Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140510.roa
File:                     AS140510.roa (raw, json)
Hash identifier:          IBvKjmmbFaDRqHY59vIz4lOYWg4dDo4m25Z6slEi+Wo=
Subject key identifier:   09:4E:15:D7:5D:AE:A3:4E:2B:DE:7D:99:7F:37:53:47:F5:47:97:27
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       5AE6D7D0E0045F0635F6B015D0275CECE7F5893E
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140510.roa
Signing time:             Thu 28 May 2026 16:11:06 +0000
ROA not before:           Thu 28 May 2026 16:06:06 +0000
ROA not after:            Thu 27 May 2027 16:11:06 +0000
asID:                     140510
IP address blocks:        240e:a7:7fc6::/48 maxlen: 48
                          240e:a7:7fc7::/48 maxlen: 48
                          240e:a7:7fc8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e6:d7:d0:e0:04:5f:06:35:f6:b0:15:d0:27:5c:ec:e7:f5:89:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 28 16:06:06 2026 GMT
            Not After : May 27 16:11:06 2027 GMT
        Subject: CN=094E15D75DAEA34E2BDE7D997F375347F5479727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:c7:b4:c7:26:42:7e:5e:ff:53:c6:d3:79:
                    3f:4b:68:df:d6:67:3f:be:89:1c:7d:02:4b:1b:35:
                    3b:24:11:a4:ab:9f:4e:2e:86:37:fd:bc:b5:13:88:
                    3a:88:3a:83:ad:4f:eb:7d:95:42:1b:79:77:0d:05:
                    7f:c3:65:c2:d0:88:0c:3b:1d:61:10:69:7e:4a:6f:
                    98:ea:bf:45:fd:41:61:3e:a2:bf:56:c8:af:0a:34:
                    8c:9c:12:31:cc:f5:aa:b4:f2:e9:4b:71:a4:f8:98:
                    c8:3a:94:17:00:a9:cc:d7:56:fc:d2:47:02:10:94:
                    04:6b:0c:6c:85:20:9f:9d:4b:46:94:9a:94:f6:62:
                    a9:b2:90:d8:1b:14:96:64:0a:a0:9a:7c:e8:fc:0d:
                    83:8c:2e:60:54:6a:54:65:7a:31:be:69:67:a6:ba:
                    4f:b3:0c:01:9e:59:51:08:f0:a9:56:20:4a:16:1d:
                    48:90:3f:93:d7:44:24:f0:16:cd:78:cf:86:9d:dc:
                    91:54:17:12:28:1b:3f:57:fc:01:d1:99:05:68:ea:
                    b2:f6:8f:50:0b:76:0b:54:72:b2:57:7a:d5:c1:8a:
                    c1:36:c0:12:ce:b2:f4:d7:9a:e5:3a:ee:6f:e6:1d:
                    c5:0d:a0:8a:ad:9c:83:63:18:15:26:4e:c6:e2:86:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4E:15:D7:5D:AE:A3:4E:2B:DE:7D:99:7F:37:53:47:F5:47:97:27
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:a7:7fc6::-240e:a7:7fc8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         07:87:7c:fd:b6:cc:74:f7:8b:fa:2a:d3:1c:20:4c:b2:3c:56:
         f9:bd:91:f6:61:7f:45:03:5d:af:1c:8f:e0:4f:05:a6:f7:bf:
         ee:05:16:8c:c7:2d:68:e4:f3:7f:9e:d4:7e:88:02:cd:96:9a:
         5a:57:25:26:00:1a:9d:a2:21:dd:3b:b0:54:52:ca:2c:f1:83:
         de:2b:13:c4:87:1d:15:d7:2c:3d:81:1e:9f:b3:ab:11:64:da:
         ca:dc:cb:e9:94:6f:0e:3c:d9:07:7e:1f:94:b4:63:1d:78:ef:
         b6:10:56:6b:83:5a:3a:f2:13:00:67:47:1d:fd:a8:fd:5f:e3:
         c7:19:b2:78:4a:0c:a5:b4:2a:01:18:44:00:eb:06:61:7c:89:
         1b:88:c0:ba:d2:ce:18:c2:8a:ba:61:9b:8a:77:8a:a8:e2:28:
         8c:88:6c:63:07:22:26:ca:82:4f:bd:30:16:62:a8:0a:d5:b9:
         ef:04:94:78:46:3c:df:e5:ff:a0:f1:53:71:bb:76:af:38:7a:
         2f:9b:5d:ca:f1:d2:62:b2:d0:e4:4f:84:07:f8:4c:f7:45:80:
         c4:2f:0e:aa:5e:77:26:78:27:99:d4:05:23:ee:62:44:b6:0c:
         81:6c:ed:ab:69:db:a6:97:ab:33:85:36:68:6a:c3:94:61:41:
         81:9a:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:37 2026 by rpki-client