Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149178.roa
File:                     AS149178.roa (raw, json)
Hash identifier:          hT8IBFsagPTOR6twLnqyt06TLLYADceXETSLm3kwKjA=
Subject key identifier:   FD:CB:D9:F5:0A:DE:47:81:59:7F:8E:B7:79:29:FF:43:3E:7C:CC:04
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       406F5B05FDDC0DE80773CD91800798B926FFF463
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149178.roa
Signing time:             Wed 10 Jun 2026 16:03:53 +0000
ROA not before:           Wed 10 Jun 2026 15:58:53 +0000
ROA not after:            Wed 09 Jun 2027 16:03:53 +0000
asID:                     149178
IP address blocks:        223.244.0.0/18 maxlen: 18
                          223.244.21.0/24 maxlen: 24
                          240e:6:d1a0::/44 maxlen: 44
                          240e:95a:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6f:5b:05:fd:dc:0d:e8:07:73:cd:91:80:07:98:b9:26:ff:f4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: Jun 10 15:58:53 2026 GMT
            Not After : Jun  9 16:03:53 2027 GMT
        Subject: CN=FDCBD9F50ADE4781597F8EB77929FF433E7CCC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:ae:e7:ad:ba:d6:6c:b5:8e:58:3c:b2:10:
                    51:13:1a:01:59:a5:90:37:89:73:1a:33:65:4b:83:
                    13:fe:47:ce:ba:62:6c:3c:19:43:b9:57:26:f6:10:
                    b9:81:c8:a2:6d:34:9a:1f:ca:4a:90:03:53:76:b7:
                    68:11:c6:8a:0c:2e:46:58:1a:63:6a:7f:d0:07:2e:
                    18:d8:d2:50:5e:cd:70:8a:dc:9b:e1:fb:b1:8c:f7:
                    c2:02:99:5e:8e:cb:66:04:03:fc:c0:f1:9e:ef:be:
                    61:c4:fc:3d:34:d1:91:ba:68:d2:b4:fe:8f:00:77:
                    4d:19:9b:03:4d:f5:3c:c5:66:5d:ce:ee:d5:57:1d:
                    03:c3:66:b0:68:4a:a2:18:f7:ce:3b:b1:39:0d:59:
                    97:da:0c:f5:32:b4:ca:41:dd:8a:75:ac:43:bb:32:
                    6c:20:cf:f6:0c:3e:04:ee:1d:f5:e2:f1:2a:f8:25:
                    f0:af:af:85:ab:14:63:24:9a:0c:b9:2f:8b:11:d4:
                    df:86:8e:8e:ba:aa:6f:64:85:ee:9c:80:33:87:f1:
                    f5:6d:0b:66:0c:9a:8c:39:c1:aa:ed:3d:a5:1c:93:
                    eb:3e:aa:44:f7:79:61:90:47:17:6d:0c:be:c3:84:
                    1e:7f:7e:e7:d6:04:bf:41:88:52:51:5c:4f:85:c0:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:D9:F5:0A:DE:47:81:59:7F:8E:B7:79:29:FF:43:3E:7C:CC:04
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149178.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.244.0.0/18
                IPv6:
                  240e:6:d1a0::/44
                  240e:95a:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:45:8b:33:4e:ea:df:f1:5b:dc:e1:74:d0:ee:ad:41:20:a6:
         80:70:e4:23:c9:49:99:15:f4:b1:0b:db:15:46:31:05:2a:24:
         e3:c6:cc:a7:10:c2:d5:ee:5c:eb:f7:64:0b:be:83:5f:73:9f:
         d2:b1:c0:11:bf:8a:e6:97:95:09:93:80:af:c0:a6:2b:7e:2d:
         90:8d:4d:29:bc:a6:d2:09:a3:f3:9b:96:bc:45:c0:5e:85:2b:
         77:ca:de:07:2b:02:eb:6c:2c:db:df:73:e6:36:6a:c1:d8:04:
         f1:80:08:10:5d:4a:49:f7:45:f1:e1:41:4b:84:39:a7:86:e7:
         1b:75:ee:82:43:8f:fe:04:39:90:81:3c:e8:0b:55:3e:7e:34:
         4e:56:f1:b2:7c:ff:09:3c:09:27:3a:9b:38:60:b5:4a:19:c3:
         4a:7c:74:6d:45:41:77:4b:e3:3e:80:c2:ac:ec:41:6f:3e:41:
         6d:57:95:1d:b8:b8:e8:72:30:17:74:ef:2d:75:17:ad:2f:db:
         a5:7f:2d:11:bc:ae:92:59:3e:32:02:17:3a:e2:8c:b7:bc:d2:
         81:26:03:67:7f:0b:ab:64:26:50:91:ea:1f:65:99:94:3b:81:
         97:78:92:f7:77:b1:15:5a:90:19:de:b4:4f:44:af:7c:6a:d8:
         3a:92:ab:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:00 2026 by rpki-client