Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38382e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e38382e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          XdbhkFc77Wwe3si810M6raYNDYKq51CXCnGfZPmOy8o=
Subject key identifier:   FF:55:1D:AB:94:FE:6E:7B:74:98:8A:50:BF:55:8A:92:73:53:80:F3
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       3146F6E17EB9AD3241E9853B2966C0710549F2F1
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38382e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:57:07 +0000
ROA not before:           Tue 19 May 2026 02:52:07 +0000
ROA not after:            Tue 18 May 2027 02:57:07 +0000
asID:                     55960
IP address blocks:        54.222.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:f6:e1:7e:b9:ad:32:41:e9:85:3b:29:66:c0:71:05:49:f2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:52:07 2026 GMT
            Not After : May 18 02:57:07 2027 GMT
        Subject: CN=FF551DAB94FE6E7B74988A50BF558A92735380F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:0c:ac:0f:80:a6:52:6d:b2:b7:42:79:6d:
                    18:47:24:4d:d5:d9:41:5d:5a:ed:2c:c6:1f:a2:1e:
                    af:00:8f:dc:24:ce:d5:34:26:57:7f:96:1e:b3:ca:
                    f8:bc:7f:50:b7:3a:1c:29:b0:6b:5a:93:75:6e:f1:
                    dd:35:83:6c:0b:01:7b:96:a9:cf:e6:8e:07:0c:07:
                    07:85:65:62:1f:31:64:19:eb:b1:02:36:e9:14:4e:
                    0f:87:7f:f5:ad:52:73:ef:7a:d7:8d:9b:d1:24:03:
                    7d:8f:59:c7:1c:19:03:7a:37:f8:fc:62:0f:3e:79:
                    92:20:cc:87:76:5b:56:2a:36:25:8f:d2:2a:32:72:
                    65:5e:40:cf:e3:f7:c1:56:f4:1e:6f:44:f9:f7:65:
                    42:05:cc:48:40:15:c6:0d:e9:ea:03:07:64:26:24:
                    6c:54:6b:c1:17:75:00:09:fd:0a:2c:0d:19:8d:d6:
                    e6:66:8d:bf:28:f3:15:ab:b6:3e:71:48:74:e7:57:
                    69:f9:2f:98:43:4e:c7:b2:3b:e0:0c:35:44:72:8f:
                    11:4a:17:49:69:8a:df:55:fb:ad:c2:8d:ea:f7:84:
                    26:46:1a:7a:93:4f:76:70:1e:f4:38:31:94:e1:fb:
                    e5:e9:9b:a6:56:d3:da:5a:00:b0:66:32:a5:2d:03:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:1D:AB:94:FE:6E:7B:74:98:8A:50:BF:55:8A:92:73:53:80:F3
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e38382e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d5:18:45:91:f9:86:2c:f9:e4:61:cb:41:dd:5a:3d:3c:50:
         03:bf:a6:78:07:6e:9d:cd:6a:9f:5b:17:f1:11:db:68:88:86:
         de:7a:82:9d:0b:5c:42:5c:a7:97:76:ec:33:b1:de:b1:9f:d3:
         71:fd:4a:a7:68:c1:6b:c1:fd:53:67:46:d8:28:e9:98:4f:2c:
         fb:f9:5e:26:38:a8:c8:53:ca:75:59:88:65:e4:04:e7:3d:12:
         7c:74:b1:94:ab:6b:cd:fd:9e:2c:8b:26:5e:4e:1c:47:bb:e0:
         60:35:e1:68:10:5f:e6:8d:53:3d:37:c8:14:d5:d1:f5:0c:34:
         5a:d1:a4:e7:ba:e2:f0:1d:60:ec:8b:81:32:5e:e0:e5:e7:e4:
         d7:e0:2f:c0:71:6e:4b:43:eb:04:31:a7:01:6f:6c:01:c8:e0:
         42:11:6c:24:b6:52:45:e6:7d:3b:b0:b8:3e:30:4f:6b:b7:c3:
         83:6d:a1:a7:19:35:f7:62:28:17:36:58:85:cc:aa:92:ec:35:
         8e:cd:22:ed:52:79:d5:23:94:8c:15:f0:7c:07:73:7f:76:eb:
         04:04:ef:08:6f:55:82:cf:89:e2:2d:2b:fa:b0:8f:34:d5:99:
         49:a3:c4:41:ba:de:86:7d:1a:d3:69:66:87:5c:0a:f9:12:2a:
         15:32:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:23:19 2026 by rpki-client