Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39302e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e39302e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          zGGMq3+OGl5tSwZX+0xHYhSSLDv61IMDbGmcpPaBMts=
Subject key identifier:   DC:D0:CF:50:96:FC:36:58:03:D5:1E:AE:2C:9A:D6:2A:5F:E5:9F:D0
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       119C4DB074594B45A23733720D0EF4D228315D0E
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39302e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:57:07 +0000
ROA not before:           Tue 19 May 2026 02:52:07 +0000
ROA not after:            Tue 18 May 2027 02:57:07 +0000
asID:                     55960
IP address blocks:        54.222.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9c:4d:b0:74:59:4b:45:a2:37:33:72:0d:0e:f4:d2:28:31:5d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:52:07 2026 GMT
            Not After : May 18 02:57:07 2027 GMT
        Subject: CN=DCD0CF5096FC365803D51EAE2C9AD62A5FE59FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:1b:4b:18:a6:52:e4:90:4d:f5:94:cd:ee:
                    00:4a:3c:c3:81:eb:a8:31:29:13:2a:d5:03:bc:a3:
                    c5:ee:79:5a:6a:e9:79:fe:ac:18:ff:62:54:fb:12:
                    08:96:69:d6:3c:eb:98:ec:cc:c4:f3:aa:bc:c7:28:
                    44:a2:9a:5e:5e:68:37:8d:f3:19:d6:36:06:e2:5c:
                    a0:96:7b:48:0c:63:dc:9e:0d:ec:dd:e8:8c:66:a7:
                    83:49:e3:6c:a0:be:4c:d4:de:1c:55:23:b2:45:e9:
                    54:f3:8c:de:af:13:b6:69:da:03:42:24:c1:da:2f:
                    78:88:6c:5e:be:98:30:5d:99:1c:26:b9:e7:68:25:
                    98:96:93:b4:86:23:3c:e1:34:0d:ec:ed:ed:f1:4f:
                    6f:75:eb:32:9e:1b:74:f6:79:b1:d3:76:c5:77:01:
                    e5:53:9b:22:53:df:cd:81:99:65:03:8b:f6:cc:22:
                    1e:87:b6:6e:e8:9e:cc:aa:29:95:32:d3:fe:bc:56:
                    dd:ee:bd:9b:32:ee:6d:8d:9a:92:2a:b8:da:dd:2b:
                    d5:4f:7f:16:38:be:85:0b:21:60:c6:dc:61:c0:09:
                    d2:1c:ba:a4:f7:ff:5c:6f:d4:9d:e6:b8:0c:04:08:
                    6c:50:c0:b9:66:05:a3:c4:b2:4c:cf:77:4c:08:a0:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D0:CF:50:96:FC:36:58:03:D5:1E:AE:2C:9A:D6:2A:5F:E5:9F:D0
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39302e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:39:d5:d8:b3:2b:a1:45:81:6f:b4:99:a1:3d:05:70:98:
         a5:c9:ad:28:83:21:6f:8e:b0:39:8b:bd:61:5e:05:9d:cf:82:
         7d:c5:7a:60:b9:fa:17:f0:d9:69:eb:be:28:f9:26:9d:d9:41:
         07:41:b5:52:b0:1c:6e:1f:3d:36:55:f9:af:91:ef:b0:f4:0b:
         13:ec:29:43:a1:5b:7f:87:fd:57:1a:fc:37:00:0c:c0:42:76:
         95:7f:69:ab:9f:90:ac:a8:43:be:67:b9:ca:60:9d:ea:3a:2c:
         67:2a:cf:3a:33:e4:90:b2:85:ca:16:eb:63:be:66:cc:90:59:
         62:24:87:f7:e2:30:85:4b:b5:f7:ed:2d:da:a3:3e:3a:62:27:
         79:7b:68:99:38:af:a9:10:46:53:45:fe:04:6a:3f:63:f3:01:
         15:ee:2b:dd:ed:4f:cf:38:25:ee:93:f2:3a:fc:96:63:03:53:
         7e:7b:17:8d:e5:3f:f6:c4:51:2b:9d:cb:68:c8:02:12:c4:3d:
         3d:61:c7:66:61:a7:d5:4d:9c:b1:4b:ab:6d:19:86:d3:5c:b8:
         65:30:86:31:36:5b:fb:68:4b:87:dc:5e:6a:cd:9d:95:b1:b3:
         eb:b3:d8:52:64:65:23:92:21:1f:95:a3:a3:19:f3:42:6a:e4:
         b9:51:ac:0d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEZxNsHRZS0WiNzNyDQ700igxXQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjUyMDdaFw0yNzA1MTgwMjU3MDdaMDMxMTAvBgNV
BAMTKERDRDBDRjUwOTZGQzM2NTgwM0Q1MUVBRTJDOUFENjJBNUZFNTlGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwBtLGKZS5JBN9ZTN7gBKPMOB
66gxKRMq1QO8o8XueVpq6Xn+rBj/YlT7EgiWadY865jszMTzqrzHKESiml5eaDeN
8xnWNgbiXKCWe0gMY9yeDezd6Ixmp4NJ42ygvkzU3hxVI7JF6VTzjN6vE7Zp2gNC
JMHaL3iIbF6+mDBdmRwmuedoJZiWk7SGIzzhNA3s7e3xT2916zKeG3T2ebHTdsV3
AeVTmyJT382BmWUDi/bMIh6Htm7onsyqKZUy0/68Vt3uvZsy7m2NmpIquNrdK9VP
fxY4voULIWDG3GHACdIcuqT3/1xv1J3muAwECGxQwLlmBaPEskzPd0wIoO4PAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU3NDPUJb8NlgD1R6uLJrWKl/ln9AwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADbeWjANBgkqhkiG9w0BAQsFAAOCAQEALcE51dizK6FFgW+0maE9BXCYpcmt
KIMhb46wOYu9YV4Fnc+CfcV6YLn6F/DZaeu+KPkmndlBB0G1UrAcbh89NlX5r5Hv
sPQLE+wpQ6Fbf4f9Vxr8NwAMwEJ2lX9pq5+QrKhDvme5ymCd6josZyrPOjPkkLKF
yhbrY75mzJBZYiSH9+IwhUu19+0t2qM+OmIneXtomTivqRBGU0X+BGo/Y/MBFe4r
3e1Pzzgl7pPyOvyWYwNTfnsXjeU/9sRRK53LaMgCEsQ9PWHHZmGn1U2csUurbRmG
01y4ZTCGMTZb+2hLh9xeas2dlbGz67PYUmRlI5IhH5WjoxnzQmrkuVGsDQ==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:13 2026 by rpki-client