Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130392e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e3130392e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          NxzCoSI7mxUDm4rgVczxUNxpMJci5Nox4go5Vo+yCE4=
Subject key identifier:   87:6D:53:7E:30:8E:89:EC:74:EB:1C:8E:AB:62:F2:D9:12:03:6A:2C
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       304D4AFFC5B4EDF254AE4198E42CD075447E5476
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130392e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:59:06 +0000
ROA not before:           Tue 19 May 2026 02:54:06 +0000
ROA not after:            Tue 18 May 2027 02:59:06 +0000
asID:                     55960
IP address blocks:        54.222.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4d:4a:ff:c5:b4:ed:f2:54:ae:41:98:e4:2c:d0:75:44:7e:54:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:54:06 2026 GMT
            Not After : May 18 02:59:06 2027 GMT
        Subject: CN=876D537E308E89EC74EB1C8EAB62F2D912036A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:20:bd:40:f8:ce:63:6f:0f:39:52:12:7c:
                    ea:2d:a5:e5:25:f6:e2:62:e2:f9:26:c5:db:59:62:
                    7f:d2:3e:af:7c:03:62:7c:81:66:e7:c4:91:3a:3e:
                    16:e0:f7:8c:81:42:7f:41:4d:d1:8e:b6:d6:b9:8f:
                    4e:76:83:8d:4a:1c:a3:8a:ac:0e:60:55:20:70:cf:
                    aa:68:4a:a2:73:f0:57:66:e3:69:41:4d:60:61:7a:
                    18:66:e3:a3:18:26:14:28:ee:b3:59:de:e7:85:3f:
                    f5:d5:78:be:fa:dd:ca:3a:d9:9b:3d:b0:64:2a:17:
                    63:fe:1b:b9:1d:d8:cf:e9:c7:24:ae:87:97:75:ae:
                    74:81:0d:9c:29:12:23:e2:b0:83:bf:f7:73:d6:05:
                    12:b0:c3:b3:24:ed:cb:b9:72:d1:20:ba:b5:86:66:
                    64:ad:96:b9:3d:2b:11:8e:30:dd:df:33:3f:23:11:
                    d4:3e:d9:52:89:5b:a0:2a:11:1c:3f:fd:b4:a4:fc:
                    f3:61:59:10:8e:4a:53:7f:f5:9c:62:eb:49:be:5d:
                    00:c5:7b:23:7d:40:e6:19:09:ee:3c:34:1d:cb:7e:
                    c6:60:c3:f4:28:e9:6f:a0:c8:c3:68:69:88:d0:84:
                    81:e5:ed:be:cc:15:b6:67:90:fe:09:4f:18:ea:8e:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:53:7E:30:8E:89:EC:74:EB:1C:8E:AB:62:F2:D9:12:03:6A:2C
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3130392e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:e9:27:fd:c7:43:7d:ee:db:ee:cc:a6:d1:82:c8:a6:1c:
         eb:67:34:38:c8:7f:e1:2e:87:6d:38:53:46:3c:2f:07:df:db:
         fd:4d:99:3b:9a:60:8f:b7:14:ad:10:d0:de:14:cb:c3:3f:1d:
         24:eb:00:ba:8f:a1:de:db:e5:50:f3:80:de:e9:c2:bc:93:ab:
         09:f5:cf:42:6d:45:1d:06:03:9f:70:0c:dd:f3:a4:7c:cd:48:
         9c:98:b4:0a:67:ae:8f:54:9f:7c:d8:2c:19:79:70:8c:ec:f6:
         51:37:be:0b:70:01:0e:a1:15:c9:4b:53:bc:c6:a0:a5:f0:d9:
         5d:d7:16:a4:24:bf:f3:a4:04:4f:fc:2f:01:39:23:fa:d2:81:
         13:d3:7a:cc:2f:1a:f8:b1:a0:2e:39:01:1c:b5:b7:b1:f5:ac:
         29:24:de:23:7c:c3:db:01:2a:ac:30:f6:ab:a5:7a:c0:0e:03:
         36:25:ed:a3:92:87:c5:cb:e0:23:fc:34:4e:3b:f3:e1:60:ad:
         e2:82:ef:dd:fb:6c:8c:ce:54:8d:bb:41:0e:da:5e:63:70:d8:
         b3:96:f9:d9:b5:bd:c0:4b:66:75:cd:3b:15:90:36:fd:30:c1:
         44:4f:bd:3f:4b:5f:8e:11:80:fe:48:b5:46:d1:14:2c:8a:82:
         3a:e0:f5:36
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUME1K/8W07fJUrkGY5CzQdUR+VHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjU0MDZaFw0yNzA1MTgwMjU5MDZaMDMxMTAvBgNV
BAMTKDg3NkQ1MzdFMzA4RTg5RUM3NEVCMUM4RUFCNjJGMkQ5MTIwMzZBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1CC9QPjOY28POVISfOotpeUl
9uJi4vkmxdtZYn/SPq98A2J8gWbnxJE6Phbg94yBQn9BTdGOtta5j052g41KHKOK
rA5gVSBwz6poSqJz8Fdm42lBTWBhehhm46MYJhQo7rNZ3ueFP/XVeL763co62Zs9
sGQqF2P+G7kd2M/pxySuh5d1rnSBDZwpEiPisIO/93PWBRKww7Mk7cu5ctEgurWG
ZmStlrk9KxGOMN3fMz8jEdQ+2VKJW6AqERw//bSk/PNhWRCOSlN/9Zxi60m+XQDF
eyN9QOYZCe48NB3LfsZgw/Qo6W+gyMNoaYjQhIHl7b7MFbZnkP4JTxjqjsZZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUh21TfjCOiex06xyOq2Ly2RIDaiwwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwODY3NzQzNTM5NTY3MDAzNy8wLzM1MzQyZTMyMzIz
MjJlMzEzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEADbebTANBgkqhkiG9w0BAQsFAAOCAQEAXsLpJ/3HQ33u2+7MptGCyKYc
62c0OMh/4S6HbThTRjwvB9/b/U2ZO5pgj7cUrRDQ3hTLwz8dJOsAuo+h3tvlUPOA
3unCvJOrCfXPQm1FHQYDn3AM3fOkfM1InJi0Cmeuj1SffNgsGXlwjOz2UTe+C3AB
DqEVyUtTvMagpfDZXdcWpCS/86QET/wvATkj+tKBE9N6zC8a+LGgLjkBHLW3sfWs
KSTeI3zD2wEqrDD2q6V6wA4DNiXto5KHxcvgI/w0Tjvz4WCt4oLv3ftsjM5UjbtB
DtpeY3DYs5b52bW9wEtmdc07FZA2/TDBRE+9P0tfjhGA/ki1RtEULIqCOuD1Ng==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:31 2026 by rpki-client