Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140518.roa
File:                     AS140518.roa (raw, json)
Hash identifier:          T8l/Y7mQgiae6aWdshq39SggzGLqVic4Z/rYXZ0+/1Y=
Subject key identifier:   8D:10:E9:49:10:2D:5A:F1:4F:15:A1:AB:07:C4:96:E1:4F:D4:69:70
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       6BAC81D900F212F8F5720DDA35646BA3972D5427
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140518.roa
Signing time:             Thu 28 May 2026 16:11:59 +0000
ROA not before:           Thu 28 May 2026 16:06:59 +0000
ROA not after:            Thu 27 May 2027 16:11:59 +0000
asID:                     140518
IP address blocks:        240e:a7:7fde::/48 maxlen: 48
                          240e:a7:7fdf::/48 maxlen: 48
                          240e:a7:7fe0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ac:81:d9:00:f2:12:f8:f5:72:0d:da:35:64:6b:a3:97:2d:54:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 28 16:06:59 2026 GMT
            Not After : May 27 16:11:59 2027 GMT
        Subject: CN=8D10E949102D5AF14F15A1AB07C496E14FD46970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:e2:86:38:af:99:df:29:ff:f5:d7:73:fb:
                    8d:29:6f:d3:0a:ed:95:e7:f7:33:da:09:56:7e:15:
                    5d:13:3e:7a:cb:ec:c4:65:e2:dd:1f:79:88:49:0b:
                    ea:48:60:7d:3f:ce:1d:4f:e8:29:ad:f8:9a:b7:82:
                    93:d1:0f:e5:22:07:4f:d4:8d:aa:bc:49:21:b6:15:
                    9e:d5:bb:92:88:c7:5d:9b:9b:30:fd:b0:61:c1:f0:
                    d7:3d:ec:2d:65:0a:e1:28:f3:78:51:5a:11:b9:b4:
                    f5:ef:bf:0e:19:bb:fa:79:4b:42:e3:34:db:18:6f:
                    c1:28:a2:dd:79:14:11:dd:c8:34:48:fd:f3:f7:4b:
                    ec:b8:11:57:6f:6c:16:c7:06:37:3f:93:64:e4:29:
                    9b:32:e0:ad:52:4e:11:d8:f5:d0:21:bd:30:f9:01:
                    41:72:89:c0:cd:fa:df:bc:18:61:59:19:8e:b0:5b:
                    f8:52:60:1f:ae:e0:12:d3:31:b2:e9:a6:8b:e7:2b:
                    1c:da:30:dc:ef:1a:df:3d:66:26:c5:19:20:8b:26:
                    34:75:b6:5a:bf:27:c2:b8:d8:c5:6c:85:aa:19:d0:
                    17:bf:d1:71:5c:2c:8d:d1:c7:1e:6a:a0:58:2b:9e:
                    a4:58:05:dd:5d:90:44:f1:2b:93:99:9b:b5:ea:2d:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:10:E9:49:10:2D:5A:F1:4F:15:A1:AB:07:C4:96:E1:4F:D4:69:70
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:a7:7fde::-240e:a7:7fe0:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:74:3d:89:af:66:4b:76:5b:3d:e3:e3:fe:c9:26:7c:61:
         9e:15:15:51:4f:22:8f:05:a3:a2:79:06:ae:b5:85:8e:7c:fd:
         81:c9:f8:2c:7f:d6:d1:72:bc:4a:e7:cc:7c:e1:82:19:41:be:
         79:c4:0b:e0:24:90:97:fa:a6:78:72:1b:ba:ea:d5:26:f2:da:
         5a:bd:f4:e6:5e:77:0d:28:90:ad:d0:84:af:6d:5a:56:e6:80:
         da:98:13:37:e3:2c:2b:1a:18:45:81:bd:bc:5a:9a:6c:3e:bc:
         b1:cb:28:45:46:09:c1:13:7d:79:7b:da:c4:8f:5b:05:d9:fc:
         da:bb:7f:43:09:19:d7:0f:f6:36:9d:13:c6:f8:27:ff:c1:72:
         a5:aa:45:eb:c9:48:ac:9c:0e:3f:dc:7e:e9:a0:ba:fb:31:e3:
         42:d2:c4:d1:e1:6d:25:88:bd:31:ca:da:a6:59:c5:62:68:95:
         62:de:f3:03:00:6a:d6:e6:fb:e0:54:4d:1b:68:53:df:c8:43:
         66:09:2a:62:42:16:bd:d7:60:bb:bd:bd:44:56:2a:8c:28:3a:
         1e:23:28:38:88:43:82:0e:7f:26:ef:40:4a:c0:a9:b7:a4:70:
         e1:da:da:c7:f1:56:2c:13:29:7e:cd:76:b5:77:7f:a9:75:30:
         f9:26:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:36 2026 by rpki-client