Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139462.roa
File:                     AS139462.roa (raw, json)
Hash identifier:          0SRe+9ekXXZtfyGd997M585heM28zu8uC1Z52rBB9Yw=
Subject key identifier:   AA:D2:F9:DB:20:22:15:75:DB:0F:71:B4:F2:D4:C3:23:90:74:83:1A
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       3E244F06682F355B90D8D855401AD64DA1FBCF0B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139462.roa
Signing time:             Thu 28 May 2026 16:12:11 +0000
ROA not before:           Thu 28 May 2026 16:07:11 +0000
ROA not after:            Thu 27 May 2027 16:12:11 +0000
asID:                     139462
IP address blocks:        58.42.112.0/20 maxlen: 20
                          111.123.40.0/21 maxlen: 21
                          218.86.240.0/22 maxlen: 22
                          240e:103:8b20::/44 maxlen: 44
                          240e:938:f900::/48 maxlen: 48
                          240e:938:f910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:4f:06:68:2f:35:5b:90:d8:d8:55:40:1a:d6:4d:a1:fb:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 28 16:07:11 2026 GMT
            Not After : May 27 16:12:11 2027 GMT
        Subject: CN=AAD2F9DB20221575DB0F71B4F2D4C3239074831A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:a4:bb:96:4e:63:e0:b2:f8:f4:40:1d:89:
                    19:a7:f8:5b:a2:3c:30:5d:05:30:c4:ec:a2:9f:fe:
                    8a:29:42:28:c8:b5:86:e0:92:a9:9b:a3:97:72:68:
                    85:56:ef:fd:96:a0:33:36:f3:d7:e0:0f:28:43:c6:
                    14:4a:01:27:8c:a5:3b:c2:c9:ae:7c:03:31:a6:c5:
                    f0:aa:dd:92:0c:80:55:c3:86:26:28:d2:51:2e:a3:
                    ab:ee:9d:b5:93:36:57:c7:38:71:cb:3a:31:f2:53:
                    4c:61:71:5c:e7:a5:98:4a:a8:4c:90:00:a4:0d:ed:
                    7a:ca:34:5f:39:3d:84:e2:de:68:b4:a2:c9:9a:24:
                    e8:f9:bd:98:b8:1d:ab:9a:32:09:4a:5a:c5:36:10:
                    cf:73:5c:d9:c0:5d:ff:af:c1:b6:20:64:70:01:32:
                    8e:24:66:88:b2:eb:19:fb:d8:07:d8:79:bc:67:45:
                    f3:45:11:21:58:2d:5f:13:e0:8b:e3:8b:a9:34:70:
                    52:06:c5:94:73:7d:9d:19:73:e0:ad:16:cb:e2:c5:
                    df:87:8f:fb:9a:85:5e:cb:b4:25:dd:99:29:5b:47:
                    2d:7b:3d:7b:5a:a9:dd:01:e6:b0:45:4b:1a:9e:f9:
                    53:f0:ec:e1:d3:36:1b:c8:be:b0:71:3e:d8:12:f7:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:F9:DB:20:22:15:75:DB:0F:71:B4:F2:D4:C3:23:90:74:83:1A
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139462.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.42.112.0/20
                  111.123.40.0/21
                  218.86.240.0/22
                IPv6:
                  240e:103:8b20::/44
                  240e:938:f900::/48
                  240e:938:f910::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:ed:6b:ff:5a:6f:b5:a8:76:22:df:d2:b2:bf:9f:ac:23:7c:
         1c:ce:2e:87:2b:43:44:d7:cc:54:ae:86:49:5c:07:6d:a7:87:
         90:1c:0a:c1:7e:58:99:8f:c1:c8:46:25:f4:57:08:50:77:ca:
         f6:38:a1:8b:6b:74:26:60:ea:59:88:9a:4d:16:63:be:4f:83:
         fd:ae:98:95:f4:2f:68:47:b4:5e:47:e6:51:bc:47:73:7f:24:
         7e:d4:28:76:d1:78:3b:ff:da:8d:54:77:6d:94:59:b0:4c:8e:
         dc:f7:58:45:de:88:5d:13:a6:ae:f3:80:03:0b:07:2d:b5:d8:
         0e:5c:54:15:ed:2a:15:5b:2b:47:73:de:7e:8a:45:24:6b:e4:
         c4:62:bb:1d:34:98:75:47:2c:d4:37:3a:74:ac:6d:68:95:72:
         d0:73:e9:68:1e:87:cf:ba:6a:70:dd:4d:d9:0d:82:59:87:dc:
         6d:4e:1f:d8:1e:12:e8:56:04:f5:fb:20:37:e3:a1:0a:1f:fa:
         dc:66:b2:e4:69:88:aa:7c:75:29:bb:46:61:a6:3e:7f:57:32:
         c2:fe:15:60:3b:8a:10:0d:29:24:4d:b6:ee:cf:8f:bf:46:6e:
         92:e0:b2:14:a1:e0:29:e9:56:05:d6:73:c2:4f:15:ef:13:4d:
         db:1e:80:b7
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUPiRPBmgvNVuQ2NhVQBrWTaH7zwswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDcxMVoX
DTI3MDUyNzE2MTIxMVowMzExMC8GA1UEAxMoQUFEMkY5REIyMDIyMTU3NURCMEY3
MUI0RjJENEMzMjM5MDc0ODMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMoXpLuWTmPgsvj0QB2JGaf4W6I8MF0FMMTsop/+iilCKMi1huCSqZujl3Jo
hVbv/ZagMzbz1+APKEPGFEoBJ4ylO8LJrnwDMabF8KrdkgyAVcOGJijSUS6jq+6d
tZM2V8c4ccs6MfJTTGFxXOelmEqoTJAApA3teso0Xzk9hOLeaLSiyZok6Pm9mLgd
q5oyCUpaxTYQz3Nc2cBd/6/BtiBkcAEyjiRmiLLrGfvYB9h5vGdF80URIVgtXxPg
i+OLqTRwUgbFlHN9nRlz4K0Wy+LF34eP+5qFXsu0Jd2ZKVtHLXs9e1qp3QHmsEVL
Gp75U/Ds4dM2G8i+sHE+2BL34aECAwEAAaOCAhMwggIPMB0GA1UdDgQWBBSq0vnb
ICIVddsPcbTy1MMjkHSDGjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM5NDYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
ME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQEOipwAwQDb3soAwQC2lbwMCEE
AgACMBsDBwQkDgEDiyADBwAkDgk4+QADBwQkDgk4+RAwDQYJKoZIhvcNAQELBQAD
ggEBAJzta/9ab7WodiLf0rK/n6wjfBzOLocrQ0TXzFSuhklcB22nh5AcCsF+WJmP
wchGJfRXCFB3yvY4oYtrdCZg6lmImk0WY75Pg/2umJX0L2hHtF5H5lG8R3N/JH7U
KHbReDv/2o1Ud22UWbBMjtz3WEXeiF0Tpq7zgAMLBy212A5cVBXtKhVbK0dz3n6K
RSRr5MRiux00mHVHLNQ3OnSsbWiVctBz6Wgeh8+6anDdTdkNglmH3G1OH9geEuhW
BPX7IDfjoQof+txmsuRpiKp8dSm7RmGmPn9XMsL+FWA7ihANKSRNtu7Pj79GbpLg
shSh4CnpVgXWc8JPFe8TTdsegLc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:30 2026 by rpki-client