Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140366.roa
File:                     AS140366.roa (raw, json)
Hash identifier:          co03vzEboDfFgGYHcJ1lxPLio6J/pO9wnk/79OBQWnY=
Subject key identifier:   03:36:9A:C5:D6:25:2B:82:31:74:B9:28:06:8A:E9:B8:15:54:CC:F0
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       266803A0633B71119DC75ED5F0763C4A7D66884F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140366.roa
Signing time:             Mon 01 Jun 2026 16:31:26 +0000
ROA not before:           Mon 01 Jun 2026 16:26:26 +0000
ROA not after:            Mon 31 May 2027 16:31:26 +0000
asID:                     140366
IP address blocks:        240e:96b:6006::/48 maxlen: 48
                          240e:96b:6007::/48 maxlen: 48
                          240e:96b:6008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:68:03:a0:63:3b:71:11:9d:c7:5e:d5:f0:76:3c:4a:7d:66:88:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: Jun  1 16:26:26 2026 GMT
            Not After : May 31 16:31:26 2027 GMT
        Subject: CN=03369AC5D6252B823174B928068AE9B81554CCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:b8:5f:e8:0f:8b:4d:40:ab:8d:1e:39:b6:
                    cc:80:cc:e4:61:68:1c:70:a8:32:b0:d1:19:55:9f:
                    67:eb:e3:41:4b:93:86:fa:31:a1:51:39:1b:e1:0f:
                    1b:10:5b:53:e7:52:a2:7b:ce:40:fe:a9:ad:03:8b:
                    ee:1a:09:ff:24:61:f6:12:f1:c5:44:83:39:52:71:
                    79:f1:32:93:a2:9e:90:8c:53:83:8c:4f:0a:f4:7c:
                    b6:d4:3b:74:6a:0b:78:5f:19:86:1b:4e:54:ab:f6:
                    2b:3b:55:fd:36:40:81:d1:fb:00:b0:42:21:6b:46:
                    81:51:57:e0:9a:a5:48:04:4a:78:b1:07:70:f4:43:
                    f8:6c:71:f0:09:95:ef:0d:1a:be:45:17:75:f0:7a:
                    0f:d1:d6:dd:22:66:7f:ef:04:5f:56:d8:e3:e9:80:
                    93:47:e5:a6:95:fe:be:6a:dd:8e:46:1a:7d:f5:cf:
                    d2:ad:e7:39:4a:6f:1b:0c:38:82:eb:b1:7b:cb:ca:
                    33:e1:c7:0e:ce:73:9c:1b:ae:2d:5a:77:55:8f:24:
                    de:50:8a:4c:a8:91:a6:17:32:0e:d3:e8:d9:4f:73:
                    20:4c:dc:94:52:08:76:40:72:7e:7b:1e:5b:f6:8b:
                    b4:6f:4f:69:02:77:1f:e5:81:08:02:f4:ad:0a:ee:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:9A:C5:D6:25:2B:82:31:74:B9:28:06:8A:E9:B8:15:54:CC:F0
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140366.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:96b:6006::-240e:96b:6008:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:db:0a:21:42:c9:25:25:14:65:6e:ca:b5:1a:a0:95:7d:
         c9:db:e9:5c:4e:aa:20:6f:8b:e3:2c:d6:20:e2:c7:e3:a2:56:
         a3:34:b0:24:45:5f:44:83:6b:f5:ba:8f:23:96:ae:47:de:22:
         c0:7f:81:89:02:37:5c:65:3c:ae:17:68:d5:c9:19:70:32:4b:
         c8:40:bd:a7:93:8e:fa:05:ac:de:f6:c9:65:ec:d6:af:b3:73:
         4a:5a:f1:15:47:6b:7f:18:b6:d1:e3:12:7c:26:84:4b:f6:04:
         b1:08:a5:47:ca:f5:b4:e4:ae:d0:73:b9:0f:05:68:af:a5:22:
         f9:2f:e0:ab:78:3f:59:87:a7:78:40:d0:a1:7d:dc:3d:28:86:
         49:32:15:2a:0e:b8:f7:2e:b4:cc:0f:09:d2:e2:af:c8:ad:a9:
         c2:91:5e:4c:a4:95:d5:bc:5b:9f:2b:24:dd:97:9b:fd:08:de:
         a0:1d:36:36:f8:23:d2:a4:6b:66:9d:44:4a:a0:7f:f0:03:ba:
         cd:a8:e5:03:33:ec:05:18:83:2d:fd:aa:73:e2:58:62:fd:2c:
         21:32:35:a1:83:ae:f7:45:9e:af:70:99:25:f0:dd:90:1c:38:
         69:2b:34:9f:ca:cd:2c:5f:6e:ea:53:8b:0d:e1:78:72:ee:93:
         7c:4f:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:02 2026 by rpki-client