Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140649.roa
File:                     AS140649.roa (raw, json)
Hash identifier:          4ircmQd32WQ+BQAE+8gftEmBSsDh836hxetMgnJVHmk=
Subject key identifier:   01:DA:8F:04:E3:5C:75:74:57:75:9B:DE:C1:31:E7:D9:29:03:95:ED
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       01D238EFAB0CAD346BCF6A65E9EAE064A5A995EF
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140649.roa
Signing time:             Sat 30 May 2026 16:01:34 +0000
ROA not before:           Sat 30 May 2026 15:56:34 +0000
ROA not after:            Sat 29 May 2027 16:01:34 +0000
asID:                     140649
IP address blocks:        240e:183:8204::/48 maxlen: 48
                          240e:183:8205::/48 maxlen: 48
                          240e:183:8206::/48 maxlen: 48
                          240e:183:8207::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:38:ef:ab:0c:ad:34:6b:cf:6a:65:e9:ea:e0:64:a5:a9:95:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 30 15:56:34 2026 GMT
            Not After : May 29 16:01:34 2027 GMT
        Subject: CN=01DA8F04E35C757457759BDEC131E7D9290395ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:a8:ef:91:20:a5:c1:62:e1:63:a1:f1:51:
                    67:b9:55:51:00:0e:4a:eb:e0:b6:8d:46:b8:11:8f:
                    d9:e3:8a:f5:b7:8c:5b:c5:18:85:de:17:e0:81:09:
                    9b:96:2a:29:6b:52:9e:9b:1d:69:ed:f0:78:ab:a4:
                    f0:2c:3b:e9:75:54:ae:23:47:bb:4e:2c:4c:cd:8f:
                    45:b8:e2:b9:78:03:cd:90:5b:7c:d8:58:7b:a1:22:
                    96:fa:c4:e0:69:b1:44:85:28:fc:f9:67:45:b3:02:
                    d2:51:30:66:62:6c:c7:30:7f:35:b1:60:6e:63:b1:
                    77:51:76:e5:c1:78:1b:b6:d1:3a:32:8f:74:5f:81:
                    84:c6:17:1e:c5:45:57:5f:bb:92:b8:a4:1c:48:62:
                    4d:12:ce:f0:3e:81:07:6d:b6:cc:7c:1d:37:2f:b8:
                    3c:f5:ca:3d:ad:af:9c:c0:13:6f:9e:87:36:08:16:
                    6b:24:3e:be:40:12:f5:42:02:fc:f6:e9:c3:85:8f:
                    fe:00:1a:df:cb:91:7f:57:39:31:44:47:bc:ca:6b:
                    55:be:da:65:fa:c2:c5:3d:68:bf:4e:af:9b:fe:d9:
                    8e:9a:c1:c0:14:80:93:d0:4a:6f:83:ea:3a:d9:9d:
                    cc:d2:1e:f2:44:69:a9:6a:35:16:f5:db:1e:b0:0f:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:8F:04:E3:5C:75:74:57:75:9B:DE:C1:31:E7:D9:29:03:95:ED
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140649.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:183:8204::/46

    Signature Algorithm: sha256WithRSAEncryption
         49:30:b6:3a:3c:9f:f4:9d:fa:72:5d:2f:d4:b8:aa:90:f1:12:
         d7:cd:c2:0e:69:d3:cb:ca:cc:f9:ae:90:4a:ab:8b:35:4e:a2:
         fa:35:5c:4b:e1:85:8b:41:e7:24:ce:d9:d1:e0:78:aa:0f:a6:
         86:60:b9:54:67:c4:ea:36:b8:f3:3f:43:d1:04:e8:d1:11:89:
         cd:58:c6:9a:b7:56:03:70:32:f5:bc:71:b4:52:c0:be:84:e4:
         be:8a:c9:2a:89:70:39:81:02:ff:84:b5:fe:2e:bf:48:01:1d:
         bf:da:12:4d:cd:67:44:7c:af:a6:a3:fa:5c:91:03:f3:d0:91:
         c5:9b:4c:02:73:1b:53:cc:72:35:22:38:ae:03:73:f0:86:91:
         7b:b1:28:be:58:f2:51:7c:44:b7:4b:7e:06:ec:66:08:fb:96:
         aa:c1:93:4d:22:ba:a2:f2:6f:73:b6:4a:ef:bd:91:6e:5c:fc:
         96:1d:40:ef:c8:66:43:e7:16:c0:6e:cd:ab:8e:3a:8e:e8:7c:
         f1:c9:d5:9e:8d:1c:47:14:cf:0b:bd:7c:32:f2:7a:df:f3:f5:
         81:5b:4e:4b:0e:3b:49:65:e4:78:b7:24:e7:0f:da:40:14:b6:
         b0:ff:c2:aa:cd:3d:5e:64:d1:93:78:a1:96:ef:f2:f9:59:bb:
         23:6b:06:f2
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUAdI476sMrTRrz2pl6ergZKWple8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUzMDE1NTYzNFoX
DTI3MDUyOTE2MDEzNFowMzExMC8GA1UEAxMoMDFEQThGMDRFMzVDNzU3NDU3NzU5
QkRFQzEzMUU3RDkyOTAzOTVFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1mqO+RIKXBYuFjofFRZ7lVUQAOSuvgto1GuBGP2eOK9beMW8UYhd4X4IEJ
m5YqKWtSnpsdae3weKuk8Cw76XVUriNHu04sTM2PRbjiuXgDzZBbfNhYe6EilvrE
4GmxRIUo/PlnRbMC0lEwZmJsxzB/NbFgbmOxd1F25cF4G7bROjKPdF+BhMYXHsVF
V1+7krikHEhiTRLO8D6BB222zHwdNy+4PPXKPa2vnMATb56HNggWayQ+vkAS9UIC
/Pbpw4WP/gAa38uRf1c5MURHvMprVb7aZfrCxT1ov06vm/7ZjprBwBSAk9BKb4Pq
OtmdzNIe8kRpqWo1FvXbHrAPUQsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQB2o8E
41x1dFd1m97BMefZKQOV7TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwNjQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Bg4IEMA0GCSqGSIb3DQEB
CwUAA4IBAQBJMLY6PJ/0nfpyXS/UuKqQ8RLXzcIOadPLysz5rpBKq4s1TqL6NVxL
4YWLQeckztnR4HiqD6aGYLlUZ8TqNrjzP0PRBOjREYnNWMaat1YDcDL1vHG0UsC+
hOS+iskqiXA5gQL/hLX+Lr9IAR2/2hJNzWdEfK+mo/pckQPz0JHFm0wCcxtTzHI1
IjiuA3PwhpF7sSi+WPJRfES3S34G7GYI+5aqwZNNIrqi8m9ztkrvvZFuXPyWHUDv
yGZD5xbAbs2rjjqO6HzxydWejRxHFM8LvXwy8nrf8/WBW05LDjtJZeR4tyTnD9pA
FLaw/8KqzT1eZNGTeKGW7/L5Wbsjawby
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:40 2026 by rpki-client