Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e36342e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e36342e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          j46CcDBXdlqO/m3VQnhBprIx/2/FBXPWO76C5E4QTxQ=
Subject key identifier:   86:BA:B6:11:4D:37:3B:54:A1:91:81:1B:19:B5:1E:38:50:61:94:57
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       17BCB696481C996C6D2709931E712932DD35DF3E
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e36342e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:55:09 +0000
ROA not before:           Tue 19 May 2026 02:50:09 +0000
ROA not after:            Tue 18 May 2027 02:55:09 +0000
asID:                     55960
IP address blocks:        54.222.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:b6:96:48:1c:99:6c:6d:27:09:93:1e:71:29:32:dd:35:df:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:50:09 2026 GMT
            Not After : May 18 02:55:09 2027 GMT
        Subject: CN=86BAB6114D373B54A191811B19B51E3850619457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:26:4f:57:5e:42:fb:46:4e:05:da:49:83:
                    dd:72:d8:fe:6c:de:e1:a5:30:da:3c:e3:11:a9:4d:
                    68:80:c8:e6:6a:60:f5:61:e2:60:80:ed:c5:74:ca:
                    b4:ab:91:59:2b:41:a6:74:7a:73:d7:76:ce:b6:82:
                    d8:73:0c:30:6f:d8:65:69:f5:e3:b5:96:d9:8e:c1:
                    46:c1:b8:07:28:67:0c:f5:b9:48:4a:e9:55:e3:b5:
                    e9:94:8c:6d:af:53:4a:e2:bc:1f:7f:54:45:b0:4e:
                    15:18:f6:4c:75:05:1a:06:73:4e:5c:30:32:51:98:
                    15:93:a9:6d:fd:b7:2a:01:16:09:9a:ae:f3:ac:19:
                    09:af:ac:5f:ce:b5:6b:6d:4d:05:c0:ea:7e:03:04:
                    ee:5e:f0:cd:7d:3e:14:29:e6:e8:25:66:88:fc:db:
                    4f:7c:60:17:e3:15:54:90:a2:82:7c:28:dd:01:40:
                    e8:9d:37:60:8a:08:a3:0d:82:b4:41:eb:b8:f6:cb:
                    76:d7:33:3d:2b:94:8e:5d:d0:35:a9:34:24:a7:1b:
                    cf:e6:ca:1e:78:e9:4e:b5:dd:16:f1:12:34:fa:74:
                    92:fa:69:ad:6c:95:d0:28:43:72:e8:2d:be:27:1d:
                    c8:4e:46:78:01:04:bd:a3:ec:0d:f5:85:78:39:c7:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BA:B6:11:4D:37:3B:54:A1:91:81:1B:19:B5:1E:38:50:61:94:57
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e36342e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e4:ef:f0:84:79:47:b4:8c:ac:1b:d9:7a:dd:78:a8:2e:0e:
         c9:17:fc:6d:06:1f:48:f4:8b:75:91:9d:b6:bb:40:bf:3d:8c:
         ad:f3:8b:b1:e7:ac:a8:45:82:15:9d:3a:20:ab:03:e6:7b:2c:
         a1:4f:c0:4f:e4:ff:95:fe:3b:1d:07:d2:26:4d:d0:67:cb:ad:
         ec:5d:42:46:7c:a7:39:f9:84:c2:f0:7d:5a:e2:21:98:b3:b5:
         e7:92:6a:d1:9c:61:55:30:3e:be:16:22:85:2a:48:ce:22:a1:
         25:9f:0d:09:a2:0c:33:2b:db:78:43:24:4a:be:7f:7b:50:c0:
         e1:28:22:8e:9f:2a:13:ff:34:32:ee:d3:70:a3:45:3d:44:64:
         21:71:fa:a4:4e:d2:4a:b1:b8:04:05:87:9d:6f:7a:87:fa:93:
         9a:b6:53:4e:53:a4:c4:bc:82:24:d8:33:9f:95:ea:88:29:37:
         06:aa:c1:3e:97:c1:b0:0b:dd:5e:3f:27:df:06:97:1c:82:58:
         a2:9f:a3:d8:37:29:e5:aa:8a:7c:29:4e:07:24:bd:c5:6d:2f:
         90:54:fd:b5:60:49:8b:f4:84:05:07:13:7e:82:e1:5c:79:31:
         15:c4:b3:f2:0a:fc:f2:8c:5a:29:6f:f6:e3:77:52:48:0a:6c:
         85:71:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:51 2026 by rpki-client