Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131372e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e3131372e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          7Um4an3ShY2W+9eTyw3iEO/7diByEm3742Y986rxqfQ=
Subject key identifier:   78:05:51:F6:D4:16:0F:63:AB:67:96:D9:97:9E:65:BA:2A:A8:AF:15
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       967D38209A61FB8F237A25742149F14D592BA7
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131372e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 03:01:06 +0000
ROA not before:           Tue 19 May 2026 02:56:06 +0000
ROA not after:            Tue 18 May 2027 03:01:06 +0000
asID:                     55960
IP address blocks:        54.222.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            96:7d:38:20:9a:61:fb:8f:23:7a:25:74:21:49:f1:4d:59:2b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:56:06 2026 GMT
            Not After : May 18 03:01:06 2027 GMT
        Subject: CN=780551F6D4160F63AB6796D9979E65BA2AA8AF15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:16:ba:8d:74:72:7e:75:c7:50:c3:38:75:
                    3e:4a:01:10:e8:39:f1:5a:7d:d1:fc:21:2f:ff:93:
                    45:07:63:23:1f:d3:d2:81:7d:89:1d:6a:5d:6c:fb:
                    b8:32:19:b9:d7:f7:41:cb:30:9f:25:3c:84:aa:21:
                    ef:9f:74:cc:fa:b3:f3:d0:1e:cd:b1:1c:75:f9:94:
                    6c:b1:a4:dc:30:53:d0:8e:dc:60:ab:ea:4b:44:9b:
                    e5:aa:56:c1:fa:f2:69:92:b0:31:25:cf:42:4d:5a:
                    82:96:9b:c4:a3:92:10:58:31:8d:76:15:2b:b6:ff:
                    10:79:8d:2e:13:c1:fb:8d:e3:a9:6c:df:d0:4c:f3:
                    e9:15:9e:18:b6:1c:38:03:41:6f:26:6f:a4:a1:51:
                    7e:c8:fe:2d:47:f8:98:aa:fe:91:2d:bc:8f:81:d3:
                    93:58:a2:17:a5:91:67:af:92:6d:f6:82:99:69:0e:
                    79:f2:2a:93:25:d7:d0:ca:6b:df:83:59:56:f6:14:
                    f2:1f:be:b3:32:4d:11:25:68:3e:9a:8c:61:6b:4b:
                    04:d0:cd:15:88:cc:f6:36:5d:b7:1a:8e:17:33:d3:
                    f2:1a:d3:a9:c4:d2:d0:5f:4a:91:62:95:b7:3e:b9:
                    66:24:c5:d6:36:d1:2a:7f:9b:93:7f:56:f9:b8:56:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:51:F6:D4:16:0F:63:AB:67:96:D9:97:9E:65:BA:2A:A8:AF:15
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3131372e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:4e:a3:c3:80:e9:b4:5d:13:e4:d0:9f:72:69:cb:1a:4c:
         e3:7c:12:ea:79:c5:e3:16:59:17:57:b5:07:92:3c:0f:f4:6a:
         9b:b8:18:ae:d6:25:08:bd:6f:44:47:8b:50:d0:bc:d3:50:39:
         d2:4c:78:45:c8:b2:ac:3a:81:90:96:b8:45:91:17:3a:8a:51:
         55:85:da:6f:d8:96:7f:58:70:71:c7:e0:59:75:66:66:ac:48:
         af:79:a3:10:2f:3d:d3:88:fa:39:0f:0b:fa:7d:cb:71:2d:34:
         3c:b1:8f:37:b3:8e:a4:1e:01:26:16:e5:b0:0b:bd:8c:b0:24:
         25:a9:b2:f6:31:89:ae:53:00:20:65:00:50:8c:97:f8:19:e5:
         4a:fd:0b:52:b1:d8:0d:e3:32:4e:81:60:48:e5:cc:af:07:08:
         e0:a3:94:48:e6:b1:10:b2:41:16:29:da:f4:a4:15:25:92:e8:
         be:5f:50:da:00:59:4c:28:cc:50:cb:44:ce:44:f9:c2:d6:20:
         b0:b1:ad:5a:8c:f6:6d:40:8b:4b:af:45:7d:e0:a2:0c:10:99:
         96:52:09:69:72:53:ac:22:b5:85:55:fb:8d:54:1d:bf:a8:d7:
         7d:2f:f9:4b:7a:ad:93:9e:58:ca:8e:1c:d2:85:56:23:6f:c1:
         1e:94:3f:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:32 2026 by rpki-client