Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140533.roa
File:                     AS140533.roa (raw, json)
Hash identifier:          uSIJ578LafE+VjNL1P3uc1h/oW5D4Bon8sbroAmUHIU=
Subject key identifier:   37:B0:94:73:3D:6F:8A:F7:FF:F7:FA:78:52:54:17:AE:8B:43:A1:1F
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       7A258A8862A68EF8FD9D69FF6E32E2112C421923
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140533.roa
Signing time:             Thu 28 May 2026 16:02:33 +0000
ROA not before:           Thu 28 May 2026 15:57:33 +0000
ROA not after:            Thu 27 May 2027 16:02:33 +0000
asID:                     140533
IP address blocks:        240e:45c:8100::/40 maxlen: 40
                          240e:45c:8300::/40 maxlen: 40
                          240e:45c:8500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:25:8a:88:62:a6:8e:f8:fd:9d:69:ff:6e:32:e2:11:2c:42:19:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 28 15:57:33 2026 GMT
            Not After : May 27 16:02:33 2027 GMT
        Subject: CN=37B094733D6F8AF7FFF7FA78525417AE8B43A11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:60:2c:65:06:00:da:03:2f:9b:e9:2d:08:
                    7c:48:96:7d:88:32:e4:8d:cf:1f:43:c3:77:e5:d5:
                    10:87:33:5a:ae:d9:07:66:f6:21:d0:52:6f:e9:99:
                    a9:4d:17:37:33:18:48:64:72:65:52:bf:bc:06:49:
                    b9:bc:72:cb:d2:dc:49:a1:23:79:ca:d2:e6:75:42:
                    b9:ec:bb:f2:63:a9:da:18:b0:82:b8:90:a5:fb:4f:
                    e0:fd:69:a0:1f:f8:94:3c:33:d4:4e:ad:01:64:f7:
                    52:96:39:8b:0c:20:95:1d:e0:b1:02:77:b3:88:9a:
                    05:84:a8:f6:1b:ea:4f:1c:fe:96:29:2b:43:23:a9:
                    49:d1:23:54:8b:ac:6e:bd:ad:34:38:87:59:62:a5:
                    17:2b:e8:3d:d9:34:91:75:e4:27:15:5c:46:1f:ef:
                    bd:c8:64:bd:50:08:b0:91:11:93:8d:a9:8f:0c:7f:
                    7d:49:37:78:e4:22:0c:f9:2a:f8:8f:3e:6e:ed:cc:
                    51:bb:06:32:cf:c0:a8:9e:ca:18:e3:d7:57:2a:ac:
                    16:1d:e7:49:55:8d:14:44:f1:b5:9c:bd:10:31:b8:
                    4c:ab:22:41:b4:69:82:ec:f9:c9:52:33:7d:96:a3:
                    7a:0c:7b:46:13:2f:3a:87:f9:2b:1a:c2:f0:a7:3b:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:94:73:3D:6F:8A:F7:FF:F7:FA:78:52:54:17:AE:8B:43:A1:1F
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:45c:8100::/40
                  240e:45c:8300::/40
                  240e:45c:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:86:03:d8:15:5f:33:2a:69:d4:53:66:ae:cb:5f:67:d5:
         6f:7a:80:1e:13:83:e5:73:63:d7:fd:7c:fd:f5:4f:2d:4d:84:
         89:9c:b5:29:f0:46:46:62:f2:26:c7:0b:e0:b9:6a:36:bc:7e:
         38:e0:36:fe:a2:06:39:90:c1:f8:b4:be:a2:69:ba:48:fd:8e:
         d4:45:6b:5b:06:99:28:dd:e7:07:d1:ad:62:3d:50:bd:65:d7:
         de:54:98:46:51:62:11:96:b8:59:a0:1e:48:18:6a:6f:85:7a:
         17:76:2b:13:88:b0:77:73:d7:65:da:77:2f:5d:8c:a3:44:b1:
         6e:f7:37:73:03:67:74:72:f2:01:d4:16:dd:87:db:6c:43:b6:
         d1:33:a4:96:27:85:af:a1:66:b7:02:bf:1e:c7:bd:f9:15:8d:
         12:68:43:52:5f:55:96:16:23:b1:6e:f4:73:72:49:bf:25:d9:
         4c:3a:cc:ee:72:76:35:fd:6e:8c:5d:98:74:63:3a:ac:f9:2e:
         1e:d4:6c:36:82:e4:79:19:c5:fe:c4:8c:4c:2e:c3:64:6a:e2:
         5a:03:1d:73:78:ed:db:71:73:56:06:99:1a:c7:c0:9f:31:cd:
         0a:9e:7c:87:40:78:c1:92:8c:23:00:5b:f1:0f:fd:8c:a6:b1:
         29:d3:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:37 2026 by rpki-client