Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39362e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e39362e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          6vBHXptDrB4ppoveDI0zKeqgYm+pna1vkZ7+QhjF1OE=
Subject key identifier:   83:9C:54:8F:55:A9:A0:DC:53:01:51:D7:7B:84:20:A7:1A:80:15:85
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       31F4388BAAFD7CF1B25AA774CC3335AAA8057E77
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39362e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:57:07 +0000
ROA not before:           Tue 19 May 2026 02:52:07 +0000
ROA not after:            Tue 18 May 2027 02:57:07 +0000
asID:                     55960
IP address blocks:        54.222.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:38:8b:aa:fd:7c:f1:b2:5a:a7:74:cc:33:35:aa:a8:05:7e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:52:07 2026 GMT
            Not After : May 18 02:57:07 2027 GMT
        Subject: CN=839C548F55A9A0DC530151D77B8420A71A801585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:2a:dc:9f:93:c0:b3:71:70:0f:56:79:e1:a7:
                    ec:a5:f5:1e:22:b5:d3:13:6b:db:85:f8:08:5d:f9:
                    c5:5b:73:db:85:56:15:4e:4f:73:60:f9:c6:93:61:
                    0a:90:07:25:ad:30:51:46:a3:1f:fb:82:77:c4:e9:
                    e2:86:52:6d:c1:78:19:84:09:48:36:4b:ba:fe:91:
                    13:3c:14:5b:36:42:22:03:26:89:57:75:32:16:10:
                    0d:3d:8b:93:b4:8a:24:ce:97:9c:4a:70:69:d5:86:
                    48:0f:5f:dd:70:72:8e:8d:9d:61:13:59:e0:32:e6:
                    8d:c6:2c:f2:25:53:8f:bb:ae:44:1d:61:4d:e9:53:
                    94:1f:61:de:7b:24:25:60:d2:ce:a7:4b:71:51:34:
                    2a:a8:45:b1:56:1d:f7:fc:fa:f8:ee:fb:f0:30:2b:
                    e3:4a:2a:ca:43:d5:23:ca:7e:5a:4c:69:c2:d4:0e:
                    86:94:8e:9c:0b:ac:12:62:b0:8a:fd:c2:14:e6:2c:
                    c8:59:32:85:fa:3b:28:2b:0d:86:bc:1b:79:61:4e:
                    4a:4d:e3:9c:fb:46:0d:c3:9d:4b:69:13:db:3f:da:
                    9a:e3:d7:76:76:48:ec:62:bd:ca:c0:9b:36:a1:1a:
                    3f:4c:f7:8d:19:28:fc:0c:30:7a:c0:d5:7a:c2:5d:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9C:54:8F:55:A9:A0:DC:53:01:51:D7:7B:84:20:A7:1A:80:15:85
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39362e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:21:57:81:63:c6:87:77:88:65:3c:89:70:fa:53:d4:03:
         92:ef:b8:c4:6c:61:f4:c3:8f:32:aa:76:1e:5b:32:1a:ed:96:
         6a:b2:23:d9:3c:ca:7d:47:e9:a1:91:a2:74:a7:56:15:cb:8f:
         cf:b7:20:e1:3f:06:59:bb:df:af:56:2f:e8:5f:76:dd:43:08:
         c0:1b:a0:18:f7:3c:5a:3f:ce:0c:5d:39:75:fb:b1:c6:57:53:
         a7:cd:cb:7b:c5:1a:36:85:fe:1a:07:cb:9d:57:6e:28:f9:d0:
         a6:60:90:f0:86:a2:1d:1a:84:f1:0e:26:7b:8b:bb:b0:22:d1:
         a0:1f:a4:63:db:57:c7:39:f5:1b:92:da:77:bf:56:4b:ec:c1:
         22:46:f4:15:43:dc:3a:84:c5:34:4b:86:bf:b5:72:91:b9:dc:
         25:df:cc:dd:ef:16:52:0f:5f:0a:2c:41:97:de:3c:bf:0e:c9:
         c1:81:be:1d:80:23:80:84:51:44:a9:06:0f:42:98:9b:ce:6b:
         83:6f:21:bc:0e:63:a6:df:d3:07:3f:00:32:1f:e7:23:f6:c7:
         af:1f:fd:c2:cf:0a:5c:e9:10:0d:92:74:ef:c0:b3:0a:60:c7:
         d5:f5:70:e5:d5:0f:41:be:8b:86:a4:a7:75:0b:16:6f:c6:63:
         6c:5f:0a:85
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMfQ4i6r9fPGyWqd0zDM1qqgFfncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC
MkNFRUM1RjAeFw0yNjA1MTkwMjUyMDdaFw0yNzA1MTgwMjU3MDdaMDMxMTAvBgNV
BAMTKDgzOUM1NDhGNTVBOUEwREM1MzAxNTFENzdCODQyMEE3MUE4MDE1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7Ktyfk8CzcXAPVnnhp+yl9R4i
tdMTa9uF+Ahd+cVbc9uFVhVOT3Ng+caTYQqQByWtMFFGox/7gnfE6eKGUm3BeBmE
CUg2S7r+kRM8FFs2QiIDJolXdTIWEA09i5O0iiTOl5xKcGnVhkgPX91wco6NnWET
WeAy5o3GLPIlU4+7rkQdYU3pU5QfYd57JCVg0s6nS3FRNCqoRbFWHff8+vju+/Aw
K+NKKspD1SPKflpMacLUDoaUjpwLrBJisIr9whTmLMhZMoX6OygrDYa8G3lhTkpN
45z7Rg3DnUtpE9s/2prj13Z2SOxivcrAmzahGj9M940ZKPwMMHrA1XrCXUGlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUg5xUj1WpoNxTAVHXe4QgpxqAFYUwHwYDVR0j
BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy
OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3LzAvMzUzNDJlMzIzMjMy
MmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADbeYDANBgkqhkiG9w0BAQsFAAOCAQEAV28hV4Fjxod3iGU8iXD6U9QDku+4
xGxh9MOPMqp2HlsyGu2WarIj2TzKfUfpoZGidKdWFcuPz7cg4T8GWbvfr1Yv6F92
3UMIwBugGPc8Wj/ODF05dfuxxldTp83Le8UaNoX+GgfLnVduKPnQpmCQ8IaiHRqE
8Q4me4u7sCLRoB+kY9tXxzn1G5Lad79WS+zBIkb0FUPcOoTFNEuGv7VykbncJd/M
3e8WUg9fCixBl948vw7JwYG+HYAjgIRRRKkGD0KYm85rg28hvA5jpt/TBz8AMh/n
I/bHrx/9ws8KXOkQDZJ078CzCmDH1fVw5dUPQb6LhqSndQsWb8ZjbF8KhQ==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:12 2026 by rpki-client