Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131302e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e3131302e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          s4GLna1Mx1+X26YoReljVVvGsd4Hsg9v1+bWxI/se6M=
Subject key identifier:   36:F7:42:50:EC:58:DF:8C:E4:2B:C9:1F:F1:CD:5C:04:90:DB:07:89
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       048D6B1CE00A3EB5CE8093DB36A36CC91C48F106
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131302e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:59:06 +0000
ROA not before:           Tue 19 May 2026 02:54:06 +0000
ROA not after:            Tue 18 May 2027 02:59:06 +0000
asID:                     55960
IP address blocks:        54.222.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8d:6b:1c:e0:0a:3e:b5:ce:80:93:db:36:a3:6c:c9:1c:48:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:54:06 2026 GMT
            Not After : May 18 02:59:06 2027 GMT
        Subject: CN=36F74250EC58DF8CE42BC91FF1CD5C0490DB0789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a3:95:5a:6f:6e:0a:ff:7c:3f:78:ee:4b:54:
                    e2:56:0c:7b:47:5c:0f:0b:27:d2:aa:16:1b:f5:01:
                    14:9b:9a:45:e4:44:a8:cd:a2:f1:7c:08:92:10:e8:
                    80:16:bc:d6:5a:c0:6a:cb:8b:68:45:89:91:c8:b6:
                    a1:0e:31:24:d3:94:48:bf:3b:a6:f8:28:40:5f:46:
                    47:59:3b:c3:85:1a:f9:c1:76:ba:67:92:33:de:f0:
                    14:96:0a:de:f7:01:33:1a:9c:cc:b1:6f:c9:b6:0a:
                    16:62:b5:21:2e:58:61:0e:98:7f:2f:5f:af:aa:09:
                    85:80:6b:6d:15:a4:c3:f3:fc:ed:69:e4:26:84:52:
                    61:66:39:65:ce:dd:1e:99:1b:3f:f9:7b:d7:5b:b7:
                    90:7d:94:d0:9c:17:b9:51:7a:b0:af:f4:e3:16:9a:
                    89:7d:30:a1:26:f4:7b:01:9c:20:a7:96:a0:ca:44:
                    22:ab:9d:20:48:d3:2f:7a:0e:4b:23:a6:01:91:60:
                    89:0d:97:2c:c1:70:56:13:7e:b6:ed:31:48:ef:c9:
                    de:25:b4:7b:7b:8d:8b:49:a7:96:de:d5:18:43:a1:
                    63:bc:33:2b:6e:31:0d:dc:4a:57:59:ac:48:ce:12:
                    0d:92:6b:e4:40:5b:bb:8b:71:f8:52:0a:66:02:db:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:42:50:EC:58:DF:8C:E4:2B:C9:1F:F1:CD:5C:04:90:DB:07:89
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131302e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:2f:00:dc:6a:56:ed:aa:94:fa:ec:db:48:b4:af:ce:9c:
         77:f2:8d:e8:50:7b:6d:53:fe:6a:f1:b5:c2:d5:69:8a:15:f6:
         b8:36:a8:14:f6:d1:03:4f:4e:c8:35:d7:9d:2b:d3:69:57:cd:
         0c:ab:dd:ef:a1:e4:48:20:2a:33:6b:4a:ad:ad:aa:86:10:68:
         52:38:03:69:e1:1f:ed:9e:bb:d7:7b:06:2c:ea:b7:f3:2d:12:
         c4:8c:0a:3e:33:4e:29:57:16:6c:c0:fa:e2:7c:67:3c:dd:77:
         4b:b6:77:1f:1f:0f:c3:fc:1a:2a:3e:a1:55:09:1d:8a:b6:d0:
         31:40:5a:0c:ae:32:4c:d8:a1:df:8d:79:11:6f:92:ee:46:da:
         9e:26:5d:51:81:fd:62:42:00:bb:68:ce:78:c8:f3:cf:fd:eb:
         59:e3:c6:b9:6e:3a:6b:56:d3:bc:36:8f:7f:b3:cd:67:b9:29:
         92:34:b7:01:72:dd:1a:23:8b:c6:50:55:11:76:28:3b:a5:db:
         ea:f1:e4:dd:c1:c5:61:ee:68:f0:54:a0:73:00:ed:69:09:71:
         df:55:74:ea:04:9c:af:55:5f:6c:9e:42:e0:f9:39:53:05:de:
         be:26:27:d9:cc:03:fb:7b:ca:19:84:7c:07:d4:26:25:e9:fa:
         61:67:cb:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:20 2026 by rpki-client