Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS140869.roa
File:                     AS140869.roa (raw, json)
Hash identifier:          G0AXBjKAqQ3cRNuqAMNt9oGLDNDpohEyM6k/7KkiFnc=
Subject key identifier:   29:74:45:13:76:D2:E3:BB:B9:FC:79:C0:6C:A0:AD:F9:BA:48:84:91
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       221E1E792AFF431C97ED79A793E3C7C62C506165
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS140869.roa
Signing time:             Tue 19 May 2026 02:36:41 +0000
ROA not before:           Tue 19 May 2026 02:31:41 +0000
ROA not after:            Tue 18 May 2027 02:36:41 +0000
asID:                     140869
IP address blocks:        103.118.212.0/22 maxlen: 24
                          103.118.216.0/22 maxlen: 24
                          103.119.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:1e:79:2a:ff:43:1c:97:ed:79:a7:93:e3:c7:c6:2c:50:61:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: May 19 02:31:41 2026 GMT
            Not After : May 18 02:36:41 2027 GMT
        Subject: CN=2974451376D2E3BBB9FC79C06CA0ADF9BA488491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:d4:35:85:c4:3b:c1:10:0f:74:28:54:e5:
                    75:f7:bc:63:e4:45:a1:1a:df:e4:81:f2:5b:81:07:
                    93:4e:a0:3a:41:88:ea:7c:79:cc:10:96:b7:24:b4:
                    a5:8e:74:30:1b:72:08:0e:a0:a7:ac:56:73:68:73:
                    b4:bc:ed:32:b4:a5:21:ad:92:f2:51:ce:d9:d2:06:
                    64:d8:28:78:5b:b2:96:90:32:0b:4e:34:a2:63:ff:
                    40:e9:da:96:a7:cf:64:06:6b:c3:40:4e:aa:cc:0d:
                    b0:4a:ac:50:69:1e:bd:d1:1d:b4:3d:0d:6a:3f:ce:
                    7e:8c:e3:bb:7f:42:14:1a:14:07:54:4a:9d:e5:e2:
                    65:dd:4d:ac:8d:c5:8a:0d:c0:59:08:22:cb:ff:fa:
                    8b:ad:21:f1:b6:f2:95:29:f3:5d:25:df:3b:23:fd:
                    28:dc:32:91:75:f5:7c:05:10:87:61:65:5a:21:c3:
                    de:a4:16:71:de:38:36:42:2b:f4:97:1c:66:5a:ef:
                    bc:99:8c:97:32:69:f0:ac:8f:4b:05:8a:86:45:79:
                    50:ac:df:36:56:1b:e1:65:16:cb:e6:66:db:24:e1:
                    4e:5d:ae:05:fe:bb:73:81:98:fb:6b:62:82:c8:cf:
                    29:a4:3d:86:f1:10:c4:48:f4:99:44:0a:26:41:f5:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:74:45:13:76:D2:E3:BB:B9:FC:79:C0:6C:A0:AD:F9:BA:48:84:91
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS140869.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.212.0-103.118.219.255
                  103.119.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:30:b0:63:25:08:04:58:1f:c6:df:95:53:0b:93:04:e4:
         6a:b5:f2:a4:48:7f:53:60:de:59:db:ae:91:fb:2e:c6:97:1e:
         b8:4e:63:46:dc:7e:4d:9d:04:83:db:0d:34:26:3d:54:9a:cc:
         52:ff:8f:02:64:1c:14:13:c9:ea:97:70:c4:8e:df:fb:02:fd:
         14:96:47:c4:3f:4b:f9:c0:e8:9b:7f:aa:46:06:dd:b5:c1:0e:
         9c:5b:4b:34:ce:c9:37:8d:88:06:4f:56:13:14:75:24:cb:1d:
         59:27:d1:a9:9b:df:ea:61:d8:b8:d1:1d:62:fb:52:97:60:20:
         7f:c0:2c:4d:88:68:bf:a3:0a:68:40:b0:99:6d:80:bd:de:99:
         c7:29:09:ad:bc:9d:87:c7:2b:57:e5:3d:e2:7b:f5:bf:1a:6b:
         82:e7:de:79:73:56:33:05:6f:ae:15:51:89:ed:11:12:5b:2c:
         3e:b1:ec:91:4f:fb:8e:85:e9:ae:70:48:55:70:68:12:e4:84:
         aa:b3:3e:f8:c4:79:c6:d4:be:d8:ca:82:92:34:86:6b:dc:ae:
         5d:b1:b2:56:8d:56:ee:bf:38:af:a6:07:72:c9:bb:c4:83:34:
         94:df:54:37:8d:e0:44:57:4b:27:54:a4:6e:ed:10:99:f3:d3:
         09:bf:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:51 2026 by rpki-client