Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140515.roa
File:                     AS140515.roa (raw, json)
Hash identifier:          k7b35eJIr5yUYpimjbJ2+PgqNExILpN2o+e9d+VfNt8=
Subject key identifier:   96:C6:D7:2A:93:E0:14:F3:C3:BA:E6:4A:A2:E5:A9:9E:2F:41:62:D6
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       5722951F376AFC9F989142DBBEE9511335F1FDA8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140515.roa
Signing time:             Thu 28 May 2026 16:11:59 +0000
ROA not before:           Thu 28 May 2026 16:06:59 +0000
ROA not after:            Thu 27 May 2027 16:11:59 +0000
asID:                     140515
IP address blocks:        240e:a7:7fd5::/48 maxlen: 48
                          240e:a7:7fd6::/48 maxlen: 48
                          240e:a7:7fd7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:22:95:1f:37:6a:fc:9f:98:91:42:db:be:e9:51:13:35:f1:fd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 28 16:06:59 2026 GMT
            Not After : May 27 16:11:59 2027 GMT
        Subject: CN=96C6D72A93E014F3C3BAE64AA2E5A99E2F4162D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:77:77:17:ab:e0:a3:60:3f:74:25:e3:67:
                    3b:af:97:7e:47:53:1a:41:91:f7:22:46:7a:94:b9:
                    05:6f:4f:ec:49:59:d7:93:2f:14:52:5a:3b:81:6d:
                    63:d6:ab:4e:40:ce:87:f0:5c:24:37:ee:55:1d:a4:
                    0c:32:98:08:83:50:29:ff:9d:b5:6c:36:3d:e9:5e:
                    35:c5:81:b3:2b:a7:c8:39:7b:70:ad:02:e5:62:a2:
                    8f:41:22:14:e7:e3:8d:50:f8:5e:7b:c4:72:b7:b6:
                    3f:15:05:d7:6d:37:6b:23:e9:ae:7c:56:6d:31:a8:
                    db:07:f8:9d:cd:05:63:24:33:41:25:59:5b:24:9e:
                    e4:55:26:5b:9d:eb:78:3a:33:cd:39:96:51:fc:91:
                    77:58:c9:61:c1:f3:94:12:03:a4:c0:c2:85:b5:70:
                    d0:e5:6a:0b:43:de:21:d8:c4:41:3d:60:fd:55:18:
                    0f:b1:d3:95:65:1d:5a:f7:d8:34:01:57:43:56:9a:
                    8f:9d:1d:3e:4e:89:e6:f3:59:a4:5a:39:c1:d4:a5:
                    a4:ee:e0:07:ed:41:fa:2b:f6:5c:34:e3:2b:ca:0e:
                    76:57:83:dd:9f:e0:2f:09:59:7a:08:c1:f3:fc:fe:
                    31:37:30:bc:22:59:a2:9b:88:52:7b:0b:0c:f1:42:
                    19:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:D7:2A:93:E0:14:F3:C3:BA:E6:4A:A2:E5:A9:9E:2F:41:62:D6
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:a7:7fd5::-240e:a7:7fd7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:65:c2:e2:bc:83:ef:de:5a:8b:c3:36:1b:30:35:27:70:a5:
         c1:f9:cc:d3:ee:7f:3a:e8:1b:01:a8:a2:52:96:2e:f1:d7:42:
         a6:d6:65:5c:1f:ad:8b:c7:74:2c:55:08:87:2f:09:60:7c:3b:
         7b:b5:eb:38:19:8d:eb:97:54:e7:52:5e:c3:07:dd:4f:2a:ec:
         55:be:c0:56:4e:e6:e9:d7:d4:77:7b:21:f6:d8:fb:e1:c0:9f:
         ac:e0:6e:e8:74:c4:34:b5:3a:de:02:c0:8b:f4:9b:b2:ab:c1:
         01:15:02:4d:43:08:4c:aa:2a:8c:6c:37:8f:29:d1:93:c2:01:
         88:d5:af:9a:1b:a5:be:b0:67:3a:15:33:2c:cf:21:24:a2:89:
         a5:ef:ae:8f:d6:f7:55:ab:b6:f3:c1:1f:0a:e6:1a:c7:00:a6:
         c3:b4:8b:37:60:dd:8b:44:b6:c9:2d:38:fd:9b:2b:19:df:5d:
         17:0c:8b:0b:37:e2:ca:e8:a4:50:0c:53:56:96:fb:be:fc:00:
         d8:74:98:33:1b:5b:ad:ed:b9:6a:15:84:6b:5c:e0:fa:ec:07:
         64:33:96:d0:da:4e:95:01:25:c0:5c:58:78:1b:c0:4e:c7:2d:
         ad:65:24:52:f6:da:09:65:2c:45:bb:0b:4c:14:74:9a:b4:04:
         c5:f8:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:32 2026 by rpki-client