Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31392e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e31392e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          TTZayAaGCZ8IkVBldrkT6MawlyttkIK4fMP0xPNbp+k=
Subject key identifier:   BB:41:5F:4B:94:9C:52:39:AF:BC:CF:61:92:E8:C8:FE:EA:97:E3:E4
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       05DABDC2899CB2DD413598F405C36CB24D4AF79C
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31392e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:47:11 +0000
ROA not before:           Tue 19 May 2026 02:42:11 +0000
ROA not after:            Tue 18 May 2027 02:47:11 +0000
asID:                     55960
IP address blocks:        54.222.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:da:bd:c2:89:9c:b2:dd:41:35:98:f4:05:c3:6c:b2:4d:4a:f7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:42:11 2026 GMT
            Not After : May 18 02:47:11 2027 GMT
        Subject: CN=BB415F4B949C5239AFBCCF6192E8C8FEEA97E3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:55:49:4a:3a:e9:15:b5:bc:4f:57:a9:7c:
                    52:52:c3:09:7b:5e:17:2a:d3:a6:0e:5d:a6:6d:ee:
                    3b:9d:fd:c9:c6:b1:ec:8f:9b:60:43:84:e9:4a:2e:
                    e8:c1:20:ff:78:86:d2:22:a0:60:e8:3f:0f:5b:0e:
                    7b:94:60:e8:1e:79:8d:10:3c:7d:a4:60:b2:83:40:
                    00:fa:25:33:42:71:30:be:ba:6d:03:ab:92:4f:31:
                    28:b2:be:3b:3a:98:55:dc:cd:0f:8a:38:48:8e:62:
                    09:8a:0b:ae:5e:88:b4:33:f1:df:37:88:f4:11:fc:
                    c1:cf:ce:00:82:be:d4:0b:fe:35:41:93:56:31:ef:
                    ce:77:9f:ee:8c:3e:d5:81:37:78:4b:92:f4:80:83:
                    d7:3c:b5:02:3a:ae:61:1e:6c:ec:5e:73:f0:98:05:
                    91:6a:84:3e:e5:21:8a:65:37:ad:a4:9e:98:a5:16:
                    0d:16:9d:33:30:9e:f6:d4:94:4a:ec:34:6c:9f:bd:
                    fe:d6:78:bf:5c:a7:c7:1b:d2:e1:ac:a4:f6:28:af:
                    11:9a:c6:ac:72:a2:83:76:8f:5e:cd:65:3b:2d:3d:
                    a4:c6:dd:94:73:2d:7d:98:c7:fb:ee:45:62:88:dc:
                    97:95:4a:eb:6b:c6:f4:c9:81:7c:1b:6b:36:ba:2f:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:5F:4B:94:9C:52:39:AF:BC:CF:61:92:E8:C8:FE:EA:97:E3:E4
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e31392e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:8b:31:c0:f1:c8:00:d0:62:f0:ae:e0:e3:a7:ab:8d:74:31:
         dc:26:d4:0f:7c:74:08:75:b0:bc:c0:98:94:fc:d4:9c:f2:fe:
         4a:13:55:2b:66:22:f5:9f:98:c9:46:a9:e7:69:4e:3d:05:97:
         60:5e:b6:8f:55:a9:25:e7:7e:c5:d3:a0:d9:04:dd:ca:77:52:
         68:8c:7c:78:3e:f9:ac:5e:36:9d:fd:90:f9:23:ca:85:37:44:
         ab:ed:cb:9d:ad:9f:e5:5d:18:f9:29:3f:37:ff:52:28:e5:92:
         63:c0:60:9d:3b:27:f5:68:a2:b4:a5:3b:74:57:2e:d0:08:c5:
         cf:47:9a:f2:c1:ac:47:ff:e9:e2:7d:df:23:54:8d:21:b8:f5:
         ca:dd:05:c2:86:6c:fb:aa:22:fd:5e:b4:38:dc:40:98:06:dc:
         0c:03:e4:f8:8e:de:b7:cd:32:cf:72:ce:e2:eb:7d:c4:65:9f:
         ec:f8:12:66:7d:a9:24:04:6e:84:a2:7a:d5:2f:c7:d7:7f:2e:
         72:96:45:84:77:57:34:4b:93:ca:9b:6c:9c:9e:24:4f:47:ed:
         4d:6d:58:ef:b8:5c:87:38:63:ec:1e:87:a4:20:bf:17:00:8d:
         07:ef:70:f1:d0:da:26:5e:45:bf:72:b3:1c:45:3a:d2:01:96:
         39:30:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:23:13 2026 by rpki-client