Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140513.roa
File:                     AS140513.roa (raw, json)
Hash identifier:          YWsrL/4L4mzpSpNf/XPsLt4ooufLuR5LhAbnhLmqk9c=
Subject key identifier:   F3:D9:AC:28:EE:93:83:C6:BF:C1:A2:4D:7F:E2:91:D4:06:F7:9C:8E
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       6E8B7F996DBE3DA48FA63C7608AB37321DBC2E19
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140513.roa
Signing time:             Thu 28 May 2026 16:11:06 +0000
ROA not before:           Thu 28 May 2026 16:06:06 +0000
ROA not after:            Thu 27 May 2027 16:11:06 +0000
asID:                     140513
IP address blocks:        240e:a7:7fcf::/48 maxlen: 48
                          240e:a7:7fd0::/48 maxlen: 48
                          240e:a7:7fd1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8b:7f:99:6d:be:3d:a4:8f:a6:3c:76:08:ab:37:32:1d:bc:2e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 28 16:06:06 2026 GMT
            Not After : May 27 16:11:06 2027 GMT
        Subject: CN=F3D9AC28EE9383C6BFC1A24D7FE291D406F79C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:d6:44:f5:c9:a7:74:72:94:84:50:b8:85:
                    5a:8e:a8:01:31:8e:67:e6:88:59:4a:e4:b8:97:f2:
                    ff:e0:84:c7:10:6b:ff:78:16:2d:be:55:e6:e2:e1:
                    f5:21:bf:09:ee:3a:06:0b:2b:5d:24:30:66:54:bc:
                    01:b9:f9:f3:7a:61:4a:86:6e:df:6a:7f:04:c1:b0:
                    6d:97:32:ac:99:15:8c:a6:77:7d:1f:93:dc:11:e7:
                    79:f5:b2:d5:41:ab:5e:ce:56:7c:64:4d:f2:77:84:
                    2d:e5:48:2d:32:77:22:f6:53:34:dc:4a:3a:cc:45:
                    28:cc:e1:a3:2c:db:b6:6a:d1:a8:d8:1f:1b:63:cf:
                    50:eb:f3:03:36:9f:1d:f4:34:27:5d:c3:d6:8e:38:
                    31:32:e8:f1:ec:c8:39:d8:23:5e:cf:4a:b3:2b:27:
                    14:0f:e6:57:2d:8e:0c:b3:7c:ea:d3:ed:f2:fc:cb:
                    0b:f1:88:42:3a:17:08:a6:ca:b3:ab:f6:13:78:23:
                    2f:8d:0d:f4:fd:c5:d7:ec:81:e7:4a:81:b2:36:a5:
                    2f:e4:af:2f:ce:59:17:b7:33:4e:8d:96:89:1f:ff:
                    a8:91:f0:01:68:9e:86:45:96:cc:72:be:57:11:b2:
                    ca:c4:76:1e:52:55:31:00:cf:03:4d:84:a4:70:d0:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:AC:28:EE:93:83:C6:BF:C1:A2:4D:7F:E2:91:D4:06:F7:9C:8E
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:a7:7fcf::-240e:a7:7fd1:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         03:31:9e:b9:7b:d0:fb:e6:6d:71:6a:d1:b7:b0:ed:8f:20:66:
         3d:72:9e:92:93:04:ce:98:a6:82:43:49:71:e1:76:a4:c3:dc:
         2b:20:e3:72:08:72:b2:11:7b:6e:c6:21:37:4e:06:d4:9a:bc:
         2e:91:23:94:d9:82:c9:bf:f5:e4:f3:6c:a3:49:c8:8a:42:25:
         dc:f2:2b:e2:07:53:09:4c:14:e4:b6:81:1f:15:45:14:2c:c8:
         3c:6a:93:b2:70:b1:24:4d:97:b1:73:38:ff:5c:c7:c6:99:43:
         c3:53:a6:4a:c2:d4:3e:bc:b6:ee:13:d7:1a:1a:01:26:0c:92:
         f0:a4:2c:1b:62:07:dd:fd:d7:96:bd:6a:4c:1f:28:fd:bf:09:
         12:b0:38:7e:5d:89:5e:64:5b:66:61:10:32:f9:1a:31:28:aa:
         ce:88:f7:b9:57:79:91:ea:b3:4d:be:73:9c:f7:05:44:00:4c:
         a7:db:9b:c8:2d:99:42:f3:75:c9:f0:e6:2a:eb:d8:da:71:e9:
         24:da:4b:f8:6b:f1:a7:3c:90:34:25:cd:9b:e0:ba:9d:86:4c:
         9d:a9:42:83:09:e3:7c:f9:6c:4b:70:7f:1a:ce:03:68:35:1e:
         17:df:ca:05:85:4f:96:29:b5:96:d4:b8:fc:6d:6c:bf:88:2d:
         78:aa:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:35 2026 by rpki-client