d6:
                    9a:f8:bd:e7:4e:00:a4:f2:3c:85:56:56:bb:86:de:
                    80:2f:72:ed:95:50:76:6b:19:e4:8f:51:15:c8:d5:
                    79:b0:54:d8:b3:8a:37:0c:b5:0e:04:1d:7f:83:f2:
                    31:e1:bd:86:a8:e4:b2:8c:ff:b5:9e:58:6d:57:64:
                    82:50:df:12:50:ab:bc:d6:13:24:44:8b:ca:ae:ad:
                    89:d8:67:0c:e1:13:a2:0d:2a:71:f0:3d:93:67:00:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:6D:47:75:2C:C9:0B:39:BF:5F:DE:10:68:1D:09:03:02:93:C4
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130382e302f32322d3232203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:3c:d9:72:b2:a3:c7:09:b2:83:cb:db:7c:ac:c3:13:47:ad:
         52:77:01:7f:ea:10:96:bb:17:6b:47:5b:ea:57:3d:21:f3:b5:
         23:1f:17:e7:f5:61:58:4e:93:dc:83:fb:8b:b9:a0:36:35:9a:
         2d:e4:92:21:5e:0d:00:0c:2c:5e:6d:7d:57:07:37:cb:ee:9a:
         45:7b:7a:19:64:0a:0c:8d:d7:11:91:9c:15:7d:6c:17:8b:cd:
         36:cc:50:60:69:12:c4:cb:81:2d:aa:b6:9c:52:1f:7f:c3:87:
         a8:0d:96:be:44:34:b9:b5:b3:c6:21:7d:ed:1a:31:97:be:46:
         dc:cb:33:66:ae:25:cf:a1:c4:e4:6a:03:ef:41:29:54:33:d1:
         e3:4d:9b:54:76:a7:b6:89:2c:ce:22:13:2c:18:74:46:ea:96:
         94:ab:23:90:4f:0f:84:a3:9f:71:59:9e:3e:a7:51:cf:29:4f:
         5d:da:69:03:b8:ef:08:1f:c7:e8:80:ba:a8:ba:81:25:e0:b3:
         e8:5e:46:0f:ba:56:59:8c:9c:c2:71:c7:49:c4:ca:c0:0d:49:
         0a:48:ce:d7:93:40:67:10:d3:ab:24:0b:1c:56:ae:0a:73:db:
         c1:b0:23:88:d2:0e:96:b8:7c:76:fd:e1:c0:32:87:5b:31:ad:
         f8:43:bc:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:19 2026 by rpki-client