Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140364.roa
File:                     AS140364.roa (raw, json)
Hash identifier:          PIbPcD0v0BazpFtgk9RqlOJWlbflp0uCvthb7esTr6k=
Subject key identifier:   0C:7C:6E:FC:B4:5F:6B:BD:46:21:6B:21:9C:F8:92:95:D4:06:00:30
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       262DA45CA63D2BEFCD5A16B8A39A77F750793D6D
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140364.roa
Signing time:             Mon 01 Jun 2026 16:31:26 +0000
ROA not before:           Mon 01 Jun 2026 16:26:26 +0000
ROA not after:            Mon 31 May 2027 16:31:26 +0000
asID:                     140364
IP address blocks:        240e:96b:6000::/48 maxlen: 48
                          240e:96b:6001::/48 maxlen: 48
                          240e:96b:6002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2d:a4:5c:a6:3d:2b:ef:cd:5a:16:b8:a3:9a:77:f7:50:79:3d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: Jun  1 16:26:26 2026 GMT
            Not After : May 31 16:31:26 2027 GMT
        Subject: CN=0C7C6EFCB45F6BBD46216B219CF89295D4060030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:dc:b5:9e:cc:df:78:9a:03:72:59:d5:68:
                    5e:fd:f2:a8:21:05:29:87:0a:79:5b:ec:9c:d2:0c:
                    58:42:7b:aa:08:b0:fa:b7:50:c1:2a:db:82:1e:79:
                    b7:b1:fc:14:c1:2e:66:47:be:38:b0:d7:1a:ca:e6:
                    50:92:b8:b7:ae:e3:6d:0a:39:a4:f9:ed:3a:fa:9d:
                    a9:3f:9a:6b:ef:46:32:39:dd:46:a9:d7:c8:b1:20:
                    1e:66:ba:e2:d0:3f:6f:f5:3c:ab:a1:68:fa:21:ac:
                    01:ea:39:41:79:03:85:be:b2:08:80:16:dd:64:a2:
                    c0:16:3d:94:5a:bd:28:bf:8a:0f:d2:c6:fd:63:43:
                    eb:30:07:7c:59:a6:d6:3d:fc:c8:25:96:67:ec:7f:
                    39:8a:74:dc:f3:32:0f:74:07:4d:5f:00:4e:eb:c2:
                    9f:dd:7b:1f:6a:89:ba:49:01:49:e8:cf:fe:cb:d4:
                    8f:f0:30:e0:ed:87:6a:69:8c:61:42:04:9a:51:97:
                    ff:31:38:b0:70:f3:cc:a1:13:62:48:a7:52:50:c4:
                    96:e9:04:27:ad:2d:d6:92:ef:65:aa:a9:5e:8c:27:
                    e7:af:dd:1c:a4:02:fe:6c:40:52:cd:3e:4a:36:b0:
                    0f:84:68:1e:91:b9:c8:22:9f:93:c1:e3:e2:06:0f:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7C:6E:FC:B4:5F:6B:BD:46:21:6B:21:9C:F8:92:95:D4:06:00:30
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140364.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:96b:6000::-240e:96b:6002:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         21:19:1d:db:4a:15:ea:8b:74:ee:20:35:f6:d5:c4:99:3e:e3:
         bf:3a:75:dc:61:b9:17:16:62:4d:fb:8e:38:f8:d2:09:72:71:
         1a:fb:01:8c:2a:8d:87:0d:3e:40:98:5e:9e:7a:9b:b3:aa:cd:
         5e:2e:1c:67:60:7f:af:26:3c:ef:aa:7f:28:15:03:9b:5f:ac:
         a6:1c:41:de:23:62:b1:15:e2:b9:20:16:13:e2:74:25:53:70:
         2c:0c:08:18:57:7c:eb:81:f4:29:70:6e:01:b9:a5:4e:d1:48:
         9a:81:1a:96:2e:5d:a5:44:f1:83:e1:0e:5b:ca:7c:d7:eb:3d:
         dc:f1:75:6b:61:5b:f1:53:d4:9f:7a:c6:46:50:41:16:65:5a:
         5c:6f:f4:f5:1e:24:95:e5:43:32:5c:be:80:dc:22:36:a8:6e:
         19:11:32:eb:64:79:b8:64:41:e5:41:99:cb:85:38:c3:8a:52:
         ab:f2:d5:be:88:a7:06:f4:6d:3c:52:57:0b:28:1c:66:b2:eb:
         df:11:ba:7d:ea:bb:f6:73:5b:1e:08:6e:e8:a9:67:e0:1a:19:
         c4:0c:2f:3b:0a:1e:6e:1d:2f:b1:de:65:59:e6:94:cc:9c:0a:
         aa:e4:49:83:6d:57:3a:c8:f0:a6:de:66:42:fd:bd:74:25:87:
         25:f3:28:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUJi2kXKY9K+/NWha4o5p391B5PW0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMTE2MjYyNloX
DTI3MDUzMTE2MzEyNlowMzExMC8GA1UEAxMoMEM3QzZFRkNCNDVGNkJCRDQ2MjE2
QjIxOUNGODkyOTVENDA2MDAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMik3LWezN94mgNyWdVoXv3yqCEFKYcKeVvsnNIMWEJ7qgiw+rdQwSrbgh55
t7H8FMEuZke+OLDXGsrmUJK4t67jbQo5pPntOvqdqT+aa+9GMjndRqnXyLEgHma6
4tA/b/U8q6Fo+iGsAeo5QXkDhb6yCIAW3WSiwBY9lFq9KL+KD9LG/WND6zAHfFmm
1j38yCWWZ+x/OYp03PMyD3QHTV8ATuvCn917H2qJukkBSejP/svUj/Aw4O2HammM
YUIEmlGX/zE4sHDzzKETYkinUlDElukEJ60t1pLvZaqpXown56/dHKQC/mxAUs0+
SjawD4RoHpG5yCKfk8Hj4gYPmV0CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQMfG78
tF9rvUYhayGc+JKV1AYAMDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwMzY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgUkDglrYAMHACQOCWtgAjAN
BgkqhkiG9w0BAQsFAAOCAQEAIRkd20oV6ot07iA19tXEmT7jvzp13GG5FxZiTfuO
OPjSCXJxGvsBjCqNhw0+QJhennqbs6rNXi4cZ2B/ryY876p/KBUDm1+sphxB3iNi
sRXiuSAWE+J0JVNwLAwIGFd864H0KXBuAbmlTtFImoEali5dpUTxg+EOW8p81+s9
3PF1a2Fb8VPUn3rGRlBBFmVaXG/09R4kleVDMly+gNwiNqhuGREy62R5uGRB5UGZ
y4U4w4pSq/LVvoinBvRtPFJXCygcZrLr3xG6feq79nNbHghu6Kln4BoZxAwvOwoe
bh0vsd5lWeaUzJwKquRJg21XOsjwpt5mQv29dCWHJfMo3Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:44 2026 by rpki-client