Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140083.roa
File:                     AS140083.roa (raw, json)
Hash identifier:          8HGusnJ1lKq+o1Zg5e224JIowVcQOMNbZguV85bM+FI=
Subject key identifier:   C5:EC:AA:BB:7D:27:02:54:7F:A4:72:DB:FE:A8:C6:A0:61:D8:C8:F0
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       4CE1B3C7F9527DAF459604CC9188F8BF80C98CD2
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140083.roa
Signing time:             Wed 10 Jun 2026 16:04:47 +0000
ROA not before:           Wed 10 Jun 2026 15:59:47 +0000
ROA not after:            Wed 09 Jun 2027 16:04:47 +0000
asID:                     140083
IP address blocks:        61.191.48.0/24 maxlen: 24
                          117.66.0.0/20 maxlen: 20
                          117.66.0.0/22 maxlen: 22
                          117.66.4.0/22 maxlen: 22
                          117.68.0.0/19 maxlen: 19
                          117.68.8.0/24 maxlen: 24
                          117.68.9.0/24 maxlen: 24
                          117.71.0.0/22 maxlen: 22
                          240e:6:d130::/44 maxlen: 44
                          240e:95a:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e1:b3:c7:f9:52:7d:af:45:96:04:cc:91:88:f8:bf:80:c9:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: Jun 10 15:59:47 2026 GMT
            Not After : Jun  9 16:04:47 2027 GMT
        Subject: CN=C5ECAABB7D2702547FA472DBFEA8C6A061D8C8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:c0:24:38:f5:33:c3:89:75:ea:cb:76:c5:
                    34:55:6a:14:9f:d7:ed:63:02:8c:31:82:de:dc:a9:
                    4e:30:e0:ff:54:ad:56:c1:38:41:1f:16:ba:8b:53:
                    16:8c:09:70:88:71:b1:a7:a5:99:2e:26:fc:49:dd:
                    65:b0:02:58:a6:ad:81:27:3c:3c:93:fa:a4:13:16:
                    4e:9a:b1:e0:dc:93:e7:4c:c7:78:e0:be:70:58:b1:
                    46:70:c7:08:34:7e:de:7e:22:ac:e7:92:c3:dc:40:
                    17:ea:77:ac:d4:9d:73:06:80:cd:70:5a:c9:4a:6e:
                    ca:57:ec:7b:e6:d7:47:c3:37:b2:27:67:e9:7d:64:
                    b8:91:46:6b:b8:b7:d8:40:39:6f:80:25:06:9b:69:
                    5a:79:76:79:46:ff:3e:be:35:28:9c:64:78:4d:7f:
                    be:48:06:d8:ad:85:88:06:44:bd:86:6d:36:30:61:
                    77:5c:66:3d:f8:71:d6:05:c7:47:69:61:86:e0:68:
                    bc:aa:c4:7e:7c:31:32:33:e8:46:74:10:61:d7:0b:
                    87:cf:1c:72:79:24:a5:de:a2:15:95:22:63:a8:ef:
                    73:70:9f:2d:f1:58:ba:7f:5e:ef:f9:c6:04:47:fd:
                    8a:45:ae:41:96:1f:a7:c4:c5:24:74:93:f6:68:65:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:AA:BB:7D:27:02:54:7F:A4:72:DB:FE:A8:C6:A0:61:D8:C8:F0
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.191.48.0/24
                  117.66.0.0/20
                  117.68.0.0/19
                  117.71.0.0/22
                IPv6:
                  240e:6:d130::/44
                  240e:95a:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:75:2e:6d:20:d7:61:3d:ca:ad:26:20:08:26:f2:f7:d6:
         c3:fb:b2:ad:80:1b:5e:d9:b2:1c:81:44:e8:bc:8b:9d:41:e2:
         a1:ec:b3:1d:0e:29:79:cf:e9:44:eb:4f:dc:71:9f:c0:81:38:
         20:70:f6:84:92:5f:ce:84:77:13:94:78:3a:7c:cb:44:6e:a7:
         2b:fe:43:52:0e:e0:93:9a:cf:21:c2:4d:6a:e7:16:44:cf:2f:
         2b:be:df:ad:c2:35:84:1d:27:29:e9:bb:86:35:cc:a1:fb:17:
         b2:c1:ec:4d:81:d1:fe:23:c7:76:2f:a4:6f:b5:4b:7d:98:fc:
         ea:b2:70:cb:bf:f4:2b:14:2e:5b:f9:dd:ca:a6:fc:98:f5:9d:
         2d:74:ca:be:33:5f:be:72:0f:9b:4c:bf:4e:eb:36:b5:93:d0:
         7c:6e:79:f0:d6:8e:0d:18:6d:c2:d0:30:70:fc:47:c8:c6:63:
         5e:61:13:64:17:b6:a2:50:1d:e8:11:7f:25:38:7c:72:f0:55:
         f5:e9:0e:dd:0c:bb:c9:ed:6b:43:0c:9d:f3:9d:51:b8:83:e9:
         d5:20:c1:f1:93:41:58:4b:aa:fb:fb:b8:2e:d0:89:e8:fe:34:
         77:a6:ea:eb:51:28:8c:59:0f:e5:e6:75:2e:9f:7d:b1:a0:c3:
         f4:fa:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:39 2026 by rpki-client