Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
File: AS140319.roa (raw, json)
Hash identifier: ASIMT0KGb9Nag7Qz+l9aU/C+mlJoNmtMb16mh+H/UYQ=
Subject key identifier: 94:A7:98:1F:63:92:A4:8F:8E:57:B9:C6:40:05:EA:36:54:87:1C:4E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 6FE365D51EF4AFBB1CD4BDBF8D014BBE549ACBCD
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
Signing time: Tue 02 Jun 2026 16:24:36 +0000
ROA not before: Tue 02 Jun 2026 16:19:36 +0000
ROA not after: Tue 01 Jun 2027 16:24:36 +0000
asID: 140319
IP address blocks: 14.21.36.0/22 maxlen: 22
14.21.106.0/24 maxlen: 24
14.121.15.0/24 maxlen: 24
14.121.23.0/24 maxlen: 24
14.124.64.0/19 maxlen: 19
14.148.152.0/21 maxlen: 21
14.149.128.0/18 maxlen: 18
14.215.224.0/22 maxlen: 22
59.32.0.0/19 maxlen: 19
59.32.8.0/24 maxlen: 24
59.32.32.0/20 maxlen: 20
59.37.43.0/24 maxlen: 24
61.143.144.0/21 maxlen: 21
61.143.145.0/24 maxlen: 24
61.146.96.0/23 maxlen: 23
61.146.104.0/21 maxlen: 21
61.146.112.0/21 maxlen: 21
113.64.230.0/23 maxlen: 23
113.64.248.0/24 maxlen: 24
113.75.0.0/21 maxlen: 21
113.75.8.0/21 maxlen: 21
113.75.16.0/20 maxlen: 20
113.75.32.0/21 maxlen: 21
113.75.40.0/21 maxlen: 21
113.75.48.0/21 maxlen: 21
113.75.56.0/21 maxlen: 21
113.75.64.0/18 maxlen: 18
113.100.64.0/22 maxlen: 22
113.100.68.0/22 maxlen: 22
113.100.72.0/21 maxlen: 21
113.100.80.0/21 maxlen: 21
113.100.88.0/21 maxlen: 21
113.104.32.0/22 maxlen: 22
113.106.64.0/21 maxlen: 21
113.106.69.0/24 maxlen: 24
113.107.172.0/23 maxlen: 23
116.17.180.0/22 maxlen: 22
116.17.184.0/21 maxlen: 21
116.17.192.0/18 maxlen: 18
116.19.44.0/23 maxlen: 23
116.19.148.0/24 maxlen: 24
119.121.223.0/24 maxlen: 24
119.121.224.0/23 maxlen: 23
119.121.226.0/24 maxlen: 24
119.124.176.0/22 maxlen: 22
119.124.180.0/22 maxlen: 22
119.124.184.0/22 maxlen: 22
119.124.188.0/22 maxlen: 22
119.124.192.0/21 maxlen: 21
119.124.200.0/21 maxlen: 21
119.124.208.0/21 maxlen: 21
119.124.216.0/21 maxlen: 21
119.124.224.0/21 maxlen: 21
119.124.232.0/21 maxlen: 21
119.124.240.0/21 maxlen: 21
119.124.248.0/21 maxlen: 21
119.140.160.0/21 maxlen: 21
119.140.168.0/21 maxlen: 21
119.145.184.0/21 maxlen: 21
119.145.192.0/21 maxlen: 21
119.145.200.0/22 maxlen: 22
119.145.204.0/22 maxlen: 22
119.146.42.0/23 maxlen: 23
119.146.44.0/22 maxlen: 22
119.146.48.0/22 maxlen: 22
125.89.92.0/22 maxlen: 22
125.89.128.0/21 maxlen: 21
183.29.0.0/17 maxlen: 17
183.35.0.0/18 maxlen: 18
183.35.64.0/19 maxlen: 19
183.35.96.0/19 maxlen: 19
183.52.128.0/20 maxlen: 20
183.52.144.0/20 maxlen: 20
183.57.57.0/24 maxlen: 24
183.57.190.0/24 maxlen: 24
183.59.200.0/22 maxlen: 22
183.63.56.0/21 maxlen: 21
183.63.153.0/24 maxlen: 24
183.63.154.0/23 maxlen: 23
183.63.233.0/24 maxlen: 24
183.63.234.0/23 maxlen: 23
183.63.236.0/22 maxlen: 22
202.104.8.0/22 maxlen: 22
202.105.174.0/23 maxlen: 23
218.16.144.0/20 maxlen: 20
219.128.92.0/22 maxlen: 22
219.128.100.0/23 maxlen: 23
219.129.128.0/19 maxlen: 19
219.129.152.0/21 maxlen: 21
240e:5e:10c0::/46 maxlen: 46
240e:5e:10c4::/46 maxlen: 46
240e:5e:10c8::/46 maxlen: 46
240e:5e:10cc::/46 maxlen: 46
240e:108:4057::/48 maxlen: 48
240e:108:4857::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e3:65:d5:1e:f4:af:bb:1c:d4:bd:bf:8d:01:4b:be:54:9a:cb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 16:19:36 2026 GMT
Not After : Jun 1 16:24:36 2027 GMT
Subject: CN=94A7981F6392A48F8E57B9C64005EA3654871C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:ed:4f:1b:91:70:ee:df:8d:08:23:c6:be:
6c:62:43:4e:be:cf:3c:0d:2d:8c:83:5a:8f:25:d5:
5c:f3:ef:40:dd:f1:3a:b4:e9:de:58:e4:54:10:6a:
46:10:30:3b:66:f8:c7:fc:3e:2e:81:7b:f3:cd:3f:
70:78:31:b3:8c:f0:53:5e:47:fa:fd:75:bf:00:06:
16:a7:5a:a7:da:13:29:d0:fc:66:07:ef:c5:75:a6:
ba:f6:7c:2f:e3:83:d4:2a:0c:e4:66:5c:e0:be:82:
d7:b6:53:36:72:c7:bf:68:15:72:b2:f9:d1:ac:a2:
f2:ce:25:31:63:80:07:8c:b0:4f:8c:89:94:16:0f:
c6:98:9b:2b:4c:fe:af:ac:d3:0f:f0:fe:75:34:b2:
ea:a6:40:ad:cd:5d:9e:ff:7e:cb:36:1c:da:97:c2:
99:96:3e:b3:ab:11:9b:27:51:c2:1a:b9:de:ae:62:
75:cf:a0:7d:d7:b7:d9:d8:1d:b5:6a:b7:db:e8:b7:
b4:1c:eb:dd:7c:7d:06:96:44:48:1c:89:b8:3c:01:
67:f7:2e:4a:a5:c7:fc:36:91:13:b8:a4:c5:2e:8b:
78:bd:18:91:81:c0:81:af:1f:01:72:c5:da:f1:27:
3c:b2:99:1b:61:56:df:f0:b1:12:aa:61:78:74:fb:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A7:98:1F:63:92:A4:8F:8E:57:B9:C6:40:05:EA:36:54:87:1C:4E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.36.0/22
14.21.106.0/24
14.121.15.0/24
14.121.23.0/24
14.124.64.0/19
14.148.152.0/21
14.149.128.0/18
14.215.224.0/22
59.32.0.0-59.32.47.255
59.37.43.0/24
61.143.144.0/21
61.146.96.0/23
61.146.104.0-61.146.119.255
113.64.230.0/23
113.64.248.0/24
113.75.0.0/17
113.100.64.0/19
113.104.32.0/22
113.106.64.0/21
113.107.172.0/23
116.17.180.0-116.17.255.255
116.19.44.0/23
116.19.148.0/24
119.121.223.0-119.121.226.255
119.124.176.0-119.124.255.255
119.140.160.0/20
119.145.184.0-119.145.207.255
119.146.42.0-119.146.51.255
125.89.92.0/22
125.89.128.0/21
183.29.0.0/17
183.35.0.0/17
183.52.128.0/19
183.57.57.0/24
183.57.190.0/24
183.59.200.0/22
183.63.56.0/21
183.63.153.0-183.63.155.255
183.63.233.0-183.63.239.255
202.104.8.0/22
202.105.174.0/23
218.16.144.0/20
219.128.92.0/22
219.128.100.0/23
219.129.128.0/19
IPv6:
240e:5e:10c0::/44
240e:108:4057::/48
240e:108:4857::/48
Signature Algorithm: sha256WithRSAEncryption
26:39:28:eb:c2:c7:80:1c:47:3d:e8:8c:2d:50:1d:5c:c8:e4:
99:ab:3d:fa:69:83:bd:7b:d6:7d:da:e6:67:35:89:5f:88:de:
21:e1:01:f0:dd:d4:f0:de:e5:18:a0:ee:a0:34:f8:26:ff:5b:
16:d2:cb:76:aa:ed:0f:42:ee:3a:4a:84:b1:0f:2b:aa:c4:57:
9d:87:3f:ba:6e:eb:43:c7:a3:5d:9b:eb:0a:7c:eb:0c:83:70:
bd:5f:af:03:42:a6:17:cd:1e:39:65:e9:f2:e8:3f:c1:64:e6:
e7:a8:c2:a4:77:48:49:0e:ba:f9:e1:aa:3e:14:f9:f9:d2:47:
92:91:b8:01:54:ce:bc:e1:31:ba:90:91:be:04:1c:54:fb:6f:
73:50:d1:4c:12:f2:f4:bc:70:06:17:cb:f9:00:1a:09:bf:b1:
b1:44:6b:0b:a4:d7:da:80:91:4e:9e:8e:c8:71:f2:b6:50:5a:
45:12:72:19:91:4f:c9:0f:f7:18:68:82:04:f2:71:7b:63:65:
10:c5:bb:9e:b6:e4:ee:7f:7c:c5:72:3c:de:2a:1c:79:53:6c:
00:32:4f:10:2a:4f:79:91:df:e0:fa:27:c7:72:8e:33:51:7c:
6f:7a:33:83:57:e1:ea:6c:44:35:c7:d0:ff:c0:05:5c:a8:57:
2b:d3:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:33 2026 by rpki-client