Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39372e302f32342d3234203d3e203535393630.roa
File:                     35342e3232322e39372e302f32342d3234203d3e203535393630.roa (raw, json)
Hash identifier:          veGB7EyvCTeRPfNgYmRxc1XS2xE07AXSk/0gXULJEZs=
Subject key identifier:   71:C9:92:9D:E5:63:3A:D6:5B:20:8A:22:AC:98:5D:A3:07:90:89:EC
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       7DD977858BE0993E88174E03B0B9742D54D515BC
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39372e302f32342d3234203d3e203535393630.roa
Signing time:             Tue 19 May 2026 02:57:07 +0000
ROA not before:           Tue 19 May 2026 02:52:07 +0000
ROA not after:            Tue 18 May 2027 02:57:07 +0000
asID:                     55960
IP address blocks:        54.222.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:77:85:8b:e0:99:3e:88:17:4e:03:b0:b9:74:2d:54:d5:15:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 02:52:07 2026 GMT
            Not After : May 18 02:57:07 2027 GMT
        Subject: CN=71C9929DE5633AD65B208A22AC985DA3079089EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:12:d4:26:50:ab:61:02:7f:50:c4:c6:60:
                    51:b9:5c:f4:84:e6:de:17:73:75:02:06:df:a9:0f:
                    08:08:5f:45:02:3b:8d:b9:8c:00:90:5d:fd:64:ee:
                    bf:56:5a:2e:1c:84:11:b2:b9:0a:ee:6b:d8:c7:28:
                    77:db:e8:0e:03:25:4a:a3:8c:d2:e0:de:37:f0:9c:
                    7a:ed:53:2d:f0:57:53:15:3d:9f:5d:b7:2d:fa:7a:
                    cf:a6:d8:61:10:37:ab:f9:2c:1c:22:c4:fa:d8:93:
                    48:3d:58:96:f7:8a:50:34:d1:c0:06:52:01:fb:ab:
                    1d:7b:b7:92:61:8c:b0:a8:d6:9f:93:6d:ed:fc:eb:
                    80:db:9c:f1:00:00:bc:55:b5:c6:ff:6d:f4:40:0b:
                    c0:3c:a8:21:91:29:25:82:f8:ea:ec:34:d8:a9:5d:
                    f9:64:c1:14:4c:c2:6f:c3:fc:c6:e8:19:07:c4:3c:
                    c0:ed:f1:7a:16:19:ba:b4:f4:85:90:0c:3f:cd:69:
                    9f:54:d9:81:00:e5:70:1d:66:81:8f:1c:5e:f3:36:
                    a1:c9:7f:4a:40:dd:13:7c:ed:1e:33:f1:b2:60:37:
                    b1:b0:32:6c:9c:5a:38:26:4c:eb:e5:bd:7d:d0:36:
                    e8:59:f6:97:04:1c:5e:bd:eb:ca:d7:4b:56:62:ac:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C9:92:9D:E5:63:3A:D6:5B:20:8A:22:AC:98:5D:A3:07:90:89:EC
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/35342e3232322e39372e302f32342d3234203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.222.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:fc:96:13:21:26:3c:5a:6d:c7:8c:15:91:31:6d:17:81:
         e7:33:b8:e4:be:71:19:81:03:7a:1c:f4:53:a3:27:33:88:2d:
         08:88:5e:d1:e1:8f:d1:d6:f3:6c:e8:6d:51:d0:ad:02:73:7b:
         31:b5:ad:2f:4f:ff:22:77:6e:5f:1e:e8:35:13:f8:a2:d7:82:
         88:54:e5:76:17:1b:a2:7e:27:46:ee:72:ec:27:f9:fb:f7:b5:
         38:a6:2d:a1:fc:69:93:43:eb:40:d0:2a:ef:7b:ae:e7:c9:2b:
         87:09:d2:38:d2:bd:3d:63:d9:a4:cc:e6:17:dd:76:93:77:2d:
         9c:b1:da:0b:7f:5e:72:5e:09:25:97:ee:a8:12:7d:3d:c8:94:
         ba:52:44:ad:b0:12:5b:95:ab:1c:db:a6:64:a2:61:4b:a8:ee:
         60:a0:e7:ee:33:d5:14:63:e0:da:aa:51:d0:b7:93:c6:38:20:
         f0:c9:37:ab:f8:e0:fa:db:5c:24:30:3b:60:32:76:6b:a3:46:
         30:7f:ce:84:b1:ce:64:0f:70:96:09:48:39:9a:1f:19:36:75:
         32:bc:73:f4:1c:5a:27:f1:72:5d:b1:0c:69:a2:76:df:bc:6f:
         df:ee:27:3c:79:e1:fa:4e:0a:9d:7d:39:ee:e2:54:37:86:ba:
         0e:cc:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:23:13 2026 by rpki-client