Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140320.roa
File: AS140320.roa (raw, json)
Hash identifier: vbAdbWOJX5//VArHnVjNY/AmRjRBmVN4M2FFQJhqVEs=
Subject key identifier: EC:9E:BF:07:5C:73:E9:85:4E:B9:85:EE:25:7C:F6:1C:03:A9:EF:63
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7F0A5A5D1A0305D6F3EAE8B5AF041CF3CFF6B6D8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140320.roa
Signing time: Tue 02 Jun 2026 16:24:36 +0000
ROA not before: Tue 02 Jun 2026 16:19:36 +0000
ROA not after: Tue 01 Jun 2027 16:24:36 +0000
asID: 140320
IP address blocks: 14.144.68.0/24 maxlen: 24
14.144.69.0/24 maxlen: 24
14.144.76.0/22 maxlen: 22
14.144.120.0/22 maxlen: 22
14.148.167.0/24 maxlen: 24
59.35.152.0/24 maxlen: 24
59.35.154.0/23 maxlen: 23
59.35.156.0/24 maxlen: 24
59.35.157.0/24 maxlen: 24
59.35.158.0/24 maxlen: 24
59.35.176.0/23 maxlen: 23
59.35.178.0/24 maxlen: 24
59.35.179.0/24 maxlen: 24
59.35.190.0/23 maxlen: 23
61.146.148.0/24 maxlen: 24
113.82.128.0/23 maxlen: 23
113.82.130.0/23 maxlen: 23
113.82.132.0/22 maxlen: 22
113.82.136.0/24 maxlen: 24
113.82.137.0/24 maxlen: 24
113.82.138.0/24 maxlen: 24
113.82.139.0/24 maxlen: 24
113.82.140.0/22 maxlen: 22
113.82.144.0/24 maxlen: 24
113.82.145.0/24 maxlen: 24
113.82.146.0/24 maxlen: 24
113.82.147.0/24 maxlen: 24
113.82.148.0/23 maxlen: 23
113.82.150.0/23 maxlen: 23
113.82.152.0/22 maxlen: 22
113.82.160.0/24 maxlen: 24
113.82.161.0/24 maxlen: 24
113.82.166.0/23 maxlen: 23
113.82.172.0/23 maxlen: 23
113.82.180.0/22 maxlen: 22
113.82.184.0/22 maxlen: 22
113.82.200.0/24 maxlen: 24
113.82.201.0/24 maxlen: 24
113.82.202.0/24 maxlen: 24
113.82.203.0/24 maxlen: 24
113.82.204.0/22 maxlen: 22
113.82.208.0/22 maxlen: 22
113.82.212.0/22 maxlen: 22
113.82.216.0/22 maxlen: 22
113.82.220.0/22 maxlen: 22
113.82.228.0/22 maxlen: 22
113.82.232.0/22 maxlen: 22
113.82.240.0/24 maxlen: 24
113.82.241.0/24 maxlen: 24
113.82.250.0/24 maxlen: 24
113.101.0.0/22 maxlen: 22
113.101.12.0/22 maxlen: 22
113.101.20.0/23 maxlen: 23
113.101.22.0/23 maxlen: 23
113.101.24.0/23 maxlen: 23
113.101.28.0/24 maxlen: 24
116.26.204.0/22 maxlen: 22
116.26.224.0/22 maxlen: 22
116.26.228.0/22 maxlen: 22
116.29.172.0/22 maxlen: 22
116.29.180.0/22 maxlen: 22
119.134.144.0/22 maxlen: 22
119.134.148.0/22 maxlen: 22
119.134.152.0/22 maxlen: 22
119.134.160.0/22 maxlen: 22
119.134.164.0/22 maxlen: 22
119.134.168.0/24 maxlen: 24
119.134.169.0/24 maxlen: 24
119.134.170.0/24 maxlen: 24
119.134.171.0/24 maxlen: 24
119.134.172.0/22 maxlen: 22
119.134.178.0/24 maxlen: 24
119.134.179.0/24 maxlen: 24
119.134.180.0/24 maxlen: 24
119.134.181.0/24 maxlen: 24
119.134.182.0/24 maxlen: 24
119.134.192.0/22 maxlen: 22
119.134.200.0/24 maxlen: 24
119.134.201.0/24 maxlen: 24
119.134.202.0/24 maxlen: 24
119.134.203.0/24 maxlen: 24
119.134.224.0/23 maxlen: 23
119.134.240.0/23 maxlen: 23
119.134.242.0/23 maxlen: 23
119.146.30.0/23 maxlen: 23
183.1.128.0/23 maxlen: 23
183.1.130.0/23 maxlen: 23
183.1.132.0/24 maxlen: 24
183.1.133.0/24 maxlen: 24
183.1.134.0/24 maxlen: 24
183.1.135.0/24 maxlen: 24
183.1.136.0/24 maxlen: 24
183.1.137.0/24 maxlen: 24
183.1.138.0/24 maxlen: 24
183.1.139.0/24 maxlen: 24
183.36.140.0/23 maxlen: 23
183.36.142.0/23 maxlen: 23
183.36.144.0/24 maxlen: 24
183.55.65.0/24 maxlen: 24
183.55.86.0/24 maxlen: 24
183.55.87.0/24 maxlen: 24
183.55.88.0/24 maxlen: 24
183.55.89.0/24 maxlen: 24
183.57.191.0/24 maxlen: 24
183.59.188.0/22 maxlen: 22
240e:5e:10d0::/46 maxlen: 46
240e:5e:10d4::/46 maxlen: 46
240e:5e:10d8::/46 maxlen: 46
240e:5e:10dc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:0a:5a:5d:1a:03:05:d6:f3:ea:e8:b5:af:04:1c:f3:cf:f6:b6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 16:19:36 2026 GMT
Not After : Jun 1 16:24:36 2027 GMT
Subject: CN=EC9EBF075C73E9854EB985EE257CF61C03A9EF63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:7e:72:14:7a:b6:50:8c:d6:98:81:2b:d9:
20:f3:5e:02:a4:f5:cc:08:87:d7:8c:cd:a1:09:4b:
4a:38:57:db:7f:08:8a:8e:c5:7f:22:28:49:64:c7:
c8:ae:5c:a1:42:ad:16:3c:95:3e:41:30:37:ad:18:
34:4c:09:3a:4f:9c:39:c7:20:29:84:9f:ff:2e:02:
97:9a:31:2a:fe:af:87:de:b0:8f:4a:2e:93:42:fa:
47:01:0a:a4:a8:4a:3d:7d:02:c0:bc:b1:e6:5b:97:
1e:2d:46:63:6b:c5:48:aa:e9:24:0f:25:df:0e:f7:
9d:e2:e0:d9:0b:9b:8b:ee:a6:2a:85:15:70:8a:3f:
54:01:9c:b6:dc:0e:3a:2d:92:fd:35:e0:1d:4d:0d:
5e:ed:f3:fd:b7:d6:5c:62:c3:84:e9:9f:44:9c:fa:
b2:7e:1c:da:0f:4e:67:db:9b:0b:80:0e:ff:4f:73:
ec:af:c7:9e:a0:f4:cd:45:94:27:1c:76:23:98:c2:
92:83:a4:f9:69:cf:a0:c9:18:34:7d:e3:5e:88:f2:
ca:d1:87:e0:34:ac:58:d4:80:31:34:6e:c8:1c:bc:
03:30:d9:9c:0c:ff:b4:ed:87:31:78:cc:cf:0b:4d:
6f:42:84:21:bf:36:fa:03:f3:0b:33:35:eb:93:4c:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:BF:07:5C:73:E9:85:4E:B9:85:EE:25:7C:F6:1C:03:A9:EF:63
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.144.68.0/23
14.144.76.0/22
14.144.120.0/22
14.148.167.0/24
59.35.152.0/24
59.35.154.0-59.35.158.255
59.35.176.0/22
59.35.190.0/23
61.146.148.0/24
113.82.128.0-113.82.155.255
113.82.160.0/23
113.82.166.0/23
113.82.172.0/23
113.82.180.0-113.82.187.255
113.82.200.0-113.82.223.255
113.82.228.0-113.82.235.255
113.82.240.0/23
113.82.250.0/24
113.101.0.0/22
113.101.12.0/22
113.101.20.0-113.101.25.255
113.101.28.0/24
116.26.204.0/22
116.26.224.0/21
116.29.172.0/22
116.29.180.0/22
119.134.144.0-119.134.155.255
119.134.160.0/20
119.134.178.0-119.134.182.255
119.134.192.0/22
119.134.200.0/22
119.134.224.0/23
119.134.240.0/22
119.146.30.0/23
183.1.128.0-183.1.139.255
183.36.140.0-183.36.144.255
183.55.65.0/24
183.55.86.0-183.55.89.255
183.57.191.0/24
183.59.188.0/22
IPv6:
240e:5e:10d0::/44
Signature Algorithm: sha256WithRSAEncryption
27:44:69:46:ef:1a:e6:32:13:75:45:42:2a:a2:59:1b:4c:64:
ca:57:0e:9d:2d:b6:14:c9:dc:74:1a:2d:30:cb:d4:5d:ab:94:
5c:b8:32:db:a2:ae:16:c1:57:76:d2:99:d1:38:ca:d7:22:8c:
01:60:19:73:13:70:f3:ac:9a:2a:12:9f:14:c8:15:ac:a6:be:
4b:a3:79:06:d9:ff:4f:f8:a2:e3:e1:da:aa:5d:0c:d9:95:32:
bd:cb:07:1b:52:72:d4:7e:ac:d2:52:73:bf:c8:d2:a6:91:b8:
21:ed:7e:76:6c:0e:99:6e:72:3a:84:e4:90:79:ea:14:77:f9:
74:09:09:21:25:5c:4b:98:c5:cd:f8:0e:80:64:9e:aa:5a:e6:
c8:d3:2f:8e:c0:60:bd:65:d9:db:73:30:c8:8e:ed:30:2a:49:
ba:ef:b3:50:98:59:cd:55:04:53:9a:78:f3:9b:d4:2f:4d:79:
00:9d:c3:5e:2c:5a:dd:8e:15:e8:9e:81:b5:98:c8:fb:15:98:
64:51:34:50:a4:77:34:53:02:fa:a9:c5:8e:42:11:9a:f9:ad:
cd:b3:1c:a6:9c:8f:79:41:0f:4e:3f:e3:32:cc:a7:46:63:01:
57:31:6c:47:01:f2:02:18:07:a5:e9:15:22:db:76:61:83:e5:
82:2a:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:40 2026 by rpki-client