Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3132382e302f31372d3137203d3e203535393630.roa
File:                     35342e3232322e3132382e302f31372d3137203d3e203535393630.roa (raw, json)
Hash identifier:          XCUAF9+/3FA9qpCbSDinJVcufLTs2V1J4/ZeG68pk9M=
Subject key identifier:   E8:57:C1:32:A3:BF:0E:3A:32:6C:5E:02:DF:B7:91:CD:3C:0F:57:60
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       5CBEB6EC87FB2C4CAB658C2BA6A6E0B6AD2A6432
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3132382e302f31372d3137203d3e203535393630.roa
Signing time:             Tue 19 May 2026 03:03:06 +0000
ROA not before:           Tue 19 May 2026 02:58:06 +0000
ROA not after:            Tue 18 May 2027 03:03:06 +0000
asID:                     55960
IP address blocks:        54.222.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:b6:ec:87:fb:2c:4c:ab:65:8c:2b:a6:a6:e0:b6:ad:2a:64:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:58:06 2026 GMT
            Not After : May 18 03:03:06 2027 GMT
        Subject: CN=E857C132A3BF0E3A326C5E02DFB791CD3C0F5760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:6e:70:2c:a5:d0:0d:16:eb:aa:c1:7b:1d:
                    a1:c0:6d:64:8f:9c:6a:31:dc:de:e9:d3:b5:06:ec:
                    d5:69:28:92:b0:38:99:4f:f6:5e:7f:31:83:9d:12:
                    03:c0:de:19:69:11:48:a1:0b:cc:54:d7:d0:da:7c:
                    5d:05:e8:2f:a4:dd:91:0c:42:e9:48:fb:9c:24:41:
                    17:67:bd:88:bc:56:72:d6:1f:d5:65:cd:d3:bc:6d:
                    4a:d1:65:2c:60:5a:35:8c:46:50:05:05:0a:cb:c2:
                    1d:39:a5:45:81:10:5c:9f:f2:bc:3b:f0:29:96:a1:
                    46:94:7d:e0:ab:be:7e:43:85:f2:60:6d:d0:d3:40:
                    19:7e:7e:92:d3:a1:46:be:a6:54:d4:4f:35:87:e8:
                    db:73:be:e4:42:85:9f:a9:85:72:c2:f8:e0:07:54:
                    29:17:1b:2c:a7:3e:68:69:65:a4:4e:fa:79:8d:24:
                    fe:0f:fc:9e:ad:bb:0d:6e:e0:56:e2:a7:ea:23:2a:
                    9e:1e:e3:71:64:71:01:13:f1:66:1f:f0:cc:62:24:
                    22:13:69:1b:ad:0b:d6:c5:21:e4:33:8c:77:2f:22:
                    b0:b5:49:e7:21:da:7a:cb:42:d0:53:9d:90:9c:6f:
                    a1:b1:4f:2e:12:e1:12:11:1a:84:4b:85:41:37:a5:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:57:C1:32:A3:BF:0E:3A:32:6C:5E:02:DF:B7:91:CD:3C:0F:57:60
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e3132382e302f31372d3137203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         93:37:63:78:4a:05:40:bd:e7:9a:48:4c:4e:6d:42:5d:fb:ca:
         0c:53:af:06:3b:6d:44:2e:5d:3c:49:34:84:33:b9:1b:01:b7:
         7a:df:77:47:58:69:89:dd:6e:ce:a3:c4:68:45:78:55:68:8d:
         11:6a:44:9d:18:45:b5:e0:df:98:84:ce:6f:dc:01:57:70:9d:
         f7:00:4e:e3:83:b0:16:8b:86:cf:0d:d1:4d:02:80:ba:e7:0f:
         8c:65:86:95:2e:00:57:cd:b5:07:1c:99:12:d0:f3:35:c9:14:
         fe:f1:e5:cb:55:c8:6d:7b:71:c2:ff:b7:9c:38:ab:7f:5a:61:
         94:6b:cb:89:99:b7:a1:42:97:59:1a:ed:02:f9:83:e4:03:a1:
         3a:cf:bc:30:b4:3d:76:11:0c:d4:1c:f7:6f:b1:0a:c4:e7:dd:
         32:72:12:d4:76:8f:7a:3f:68:06:37:22:ce:7a:4e:ce:95:c0:
         00:0a:7c:a5:d2:a3:5e:d7:7d:f8:28:2e:47:f8:11:ba:16:2f:
         aa:bc:8a:82:3d:1d:c5:5a:6b:fe:20:a5:50:43:ea:f7:95:bd:
         fb:6b:75:8c:51:4b:72:21:ca:18:1f:c3:b7:f3:ad:11:87:a9:
         27:3b:9f:84:e2:50:eb:41:7d:5f:52:ab:29:38:d6:bd:a0:1f:
         84:ce:ae:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:32 2026 by rpki-client