Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35322e302f32322d3232203d3e203535393630.roa
File:                     35342e3232322e35322e302f32322d3232203d3e203535393630.roa (raw, json)
Hash identifier:          sqS5tex3qHNqZcJRtL0ydJ4cDnowmCzxuLQXKEdd00E=
Subject key identifier:   0E:8C:17:80:7D:A3:53:05:C6:41:D5:92:A2:63:DA:B0:98:32:A3:B4
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       30E5C5082FEDEFBB5BCBA542336670B7EF5B6F44
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35322e302f32322d3232203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:55:30 +0000
ROA not before:           Tue 19 May 2026 02:50:30 +0000
ROA not after:            Tue 18 May 2027 02:55:30 +0000
asID:                     55960
IP address blocks:        54.222.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e5:c5:08:2f:ed:ef:bb:5b:cb:a5:42:33:66:70:b7:ef:5b:6f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:50:30 2026 GMT
            Not After : May 18 02:55:30 2027 GMT
        Subject: CN=0E8C17807DA35305C641D592A263DAB09832A3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:53:6a:d4:4d:a7:c6:fd:ff:2b:15:cf:6d:
                    25:08:b9:a2:ae:f7:fb:68:10:87:4d:09:95:b2:03:
                    c6:ce:d2:60:a0:fa:ff:0b:e7:ec:30:82:1b:38:4a:
                    82:ba:84:47:5e:1f:80:15:f5:35:04:6b:0f:83:5d:
                    fe:30:68:e7:ea:be:6c:da:ae:ab:3a:fc:7a:e7:df:
                    c1:db:0e:fb:ff:85:f9:68:1c:17:47:3b:22:c6:4a:
                    bf:84:9b:d6:d0:74:8d:43:1b:c0:90:01:fc:ce:54:
                    8e:71:5f:de:b9:e7:6b:2b:b7:da:55:33:95:d9:c0:
                    1a:53:ff:f4:0c:a6:97:66:18:f6:bf:b0:88:94:3c:
                    24:24:a2:3a:d2:9d:99:8c:9e:c4:3b:0d:1a:72:b5:
                    15:4c:f8:62:16:ab:cf:4d:98:8b:3c:3a:54:82:39:
                    45:cb:17:b2:d2:c4:55:32:df:0c:17:2b:9b:96:59:
                    25:fc:d4:bc:65:1d:e7:1c:4f:07:99:f4:e1:f4:f5:
                    6d:55:af:88:ab:1e:bb:0c:bc:07:ad:ca:28:be:a8:
                    87:9a:d9:bc:d6:2e:d0:84:4c:6e:b6:cc:ba:f7:22:
                    be:fb:60:7f:1d:a7:44:61:78:71:29:27:bf:65:56:
                    e2:0e:c3:1c:7c:1c:58:2e:53:e6:d6:e5:18:82:9c:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:17:80:7D:A3:53:05:C6:41:D5:92:A2:63:DA:B0:98:32:A3:B4
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35322e302f32322d3232203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:e9:3b:dd:29:54:5b:e0:7f:bc:2a:c2:b1:0b:b0:a1:ed:
         92:1d:76:56:c0:db:fb:2f:ad:c6:32:ae:21:8c:6f:75:07:d4:
         d9:50:a2:d7:14:c0:91:f3:16:cf:23:87:73:3e:27:74:32:6d:
         51:66:67:cf:85:00:47:91:91:a5:b9:7a:e2:af:f4:90:48:21:
         8b:40:39:6d:57:80:28:ae:b3:29:fa:f7:a1:c4:15:fc:3f:6c:
         90:39:d4:c0:96:92:a3:7e:37:d0:45:e4:48:0b:29:a4:93:7f:
         96:12:7a:b1:3b:bd:76:2b:55:38:00:cb:1b:d1:3e:27:eb:83:
         72:a7:c0:9d:ab:08:a3:0f:5f:97:23:f0:37:d0:5b:50:9c:03:
         22:fc:b2:6e:19:29:40:7b:f8:24:8c:ff:7d:d7:70:35:05:cd:
         6c:15:98:d2:c3:40:e4:86:2f:36:5a:d7:ce:53:1b:d1:fe:8c:
         15:c4:4e:10:5c:0f:7b:fc:64:f6:14:55:36:9e:b0:67:85:64:
         22:07:74:7e:f5:77:0f:d3:d7:9c:1b:57:dd:cc:4d:c2:4a:04:
         42:79:fa:28:bf:2d:2d:58:94:d1:56:e0:76:af:ba:3e:1e:d5:
         6e:0d:08:be:27:a4:bf:36:05:a5:ff:4f:69:15:d8:66:35:23:
         d5:86:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:23:13 2026 by rpki-client