Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140979.roa
File: AS140979.roa (raw, json)
Hash identifier: mgWen9u5xr5vgwQUtT9yhur6d5s8RLRyDezfDQAOhnA=
Subject key identifier: 63:1B:38:FE:94:AA:D8:DF:E8:E1:46:D8:FE:6C:AF:E1:B9:23:3B:E8
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 511DB94C240C04FF6843E14EC8A9391E6442A45C
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140979.roa
Signing time: Fri 12 Jun 2026 07:51:47 +0000
ROA not before: Fri 12 Jun 2026 07:46:47 +0000
ROA not after: Fri 11 Jun 2027 07:51:47 +0000
asID: 140979
IP address blocks: 58.246.163.0/24 maxlen: 24
112.64.235.0/24 maxlen: 24
112.64.236.0/24 maxlen: 24
112.64.237.0/24 maxlen: 24
112.65.192.0/24 maxlen: 24
112.65.193.0/24 maxlen: 24
112.65.194.0/24 maxlen: 24
112.65.195.0/24 maxlen: 24
210.22.240.0/24 maxlen: 24
210.22.241.0/24 maxlen: 24
210.22.242.0/24 maxlen: 24
210.22.243.0/24 maxlen: 24
210.22.244.0/24 maxlen: 24
210.22.245.0/24 maxlen: 24
210.22.246.0/24 maxlen: 24
210.22.247.0/24 maxlen: 24
210.51.43.0/24 maxlen: 24
210.51.44.0/24 maxlen: 24
220.248.42.0/24 maxlen: 24
223.166.64.0/23 maxlen: 23
223.166.150.0/23 maxlen: 23
223.166.173.0/24 maxlen: 24
223.166.222.0/24 maxlen: 24
223.167.80.0/24 maxlen: 24
223.167.81.0/24 maxlen: 24
223.167.82.0/24 maxlen: 24
223.167.83.0/24 maxlen: 24
223.167.104.0/24 maxlen: 24
223.167.152.0/22 maxlen: 22
223.167.156.0/23 maxlen: 23
223.167.222.0/23 maxlen: 23
223.167.238.0/23 maxlen: 23
223.167.240.0/22 maxlen: 22
223.167.252.0/22 maxlen: 22
2408:8000:9ffd::/48 maxlen: 48
2408:80f1:20::/44 maxlen: 44
2408:80f1:30::/44 maxlen: 44
2408:870c:160::/44 maxlen: 44
2408:870c:4000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1d:b9:4c:24:0c:04:ff:68:43:e1:4e:c8:a9:39:1e:64:42:a4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Jun 12 07:46:47 2026 GMT
Not After : Jun 11 07:51:47 2027 GMT
Subject: CN=631B38FE94AAD8DFE8E146D8FE6CAFE1B9233BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9d:aa:22:72:ba:bf:02:bc:05:16:8e:28:86:
26:ed:3a:14:cc:43:de:bf:5c:82:ed:49:ed:e9:13:
5a:fc:c9:5b:cd:30:48:89:80:95:91:32:97:f8:ee:
5b:83:00:fd:0c:d1:62:f0:d2:9c:6f:5f:04:c3:ee:
99:e1:bd:86:44:a6:5f:1d:9b:25:89:8d:ab:3e:f0:
0b:7b:ec:d2:cf:3c:ac:22:53:dd:ba:d5:12:38:90:
0f:df:b8:bd:d0:62:e4:1b:7f:66:9f:8e:c2:41:26:
da:f1:cf:be:43:f9:c3:2d:be:89:10:59:3d:0b:b9:
a9:56:f2:4a:b6:60:0a:a8:8f:ae:26:62:80:e6:c7:
fb:dd:0b:8e:eb:7f:4c:b2:23:4e:f8:17:c7:55:61:
1d:6d:a7:64:12:07:2d:25:e6:0d:02:92:fb:74:1f:
fd:98:8a:28:4f:65:90:c4:bc:b5:ae:a7:f7:cb:2c:
da:c6:f4:b6:c6:ca:e7:48:b8:74:7a:f5:9f:42:97:
ee:e9:a2:fe:2d:32:64:7f:e9:b0:72:96:07:7b:ec:
e1:7f:fa:76:c1:86:fb:41:95:c2:13:d5:52:ca:b3:
87:2f:2c:82:c5:a4:82:a2:20:ef:7a:8e:25:23:97:
7e:a2:67:53:d0:56:f4:03:fc:d5:64:96:d4:48:04:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:38:FE:94:AA:D8:DF:E8:E1:46:D8:FE:6C:AF:E1:B9:23:3B:E8
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.246.163.0/24
112.64.235.0-112.64.237.255
112.65.192.0/22
210.22.240.0/21
210.51.43.0-210.51.44.255
220.248.42.0/24
223.166.64.0/23
223.166.150.0/23
223.166.173.0/24
223.166.222.0/24
223.167.80.0/22
223.167.104.0/24
223.167.152.0-223.167.157.255
223.167.222.0/23
223.167.238.0-223.167.243.255
223.167.252.0/22
IPv6:
2408:8000:9ffd::/48
2408:80f1:20::/43
2408:870c:160::/44
2408:870c:4000::/44
Signature Algorithm: sha256WithRSAEncryption
14:b6:77:ce:84:0f:2a:7a:37:94:73:7e:d6:80:07:fc:c8:d8:
48:f4:48:d6:aa:d2:c7:00:13:70:ce:87:89:85:d4:46:7a:ea:
c6:c1:81:e5:a8:cc:f6:93:52:5b:c3:91:4f:a5:0b:cd:7c:50:
c9:bb:b0:72:79:87:02:b8:6a:75:33:10:69:fa:5b:54:c6:8f:
21:99:3e:b5:c0:57:1c:2a:4b:fc:74:9f:98:d2:07:df:6f:76:
fd:a6:95:9f:26:30:f6:53:b4:29:8e:2a:1f:97:ca:6e:c7:07:
b8:04:4e:44:f7:75:5c:c8:f1:9e:4f:e1:54:36:1a:e2:00:77:
4e:fc:bb:fc:75:d3:87:02:51:60:c9:af:69:82:93:f3:94:08:
61:21:c0:d0:68:2a:56:78:ca:a6:5c:59:64:3a:a5:68:0b:f7:
d2:e1:68:85:fc:4f:ce:89:f6:07:4e:9a:a0:6e:00:05:86:7d:
39:2c:35:a7:8e:95:3a:10:e2:09:38:e8:2f:c9:49:54:18:3a:
a7:53:8f:cc:4d:73:3a:28:a2:f0:18:52:2a:07:26:13:d3:14:
80:3a:2f:ec:e3:9c:78:c3:5a:5c:4d:d8:81:d3:0c:5d:1a:c4:
64:d1:35:95:c8:b3:a2:84:be:ff:45:d5:9f:b8:45:d4:92:67:
57:b8:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:19 2026 by rpki-client