Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31322e302f32332d3233203d3e203535393630.roa
File:                     35342e3232322e31322e302f32332d3233203d3e203535393630.roa (raw, json)
Hash identifier:          /J+yRZAjsCNE+Vukdiy2+PChdtWjmNxIQvL2qBGMKRk=
Subject key identifier:   19:B7:07:A8:07:19:8D:1E:47:C8:9F:6E:56:2C:77:8C:50:ED:D1:FC
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       7D22732813CB0E7C2933566F7AF958FC22B58808
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31322e302f32332d3233203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:47:11 +0000
ROA not before:           Tue 19 May 2026 02:42:11 +0000
ROA not after:            Tue 18 May 2027 02:47:11 +0000
asID:                     55960
IP address blocks:        54.222.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:22:73:28:13:cb:0e:7c:29:33:56:6f:7a:f9:58:fc:22:b5:88:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:42:11 2026 GMT
            Not After : May 18 02:47:11 2027 GMT
        Subject: CN=19B707A807198D1E47C89F6E562C778C50EDD1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:cf:2d:ac:ce:39:e2:5c:40:39:8d:e6:43:
                    c2:20:94:be:89:fc:a6:a6:12:0b:6d:55:1f:24:eb:
                    3a:c5:0f:72:a8:67:04:f4:65:af:08:d6:b5:ef:3c:
                    d6:86:5c:45:93:5c:8d:92:2c:ec:91:08:3a:9e:fa:
                    40:e9:e0:15:93:de:b2:52:43:2e:89:cc:4a:de:da:
                    4b:2e:40:c9:ed:ed:2e:f9:30:96:45:1d:d6:23:24:
                    a2:80:46:0d:1f:1d:af:0e:90:54:00:a7:4b:4c:1e:
                    c8:32:f8:2b:b4:fc:72:96:bc:dc:13:87:b9:b1:01:
                    bc:fe:ec:86:39:f5:e3:a6:57:3e:a1:b1:ff:ab:32:
                    2c:50:d7:3d:a7:3d:b1:97:23:28:00:45:2c:9c:a7:
                    8f:81:63:8a:4e:fb:4f:47:91:c5:a2:5e:03:d0:0b:
                    6e:b3:90:89:d7:9c:bb:4f:c4:8d:3e:6b:df:4a:b5:
                    0b:6a:3e:4e:49:93:64:80:64:a7:8b:42:6e:4a:b8:
                    4e:f2:5e:47:a1:0f:1f:b8:aa:ac:de:b3:91:e7:95:
                    25:17:01:f8:91:ea:5e:16:b8:90:da:6b:a6:7b:ff:
                    19:a4:1a:af:0c:c6:bc:4e:c3:af:1a:29:5b:9b:dc:
                    0e:7c:6e:51:b7:6f:6a:82:3e:6a:07:d0:ca:8f:2d:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B7:07:A8:07:19:8D:1E:47:C8:9F:6E:56:2C:77:8C:50:ED:D1:FC
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31322e302f32332d3233203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:69:05:26:d3:15:83:ea:59:c9:73:04:9f:c6:60:b5:18:7b:
         a2:0e:fd:e1:fb:60:62:0b:37:95:3e:46:9e:4d:d7:e1:3f:94:
         64:82:d4:ea:d5:88:37:41:79:ee:ac:9b:ea:1e:b4:71:82:4f:
         36:22:2c:25:ad:32:b9:b5:5d:2e:b7:e2:90:d6:e9:2e:81:54:
         ce:9c:68:f7:54:fc:a7:d8:de:15:a3:4c:9d:99:94:61:c2:5f:
         f1:b4:46:5d:ec:36:7f:62:62:24:64:98:2b:57:b8:51:d6:cd:
         ab:eb:14:c7:6c:2f:20:30:dc:80:28:f8:fa:47:0d:c0:b3:8e:
         5a:fd:d9:d9:43:4a:1a:fb:d5:02:fb:ba:35:d6:9d:72:ee:a3:
         ce:21:07:7a:59:4f:7b:b5:c3:ed:70:95:21:8b:8d:87:91:a9:
         f3:24:a0:cb:a8:7a:4d:eb:30:bd:6f:9a:59:4c:66:07:fb:af:
         27:83:c0:3d:df:93:03:d3:51:ec:b5:95:43:88:67:48:af:af:
         66:46:fa:4d:e2:c9:70:08:df:62:60:54:27:1b:09:d1:04:1e:
         e7:6b:44:9e:e7:d9:f1:64:4f:cd:a2:d6:23:96:64:6f:6a:7d:
         83:21:e8:d3:10:24:18:67:9a:4c:20:1f:0a:e7:44:ae:8e:99:
         69:ea:5d:ac
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfSJzKBPLDnwpM1ZvevlY/CK1iAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjQyMTFaFw0yNzA1MTgwMjQ3MTFaMDMxMTAvBgNV
BAMTKDE5QjcwN0E4MDcxOThEMUU0N0M4OUY2RTU2MkM3NzhDNTBFREQxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXe88trM454lxAOY3mQ8IglL6J
/KamEgttVR8k6zrFD3KoZwT0Za8I1rXvPNaGXEWTXI2SLOyRCDqe+kDp4BWT3rJS
Qy6JzEre2ksuQMnt7S75MJZFHdYjJKKARg0fHa8OkFQAp0tMHsgy+Cu0/HKWvNwT
h7mxAbz+7IY59eOmVz6hsf+rMixQ1z2nPbGXIygARSycp4+BY4pO+09HkcWiXgPQ
C26zkInXnLtPxI0+a99KtQtqPk5Jk2SAZKeLQm5KuE7yXkehDx+4qqzes5HnlSUX
AfiR6l4WuJDaa6Z7/xmkGq8MxrxOw68aKVub3A58blG3b2qCPmoH0MqPLeN9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGbcHqAcZjR5HyJ9uVix3jFDt0fwwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATbeDDANBgkqhkiG9w0BAQsFAAOCAQEABGkFJtMVg+pZyXMEn8ZgtRh7og79
4ftgYgs3lT5Gnk3X4T+UZILU6tWIN0F57qyb6h60cYJPNiIsJa0yubVdLrfikNbp
LoFUzpxo91T8p9jeFaNMnZmUYcJf8bRGXew2f2JiJGSYK1e4UdbNq+sUx2wvIDDc
gCj4+kcNwLOOWv3Z2UNKGvvVAvu6Ndadcu6jziEHellPe7XD7XCVIYuNh5Gp8ySg
y6h6TeswvW+aWUxmB/uvJ4PAPd+TA9NR7LWVQ4hnSK+vZkb6TeLJcAjfYmBUJxsJ
0QQe52tEnufZ8WRPzaLWI5Zkb2p9gyHo0xAkGGeaTCAfCudEro6ZaepdrA==
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client