Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140355.roa
File:                     AS140355.roa (raw, json)
Hash identifier:          wujpWd+tv7kJvRuWWccQM8OYwUVSBUkBAdFoCYJTh9o=
Subject key identifier:   EB:CA:DD:97:F6:F9:69:EC:2E:81:8E:58:01:C1:F2:67:1E:AF:BC:5B
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       7E4158CB55E6E5537B5F23AA357148FACD7216A6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140355.roa
Signing time:             Thu 21 May 2026 16:11:00 +0000
ROA not before:           Thu 21 May 2026 16:06:00 +0000
ROA not after:            Thu 20 May 2027 16:11:00 +0000
asID:                     140355
IP address blocks:        240e:44d:7940::/42 maxlen: 42
                          240e:44d:7a40::/42 maxlen: 42
                          240e:44d:7b40::/42 maxlen: 42
                          240e:44d:7c40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 06:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:41:58:cb:55:e6:e5:53:7b:5f:23:aa:35:71:48:fa:cd:72:16:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 21 16:06:00 2026 GMT
            Not After : May 20 16:11:00 2027 GMT
        Subject: CN=EBCADD97F6F969EC2E818E5801C1F2671EAFBC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:ed:9e:26:3e:19:f7:d8:c5:a4:c7:93:c2:
                    37:d0:d7:31:19:1a:40:95:5a:05:e1:d9:78:71:80:
                    46:95:07:c2:c6:69:8d:79:0d:88:a9:4d:7f:b1:4c:
                    f3:bb:4d:42:7a:c5:8a:90:b0:f3:48:78:f8:4c:b5:
                    3a:cc:d2:99:f8:fb:22:8d:a3:2d:15:b0:96:1e:0c:
                    16:84:17:f1:ec:bb:9e:72:a9:70:3a:c3:f0:12:ec:
                    e3:ad:d5:c9:0d:1a:7d:d3:06:eb:b9:42:c1:e0:98:
                    54:b2:4f:e0:f5:e6:d8:b5:45:1c:46:8b:22:f8:20:
                    c6:83:f7:e3:ea:6a:62:fb:dc:11:43:fe:a1:72:a1:
                    39:81:5b:5b:e4:0f:b9:a3:b1:bb:3c:29:60:88:54:
                    80:78:8b:47:d4:c2:32:2c:74:c3:47:05:4c:a8:d3:
                    04:08:aa:04:e4:84:88:1f:c9:55:96:d5:08:e2:f9:
                    f4:b8:2f:1b:c5:69:2f:7d:d4:87:30:91:16:02:0c:
                    67:89:8b:4e:cf:17:76:91:6d:3a:26:f0:06:80:ac:
                    4b:35:21:e4:ac:4a:37:bf:95:bc:fa:61:da:36:99:
                    d7:5f:d7:65:7f:cc:a8:66:64:6b:68:51:5b:3c:f1:
                    d8:69:3c:8e:9e:28:ae:e0:24:69:66:6e:2c:6e:ad:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CA:DD:97:F6:F9:69:EC:2E:81:8E:58:01:C1:F2:67:1E:AF:BC:5B
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:44d:7940::/42
                  240e:44d:7a40::/42
                  240e:44d:7b40::/42
                  240e:44d:7c40::/42

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:6e:fc:71:a9:c3:c4:54:55:0d:19:2e:f3:66:0d:71:0d:
         3b:c9:f2:75:85:e4:98:09:99:3c:93:f7:05:d3:d1:28:e2:5e:
         c8:6a:5e:1a:ad:15:9e:dd:df:5d:f0:dc:20:27:12:37:7d:f0:
         a1:71:6f:b1:34:f0:14:47:c5:dd:33:ae:0e:9b:47:d7:37:66:
         d6:02:4e:43:71:f4:6c:07:0e:75:8d:56:9c:a6:91:07:75:a8:
         2b:5e:08:0f:a5:a3:a6:ee:d7:cf:34:ca:0e:2b:f2:bd:f8:61:
         db:ff:1e:a3:df:f6:9e:ac:79:d8:68:78:3c:52:38:77:b6:a2:
         9f:38:69:31:3a:76:2e:8d:9b:ac:21:bc:92:e7:b3:5e:18:c5:
         bb:29:a5:4b:fa:9d:b1:b4:55:97:c1:a9:a9:45:a8:f6:67:14:
         4f:c9:65:fc:5d:18:89:0a:37:33:76:22:d3:67:7a:62:c2:8e:
         eb:91:69:f0:cb:e1:1b:1b:d4:0c:9f:2e:27:0f:65:68:5f:48:
         f2:d8:21:6a:41:3f:6c:ad:37:51:9a:72:4a:a9:c4:2a:57:fd:
         ad:e3:e2:e0:83:10:a5:a0:2f:9f:d0:36:94:ab:94:e4:59:d1:
         a6:b8:02:1c:7b:16:44:18:06:87:d4:9a:1f:bb:23:21:3a:c6:
         d0:d2:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:20 2026 by rpki-client