Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS141425.roa
File: AS141425.roa (raw, json)
Hash identifier: DuI4NyyOopphpbCDUBgyruWxlUMMDJeTAHfnCIru5pk=
Subject key identifier: EF:7D:4D:FD:9C:89:B3:3C:74:76:30:AD:F3:FF:DC:10:92:61:CA:42
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 6DF75AEF101AEE9404F50300D37341B1CD31C621
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS141425.roa
Signing time: Fri 05 Jun 2026 06:27:46 +0000
ROA not before: Fri 05 Jun 2026 06:22:46 +0000
ROA not after: Fri 04 Jun 2027 06:27:46 +0000
asID: 141425
IP address blocks: 36.139.219.0/24 maxlen: 24
36.140.193.0/24 maxlen: 24
36.140.199.0/24 maxlen: 24
36.140.216.0/24 maxlen: 24
36.140.217.0/24 maxlen: 24
112.33.0.0/24 maxlen: 24
112.33.1.0/24 maxlen: 24
112.33.2.0/24 maxlen: 24
112.33.3.0/24 maxlen: 24
112.33.4.0/24 maxlen: 24
112.33.5.0/24 maxlen: 24
112.33.6.0/24 maxlen: 24
112.33.7.0/24 maxlen: 24
112.33.8.0/24 maxlen: 24
112.33.9.0/24 maxlen: 24
112.33.10.0/24 maxlen: 24
112.33.11.0/24 maxlen: 24
112.33.12.0/22 maxlen: 22
112.33.12.0/24 maxlen: 24
112.33.13.0/24 maxlen: 24
112.33.14.0/24 maxlen: 24
112.33.15.0/24 maxlen: 24
112.33.16.0/22 maxlen: 22
112.33.16.0/24 maxlen: 24
112.33.17.0/24 maxlen: 24
112.33.18.0/24 maxlen: 24
112.33.19.0/24 maxlen: 24
112.33.20.0/24 maxlen: 24
112.33.21.0/24 maxlen: 24
112.33.22.0/24 maxlen: 24
112.33.23.0/24 maxlen: 24
112.33.24.0/24 maxlen: 24
112.33.25.0/24 maxlen: 24
112.33.26.0/23 maxlen: 23
112.33.26.0/24 maxlen: 24
112.33.27.0/24 maxlen: 24
112.33.28.0/22 maxlen: 22
112.33.28.0/24 maxlen: 24
112.33.29.0/24 maxlen: 24
112.33.30.0/24 maxlen: 24
112.33.31.0/24 maxlen: 24
112.33.32.0/19 maxlen: 19
112.33.32.0/24 maxlen: 24
112.33.33.0/24 maxlen: 24
112.33.34.0/24 maxlen: 24
112.33.35.0/24 maxlen: 24
112.33.36.0/24 maxlen: 24
112.33.37.0/24 maxlen: 24
112.33.38.0/24 maxlen: 24
112.33.39.0/24 maxlen: 24
112.33.40.0/24 maxlen: 24
112.33.41.0/24 maxlen: 24
112.33.42.0/24 maxlen: 24
112.33.43.0/24 maxlen: 24
112.33.44.0/24 maxlen: 24
112.33.45.0/24 maxlen: 24
112.33.46.0/24 maxlen: 24
112.33.47.0/24 maxlen: 24
112.33.48.0/24 maxlen: 24
112.33.49.0/24 maxlen: 24
112.33.50.0/24 maxlen: 24
112.33.51.0/24 maxlen: 24
112.33.52.0/24 maxlen: 24
112.33.53.0/24 maxlen: 24
112.33.54.0/24 maxlen: 24
112.33.55.0/24 maxlen: 24
112.33.56.0/24 maxlen: 24
112.33.57.0/24 maxlen: 24
112.33.58.0/24 maxlen: 24
112.33.59.0/24 maxlen: 24
112.33.60.0/24 maxlen: 24
112.33.61.0/24 maxlen: 24
112.33.62.0/24 maxlen: 24
112.33.63.0/24 maxlen: 24
112.33.100.0/22 maxlen: 22
112.33.100.0/24 maxlen: 24
112.33.101.0/24 maxlen: 24
112.33.102.0/24 maxlen: 24
112.33.103.0/24 maxlen: 24
112.33.104.0/21 maxlen: 21
112.33.104.0/24 maxlen: 24
112.33.105.0/24 maxlen: 24
112.33.106.0/24 maxlen: 24
112.33.107.0/24 maxlen: 24
112.33.108.0/24 maxlen: 24
112.33.109.0/24 maxlen: 24
112.33.110.0/24 maxlen: 24
112.33.111.0/24 maxlen: 24
112.33.112.0/21 maxlen: 21
112.33.112.0/24 maxlen: 24
112.33.113.0/24 maxlen: 24
112.33.114.0/24 maxlen: 24
112.33.115.0/24 maxlen: 24
112.33.116.0/24 maxlen: 24
112.33.117.0/24 maxlen: 24
112.33.118.0/24 maxlen: 24
112.33.119.0/24 maxlen: 24
112.33.120.0/24 maxlen: 24
112.35.0.0/21 maxlen: 21
112.35.0.0/24 maxlen: 24
112.35.1.0/24 maxlen: 24
112.35.2.0/24 maxlen: 24
112.35.3.0/24 maxlen: 24
112.35.4.0/24 maxlen: 24
112.35.5.0/24 maxlen: 24
112.35.6.0/24 maxlen: 24
112.35.7.0/24 maxlen: 24
112.35.8.0/24 maxlen: 24
112.35.9.0/24 maxlen: 24
112.35.10.0/24 maxlen: 24
120.197.81.0/24 maxlen: 24
120.232.185.0/24 maxlen: 24
120.232.197.0/24 maxlen: 24
120.232.200.0/23 maxlen: 23
183.232.5.0/24 maxlen: 24
183.232.27.0/24 maxlen: 24
183.232.74.0/24 maxlen: 24
183.232.75.0/24 maxlen: 24
183.240.8.0/22 maxlen: 22
183.240.31.0/24 maxlen: 24
183.240.32.0/24 maxlen: 24
183.240.34.0/24 maxlen: 24
183.240.35.0/24 maxlen: 24
183.240.213.0/24 maxlen: 24
183.240.214.0/23 maxlen: 23
183.240.217.0/24 maxlen: 24
221.176.53.0/24 maxlen: 24
221.176.54.0/24 maxlen: 24
2409:8c54:8c0::/44 maxlen: 44
2409:8c54:b010::/44 maxlen: 44
2409:8c54:b030::/44 maxlen: 44
2409:8c85:5400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 01:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f7:5a:ef:10:1a:ee:94:04:f5:03:00:d3:73:41:b1:cd:31:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Jun 5 06:22:46 2026 GMT
Not After : Jun 4 06:27:46 2027 GMT
Subject: CN=EF7D4DFD9C89B33C747630ADF3FFDC109261CA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:b5:a3:57:d6:5a:5b:57:97:0d:5b:91:ea:
8d:e7:39:c9:c6:14:f5:89:9e:d4:83:cc:72:31:37:
13:1b:c7:c9:39:89:f9:e6:c2:10:b4:dd:82:59:e1:
ca:44:18:f0:79:58:4b:a0:63:ea:64:82:46:27:0b:
7f:ca:b3:f7:82:e6:1f:fa:71:be:bc:6f:87:84:fc:
8e:a8:52:05:c3:0c:a7:1c:44:46:38:c1:99:41:3b:
42:48:0a:e3:39:c1:fe:ea:17:81:75:f3:15:7e:93:
36:b4:46:bd:15:32:1e:22:8c:7b:a2:57:10:3f:46:
55:05:4c:59:f1:b8:83:72:d0:56:64:9d:5f:99:b0:
af:a0:2d:cb:43:2d:89:18:a6:5e:4e:5b:a8:22:c0:
70:cd:f5:6d:e3:19:fb:3d:bb:a6:54:1e:28:07:d4:
4a:3a:af:90:ea:ce:cc:4e:7a:fb:70:95:10:74:46:
d2:93:43:88:c8:9e:ba:21:29:89:c1:b8:9b:55:33:
47:0d:0a:4b:fc:a2:50:92:2f:ad:ae:47:98:f2:b2:
c6:1a:72:e6:72:b7:a0:ac:66:3e:d6:e9:28:d7:00:
49:ba:4a:cc:a3:07:62:dd:b1:90:86:a5:12:61:93:
38:28:53:e5:c4:66:b4:1b:d9:4d:c0:62:53:50:cd:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:4D:FD:9C:89:B3:3C:74:76:30:AD:F3:FF:DC:10:92:61:CA:42
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS141425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.139.219.0/24
36.140.193.0/24
36.140.199.0/24
36.140.216.0/23
112.33.0.0/18
112.33.100.0-112.33.120.255
112.35.0.0-112.35.10.255
120.197.81.0/24
120.232.185.0/24
120.232.197.0/24
120.232.200.0/23
183.232.5.0/24
183.232.27.0/24
183.232.74.0/23
183.240.8.0/22
183.240.31.0-183.240.32.255
183.240.34.0/23
183.240.213.0-183.240.215.255
183.240.217.0/24
221.176.53.0-221.176.54.255
IPv6:
2409:8c54:8c0::/44
2409:8c54:b010::/44
2409:8c54:b030::/44
2409:8c85:5400::/48
Signature Algorithm: sha256WithRSAEncryption
ac:f4:62:34:40:f2:41:db:e2:2a:38:93:13:2c:13:50:f3:14:
b4:68:de:3c:67:3f:b3:31:e8:fa:50:73:e5:04:c7:19:28:24:
29:1b:d2:b9:9f:aa:19:32:17:d1:d8:b6:bd:0b:5f:ef:b3:6f:
99:44:88:8d:82:ad:55:fb:32:33:68:6e:16:7f:63:92:09:2a:
ed:fc:a9:55:ba:05:c3:2c:e9:85:31:2b:37:af:e9:b0:c5:4d:
22:87:53:82:aa:92:fb:dd:72:ad:a9:75:cd:d8:3e:fb:74:b2:
a8:2e:ab:01:d8:b0:83:59:4e:cd:98:9f:c4:dd:61:af:40:c8:
ab:13:76:37:43:30:e7:76:94:f2:5e:d8:7c:69:36:88:66:bf:
9a:36:11:1e:86:ea:a4:03:5d:65:f7:33:4d:27:53:e2:1f:68:
ad:00:93:b0:d2:e3:ee:b7:58:03:75:3e:ef:61:04:de:c5:47:
4c:e6:f4:5b:58:26:3e:65:a7:4b:19:4b:ae:22:94:a6:40:1b:
be:a1:c0:75:f2:58:b1:9f:ef:a9:ce:03:dc:d1:65:9f:0a:3f:
f3:7b:db:49:e4:bf:6f:eb:d6:7a:6f:20:44:7f:6f:30:00:64:
22:10:b6:5c:7c:23:af:79:46:7c:f3:9f:50:d8:d5:91:b3:29:
72:45:8d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:35 2026 by rpki-client