Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140309.roa
File: AS140309.roa (raw, json)
Hash identifier: kWPlPXQdbYm/Zy4rHmml+RZu/N4xZijCNMr1ahoVnN0=
Subject key identifier: 3A:B8:AB:70:AD:F2:36:BD:D5:0C:61:9A:56:D6:E8:07:C7:4D:47:3D
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 661C6EC22065CCA7B5305EA6C7D49035A782AB73
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140309.roa
Signing time: Thu 28 May 2026 17:15:43 +0000
ROA not before: Thu 28 May 2026 17:10:43 +0000
ROA not after: Thu 27 May 2027 17:15:43 +0000
asID: 140309
IP address blocks: 59.35.124.0/24 maxlen: 24
59.35.126.0/24 maxlen: 24
59.35.127.0/24 maxlen: 24
59.35.136.0/23 maxlen: 23
59.35.140.0/23 maxlen: 23
59.35.143.0/24 maxlen: 24
61.142.48.0/24 maxlen: 24
113.64.16.0/22 maxlen: 22
113.64.21.0/24 maxlen: 24
113.64.23.0/24 maxlen: 24
113.64.27.0/24 maxlen: 24
113.64.128.0/22 maxlen: 22
113.64.132.0/24 maxlen: 24
113.64.133.0/24 maxlen: 24
113.64.134.0/24 maxlen: 24
113.64.135.0/24 maxlen: 24
113.64.136.0/22 maxlen: 22
113.64.144.0/24 maxlen: 24
113.64.145.0/24 maxlen: 24
113.64.146.0/24 maxlen: 24
113.64.147.0/24 maxlen: 24
113.64.148.0/23 maxlen: 23
113.64.150.0/23 maxlen: 23
113.64.152.0/22 maxlen: 22
113.64.156.0/22 maxlen: 22
113.64.160.0/22 maxlen: 22
113.64.168.0/22 maxlen: 22
113.64.172.0/23 maxlen: 23
113.64.174.0/23 maxlen: 23
113.64.176.0/22 maxlen: 22
113.64.180.0/22 maxlen: 22
113.64.184.0/23 maxlen: 23
113.64.186.0/23 maxlen: 23
113.64.188.0/22 maxlen: 22
113.100.0.0/23 maxlen: 23
113.100.2.0/23 maxlen: 23
113.100.4.0/23 maxlen: 23
113.100.6.0/23 maxlen: 23
113.100.8.0/24 maxlen: 24
113.100.10.0/23 maxlen: 23
113.100.14.0/24 maxlen: 24
113.100.15.0/24 maxlen: 24
113.100.16.0/24 maxlen: 24
113.100.17.0/24 maxlen: 24
113.100.18.0/24 maxlen: 24
113.100.20.0/22 maxlen: 22
113.100.25.0/24 maxlen: 24
113.100.26.0/24 maxlen: 24
113.100.27.0/24 maxlen: 24
113.100.30.0/23 maxlen: 23
113.101.32.0/23 maxlen: 23
113.101.34.0/23 maxlen: 23
113.101.36.0/23 maxlen: 23
113.101.38.0/23 maxlen: 23
113.101.40.0/23 maxlen: 23
113.101.42.0/23 maxlen: 23
113.101.46.0/24 maxlen: 24
113.101.47.0/24 maxlen: 24
113.101.48.0/22 maxlen: 22
113.101.52.0/23 maxlen: 23
113.101.54.0/23 maxlen: 23
113.101.56.0/23 maxlen: 23
113.101.58.0/23 maxlen: 23
113.101.60.0/23 maxlen: 23
113.101.62.0/23 maxlen: 23
113.103.96.0/22 maxlen: 22
113.103.104.0/22 maxlen: 22
113.103.112.0/23 maxlen: 23
113.103.114.0/23 maxlen: 23
113.103.124.0/22 maxlen: 22
113.110.0.0/22 maxlen: 22
113.110.4.0/22 maxlen: 22
113.110.8.0/22 maxlen: 22
113.110.12.0/22 maxlen: 22
113.110.16.0/22 maxlen: 22
113.110.20.0/22 maxlen: 22
113.110.24.0/22 maxlen: 22
113.110.28.0/22 maxlen: 22
113.110.32.0/23 maxlen: 23
113.110.34.0/23 maxlen: 23
113.110.36.0/22 maxlen: 22
113.110.40.0/22 maxlen: 22
113.117.0.0/23 maxlen: 23
113.117.2.0/23 maxlen: 23
113.117.4.0/22 maxlen: 22
113.117.12.0/22 maxlen: 22
113.117.16.0/22 maxlen: 22
113.117.20.0/22 maxlen: 22
113.117.40.0/23 maxlen: 23
113.117.42.0/23 maxlen: 23
113.117.44.0/22 maxlen: 22
113.117.48.0/22 maxlen: 22
113.117.52.0/22 maxlen: 22
113.117.56.0/23 maxlen: 23
113.117.58.0/23 maxlen: 23
113.117.60.0/24 maxlen: 24
113.117.61.0/24 maxlen: 24
113.117.62.0/24 maxlen: 24
113.117.63.0/24 maxlen: 24
113.117.68.0/23 maxlen: 23
113.117.70.0/23 maxlen: 23
113.117.72.0/24 maxlen: 24
113.117.73.0/24 maxlen: 24
113.117.74.0/24 maxlen: 24
113.117.75.0/24 maxlen: 24
113.117.76.0/22 maxlen: 22
113.117.80.0/22 maxlen: 22
113.117.80.0/24 maxlen: 24
113.117.81.0/24 maxlen: 24
113.117.82.0/24 maxlen: 24
113.117.83.0/24 maxlen: 24
113.117.84.0/22 maxlen: 22
113.117.84.0/24 maxlen: 24
113.117.85.0/24 maxlen: 24
113.117.86.0/24 maxlen: 24
113.117.87.0/24 maxlen: 24
113.117.88.0/22 maxlen: 22
113.117.92.0/22 maxlen: 22
113.117.96.0/22 maxlen: 22
113.117.96.0/24 maxlen: 24
113.117.97.0/24 maxlen: 24
113.117.98.0/24 maxlen: 24
113.117.99.0/24 maxlen: 24
113.117.100.0/22 maxlen: 22
113.117.104.0/22 maxlen: 22
113.117.112.0/22 maxlen: 22
113.117.124.0/23 maxlen: 23
113.117.127.0/24 maxlen: 24
116.16.184.0/23 maxlen: 23
116.16.186.0/23 maxlen: 23
116.16.188.0/24 maxlen: 24
116.16.189.0/24 maxlen: 24
116.16.192.0/22 maxlen: 22
116.16.196.0/22 maxlen: 22
116.16.200.0/23 maxlen: 23
116.16.202.0/23 maxlen: 23
116.16.204.0/23 maxlen: 23
116.16.206.0/23 maxlen: 23
116.16.208.0/22 maxlen: 22
116.16.212.0/22 maxlen: 22
116.16.216.0/22 maxlen: 22
116.16.220.0/22 maxlen: 22
116.16.224.0/22 maxlen: 22
116.16.228.0/24 maxlen: 24
116.16.229.0/24 maxlen: 24
116.16.230.0/24 maxlen: 24
116.16.231.0/24 maxlen: 24
116.16.232.0/23 maxlen: 23
116.16.234.0/23 maxlen: 23
116.16.236.0/23 maxlen: 23
116.16.238.0/23 maxlen: 23
116.16.240.0/23 maxlen: 23
116.16.242.0/23 maxlen: 23
116.16.244.0/23 maxlen: 23
116.16.246.0/23 maxlen: 23
116.16.248.0/23 maxlen: 23
116.16.250.0/23 maxlen: 23
119.140.56.0/24 maxlen: 24
119.140.58.0/24 maxlen: 24
119.140.60.0/24 maxlen: 24
119.140.61.0/24 maxlen: 24
119.140.62.0/24 maxlen: 24
119.140.179.0/24 maxlen: 24
121.11.142.0/23 maxlen: 23
125.91.160.0/24 maxlen: 24
125.91.188.0/23 maxlen: 23
125.91.190.0/23 maxlen: 23
183.1.200.0/23 maxlen: 23
183.1.202.0/23 maxlen: 23
183.1.204.0/22 maxlen: 22
183.1.248.0/22 maxlen: 22
183.1.252.0/23 maxlen: 23
183.1.254.0/23 maxlen: 23
183.47.149.0/24 maxlen: 24
183.47.150.0/24 maxlen: 24
183.47.153.0/24 maxlen: 24
183.47.155.0/24 maxlen: 24
183.56.112.0/22 maxlen: 22
183.56.120.0/23 maxlen: 23
218.16.160.0/24 maxlen: 24
218.16.161.0/24 maxlen: 24
218.16.164.0/24 maxlen: 24
218.16.165.0/24 maxlen: 24
218.16.166.0/24 maxlen: 24
218.16.167.0/24 maxlen: 24
218.16.175.0/24 maxlen: 24
219.132.112.0/22 maxlen: 22
219.132.116.0/23 maxlen: 23
219.132.118.0/23 maxlen: 23
219.132.120.0/22 maxlen: 22
240e:5e:1090::/46 maxlen: 46
240e:5e:1094::/46 maxlen: 46
240e:5e:1098::/46 maxlen: 46
240e:5e:109c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1c:6e:c2:20:65:cc:a7:b5:30:5e:a6:c7:d4:90:35:a7:82:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 17:10:43 2026 GMT
Not After : May 27 17:15:43 2027 GMT
Subject: CN=3AB8AB70ADF236BDD50C619A56D6E807C74D473D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:60:c2:c8:67:be:80:31:f8:1a:aa:6f:82:
96:04:98:f8:3c:a3:86:46:f9:f3:a5:61:6a:ce:01:
27:1f:0b:01:15:1b:81:26:e1:6c:ff:5e:8a:13:66:
70:41:10:96:0c:b0:79:1f:c6:0d:5a:49:68:73:96:
94:0c:55:4d:78:54:c1:bb:28:49:a1:a8:a8:f8:0b:
01:d0:28:ab:b3:e2:30:63:75:ed:6c:da:f8:fa:43:
76:35:2e:3f:28:47:e3:9d:c9:11:9c:12:ca:1f:2f:
79:d5:2c:da:72:e8:ec:0e:5e:3f:1d:6d:ed:58:8a:
cc:95:6f:f8:c7:65:a6:2b:45:23:0e:c1:d4:4b:60:
bb:c0:0d:32:3c:e5:cc:fe:2c:38:0b:98:dc:0a:e4:
f7:d8:cc:d4:d2:3f:16:06:86:66:14:a4:2f:0e:57:
66:f1:76:a5:c5:62:8e:5d:2f:c8:27:24:57:c2:d6:
cf:e0:8a:b2:9b:95:b8:61:69:a9:05:c2:d8:49:28:
2b:8b:f3:4f:f0:4d:d9:57:08:cc:f7:36:0a:5f:ce:
7b:0d:f7:7e:ac:48:d7:af:d5:f3:71:48:c1:20:30:
6e:ee:c7:a5:2f:c4:f1:14:b4:f8:5f:0d:b7:b4:09:
b6:80:65:86:a6:9b:7e:da:26:36:6a:8f:58:96:fd:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:AB:70:AD:F2:36:BD:D5:0C:61:9A:56:D6:E8:07:C7:4D:47:3D
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140309.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.35.124.0/24
59.35.126.0/23
59.35.136.0/23
59.35.140.0/23
59.35.143.0/24
61.142.48.0/24
113.64.16.0/22
113.64.21.0/24
113.64.23.0/24
113.64.27.0/24
113.64.128.0-113.64.139.255
113.64.144.0-113.64.163.255
113.64.168.0-113.64.191.255
113.100.0.0-113.100.8.255
113.100.10.0/23
113.100.14.0-113.100.18.255
113.100.20.0/22
113.100.25.0-113.100.27.255
113.100.30.0/23
113.101.32.0-113.101.43.255
113.101.46.0-113.101.63.255
113.103.96.0/22
113.103.104.0/22
113.103.112.0/22
113.103.124.0/22
113.110.0.0-113.110.43.255
113.117.0.0/21
113.117.12.0-113.117.23.255
113.117.40.0-113.117.63.255
113.117.68.0-113.117.107.255
113.117.112.0/22
113.117.124.0/23
113.117.127.0/24
116.16.184.0-116.16.189.255
116.16.192.0-116.16.251.255
119.140.56.0/24
119.140.58.0/24
119.140.60.0-119.140.62.255
119.140.179.0/24
121.11.142.0/23
125.91.160.0/24
125.91.188.0/22
183.1.200.0/21
183.1.248.0/21
183.47.149.0-183.47.150.255
183.47.153.0/24
183.47.155.0/24
183.56.112.0/22
183.56.120.0/23
218.16.160.0/23
218.16.164.0/22
218.16.175.0/24
219.132.112.0-219.132.123.255
IPv6:
240e:5e:1090::/44
Signature Algorithm: sha256WithRSAEncryption
1f:8d:5f:7a:f5:27:3e:10:58:ef:31:c3:ae:d0:4d:0e:cd:8d:
7a:b1:d1:c5:7b:84:0b:c2:6e:5f:38:3c:08:92:49:0d:3a:e7:
4d:02:78:5d:83:0e:db:69:9c:e1:39:9f:54:11:9f:2d:90:45:
24:a1:aa:6b:e1:3c:1a:2d:5a:bc:dd:b6:e0:b9:8c:98:93:d3:
16:97:65:05:12:89:59:c7:32:3b:7d:a2:bd:59:25:c5:0e:2b:
a2:ba:01:5d:97:6c:cc:78:b3:e9:85:0a:fd:03:76:d7:c2:79:
ee:dc:6d:89:f3:9a:9a:95:c6:e8:a7:32:13:48:39:73:e9:c3:
f4:95:e8:d4:33:0c:8c:b7:ad:04:d9:47:57:62:b2:cb:f0:ef:
70:0d:ac:2a:f9:ec:85:0f:9e:a2:ca:a6:39:7b:01:33:38:f0:
57:59:df:5b:e5:97:af:01:5f:79:69:59:0e:99:fd:bf:4e:e8:
e0:a2:0e:38:d0:aa:2f:e2:c0:8d:e6:c5:31:c4:97:81:0c:09:
96:69:84:52:e8:75:c5:3e:78:39:6b:25:b8:a2:80:5e:70:62:
2c:08:cc:a8:31:18:e4:5c:6a:90:7c:86:df:2b:25:db:b4:1a:
58:20:d4:5a:e3:3b:05:54:5f:5b:53:a1:a0:07:5a:6d:7c:6c:
fe:8a:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:39 2026 by rpki-client