Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e36322e302f32332d3233203d3e203535393630.roa
File:                     35342e3232322e36322e302f32332d3233203d3e203535393630.roa (raw, json)
Hash identifier:          4RyjMeCdOzhdhJDVx1IjcetfY8l1Hln14oTX/kCxlAk=
Subject key identifier:   4D:7B:A4:66:C0:BF:07:59:3E:88:3F:A5:C4:EC:6B:81:83:B9:B8:A2
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       030BF2760BC8BF076EA1CFC2BCE82A176A74F926
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e36322e302f32332d3233203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:55:09 +0000
ROA not before:           Tue 19 May 2026 02:50:09 +0000
ROA not after:            Tue 18 May 2027 02:55:09 +0000
asID:                     55960
IP address blocks:        54.222.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:f2:76:0b:c8:bf:07:6e:a1:cf:c2:bc:e8:2a:17:6a:74:f9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:50:09 2026 GMT
            Not After : May 18 02:55:09 2027 GMT
        Subject: CN=4D7BA466C0BF07593E883FA5C4EC6B8183B9B8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:83:c2:c4:18:45:04:62:b9:f6:e2:d8:68:
                    47:02:db:2b:51:21:be:10:a4:3b:81:81:41:cc:99:
                    bb:54:67:cf:32:2c:94:50:63:08:22:d4:73:f0:d9:
                    47:e0:6a:47:87:ab:38:fc:20:a1:f2:f2:e6:df:5c:
                    f1:ca:a4:23:c7:49:ea:9d:85:6a:39:67:1f:6e:c3:
                    79:b5:52:48:f1:61:e1:37:35:18:b5:b9:6e:32:a0:
                    25:a9:5b:15:fd:41:28:f3:a0:e4:12:bb:57:6e:53:
                    1e:f9:2f:14:69:ed:22:cf:ab:ac:c4:6d:b2:dd:9f:
                    21:56:20:76:e5:7a:7e:7e:fc:e6:e3:b9:ce:e1:5c:
                    1a:aa:68:18:a3:8d:49:f1:46:cb:ea:c7:f8:f7:d5:
                    5d:c3:db:6a:5a:9a:4e:17:ee:56:27:cd:71:86:db:
                    66:15:c8:d5:4a:f1:0f:d6:61:1d:83:2a:83:9e:e2:
                    d4:bf:a4:fe:18:22:d1:ce:75:ca:05:62:08:b3:f4:
                    79:03:04:7f:d4:39:e5:97:be:ae:56:1f:15:39:e0:
                    66:c7:be:21:16:96:f3:31:d5:eb:f0:63:07:c5:db:
                    56:29:33:b4:61:fc:c0:62:8c:56:01:6c:a3:b6:00:
                    2d:a6:cd:4b:b4:86:50:84:5b:56:ab:19:ab:a4:ab:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7B:A4:66:C0:BF:07:59:3E:88:3F:A5:C4:EC:6B:81:83:B9:B8:A2
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e36322e302f32332d3233203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:ca:91:a4:bd:b9:ba:d7:a7:1f:b6:ec:51:b2:ee:9c:21:
         b7:13:dc:07:f8:c1:27:b1:ce:54:f8:4c:6a:9b:c5:f7:3a:32:
         c4:2f:41:e8:ac:f3:a7:61:29:ff:1c:4c:42:fd:5f:7a:2b:7d:
         49:2e:e0:96:a1:2d:4d:4c:43:e8:f2:c5:e6:8d:75:2e:5f:0b:
         2e:8c:5c:f1:c0:20:12:46:6a:a7:f1:db:5c:fb:83:b0:c6:11:
         d2:79:03:09:ff:32:9c:92:19:73:cd:62:eb:0b:33:af:f2:83:
         cd:34:57:49:23:cc:2c:24:8c:e4:5d:30:06:80:e2:e4:2c:c2:
         de:9a:94:04:50:d6:70:da:30:ea:91:73:a6:57:c8:74:2e:5b:
         63:52:e0:09:e7:81:89:78:d5:9b:9e:0f:a9:77:e6:44:9d:5f:
         35:f4:12:9d:12:7b:98:c9:97:65:82:42:03:3d:4b:70:13:76:
         16:1f:b5:b6:3b:3d:38:2f:d8:51:4e:db:8a:fd:8f:d2:29:33:
         09:57:a1:14:be:f9:1c:e9:e1:2a:14:69:c0:5d:e8:08:1b:4f:
         73:8f:fa:84:48:4d:ac:30:a8:32:cf:eb:ca:71:5b:ba:3b:36:
         97:1c:ce:a4:f5:c3:f5:1c:62:b6:37:c8:41:33:e6:b0:c8:aa:
         0d:a9:d5:34
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUAwvydgvIvwduoc/CvOgqF2p0+SYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjUwMDlaFw0yNzA1MTgwMjU1MDlaMDMxMTAvBgNV
BAMTKDREN0JBNDY2QzBCRjA3NTkzRTg4M0ZBNUM0RUM2QjgxODNCOUI4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOYPCxBhFBGK59uLYaEcC2ytR
Ib4QpDuBgUHMmbtUZ88yLJRQYwgi1HPw2UfgakeHqzj8IKHy8ubfXPHKpCPHSeqd
hWo5Zx9uw3m1UkjxYeE3NRi1uW4yoCWpWxX9QSjzoOQSu1duUx75LxRp7SLPq6zE
bbLdnyFWIHblen5+/Objuc7hXBqqaBijjUnxRsvqx/j31V3D22pamk4X7lYnzXGG
22YVyNVK8Q/WYR2DKoOe4tS/pP4YItHOdcoFYgiz9HkDBH/UOeWXvq5WHxU54GbH
viEWlvMx1evwYwfF21YpM7Rh/MBijFYBbKO2AC2mzUu0hlCEW1arGaukq8TrAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUTXukZsC/B1k+iD+lxOxrgYO5uKIwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzNjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATbePjANBgkqhkiG9w0BAQsFAAOCAQEAqvPKkaS9ubrXpx+27FGy7pwhtxPc
B/jBJ7HOVPhMapvF9zoyxC9B6Kzzp2Ep/xxMQv1feit9SS7glqEtTUxD6PLF5o11
Ll8LLoxc8cAgEkZqp/HbXPuDsMYR0nkDCf8ynJIZc81i6wszr/KDzTRXSSPMLCSM
5F0wBoDi5CzC3pqUBFDWcNow6pFzplfIdC5bY1LgCeeBiXjVm54PqXfmRJ1fNfQS
nRJ7mMmXZYJCAz1LcBN2Fh+1tjs9OC/YUU7biv2P0ikzCVehFL75HOnhKhRpwF3o
CBtPc4/6hEhNrDCoMs/rynFbujs2lxzOpPXD9RxitjfIQTPmsMiqDanVNA==
-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client