Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35372e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e35372e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          xmQb3HWBSliKETv6Aae0EzRNcxKgaXOW8xS4c681ERE=
Subject key identifier:   48:BB:6C:98:C0:C6:32:EF:54:EA:A8:47:04:0A:71:EC:25:DD:86:2C
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       17F0EA5291ED286E6300368DB4E01087909C56E8
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35372e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:55:09 +0000
ROA not before:           Tue 19 May 2026 02:50:09 +0000
ROA not after:            Tue 18 May 2027 02:55:09 +0000
asID:                     55960
IP address blocks:        54.222.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f0:ea:52:91:ed:28:6e:63:00:36:8d:b4:e0:10:87:90:9c:56:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:50:09 2026 GMT
            Not After : May 18 02:55:09 2027 GMT
        Subject: CN=48BB6C98C0C632EF54EAA847040A71EC25DD862C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:27:00:5a:d6:a2:8b:91:87:3b:55:88:04:
                    a6:4c:12:b8:0d:dc:5f:a2:db:e6:ba:a5:c5:f5:63:
                    d9:eb:cc:f9:f5:f1:a5:a7:23:0b:49:cd:29:62:0f:
                    91:06:42:35:c5:62:f8:f9:3f:a4:2b:b9:60:fe:e0:
                    b2:52:40:41:e7:4d:56:e9:9a:62:e3:ee:73:6f:57:
                    79:b5:e3:a1:85:cb:a5:76:1d:8e:95:3c:58:db:22:
                    89:9e:e5:e2:86:d7:17:69:2f:1d:34:f5:4b:5b:d6:
                    c1:85:4d:57:35:a9:e2:73:47:95:98:2d:46:a2:f7:
                    1f:18:42:93:08:be:94:b2:eb:3f:a1:4d:12:20:ec:
                    e0:a9:5e:9e:91:e1:bb:b1:07:75:38:4e:f8:b7:c4:
                    ff:97:ee:9d:4b:eb:db:1c:de:c1:19:b2:d2:6f:e0:
                    7d:d5:23:c3:41:cd:14:85:56:65:db:1c:65:b7:45:
                    d0:30:9b:93:51:10:3b:3a:58:05:0e:f6:71:0c:37:
                    d1:2f:1b:40:ba:04:af:92:a1:be:d5:50:64:bd:fe:
                    33:bb:61:6b:4f:25:16:1b:28:8c:41:a7:c2:81:10:
                    bb:31:d6:dc:32:c6:3b:76:1b:9a:62:87:a9:e0:d7:
                    86:1d:c0:6d:8b:64:4b:95:ee:b5:a4:09:9a:78:a9:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:6C:98:C0:C6:32:EF:54:EA:A8:47:04:0A:71:EC:25:DD:86:2C
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e35372e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:61:29:39:e6:9c:da:23:a5:0a:d1:78:6d:10:84:32:68:
         ba:d1:5b:2a:ac:e6:50:61:cb:e0:b0:cc:7b:c3:b2:76:0e:48:
         39:b3:3e:9a:3e:01:ca:e7:02:32:5a:16:b3:38:de:f3:98:98:
         91:4c:e1:a1:86:44:1b:17:e3:23:5d:78:0d:7e:ca:6b:25:1a:
         82:35:9d:43:66:66:7c:6c:df:8b:f4:9b:9f:93:71:59:67:92:
         39:75:5b:ae:38:fa:34:53:e0:20:8c:a7:23:1c:f2:ea:eb:fb:
         ee:93:6d:0f:b2:39:db:18:6a:f4:53:a0:57:ea:84:25:77:45:
         a0:15:a7:9a:cb:83:e9:73:e7:06:68:8a:c9:87:d9:0d:a7:93:
         c6:e9:df:45:9e:6c:4b:66:57:c3:8a:e5:4b:e8:93:9b:14:55:
         56:91:f0:e1:3d:0a:b8:d0:25:3a:31:fa:d6:16:01:00:38:9c:
         6f:1a:eb:7a:c0:0a:a3:8c:fb:8c:a6:6d:9f:aa:f7:2e:c4:b2:
         b2:6f:62:df:f3:0a:31:b0:4b:77:4a:2e:c8:97:e7:85:3f:9c:
         b6:12:10:0b:7c:07:4a:67:4f:3b:54:f6:49:d1:0a:40:e9:48:
         45:8e:7e:14:ca:af:83:e8:b8:2f:fa:ec:fa:66:53:7c:51:eb:
         15:fb:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:51 2026 by rpki-client