Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140329.roa
File: AS140329.roa (raw, json)
Hash identifier: q4ANxZV2pX0xhzL8k3LQEEKOggZuFMwDZDRZht57KmI=
Subject key identifier: 07:56:4B:26:27:B5:09:68:2A:15:7F:AE:6E:FC:A3:FA:EC:02:8D:C5
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4ECFA1DC5C552FC26F39DE1D61FC8F04FAB33FE7
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140329.roa
Signing time: Thu 04 Jun 2026 17:23:09 +0000
ROA not before: Thu 04 Jun 2026 17:18:09 +0000
ROA not after: Thu 03 Jun 2027 17:23:09 +0000
asID: 140329
IP address blocks: 61.154.8.0/24 maxlen: 24
202.111.241.0/24 maxlen: 24
202.111.245.0/24 maxlen: 24
202.111.246.0/24 maxlen: 24
240e:14::/36 maxlen: 36
240e:14:8000::/36 maxlen: 36
240e:54:8000::/34 maxlen: 34
240e:54:c000::/36 maxlen: 36
240e:54:c000::/48 maxlen: 48
240e:54:c001::/48 maxlen: 48
240e:54:c002::/48 maxlen: 48
240e:54:c003::/48 maxlen: 48
240e:54:d000::/36 maxlen: 36
240e:54:e000::/35 maxlen: 35
240e:d0::/33 maxlen: 33
240e:d6::/36 maxlen: 36
240e:108:4341::/48 maxlen: 48
240e:108:4b41::/48 maxlen: 48
240e:264:1000::/36 maxlen: 36
240e:378::/36 maxlen: 36
240e:378:1000::/37 maxlen: 37
240e:378:1800::/39 maxlen: 39
240e:379::/36 maxlen: 36
240e:379:1000::/37 maxlen: 37
240e:379:1800::/39 maxlen: 39
240e:37a::/36 maxlen: 36
240e:37a:1000::/37 maxlen: 37
240e:37a:1800::/39 maxlen: 39
240e:37b::/36 maxlen: 36
240e:37b:1000::/37 maxlen: 37
240e:37b:1800::/39 maxlen: 39
240e:37c::/36 maxlen: 36
240e:37c:1000::/37 maxlen: 37
240e:37c:1800::/39 maxlen: 39
240e:37d::/36 maxlen: 36
240e:37d:1000::/37 maxlen: 37
240e:37d:1800::/39 maxlen: 39
240e:37e::/36 maxlen: 36
240e:37e:1000::/37 maxlen: 37
240e:37e:1800::/39 maxlen: 39
240e:37f::/36 maxlen: 36
240e:37f:1000::/37 maxlen: 37
240e:37f:1800::/39 maxlen: 39
240e:678::/37 maxlen: 37
240e:678:800::/37 maxlen: 37
240e:678:c00::/48 maxlen: 48
240e:678:8400::/38 maxlen: 38
240e:678:c200::/39 maxlen: 39
240e:678:e200::/39 maxlen: 39
240e:679::/41 maxlen: 41
240e:679:8400::/38 maxlen: 38
240e:679:c200::/39 maxlen: 39
240e:679:e200::/39 maxlen: 39
240e:67a:800::/37 maxlen: 37
240e:67a:8400::/38 maxlen: 38
240e:67a:c200::/39 maxlen: 39
240e:67a:e200::/39 maxlen: 39
240e:67b:800::/37 maxlen: 37
240e:67b:8400::/38 maxlen: 38
240e:67b:c200::/39 maxlen: 39
240e:67b:e200::/39 maxlen: 39
240e:67c:800::/37 maxlen: 37
240e:67c:8400::/38 maxlen: 38
240e:67c:c200::/39 maxlen: 39
240e:67c:e200::/39 maxlen: 39
240e:67d:800::/37 maxlen: 37
240e:67d:8400::/38 maxlen: 38
240e:67d:c200::/39 maxlen: 39
240e:67d:e200::/39 maxlen: 39
240e:67e:800::/37 maxlen: 37
240e:67e:8400::/38 maxlen: 38
240e:67e:c200::/39 maxlen: 39
240e:67e:e200::/39 maxlen: 39
240e:67f:800::/37 maxlen: 37
240e:67f:8400::/38 maxlen: 38
240e:67f:c200::/39 maxlen: 39
240e:67f:e200::/39 maxlen: 39
240e:983:1803::/48 maxlen: 48
240e:a64::/36 maxlen: 36
240e:a64:1000::/37 maxlen: 37
240e:a64:1800::/39 maxlen: 39
240e:a65::/36 maxlen: 36
240e:a65:1000::/37 maxlen: 37
240e:a65:1800::/39 maxlen: 39
240e:a66::/36 maxlen: 36
240e:a66:1000::/37 maxlen: 37
240e:a66:1800::/39 maxlen: 39
240e:a67::/36 maxlen: 36
240e:a67:1000::/37 maxlen: 37
240e:a67:1800::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:cf:a1:dc:5c:55:2f:c2:6f:39:de:1d:61:fc:8f:04:fa:b3:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 17:18:09 2026 GMT
Not After : Jun 3 17:23:09 2027 GMT
Subject: CN=07564B2627B509682A157FAE6EFCA3FAEC028DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:c3:e6:e7:ff:a6:0a:f9:af:47:83:5a:34:
2a:5f:4c:e9:30:19:78:0c:51:5b:05:b5:5e:ae:8f:
5c:c1:38:d9:9f:73:32:78:b9:dc:ab:67:16:c2:7c:
97:5d:89:db:75:e8:9c:47:8c:da:7b:e7:1a:71:5a:
a3:1a:72:36:bc:c5:b3:89:97:fe:63:ad:60:8b:ee:
4d:5d:5b:f2:c3:50:60:84:3a:99:e0:12:61:8f:f6:
8b:27:43:fd:4f:7a:e1:68:54:26:dd:fe:5e:4c:0e:
9f:6c:a4:7b:a5:6a:3a:05:ad:01:49:9d:9f:07:4b:
ae:08:ae:69:da:e6:0e:e4:63:d2:82:ef:b9:49:c3:
c7:0e:49:82:20:cd:9e:e5:80:93:53:14:2b:90:d3:
53:db:91:66:60:8e:a8:21:76:ab:c7:ab:bd:13:60:
e9:e1:6d:60:52:b7:e2:eb:a5:44:f9:30:cf:4f:1d:
84:bd:03:c1:7d:05:ba:9e:e3:3b:b3:d3:a7:e9:28:
5a:3f:87:28:e7:c5:54:da:a0:11:0f:dd:82:29:d0:
ae:48:7c:29:a9:11:ef:df:c6:2a:19:58:c9:d1:bc:
f5:51:36:d7:7a:fb:f6:5e:9d:fd:55:fd:35:e0:a6:
d7:5d:88:24:cd:89:67:e3:6a:fb:6d:80:6c:76:d4:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:4B:26:27:B5:09:68:2A:15:7F:AE:6E:FC:A3:FA:EC:02:8D:C5
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.154.8.0/24
202.111.241.0/24
202.111.245.0-202.111.246.255
IPv6:
240e:14::/36
240e:14:8000::/36
240e:54:8000::/33
240e:d0::/33
240e:d6::/36
240e:108:4341::/48
240e:108:4b41::/48
240e:264:1000::/36
240e:378::-240e:378:19ff:ffff:ffff:ffff:ffff:ffff
240e:379::-240e:379:19ff:ffff:ffff:ffff:ffff:ffff
240e:37a::-240e:37a:19ff:ffff:ffff:ffff:ffff:ffff
240e:37b::-240e:37b:19ff:ffff:ffff:ffff:ffff:ffff
240e:37c::-240e:37c:19ff:ffff:ffff:ffff:ffff:ffff
240e:37d::-240e:37d:19ff:ffff:ffff:ffff:ffff:ffff
240e:37e::-240e:37e:19ff:ffff:ffff:ffff:ffff:ffff
240e:37f::-240e:37f:19ff:ffff:ffff:ffff:ffff:ffff
240e:678::/36
240e:678:8400::/38
240e:678:c200::/39
240e:678:e200::/39
240e:679::/41
240e:679:8400::/38
240e:679:c200::/39
240e:679:e200::/39
240e:67a:800::/37
240e:67a:8400::/38
240e:67a:c200::/39
240e:67a:e200::/39
240e:67b:800::/37
240e:67b:8400::/38
240e:67b:c200::/39
240e:67b:e200::/39
240e:67c:800::/37
240e:67c:8400::/38
240e:67c:c200::/39
240e:67c:e200::/39
240e:67d:800::/37
240e:67d:8400::/38
240e:67d:c200::/39
240e:67d:e200::/39
240e:67e:800::/37
240e:67e:8400::/38
240e:67e:c200::/39
240e:67e:e200::/39
240e:67f:800::/37
240e:67f:8400::/38
240e:67f:c200::/39
240e:67f:e200::/39
240e:983:1803::/48
240e:a64::-240e:a64:19ff:ffff:ffff:ffff:ffff:ffff
240e:a65::-240e:a65:19ff:ffff:ffff:ffff:ffff:ffff
240e:a66::-240e:a66:19ff:ffff:ffff:ffff:ffff:ffff
240e:a67::-240e:a67:19ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:8f:dd:51:a4:54:0b:9f:b5:25:c0:1d:25:95:91:c0:c8:a4:
6b:0e:d2:0a:2b:ba:8c:7d:5a:88:f6:67:27:75:fb:ad:c4:9c:
a8:7c:69:46:08:ba:e7:1b:f8:48:21:e6:d9:45:56:fc:e7:9c:
6f:17:c1:33:6c:17:2b:b5:08:33:da:e2:6d:29:85:04:a7:03:
b7:c0:f0:be:ac:f7:55:54:e4:7d:af:d2:f7:14:60:06:4f:e3:
4b:24:5e:d6:e1:60:13:8f:95:65:55:aa:bd:6d:4e:0f:cf:d9:
0e:9b:c0:0e:71:68:2f:cb:70:bd:b0:77:a8:53:77:0b:43:f7:
f2:a7:2b:3b:97:5d:8e:49:af:28:b1:46:8f:9c:65:35:63:27:
50:47:67:66:e7:57:a2:12:0d:95:f9:13:3b:77:32:39:47:b1:
4e:6a:8c:59:44:c8:e4:3b:e4:ed:76:81:97:7e:16:e1:3c:77:
7d:2b:34:02:5a:21:df:34:d0:dc:0e:5a:67:f0:39:58:55:bf:
ed:3d:d2:35:3a:01:4e:f9:2a:98:1b:45:7e:f0:f7:89:af:9e:
ff:fe:90:69:3d:a3:1e:28:22:a1:55:90:0d:64:ca:f4:0d:ab:
88:67:15:e4:cd:16:70:ab:8d:c7:14:ba:53:b9:4f:f7:ea:cf:
da:c7:bf:a3
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIUTs+h3FxVL8JvOd4dYfyPBPqzP+cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwNDE3MTgwOVoX
DTI3MDYwMzE3MjMwOVowMzExMC8GA1UEAxMoMDc1NjRCMjYyN0I1MDk2ODJBMTU3
RkFFNkVGQ0EzRkFFQzAyOERDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMYNw+bn/6YK+a9Hg1o0Kl9M6TAZeAxRWwW1Xq6PXME42Z9zMni53KtnFsJ8
l12J23XonEeM2nvnGnFaoxpyNrzFs4mX/mOtYIvuTV1b8sNQYIQ6meASYY/2iydD
/U964WhUJt3+XkwOn2yke6VqOgWtAUmdnwdLrgiuadrmDuRj0oLvuUnDxw5JgiDN
nuWAk1MUK5DTU9uRZmCOqCF2q8ervRNg6eFtYFK34uulRPkwz08dhL0DwX0Fup7j
O7PTp+koWj+HKOfFVNqgEQ/dginQrkh8KakR79/GKhlYydG89VE213r79l6d/VX9
NeCm112IJM2JZ+Nq+22AbHbUb4ECAwEAAaOCBCIwggQeMB0GA1UdDgQWBBQHVksm
J7UJaCoVf65u/KP67AKNxTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwMzI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIICWwYIKwYBBQUHAQcBAf8EggJKMIICRjAgBAIAATAaAwQAPZoIAwQAym/xMAwD
BADKb/UDBADKb/YwggIgBAIAAjCCAhgDBgQkDgAUAAMGBCQOABSAAwYHJA4AVIAD
BgckDgDQAAMGBCQOANYAAwcAJA4BCENBAwcAJA4BCEtBAwYEJA4CZBAwDwMFAyQO
A3gDBgEkDgN4GDAPAwUAJA4DeQMGASQOA3kYMA8DBQEkDgN6AwYBJA4DehgwDwMF
ACQOA3sDBgEkDgN7GDAPAwUCJA4DfAMGASQOA3wYMA8DBQAkDgN9AwYBJA4DfRgw
DwMFASQOA34DBgEkDgN+GDAPAwUAJA4DfwMGASQOA38YAwYEJA4GeAADBgIkDgZ4
hAMGASQOBnjCAwYBJA4GeOIDBwckDgZ5AAADBgIkDgZ5hAMGASQOBnnCAwYBJA4G
eeIDBgMkDgZ6CAMGAiQOBnqEAwYBJA4GesIDBgEkDgZ64gMGAyQOBnsIAwYCJA4G
e4QDBgEkDgZ7wgMGASQOBnviAwYDJA4GfAgDBgIkDgZ8hAMGASQOBnzCAwYBJA4G
fOIDBgMkDgZ9CAMGAiQOBn2EAwYBJA4GfcIDBgEkDgZ94gMGAyQOBn4IAwYCJA4G
foQDBgEkDgZ+wgMGASQOBn7iAwYDJA4GfwgDBgIkDgZ/hAMGASQOBn/CAwYBJA4G
f+IDBwAkDgmDGAMwDwMFAiQOCmQDBgEkDgpkGDAPAwUAJA4KZQMGASQOCmUYMA8D
BQEkDgpmAwYBJA4KZhgwDwMFACQOCmcDBgEkDgpnGDANBgkqhkiG9w0BAQsFAAOC
AQEAFY/dUaRUC5+1JcAdJZWRwMikaw7SCiu6jH1aiPZnJ3X7rcScqHxpRgi65xv4
SCHm2UVW/OecbxfBM2wXK7UIM9ribSmFBKcDt8Dwvqz3VVTkfa/S9xRgBk/jSyRe
1uFgE4+VZVWqvW1OD8/ZDpvADnFoL8twvbB3qFN3C0P38qcrO5ddjkmvKLFGj5xl
NWMnUEdnZudXohINlfkTO3cyOUexTmqMWUTI5Dvk7XaBl34W4Tx3fSs0Aloh3zTQ
3A5aZ/A5WFW/7T3SNToBTvkqmBtFfvD3ia+e//6QaT2jHigioVWQDWTK9A2riGcV
5M0WcKuNxxS6U7lP9+rP2se/ow==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:42 2026 by rpki-client