Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140354.roa
File:                     AS140354.roa (raw, json)
Hash identifier:          mju3DQJDsiBYhJpK9a0i3mQd3ngv4r5m6yIXSksKXsU=
Subject key identifier:   B0:7D:C0:E7:9E:32:4A:FC:B7:2E:E9:9D:9F:7C:8D:02:1F:4F:5D:BA
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       48856A027C0E2F2DCA7B71C4534D2C1B1F578DE6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140354.roa
Signing time:             Tue 26 May 2026 16:21:51 +0000
ROA not before:           Tue 26 May 2026 16:16:51 +0000
ROA not after:            Tue 25 May 2027 16:21:51 +0000
asID:                     140354
IP address blocks:        240e:44d:6d40::/42 maxlen: 42
                          240e:44d:6e40::/42 maxlen: 42
                          240e:44d:6f40::/42 maxlen: 42
                          240e:44d:7040::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:85:6a:02:7c:0e:2f:2d:ca:7b:71:c4:53:4d:2c:1b:1f:57:8d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 26 16:16:51 2026 GMT
            Not After : May 25 16:21:51 2027 GMT
        Subject: CN=B07DC0E79E324AFCB72EE99D9F7C8D021F4F5DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:a9:be:d3:af:47:c6:b3:1c:e3:2a:8f:58:
                    ee:05:81:2a:07:53:ef:22:90:1d:9a:10:83:d9:2f:
                    19:12:a9:72:a4:18:e4:d2:f1:23:8e:a7:13:06:da:
                    1d:04:4b:34:7f:f1:bd:2d:a7:c2:78:00:8d:25:83:
                    87:bb:38:fe:f0:0f:1f:f5:43:d3:6b:2f:34:91:8f:
                    30:70:9f:90:c5:f7:65:cb:fa:24:08:2c:6a:ee:bf:
                    d8:a3:7c:45:1b:fd:a7:62:bc:60:61:ac:10:18:51:
                    9e:43:b2:4e:1f:c0:c3:c6:54:c4:75:eb:fd:11:8b:
                    f9:b9:e0:f0:a4:1d:6a:4c:66:24:29:9a:d8:33:e2:
                    db:69:52:5c:61:0f:93:2c:b9:77:7e:97:c4:4f:ca:
                    c9:f4:4f:13:f9:af:63:5f:29:70:07:9b:db:8d:c4:
                    01:47:a7:f4:15:a4:1f:af:ce:2a:60:f0:e4:c5:69:
                    96:e9:86:96:c3:bf:e5:3c:c4:07:35:92:56:ba:55:
                    d7:2f:39:fe:06:1e:28:e0:56:64:b0:70:79:6b:35:
                    09:e9:15:7a:6f:13:d8:3d:e1:74:92:ed:19:b2:83:
                    28:f9:2e:cd:81:05:e0:24:47:0b:00:3b:7a:7b:61:
                    9b:43:90:09:d6:d3:cf:30:97:6d:7f:fb:73:71:8b:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:C0:E7:9E:32:4A:FC:B7:2E:E9:9D:9F:7C:8D:02:1F:4F:5D:BA
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140354.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:44d:6d40::/42
                  240e:44d:6e40::/42
                  240e:44d:6f40::/42
                  240e:44d:7040::/42

    Signature Algorithm: sha256WithRSAEncryption
         10:07:0a:d5:25:7f:2a:8f:db:d6:f2:4a:ca:70:95:60:3c:1e:
         b7:d4:37:f4:cf:00:93:bf:a9:c1:9f:ef:67:01:49:55:89:19:
         6c:bb:c7:b2:d5:38:67:85:3c:01:dd:cd:56:20:99:04:1e:ed:
         93:1c:e4:0f:78:66:a9:44:15:40:6f:e2:74:a1:45:9e:cb:45:
         4c:26:0c:64:b9:84:f9:18:4c:63:f3:0b:a8:c6:e2:a4:7f:22:
         c9:be:5d:43:eb:9b:ed:3e:39:50:1f:64:50:fd:91:6c:89:7f:
         bf:15:81:ae:5d:3d:2e:8a:14:a7:05:f1:63:24:42:96:4f:ae:
         ed:07:e3:ac:89:ad:7c:fb:d4:02:d4:67:e3:2a:91:fc:05:65:
         5e:ec:27:96:3b:d3:72:fd:16:fc:e0:f8:21:07:27:69:99:d3:
         a0:c5:00:d8:74:d2:af:28:46:38:5b:ca:9d:8a:31:af:e4:0d:
         b7:70:5f:f5:47:19:f5:ef:20:80:bc:d8:85:97:ed:9e:e4:f2:
         64:6d:97:d7:48:2b:19:d9:05:9f:32:0b:9a:ed:86:11:e2:83:
         cd:58:29:bf:83:97:d4:82:ee:b0:b5:89:5c:a3:54:96:2f:9c:
         44:bc:13:5e:83:de:c7:84:83:02:59:ce:cb:c3:ee:0f:25:72:
         0f:43:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:31 2026 by rpki-client