Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34382e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e34382e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          qV7i0NBB8oSC1WNA+bnQOwdAA8LMglY7OgHcGc5/85I=
Subject key identifier:   0F:91:16:76:77:D2:52:84:2F:49:BB:83:D5:26:28:34:F3:A1:3B:90
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       6C447459F20DE24D9D49C726739C3A877C1D49C5
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34382e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:50:47 +0000
ROA not before:           Tue 19 May 2026 02:45:47 +0000
ROA not after:            Tue 18 May 2027 02:50:47 +0000
asID:                     55960
IP address blocks:        54.222.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:44:74:59:f2:0d:e2:4d:9d:49:c7:26:73:9c:3a:87:7c:1d:49:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:45:47 2026 GMT
            Not After : May 18 02:50:47 2027 GMT
        Subject: CN=0F91167677D252842F49BB83D5262834F3A13B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:e9:bb:86:d9:7b:a1:cb:bc:da:a6:17:cd:
                    33:d9:b2:a7:a3:bd:9b:db:7b:76:0d:a1:ad:f5:35:
                    a4:99:7d:f8:7b:d4:ec:da:14:f0:8d:6e:ca:ff:9f:
                    eb:36:cf:97:c2:8e:99:9c:b4:de:d6:aa:a1:a8:82:
                    ea:6d:f7:f2:46:6a:b2:44:d2:1c:b9:70:e8:0d:c5:
                    06:30:6f:ba:6c:bf:8f:97:5a:fb:30:62:7b:ca:0d:
                    36:cc:c2:2a:5b:a3:0c:c0:c0:7c:e4:42:67:66:75:
                    fd:0e:84:3d:57:61:32:d6:7a:f9:1d:db:ea:5b:b6:
                    8a:eb:df:f2:06:0b:68:c3:c8:18:2a:9e:ea:29:66:
                    bf:af:bd:8b:09:13:77:22:21:59:50:ee:d3:c0:bf:
                    ab:d2:6d:fb:2b:10:ad:58:0e:12:11:86:b4:31:ea:
                    37:32:87:15:1d:7d:c1:e4:64:44:2b:4c:14:db:ab:
                    5d:4a:47:23:57:8e:ad:91:4b:33:19:7e:54:7c:62:
                    d1:d6:e9:26:17:d3:74:3e:40:8a:fb:22:60:35:fe:
                    c3:aa:50:47:41:31:b7:58:5d:7e:80:22:09:69:32:
                    f5:18:62:72:5b:02:c0:9c:ed:08:ac:1a:15:02:ff:
                    5c:1e:e1:67:87:6f:14:eb:fb:c0:60:29:53:f7:75:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:16:76:77:D2:52:84:2F:49:BB:83:D5:26:28:34:F3:A1:3B:90
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e34382e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e9:e6:9d:84:4d:c8:19:79:a0:b8:ce:c4:a9:99:a8:f0:5e:
         8f:0a:da:a9:92:9c:6b:ba:ef:19:4b:1e:14:a3:d9:d0:fa:54:
         9d:3e:4a:e4:d7:89:8b:ce:98:a3:5d:08:38:b5:59:a9:b0:a2:
         14:9a:7f:bf:5e:71:ae:f1:0a:1a:b2:8a:c6:a5:d4:bb:89:cc:
         e2:98:6c:bc:51:df:65:dd:88:df:e1:ed:39:75:c1:0c:9c:42:
         d8:5a:56:b5:20:e9:98:ae:d0:b4:21:e6:5d:ed:8a:dc:34:21:
         1a:68:d7:4a:b5:ed:47:23:1d:c5:64:4f:ea:90:eb:97:a7:06:
         0e:82:ca:49:12:9a:ad:54:31:d0:42:94:b3:10:3b:12:bd:97:
         0e:88:a4:5c:1b:20:ec:72:1b:e8:92:37:ea:ba:d7:2c:e6:a8:
         46:a5:30:8c:4d:1c:61:dd:3d:bc:a0:62:0b:9e:ce:9b:40:45:
         a6:22:bb:44:25:cf:bf:9b:62:d5:d1:4a:7d:57:0f:cd:f7:6a:
         ee:d1:e4:f5:66:13:17:65:7d:07:e7:29:20:c8:54:96:c0:42:
         a6:6e:2b:b7:12:ee:7b:37:b3:df:89:f3:e3:56:5a:a3:ac:a6:
         0e:d8:89:bc:ac:02:6e:7b:cc:67:60:7c:e9:73:9f:c6:6c:0f:
         cd:bf:5e:a3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUbER0WfIN4k2dSccmc5w6h3wdScUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjQ1NDdaFw0yNzA1MTgwMjUwNDdaMDMxMTAvBgNV
BAMTKDBGOTExNjc2NzdEMjUyODQyRjQ5QkI4M0Q1MjYyODM0RjNBMTNCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5em7htl7ocu82qYXzTPZsqej
vZvbe3YNoa31NaSZffh71OzaFPCNbsr/n+s2z5fCjpmctN7WqqGogupt9/JGarJE
0hy5cOgNxQYwb7psv4+XWvswYnvKDTbMwipbowzAwHzkQmdmdf0OhD1XYTLWevkd
2+pbtorr3/IGC2jDyBgqnuopZr+vvYsJE3ciIVlQ7tPAv6vSbfsrEK1YDhIRhrQx
6jcyhxUdfcHkZEQrTBTbq11KRyNXjq2RSzMZflR8YtHW6SYX03Q+QIr7ImA1/sOq
UEdBMbdYXX6AIglpMvUYYnJbAsCc7QisGhUC/1we4WeHbxTr+8BgKVP3dQ3fAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUD5EWdnfSUoQvSbuD1SYoNPOhO5AwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADbeMDANBgkqhkiG9w0BAQsFAAOCAQEAnenmnYRNyBl5oLjOxKmZqPBejwra
qZKca7rvGUseFKPZ0PpUnT5K5NeJi86Yo10IOLVZqbCiFJp/v15xrvEKGrKKxqXU
u4nM4phsvFHfZd2I3+HtOXXBDJxC2FpWtSDpmK7QtCHmXe2K3DQhGmjXSrXtRyMd
xWRP6pDrl6cGDoLKSRKarVQx0EKUsxA7Er2XDoikXBsg7HIb6JI36rrXLOaoRqUw
jE0cYd09vKBiC57Om0BFpiK7RCXPv5ti1dFKfVcPzfdq7tHk9WYTF2V9B+cpIMhU
lsBCpm4rtxLuezez34nz41Zao6ymDtiJvKwCbnvMZ2B86XOfxmwPzb9eow==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:20 2026 by rpki-client