Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38302e302f32312d3231203d3e203535393630.roa
File:                     35342e3232322e38302e302f32312d3231203d3e203535393630.roa (raw, json)
Hash identifier:          5l83DrR/jGcEsyuqhPQekkokvJHkfiSOpHG048vzJJQ=
Subject key identifier:   BB:F4:07:DE:BA:38:B4:22:D3:C3:46:DC:93:E8:C0:5E:B5:92:D1:DF
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       54EA8B71E25766AF6B89A5853C52B36E562ABC8B
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38302e302f32312d3231203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:55:09 +0000
ROA not before:           Tue 19 May 2026 02:50:09 +0000
ROA not after:            Tue 18 May 2027 02:55:09 +0000
asID:                     55960
IP address blocks:        54.222.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ea:8b:71:e2:57:66:af:6b:89:a5:85:3c:52:b3:6e:56:2a:bc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:50:09 2026 GMT
            Not After : May 18 02:55:09 2027 GMT
        Subject: CN=BBF407DEBA38B422D3C346DC93E8C05EB592D1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:e1:c8:de:32:55:b4:f0:57:c8:30:6c:4f:
                    79:e9:ec:fd:4f:74:eb:3b:07:9f:5c:50:c9:4b:08:
                    3d:a3:90:00:e9:a3:a6:39:5c:5f:96:ce:d9:90:e2:
                    4d:e6:64:b0:7a:69:80:6b:ee:2a:a5:f9:ec:93:76:
                    0f:64:f3:59:f9:7e:b8:51:3b:55:3c:39:24:a6:d4:
                    b1:f6:18:69:5a:3d:72:17:4e:e0:32:42:c3:bb:e3:
                    70:43:6e:b2:32:6b:ee:77:f5:20:8e:cf:e5:8e:6d:
                    1e:b1:3a:ca:11:df:d0:18:e2:52:b6:b7:be:2d:05:
                    8e:3b:6a:c0:fc:b8:28:3a:ad:7c:78:0a:93:0f:35:
                    7b:79:2d:e9:52:20:3e:f4:fb:ca:ab:dd:de:90:ed:
                    42:d1:98:f1:94:18:bc:80:0a:59:a3:b3:8e:32:2e:
                    7c:0d:4b:14:ed:bf:59:39:80:2b:dd:e0:d2:95:c8:
                    11:9c:bf:cd:77:46:4a:8c:3b:5e:0c:31:e3:c9:c1:
                    e1:e0:2c:a2:a2:61:a6:c9:14:41:81:5b:3f:d9:2a:
                    02:3b:1b:92:04:fb:b3:8c:ee:71:33:a2:19:27:46:
                    c8:04:19:be:5e:49:bd:b5:4b:a1:11:aa:1e:be:94:
                    06:8d:62:ea:a7:3a:2a:ad:63:75:22:c1:2f:db:53:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F4:07:DE:BA:38:B4:22:D3:C3:46:DC:93:E8:C0:5E:B5:92:D1:DF
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38302e302f32312d3231203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:05:95:78:3f:7d:c3:90:53:c8:1b:a2:ee:58:5c:1e:ca:
         3e:ad:ac:f6:79:47:9e:ad:46:30:75:82:e8:a0:d6:ee:54:9e:
         37:31:1f:63:eb:6b:73:7f:cb:75:b6:42:b2:42:9f:62:ca:5b:
         87:da:37:90:14:af:fb:21:33:13:63:d0:a0:35:a1:fe:92:92:
         de:9e:16:a7:4b:60:8b:e2:d5:ab:c3:01:7b:a6:3a:97:43:71:
         80:da:e9:7c:c0:cf:b5:67:12:bf:e4:de:03:b3:f2:5b:6e:a5:
         55:e4:7a:51:3f:2f:b6:3d:40:52:4a:3c:bc:8f:ac:17:79:a9:
         ca:b7:87:7b:d8:9f:8e:17:d2:23:a9:b3:17:fd:37:53:c4:52:
         d2:17:18:58:e0:07:a8:2f:2b:73:5b:0f:55:a9:f5:25:b4:52:
         dc:8c:82:3f:41:fa:4b:75:73:d1:77:b1:60:f4:d6:21:e1:1b:
         57:bd:9a:0f:98:a2:6e:59:aa:91:1d:5a:0d:13:ee:fe:4b:90:
         99:51:36:1d:a3:31:03:d7:19:88:a2:a7:d0:ba:c2:a3:db:23:
         ae:36:cc:af:01:95:fd:01:cf:fe:ba:6a:5e:7a:b3:94:a1:24:
         a5:61:33:24:7d:cd:41:bc:f4:43:17:4a:0b:07:ad:47:13:20:
         bd:ac:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:52 2026 by rpki-client