Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140716.roa
File:                     AS140716.roa (raw, json)
Hash identifier:          GS7v0EcdG/AXCHc0iFo17HUzaeWlVx3LY/f80n+5gVA=
Subject key identifier:   C0:A1:6C:A4:F1:03:FE:37:55:58:E3:BE:A7:73:16:B9:09:6B:4E:1A
Certificate issuer:       /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial:       490ED61C904E49BDDD4D4BCF083A73C2CC7F4E94
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140716.roa
Signing time:             Mon 01 Jun 2026 01:56:08 +0000
ROA not before:           Mon 01 Jun 2026 01:51:08 +0000
ROA not after:            Mon 31 May 2027 01:56:08 +0000
asID:                     140716
IP address blocks:        116.147.0.0/23 maxlen: 23
                          116.147.2.0/23 maxlen: 23
                          116.147.4.0/23 maxlen: 23
                          116.147.10.0/23 maxlen: 23
                          116.147.12.0/23 maxlen: 23
                          116.147.36.0/23 maxlen: 23
                          116.147.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:d6:1c:90:4e:49:bd:dd:4d:4b:cf:08:3a:73:c2:cc:7f:4e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
        Validity
            Not Before: Jun  1 01:51:08 2026 GMT
            Not After : May 31 01:56:08 2027 GMT
        Subject: CN=C0A16CA4F103FE375558E3BEA77316B9096B4E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:cb:dc:06:d4:11:4e:c9:3a:a4:3d:67:4a:
                    36:f3:a1:f8:ba:67:f2:58:c0:d3:29:f0:bd:bb:54:
                    88:c0:d2:72:58:38:90:e3:32:69:92:45:f6:8f:a0:
                    0e:ee:1c:79:9e:82:9c:76:6e:1b:b5:b6:cf:8a:d6:
                    d0:ba:4c:c4:4b:c2:86:2a:9d:f8:e8:b7:c8:75:ae:
                    96:bb:dc:f2:3b:1f:f6:13:56:6d:c7:d1:a1:5e:7e:
                    f3:e9:c9:55:e4:0c:d0:66:7e:0b:39:77:54:20:d4:
                    16:ec:0b:a1:d9:a8:19:bd:9c:2e:b7:49:b3:d7:35:
                    63:76:aa:6c:09:9f:22:65:46:3a:0e:e9:94:aa:06:
                    05:3e:62:57:06:e2:bd:a5:13:22:91:f0:5c:29:ff:
                    41:f6:07:8a:ce:8d:bc:1a:25:f8:36:75:5a:73:9c:
                    3c:c4:48:07:e8:b5:a5:02:b3:53:82:8f:a7:3d:25:
                    a4:85:f5:e4:79:06:5f:e5:c2:9a:0e:f2:f3:df:26:
                    aa:4a:93:7a:e8:47:95:b7:29:f3:62:72:15:99:20:
                    c7:32:90:00:c0:4d:b2:fc:99:6a:2e:15:db:d2:4b:
                    f1:99:d4:7e:ae:01:57:17:25:53:b0:aa:d8:48:9e:
                    15:f2:61:b0:2a:cf:b9:75:dc:38:64:90:72:3b:33:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:6C:A4:F1:03:FE:37:55:58:E3:BE:A7:73:16:B9:09:6B:4E:1A
            X509v3 Authority Key Identifier:
                keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.147.0.0-116.147.5.255
                  116.147.10.0-116.147.13.255
                  116.147.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:52:4a:fb:7a:04:ba:2b:46:68:53:91:f9:d4:9f:c3:2a:f1:
         fc:dc:56:58:41:46:b5:4c:a4:3c:25:16:23:d2:41:b1:70:1a:
         3f:48:ce:ea:2a:72:bc:89:22:d1:1e:a1:ac:17:4f:92:dc:3a:
         c8:42:f2:98:09:92:3f:f8:7b:bb:5b:c5:73:4f:45:41:d3:b1:
         a9:b6:e5:47:b3:c0:02:77:1e:cc:bb:dd:b4:6e:f1:00:1b:85:
         04:42:cd:ca:1e:6b:0b:56:54:6d:90:5f:8c:35:32:56:e3:19:
         25:d8:c5:c3:3d:46:f2:74:49:ba:e1:69:63:60:4f:8c:a2:9e:
         0e:70:85:ca:17:ac:b5:a8:11:a0:0f:56:21:0b:4a:26:b3:2b:
         01:10:75:1a:77:f9:76:c3:ca:29:e2:00:08:8e:20:e9:d9:dd:
         ec:1f:97:75:3c:43:eb:d1:ee:74:c5:49:35:3d:e9:86:ca:ca:
         b6:1d:14:36:d7:27:74:c8:3b:3c:8c:b6:8b:b5:b5:8b:f3:f8:
         7c:10:40:6f:b0:46:16:bd:75:ed:4e:a8:cb:f7:4b:5c:10:21:
         95:42:48:1e:03:a5:76:9a:d0:d4:8c:e1:33:0f:d4:aa:af:37:
         2a:83:21:23:78:7e:2b:a6:62:4b:7c:24:a7:78:9b:93:10:3b:
         3b:57:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:16 2026 by rpki-client