Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140348.roa
File:                     AS140348.roa (raw, json)
Hash identifier:          lzm42HBEwka9PyeM/O0Ikbm0q1yIHr8zHuylt/X4gKw=
Subject key identifier:   39:7C:86:2B:78:40:16:E8:BA:4F:37:9A:DA:17:EE:34:16:37:85:D3
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       468D8D8DDC03CCC1C591273D5C4BB8DD572EC461
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140348.roa
Signing time:             Tue 26 May 2026 16:21:51 +0000
ROA not before:           Tue 26 May 2026 16:16:51 +0000
ROA not after:            Tue 25 May 2027 16:21:51 +0000
asID:                     140348
IP address blocks:        240e:44d:6340::/42 maxlen: 42
                          240e:44d:6440::/42 maxlen: 42
                          240e:44d:6540::/42 maxlen: 42
                          240e:44d:6640::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:8d:8d:dc:03:cc:c1:c5:91:27:3d:5c:4b:b8:dd:57:2e:c4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 26 16:16:51 2026 GMT
            Not After : May 25 16:21:51 2027 GMT
        Subject: CN=397C862B784016E8BA4F379ADA17EE34163785D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:d9:b6:df:08:24:9a:0a:08:ad:3a:bb:ea:
                    48:de:8a:db:89:72:07:e2:22:89:3a:e9:ad:d1:1e:
                    d7:86:dc:3a:63:56:42:53:ea:7b:31:67:f3:bd:fd:
                    ff:20:fa:7f:ea:c2:ec:40:ab:5c:a6:ac:86:b2:8f:
                    3e:a8:3f:ef:b5:80:66:e2:82:c6:c9:ee:79:d1:e4:
                    94:1a:05:a2:c8:35:c5:5a:0f:d0:8a:a9:c5:c6:0f:
                    44:ca:04:33:ff:35:71:5d:ab:5f:cb:e4:fb:14:9d:
                    1f:5b:a6:8f:b7:1c:5d:ee:ca:7f:d9:df:b6:35:53:
                    24:d1:b8:fb:e4:fb:9c:bd:71:53:d6:85:7e:6f:8c:
                    fa:4a:c8:bb:00:4a:70:25:13:40:b7:7f:fb:09:21:
                    c2:22:3f:83:82:6c:ec:44:49:15:bd:be:36:63:c6:
                    d2:69:69:11:4a:6f:1c:40:18:d6:98:bf:1c:9f:40:
                    1a:0b:de:0d:9a:71:f7:b2:bb:30:56:bc:f9:78:8e:
                    47:71:26:62:42:ef:46:bb:fa:0d:d1:b0:57:a5:eb:
                    e7:32:1d:b1:5d:a0:74:3d:24:69:87:f4:ee:61:c0:
                    51:c6:25:8f:f2:1c:b8:85:ab:2c:ea:0a:24:bc:0f:
                    c9:48:6a:1f:7a:f3:0c:f6:29:9f:d4:3a:9e:d5:d4:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:86:2B:78:40:16:E8:BA:4F:37:9A:DA:17:EE:34:16:37:85:D3
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140348.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:44d:6340::/42
                  240e:44d:6440::/42
                  240e:44d:6540::/42
                  240e:44d:6640::/42

    Signature Algorithm: sha256WithRSAEncryption
         65:13:e6:8c:b7:3f:0d:11:36:78:c1:50:ba:f7:c3:e2:dc:32:
         39:a9:7d:ea:f6:99:76:41:ae:a5:c7:5c:dd:bc:f1:82:1b:7c:
         bf:67:42:c0:a2:e1:ce:51:e9:13:7b:71:b4:c8:0f:4b:81:7f:
         bf:8a:d6:8f:ff:0b:24:7f:14:e1:49:b0:62:f2:32:7a:9d:75:
         68:85:cc:df:a3:47:e9:53:8a:bf:82:0a:9c:c4:2d:9c:1b:53:
         e2:03:68:c7:fa:db:0c:51:08:25:6e:19:d8:f2:e8:07:f2:92:
         4c:ac:f9:80:5c:e0:db:87:8d:c2:1e:0d:2c:fa:58:e0:d0:57:
         0d:fb:8f:e7:07:14:4f:d8:b4:e5:98:92:cf:64:b8:fa:88:01:
         f0:82:75:41:1e:6c:fd:d4:3f:5f:41:d2:ab:d0:2e:eb:87:4b:
         c1:fc:86:5e:e2:df:de:c5:ad:45:3c:d6:1e:2e:eb:d4:8a:b0:
         fd:ee:8c:d4:24:3b:c9:81:3b:ee:36:ea:95:5f:e7:32:4c:9e:
         0e:62:bc:63:a6:7c:fd:22:66:ef:06:1b:97:a3:bc:e7:7d:32:
         a6:fd:e1:b8:47:9d:05:33:58:b0:e6:6f:b3:a8:19:5b:73:8f:
         38:1d:4e:61:29:53:e2:62:07:89:44:a4:00:0b:50:71:ee:29:
         a2:3b:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:40 2026 by rpki-client