Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e33362e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e33362e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          qPwrgOAI1MPmxe9JZ+qSeyc2xwSlhdOOFyN+XKpJACc=
Subject key identifier:   6A:17:F3:3B:A3:DE:53:BF:9F:3A:DE:55:20:00:CE:E4:09:3B:17:51
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       40A75B29C6C81AEF9234161961A7E948D625231E
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e33362e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:50:48 +0000
ROA not before:           Tue 19 May 2026 02:45:48 +0000
ROA not after:            Tue 18 May 2027 02:50:48 +0000
asID:                     55960
IP address blocks:        54.222.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a7:5b:29:c6:c8:1a:ef:92:34:16:19:61:a7:e9:48:d6:25:23:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:45:48 2026 GMT
            Not After : May 18 02:50:48 2027 GMT
        Subject: CN=6A17F33BA3DE53BF9F3ADE552000CEE4093B1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:0c:dd:12:3d:7f:db:c4:80:5b:12:a1:17:
                    93:c1:1c:bd:f0:9f:6a:03:7a:b0:4c:7f:03:99:26:
                    58:f7:a2:78:53:ef:99:df:41:63:dc:fc:6e:5e:f0:
                    15:a5:bc:0b:37:2a:d9:fe:37:58:6e:1b:2c:1b:a1:
                    29:b2:b4:25:d3:11:a8:0c:c2:a6:8a:f3:38:2e:cd:
                    ad:bf:8d:78:07:69:bb:79:a3:b0:63:cc:e7:11:52:
                    d6:e8:9b:4c:a0:40:85:2a:69:fe:8b:21:5c:30:3f:
                    88:2f:f1:46:28:12:bb:f9:b2:d6:0a:ac:2d:0a:de:
                    e3:7e:88:e6:7f:83:ef:9d:19:b8:9c:72:8d:79:25:
                    b7:40:c1:f6:f6:81:b6:b1:b3:83:61:cc:aa:56:a8:
                    42:66:11:68:b4:eb:98:07:a4:a0:2f:09:8c:23:ed:
                    f6:0b:51:77:a1:20:07:ad:52:ea:f0:26:14:30:be:
                    09:ca:e6:af:bf:c1:68:08:1c:6e:2d:7e:c5:b5:f0:
                    f2:7b:4e:fe:57:3e:1a:67:a0:ac:97:f4:1e:17:f6:
                    7d:0c:c6:2d:62:2e:e0:7d:05:29:9b:71:21:10:c8:
                    6b:9e:c6:43:5f:07:9c:1a:d7:37:0a:e2:1a:af:84:
                    ef:cb:2a:00:0e:12:3b:95:74:39:f7:0a:79:ae:7e:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:F3:3B:A3:DE:53:BF:9F:3A:DE:55:20:00:CE:E4:09:3B:17:51
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e33362e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:42:4c:73:b7:f4:9f:5e:33:c0:e7:05:5a:35:f9:c0:e8:e0:
         4f:c4:f4:35:f7:62:78:b9:2d:78:c2:f7:41:38:f4:db:88:dd:
         82:a0:d3:72:a8:3a:fd:6a:fd:e0:f7:9f:23:a1:3c:96:82:8e:
         71:4c:b5:7a:35:e2:3a:97:be:43:36:37:62:e5:98:cb:32:e7:
         3c:87:b7:57:e7:00:e3:3d:77:a2:0e:45:16:85:c7:61:0c:fb:
         59:b7:18:af:f6:5a:b0:2e:7a:8d:8a:29:51:89:e9:67:85:b7:
         06:12:e6:8f:43:4e:ad:e8:68:11:69:72:6c:82:a4:4f:23:62:
         5d:b6:a7:13:ea:8f:e4:62:fd:6b:0d:1d:71:f4:84:fc:32:89:
         16:86:ff:8f:ee:2e:23:1c:eb:46:21:55:f4:3f:10:30:9d:36:
         72:89:69:06:fd:c6:ea:82:10:c7:49:f8:42:f7:0b:8f:6a:0a:
         fe:cd:88:19:51:60:c7:60:5e:22:04:c3:06:06:f2:05:2b:39:
         92:a9:1c:05:64:6c:9c:14:52:36:ae:ce:ab:03:86:76:f0:e7:
         dd:34:b3:3c:5a:dd:d1:ab:9b:e7:b0:a0:5f:f1:85:95:1a:b4:
         16:25:e4:14:eb:e0:28:dd:d3:9a:22:2b:bf:0a:50:b6:3f:da:
         95:dd:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:51 2026 by rpki-client