Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS140979.roa
File: AS140979.roa (raw, json)
Hash identifier: w40fw02i0MoyGm66OaSz+GodX4Pac//xvh+HdgKfrOo=
Subject key identifier: 4E:C1:EB:AF:17:B1:F5:3A:03:5B:6F:C5:CA:DD:F3:81:F5:EF:BB:E5
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 06AD8CE2E6924B7FBDBD1D147073CDDFEBC3A776
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS140979.roa
Signing time: Fri 05 Jun 2026 06:51:26 +0000
ROA not before: Fri 05 Jun 2026 06:46:26 +0000
ROA not after: Fri 04 Jun 2027 06:51:26 +0000
asID: 140979
IP address blocks: 140.206.160.0/24 maxlen: 24
140.206.161.0/24 maxlen: 24
140.206.162.0/24 maxlen: 24
140.206.163.0/24 maxlen: 24
140.206.164.0/24 maxlen: 24
140.206.165.0/24 maxlen: 24
140.206.166.0/24 maxlen: 24
140.207.26.0/24 maxlen: 24
140.207.27.0/24 maxlen: 24
140.207.28.0/24 maxlen: 24
140.207.54.0/24 maxlen: 24
140.207.55.0/24 maxlen: 24
140.207.56.0/24 maxlen: 24
140.207.57.0/24 maxlen: 24
140.207.58.0/24 maxlen: 24
140.207.59.0/24 maxlen: 24
140.207.64.0/24 maxlen: 24
140.207.65.0/24 maxlen: 24
140.207.66.0/24 maxlen: 24
140.207.67.0/24 maxlen: 24
140.207.68.0/24 maxlen: 24
140.207.71.0/24 maxlen: 24
140.207.118.0/24 maxlen: 24
140.207.119.0/24 maxlen: 24
140.207.120.0/24 maxlen: 24
140.207.121.0/24 maxlen: 24
140.207.122.0/24 maxlen: 24
140.207.123.0/24 maxlen: 24
140.207.124.0/24 maxlen: 24
140.207.125.0/24 maxlen: 24
140.207.126.0/24 maxlen: 24
140.207.127.0/24 maxlen: 24
140.207.128.0/24 maxlen: 24
140.207.129.0/24 maxlen: 24
140.207.176.0/24 maxlen: 24
140.207.177.0/24 maxlen: 24
140.207.178.0/24 maxlen: 24
140.207.179.0/24 maxlen: 24
140.207.180.0/24 maxlen: 24
140.207.181.0/24 maxlen: 24
140.207.182.0/24 maxlen: 24
140.207.183.0/24 maxlen: 24
140.207.184.0/24 maxlen: 24
140.207.185.0/24 maxlen: 24
140.207.186.0/24 maxlen: 24
140.207.187.0/24 maxlen: 24
140.207.188.0/24 maxlen: 24
140.207.189.0/24 maxlen: 24
140.207.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 06:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ad:8c:e2:e6:92:4b:7f:bd:bd:1d:14:70:73:cd:df:eb:c3:a7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jun 5 06:46:26 2026 GMT
Not After : Jun 4 06:51:26 2027 GMT
Subject: CN=4EC1EBAF17B1F53A035B6FC5CADDF381F5EFBBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:cf:41:17:9c:8e:cd:93:2e:5f:55:80:ca:
92:04:51:63:c1:e4:e6:5b:d3:01:4b:9b:db:24:7c:
da:4a:ca:95:99:7e:f2:4c:dd:dd:16:07:00:d6:f5:
5f:32:02:73:4b:e7:77:ff:b6:9f:61:85:5a:11:1e:
f4:81:7e:d6:86:58:70:19:4d:90:80:ac:81:b2:1d:
63:e3:5e:64:ef:9d:87:55:a7:29:e4:ab:5a:f2:29:
ef:9d:2e:14:5d:31:fb:08:08:03:8f:c3:c8:55:70:
b4:a0:56:64:5f:56:5a:a6:3a:0c:22:b3:39:2b:16:
63:a1:3d:7c:c8:cf:b7:11:d3:ca:73:9b:50:2e:85:
45:b3:6e:c3:33:a4:86:2c:74:da:39:23:04:86:fb:
73:0d:49:53:28:c1:c7:98:ec:93:f6:a7:43:cf:a6:
64:5a:ca:50:4d:02:ba:ae:22:8e:ed:41:e8:ff:d3:
86:b6:28:52:61:ad:bd:f8:88:a7:5f:9b:29:d1:7a:
42:64:7c:29:db:ba:0b:c3:ef:b2:7c:b7:c8:f6:b1:
ed:a2:9a:6b:e0:48:ce:7f:13:1e:4b:05:a5:60:6b:
bf:ed:2e:1d:9a:58:c8:3b:ea:bb:dd:06:dd:38:68:
65:c6:63:1e:87:b9:34:f9:e6:1d:59:fb:e6:67:fa:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:EB:AF:17:B1:F5:3A:03:5B:6F:C5:CA:DD:F3:81:F5:EF:BB:E5
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS140979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.206.160.0-140.206.166.255
140.207.26.0-140.207.28.255
140.207.54.0-140.207.59.255
140.207.64.0-140.207.68.255
140.207.71.0/24
140.207.118.0-140.207.129.255
140.207.176.0-140.207.189.255
140.207.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a7:a8:c1:85:4c:fd:c3:24:9b:0e:b1:1e:d7:f5:c4:f5:ed:
00:da:f2:2e:90:f5:ea:87:50:ca:be:f6:b2:07:cf:30:c8:1a:
68:19:1d:89:74:cf:4e:62:7b:a0:27:9b:97:45:a6:0f:5c:88:
c9:4b:40:f5:a2:c6:d7:29:60:a6:1a:ec:cd:3f:e6:40:b6:77:
26:e0:0c:fc:42:b7:59:4d:37:4f:c8:d4:33:3c:23:0e:14:45:
b3:d2:e8:97:33:0a:06:33:de:6e:a9:92:6a:5a:4e:e3:84:e9:
1a:dd:38:42:c4:31:2b:2a:5f:ab:77:46:42:aa:3d:ad:8b:fd:
3c:69:3b:94:a2:ac:c8:e2:08:58:74:3f:cf:d9:26:ae:52:a6:
ab:28:bf:14:d2:cb:67:f1:a1:09:d1:69:7f:ff:43:1f:b2:94:
29:e0:33:65:10:c1:81:06:50:22:f5:2a:72:6a:a1:64:5c:e9:
b5:84:b5:e6:f2:08:4f:f9:4b:13:bf:e0:f8:e8:3b:c7:b3:2c:
1d:d7:2d:6a:0b:60:c4:f6:24:80:b2:b6:d7:3f:6f:bb:54:bc:
b6:58:e0:9d:bb:0f:59:9b:3c:f6:e8:d4:bc:46:31:e3:33:16:
7b:ff:fd:90:65:2f:27:2f:86:59:8b:82:aa:ea:01:49:81:a3:
65:c0:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:59:06 2026 by rpki-client