Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140716.roa
File:                     AS140716.roa (raw, json)
Hash identifier:          V4LTR8b9pIeo7ugDcylbWNZ0DFGjyLA60B8hcDaJhiU=
Subject key identifier:   CF:81:CA:30:E8:A6:E6:7F:1E:2E:79:8C:62:01:F6:F4:29:15:D8:75
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       0325B28C647CB04EE6EA8C73A42E6FF54ECE7ED5
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140716.roa
Signing time:             Wed 27 May 2026 01:01:50 +0000
ROA not before:           Wed 27 May 2026 00:56:50 +0000
ROA not after:            Wed 26 May 2027 01:01:50 +0000
asID:                     140716
IP address blocks:        112.81.130.0/23 maxlen: 23
                          112.81.144.0/22 maxlen: 22
                          112.81.150.0/23 maxlen: 23
                          112.81.244.0/22 maxlen: 22
                          2408:8000:a018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 May 2026 02:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:25:b2:8c:64:7c:b0:4e:e6:ea:8c:73:a4:2e:6f:f5:4e:ce:7e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: May 27 00:56:50 2026 GMT
            Not After : May 26 01:01:50 2027 GMT
        Subject: CN=CF81CA30E8A6E67F1E2E798C6201F6F42915D875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:66:0e:c3:e6:a7:f9:0d:9f:fa:11:21:70:
                    5d:7b:a0:22:08:fd:95:58:7a:f5:8c:7e:74:4f:43:
                    a1:e2:2f:02:55:e0:7c:44:c5:a7:9c:5b:62:74:d0:
                    13:67:1c:79:82:33:42:a2:a3:fc:e5:6a:5d:2f:27:
                    d6:bd:21:56:8d:13:3a:78:d2:57:5f:92:bb:32:89:
                    da:a7:b6:1b:f3:0b:1d:80:4d:f5:d6:bc:7a:0c:9a:
                    38:8a:3c:7d:25:0e:d0:ee:6f:9e:1c:5b:09:bd:12:
                    4c:95:97:5e:a5:94:46:ca:d7:f6:3d:d2:24:68:1d:
                    ab:3f:a2:8a:37:38:04:1d:87:1a:97:83:6e:99:2e:
                    85:8a:da:5b:a5:09:9c:c8:c1:40:55:e2:a1:0f:bc:
                    30:37:d9:d1:36:82:93:79:ff:c6:a1:1c:ae:43:d2:
                    ea:48:14:76:07:16:c1:2c:3d:c8:c1:73:d2:76:c1:
                    37:a3:9d:64:3d:d0:ff:0f:f0:72:7c:76:ec:bd:e0:
                    2d:01:cb:04:4b:92:e3:eb:81:32:d8:14:d2:00:2a:
                    cb:83:2f:b1:16:37:52:0a:0e:06:38:d4:b8:f0:e0:
                    78:5f:3a:66:3f:25:6a:04:95:ae:28:e4:d4:53:45:
                    c5:41:81:ba:9f:60:d4:77:cc:e0:e1:2d:df:bb:4d:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:CA:30:E8:A6:E6:7F:1E:2E:79:8C:62:01:F6:F4:29:15:D8:75
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.81.130.0/23
                  112.81.144.0/22
                  112.81.150.0/23
                  112.81.244.0/22
                IPv6:
                  2408:8000:a018::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:07:d0:a4:db:f9:b4:fa:01:ae:d0:fb:4e:01:8b:5f:f6:df:
         a8:7f:87:4f:a1:63:60:d3:f2:16:18:ba:52:53:cf:38:04:df:
         8e:e0:23:17:34:2e:8a:af:89:b5:76:af:22:bf:d1:1e:5c:e2:
         d0:03:2f:76:2f:a3:5b:d4:9a:d5:45:e3:65:ca:0f:27:34:8f:
         30:a6:b8:cb:77:94:94:3a:58:c4:38:1c:f9:55:46:1c:c0:60:
         c1:0e:0e:1e:97:c9:0a:a7:4b:69:88:c5:32:41:3f:bb:ec:d4:
         38:4f:6f:e5:02:89:ee:1a:9d:46:e7:98:22:8c:98:d0:79:f6:
         c7:23:7f:9e:a3:cb:f0:f9:4a:2a:9a:f1:48:97:6e:97:31:87:
         bb:64:37:f5:cd:67:74:05:5f:60:19:bf:28:fe:17:43:d1:95:
         83:01:9e:ab:85:e2:19:9f:79:f1:1b:47:d4:d8:32:9c:03:8b:
         4d:f0:ee:1f:2f:6f:83:af:86:30:a9:99:72:fa:30:f9:91:64:
         a7:2c:a3:55:46:01:c1:27:04:ac:00:fa:44:3e:b4:f3:fd:0b:
         85:46:01:5d:d9:85:b5:6b:fc:61:64:32:96:25:27:4d:95:1d:
         38:03:7b:2e:8c:8f:90:3d:41:d8:89:9e:54:5d:0f:70:16:04:
         7c:ad:0a:b6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUAyWyjGR8sE7m6oxzpC5v9U7OftUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz
Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUyNzAwNTY1MFoX
DTI3MDUyNjAxMDE1MFowMzExMC8GA1UEAxMoQ0Y4MUNBMzBFOEE2RTY3RjFFMkU3
OThDNjIwMUY2RjQyOTE1RDg3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYUZg7D5qf5DZ/6ESFwXXugIgj9lVh69Yx+dE9DoeIvAlXgfETFp5xbYnTQ
E2cceYIzQqKj/OVqXS8n1r0hVo0TOnjSV1+SuzKJ2qe2G/MLHYBN9da8egyaOIo8
fSUO0O5vnhxbCb0STJWXXqWURsrX9j3SJGgdqz+iijc4BB2HGpeDbpkuhYraW6UJ
nMjBQFXioQ+8MDfZ0TaCk3n/xqEcrkPS6kgUdgcWwSw9yMFz0nbBN6OdZD3Q/w/w
cnx27L3gLQHLBEuS4+uBMtgU0gAqy4MvsRY3UgoOBjjUuPDgeF86Zj8lagSVrijk
1FNFxUGBup9g1HfM4OEt37tNAWUCAwEAAaOCAgcwggIDMB0GA1UdDgQWBBTPgcow
6Kbmfx4ueYxiAfb0KRXYdTAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z
JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF
NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY
eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8xL0FTMTQwNzE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBcFGCAwQCcFGQAwQBcFGWAwQC
cFH0MA8EAgACMAkDBwAkCIAAoBgwDQYJKoZIhvcNAQELBQADggEBAGgH0KTb+bT6
Aa7Q+04Bi1/236h/h0+hY2DT8hYYulJTzzgE347gIxc0LoqvibV2ryK/0R5c4tAD
L3Yvo1vUmtVF42XKDyc0jzCmuMt3lJQ6WMQ4HPlVRhzAYMEODh6XyQqnS2mIxTJB
P7vs1DhPb+UCie4anUbnmCKMmNB59scjf56jy/D5Siqa8UiXbpcxh7tkN/XNZ3QF
X2AZvyj+F0PRlYMBnquF4hmfefEbR9TYMpwDi03w7h8vb4OvhjCpmXL6MPmRZKcs
o1VGAcEnBKwA+kQ+tPP9C4VGAV3ZhbVr/GFkMpYlJ02VHTgDey6Mj5A9QdiJnlRd
D3AWBHytCrY=
-----END CERTIFICATE-----
Generated at Sat May 30 01:36:34 2026 by rpki-client