Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34362e302f32332d3233203d3e203233373234.roa
File:                     35342e3232322e34362e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier:          pRFDZz5TAEqr83mNTo4JyK3cVete6FO/LWnZvrTP0N8=
Subject key identifier:   AC:C6:52:E5:49:4B:4A:2C:83:4D:B1:D6:C9:99:A7:50:33:F8:61:12
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       0FC2071529D3E92DA90748BBF8520B1847B527D4
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34362e302f32332d3233203d3e203233373234.roa
Signing time:             Tue 19 May 2026 02:41:51 +0000
ROA not before:           Tue 19 May 2026 02:36:51 +0000
ROA not after:            Tue 18 May 2027 02:41:51 +0000
asID:                     23724
IP address blocks:        54.222.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c2:07:15:29:d3:e9:2d:a9:07:48:bb:f8:52:0b:18:47:b5:27:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:36:51 2026 GMT
            Not After : May 18 02:41:51 2027 GMT
        Subject: CN=ACC652E5494B4A2C834DB1D6C999A75033F86112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:78:ff:41:91:3a:68:26:3d:c9:03:c0:ba:
                    23:88:ac:f2:6d:d0:88:2f:a1:60:e6:ef:dc:f9:ed:
                    db:2d:c5:22:05:6d:78:11:99:ae:85:64:1d:14:c6:
                    f6:1f:7f:6b:e9:a5:25:5f:08:6c:ac:f6:41:90:da:
                    64:1c:04:26:cc:80:1c:d6:a6:0c:67:a4:8b:12:81:
                    0c:5e:98:c2:39:f9:dd:80:90:14:76:5d:fb:77:2a:
                    22:a4:25:74:ec:7f:55:9d:93:cf:c4:b5:13:51:85:
                    f5:71:f9:ef:fc:be:68:28:d0:33:e3:cc:bd:31:ad:
                    c7:95:41:f4:1b:ed:93:64:b0:0c:f9:eb:e4:7e:19:
                    e8:83:b7:f6:32:fa:fc:66:74:c4:cb:7f:5f:2f:51:
                    8d:6c:53:98:2d:33:cf:50:5b:81:c2:f7:24:85:e7:
                    35:75:68:9c:8e:00:bc:a6:e9:53:4d:60:9c:7c:ca:
                    ad:fa:40:a1:7c:6e:7a:a9:c4:7d:1d:66:13:47:92:
                    e3:20:43:e9:fc:fb:cb:55:44:ca:30:87:00:c3:81:
                    f7:58:77:c3:f6:5f:bc:31:64:f3:d9:12:97:02:8b:
                    c6:0a:f0:3d:05:41:87:83:c6:d1:f0:dc:11:a9:1a:
                    c3:d4:7c:54:95:2b:08:a4:84:02:99:01:e5:dc:79:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C6:52:E5:49:4B:4A:2C:83:4D:B1:D6:C9:99:A7:50:33:F8:61:12
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34362e302f32332d3233203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:b2:68:11:9c:e6:4f:c2:33:c4:6c:f9:fa:db:3e:52:9c:
         41:10:ec:cd:65:7b:0d:d4:78:ba:da:d1:75:0b:fa:d5:15:b5:
         6d:aa:6f:aa:c5:85:d0:75:5e:38:bb:f2:03:cf:c7:cf:9a:71:
         6f:15:81:4d:7f:7e:11:f0:fe:5e:33:53:51:75:3e:0f:a7:c8:
         36:c8:2b:67:49:4e:85:dc:11:6b:ec:fb:59:cf:6e:b0:2c:90:
         4f:bb:1a:21:18:35:4e:78:95:85:a7:52:6b:2f:fb:1c:5c:c7:
         48:cd:73:11:08:12:16:f6:be:50:44:90:61:36:de:e3:c2:e8:
         9f:52:55:d6:ce:e4:dd:00:11:26:3d:90:6f:b9:a0:03:53:fc:
         a9:60:d8:85:b0:56:3d:1c:f9:3c:2b:db:96:42:03:28:1e:20:
         4b:8f:54:89:10:df:70:8d:dd:cf:eb:9a:64:46:cb:64:72:90:
         53:a8:87:79:7d:50:ad:6c:0c:85:91:ef:10:d1:06:18:4b:df:
         eb:bb:22:1d:57:84:75:52:ef:6c:ba:f9:63:ba:d0:2a:17:00:
         d4:92:68:7a:4f:ad:b8:5c:d4:1f:2b:a4:93:77:f8:15:c2:2f:
         a9:b8:79:16:7f:fa:ab:58:fe:6f:03:f2:d2:fd:fd:45:d7:a9:
         0e:13:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:50 2026 by rpki-client