Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35342e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e35342e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          P418sP271E/ZwuHK5WJ4rizhWLBcz4OyeyB5CeBYE3A=
Subject key identifier:   D8:44:04:16:8D:17:93:DF:60:F9:E6:FD:E9:09:75:2A:90:72:92:44
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       13FCAF5B24F7036EF7749C27FFA931365669BE13
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35342e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:50:47 +0000
ROA not before:           Tue 19 May 2026 02:45:47 +0000
ROA not after:            Tue 18 May 2027 02:50:47 +0000
asID:                     55960
IP address blocks:        54.222.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fc:af:5b:24:f7:03:6e:f7:74:9c:27:ff:a9:31:36:56:69:be:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:45:47 2026 GMT
            Not After : May 18 02:50:47 2027 GMT
        Subject: CN=D84404168D1793DF60F9E6FDE909752A90729244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:a0:a8:32:17:0a:7e:c6:ee:4a:3b:80:ba:
                    2a:cf:71:72:fb:90:58:63:6e:a7:4d:11:3f:e2:a4:
                    e8:fd:60:36:d6:cc:f4:dd:4f:f0:fc:50:bd:e7:b4:
                    11:9e:31:98:96:57:7c:2d:19:ad:58:52:b7:44:f4:
                    c0:4f:cd:a9:4f:ab:dc:98:61:6a:60:d0:9c:98:e5:
                    4f:2a:fc:33:ef:e2:6f:89:a7:2d:4f:8d:b4:93:76:
                    9e:70:84:07:8e:de:cf:cc:fd:b2:e9:bc:59:c8:2d:
                    db:eb:88:95:de:0d:8a:43:5b:df:9d:cb:0f:17:95:
                    46:4f:93:b5:c1:00:a5:32:46:66:de:53:3a:84:48:
                    66:34:97:75:b7:38:af:c6:1a:f4:3e:0b:fb:0d:5b:
                    e4:ed:bd:cc:05:65:5e:00:25:31:25:f1:4e:f7:74:
                    b0:e5:02:c6:91:1f:5b:28:5e:39:25:b4:c3:08:da:
                    30:19:06:21:9d:2d:5d:cc:c1:16:4b:e5:1c:b6:fb:
                    7d:c4:43:6a:28:9b:4c:86:0a:b6:86:2b:ba:9e:c9:
                    00:4a:83:46:0f:d2:41:5c:1a:42:85:4d:cf:a3:2d:
                    56:1e:32:22:51:7e:72:50:ce:27:9f:e1:50:cb:09:
                    79:1f:4d:4c:ba:67:12:4f:24:a6:34:2a:64:c5:f3:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:44:04:16:8D:17:93:DF:60:F9:E6:FD:E9:09:75:2A:90:72:92:44
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35342e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:df:72:c8:ba:bc:27:2f:ef:31:92:9b:b4:72:0f:74:86:5d:
         b6:c1:c7:ca:25:14:19:6f:42:e0:a9:b1:b3:a7:49:e7:a9:7f:
         6e:78:cc:f9:2d:71:50:00:19:02:5a:8d:6a:eb:bd:9b:5f:93:
         ac:3d:c6:57:4c:f4:66:25:89:10:3f:4e:a0:7d:6c:91:48:0f:
         f7:0f:04:2c:ed:4e:4d:e3:f4:f0:de:37:cf:a7:c1:39:76:2e:
         e6:d6:da:16:b1:81:fd:5a:2e:6a:74:33:70:72:0c:c5:7d:af:
         e6:86:8f:9f:0b:ac:0f:8f:c5:d5:57:a5:10:3e:e6:a7:59:4c:
         93:c3:54:8f:1e:47:e3:1b:2a:3e:07:25:6f:fb:b4:62:e9:a7:
         de:90:a4:bd:bc:7a:05:93:32:47:95:42:59:d1:c5:3e:54:e1:
         d5:44:21:e7:68:c3:07:c1:e9:86:c9:cd:3f:cb:ee:f9:2b:b2:
         26:e2:3d:0a:5d:72:7e:5d:d0:0a:82:5b:ac:d7:7e:8f:a3:d3:
         70:e4:18:38:68:31:ed:66:b8:f5:2d:c9:a6:63:3a:a8:5c:56:
         42:b4:19:f9:9d:9e:0e:00:0a:7e:a8:26:5d:48:3c:4b:bd:2c:
         ab:e5:8a:16:3b:24:1e:97:d3:2c:b4:96:ea:e9:f5:36:43:2f:
         76:03:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client