Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140862.roa
File:                     AS140862.roa (raw, json)
Hash identifier:          jVYr5Lld4f4SjXyG35207q9qCEynTP3i+q1KPN9oHGs=
Subject key identifier:   BD:9F:37:8E:7C:FF:12:DF:2A:91:D7:FE:94:F6:2C:6B:8D:D8:2F:52
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       46762F6458385F6E67518300FCB5BDEBA1E5C4BE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140862.roa
Signing time:             Tue 26 May 2026 16:07:05 +0000
ROA not before:           Tue 26 May 2026 16:02:05 +0000
ROA not after:            Tue 25 May 2027 16:07:05 +0000
asID:                     140862
IP address blocks:        240e:13:80a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:76:2f:64:58:38:5f:6e:67:51:83:00:fc:b5:bd:eb:a1:e5:c4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 26 16:02:05 2026 GMT
            Not After : May 25 16:07:05 2027 GMT
        Subject: CN=BD9F378E7CFF12DF2A91D7FE94F62C6B8DD82F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:b7:7b:19:63:13:d0:97:2d:b2:a1:14:e6:
                    65:2a:2e:05:e2:53:af:f4:10:60:94:14:c3:36:a8:
                    c7:43:12:73:00:7f:56:66:5d:65:d7:54:35:bd:cd:
                    62:ec:2b:e3:72:ce:dd:8a:b8:07:4f:e8:48:ec:30:
                    96:14:00:f2:ec:cd:53:31:55:87:9e:3e:85:00:38:
                    7e:a8:85:ef:33:e4:60:76:b9:a8:43:9c:9b:4d:e8:
                    7f:71:97:dd:69:5f:2b:f4:5c:cf:a6:50:4c:e7:f0:
                    dc:d3:06:2d:55:2e:8b:00:62:eb:71:3e:51:5a:f4:
                    e2:d4:47:18:67:b4:c3:66:a0:ec:cc:b8:4e:90:cd:
                    8e:1e:4c:7a:eb:d3:69:4d:68:94:75:ee:24:aa:10:
                    ac:82:c6:9a:87:83:98:b8:67:52:bb:2b:b6:54:98:
                    39:2c:0f:c4:ae:26:7d:73:bf:05:a1:31:60:7d:61:
                    13:21:df:eb:56:c0:e3:56:03:34:ee:56:60:f7:ca:
                    00:7c:9b:8b:41:09:34:64:a1:0d:06:b7:f3:88:f5:
                    30:f3:0f:cf:98:8c:85:64:14:73:b5:40:ee:26:4c:
                    5f:74:84:67:7e:eb:1a:ed:7b:70:62:a6:59:5c:e1:
                    97:a7:1c:9a:d5:67:5c:91:61:c9:e8:49:b4:d7:46:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9F:37:8E:7C:FF:12:DF:2A:91:D7:FE:94:F6:2C:6B:8D:D8:2F:52
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140862.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:13:80a::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:00:df:74:b4:96:33:d8:19:01:57:e4:62:ab:67:b3:f5:ab:
         2b:e2:30:66:20:d4:e5:f6:8f:8c:dc:f6:07:88:1c:f1:1f:10:
         fd:a0:fc:98:20:c0:9c:8c:8a:a6:e7:d7:6f:cd:82:08:60:fc:
         9a:52:5b:37:26:49:0b:2e:11:28:ac:38:63:73:4c:7c:56:72:
         7c:91:4d:38:8b:4c:4e:db:ab:32:6f:8d:ec:b6:44:40:23:da:
         d4:bd:c7:75:3b:05:8f:2d:ba:68:86:39:80:f1:a8:de:2e:d4:
         80:84:50:b3:fd:d6:a5:e6:3b:36:6a:c9:e4:b4:71:ec:f8:91:
         a4:fb:9d:90:6a:18:9c:f1:dd:d4:ff:d1:ed:ee:33:8a:c3:96:
         a1:50:d3:9c:71:c2:3a:bf:ee:c1:b6:b1:2f:2d:ef:4d:23:7f:
         f7:82:ab:06:45:ed:5b:5f:28:a0:e3:99:fc:b0:c4:61:f8:32:
         ea:64:06:0b:e0:ea:23:c5:c7:57:be:e7:b1:44:b5:02:84:4a:
         90:47:4f:d8:8b:77:b2:e2:e8:5a:d4:13:06:f6:1a:bd:4c:2d:
         68:1c:6f:31:ee:18:79:34:f5:61:93:0b:cd:7d:89:ca:4f:13:
         36:94:7e:21:8c:49:1e:62:2e:5f:78:ce:62:ca:17:bf:ac:18:
         e6:c5:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:38 2026 by rpki-client