Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140336.roa
File:                     AS140336.roa (raw, json)
Hash identifier:          Qq697X/0B2nM0qnnmn2N2IEYCIO1RVqJv6XuLtDhohs=
Subject key identifier:   E6:CD:55:17:EB:6E:49:F4:64:7E:BD:A6:C3:A8:24:5A:A8:2D:1A:23
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       6422B74324A41C609671B350CF36C86E7D271DF9
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140336.roa
Signing time:             Wed 20 May 2026 16:15:18 +0000
ROA not before:           Wed 20 May 2026 16:10:18 +0000
ROA not after:            Wed 19 May 2027 16:15:18 +0000
asID:                     140336
IP address blocks:        240e:267:8000::/40 maxlen: 40
                          240e:267:8100::/40 maxlen: 40
                          240e:267:8200::/40 maxlen: 40
                          240e:267:8300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 06:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:22:b7:43:24:a4:1c:60:96:71:b3:50:cf:36:c8:6e:7d:27:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 20 16:10:18 2026 GMT
            Not After : May 19 16:15:18 2027 GMT
        Subject: CN=E6CD5517EB6E49F4647EBDA6C3A8245AA82D1A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:5f:95:c4:9f:2c:bd:0c:19:50:21:19:8a:
                    70:54:c1:25:5d:a3:a8:a5:92:b6:d7:65:4d:74:50:
                    7b:2f:ae:f8:61:cd:c3:ad:72:2a:f4:33:00:d1:4b:
                    db:58:01:de:53:6b:04:72:89:2f:af:ad:1a:d5:12:
                    42:e7:43:73:d1:35:81:f2:db:4e:4d:ac:f7:f1:7c:
                    63:f6:d9:6a:da:62:0a:2a:a1:6b:80:aa:e9:a0:c0:
                    3f:4f:20:48:ea:d1:26:4e:16:be:b6:2b:14:1f:e1:
                    bf:81:d9:61:3e:ac:ae:f5:3e:38:ce:65:4c:e5:b8:
                    a0:7d:e7:d7:00:6b:d3:89:14:40:87:16:02:8f:0d:
                    f2:f4:53:0b:7c:76:d6:93:2e:e2:9b:64:d8:cb:cb:
                    99:9a:df:42:e7:37:bf:18:a8:0a:04:99:40:ba:a3:
                    10:d5:de:e1:f9:71:e5:c7:d5:c6:9a:2b:8a:15:40:
                    ad:61:7d:5a:40:ea:3e:8f:da:e4:5b:de:9a:19:ed:
                    48:e8:35:3a:d4:d6:19:d9:79:26:03:95:b1:af:d7:
                    15:5a:c0:19:1c:09:ce:e6:f5:cd:69:a1:bf:8f:7f:
                    08:8b:cf:56:d7:88:81:d7:27:a4:90:42:aa:a8:d4:
                    13:2d:10:07:88:f6:1f:26:a1:4d:5b:5d:88:aa:95:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:55:17:EB:6E:49:F4:64:7E:BD:A6:C3:A8:24:5A:A8:2D:1A:23
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:267:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:e0:10:f7:53:d9:31:b6:a0:3a:35:6b:ee:be:d5:03:ea:
         8b:e6:0f:40:00:6b:c9:a8:69:93:f2:50:e5:4f:04:30:2e:12:
         cb:a4:a2:b7:2a:ec:b9:64:99:79:bb:db:b9:c5:c6:05:3d:6e:
         d6:f8:5f:d3:89:a6:cd:09:d7:07:00:c4:8d:b4:51:eb:0a:8e:
         03:9c:2c:a4:d3:8d:ee:41:4c:da:7d:f6:0d:77:24:97:35:c5:
         51:fe:5b:a1:3c:98:e6:6d:e8:16:8e:ba:59:37:6c:c8:64:b9:
         c0:08:a4:8f:f9:61:ac:ec:a8:5b:5b:15:3f:a9:a3:ce:e7:65:
         c2:b3:f1:de:35:d0:b9:92:63:dc:5c:7d:1d:85:c9:78:7e:82:
         79:a7:d6:dc:2f:91:92:f7:9b:7b:95:42:0e:91:27:95:cc:c9:
         c4:f4:75:27:84:cd:c2:a9:02:53:48:a5:bb:d7:7c:cd:fa:e5:
         29:ce:d4:15:0b:e9:90:ae:d0:f0:c0:87:ca:82:33:05:17:71:
         f2:6b:0b:ef:b2:5c:db:9e:10:28:c7:d7:8e:e9:33:85:5f:c4:
         8a:da:ad:a3:7e:0f:4d:29:c7:16:44:86:4a:fe:82:26:c5:36:
         f4:b2:6a:4d:b6:bd:dd:59:03:69:ed:c3:0d:67:6d:a8:a4:18:
         89:00:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:24 2026 by rpki-client