Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa
File: AS140330.roa (raw, json)
Hash identifier: 1fp0d12rBCXvMWhGJf/G6jguVnmVjTYk0pohJ6hv1cI=
Subject key identifier: EA:91:57:86:61:10:C5:04:A2:CA:CB:01:A6:BA:0C:B5:98:F2:2D:A4
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2B31EE29BCD4504A8FF6B00F189A0143A998B152
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa
Signing time: Thu 04 Jun 2026 17:23:09 +0000
ROA not before: Thu 04 Jun 2026 17:18:09 +0000
ROA not after: Thu 03 Jun 2027 17:23:09 +0000
asID: 140330
IP address blocks: 61.154.226.0/24 maxlen: 24
117.25.187.0/24 maxlen: 24
240e:14:1000::/36 maxlen: 36
240e:14:9000::/36 maxlen: 36
240e:55::/34 maxlen: 34
240e:d2::/33 maxlen: 33
240e:d6:1000::/36 maxlen: 36
240e:108:4344::/48 maxlen: 48
240e:108:4b44::/48 maxlen: 48
240e:264:2000::/36 maxlen: 36
240e:267:2000::/40 maxlen: 40
240e:267:2100::/40 maxlen: 40
240e:267:2200::/40 maxlen: 40
240e:267:2300::/40 maxlen: 40
240e:378:1a00::/39 maxlen: 39
240e:378:1c00::/38 maxlen: 38
240e:378:2000::/38 maxlen: 38
240e:378:2400::/39 maxlen: 39
240e:378:aa00::/39 maxlen: 39
240e:379:1a00::/39 maxlen: 39
240e:379:1c00::/38 maxlen: 38
240e:379:2000::/38 maxlen: 38
240e:379:2400::/39 maxlen: 39
240e:379:aa00::/39 maxlen: 39
240e:37a:1a00::/39 maxlen: 39
240e:37a:1c00::/38 maxlen: 38
240e:37a:2000::/38 maxlen: 38
240e:37a:2400::/39 maxlen: 39
240e:37a:aa00::/39 maxlen: 39
240e:37b:1a00::/39 maxlen: 39
240e:37b:1c00::/38 maxlen: 38
240e:37b:2000::/38 maxlen: 38
240e:37b:2400::/39 maxlen: 39
240e:37b:aa00::/39 maxlen: 39
240e:37c:1a00::/39 maxlen: 39
240e:37c:1c00::/38 maxlen: 38
240e:37c:2000::/38 maxlen: 38
240e:37c:2400::/39 maxlen: 39
240e:37c:aa00::/39 maxlen: 39
240e:37d:1a00::/39 maxlen: 39
240e:37d:1c00::/38 maxlen: 38
240e:37d:2000::/38 maxlen: 38
240e:37d:2400::/39 maxlen: 39
240e:37d:aa00::/39 maxlen: 39
240e:37e:1a00::/39 maxlen: 39
240e:37e:1c00::/38 maxlen: 38
240e:37e:2000::/38 maxlen: 38
240e:37e:2400::/39 maxlen: 39
240e:37e:aa00::/39 maxlen: 39
240e:37f:1a00::/39 maxlen: 39
240e:37f:1c00::/38 maxlen: 38
240e:37f:2000::/38 maxlen: 38
240e:37f:2400::/39 maxlen: 39
240e:37f:aa00::/39 maxlen: 39
240e:678:1a00::/39 maxlen: 39
240e:678:1c00::/38 maxlen: 38
240e:678:2000::/38 maxlen: 38
240e:678:2400::/39 maxlen: 39
240e:679:80::/41 maxlen: 41
240e:679:80::/42 maxlen: 42
240e:679:c0::/42 maxlen: 42
240e:679:8800::/38 maxlen: 38
240e:679:c400::/39 maxlen: 39
240e:679:e400::/39 maxlen: 39
240e:67a:1000::/37 maxlen: 37
240e:67a:8800::/38 maxlen: 38
240e:67a:c400::/39 maxlen: 39
240e:67a:e400::/39 maxlen: 39
240e:67b:1000::/37 maxlen: 37
240e:67b:8800::/38 maxlen: 38
240e:67b:c400::/39 maxlen: 39
240e:67b:e400::/39 maxlen: 39
240e:67c:1000::/37 maxlen: 37
240e:67c:8800::/38 maxlen: 38
240e:67c:c400::/39 maxlen: 39
240e:67c:e400::/39 maxlen: 39
240e:67d:1000::/37 maxlen: 37
240e:67d:8800::/38 maxlen: 38
240e:67d:c400::/39 maxlen: 39
240e:67d:e400::/39 maxlen: 39
240e:67e:1000::/37 maxlen: 37
240e:67e:8800::/38 maxlen: 38
240e:67e:c400::/39 maxlen: 39
240e:67e:e400::/39 maxlen: 39
240e:67f:1000::/37 maxlen: 37
240e:67f:1002::/48 maxlen: 48
240e:67f:8800::/38 maxlen: 38
240e:67f:c400::/39 maxlen: 39
240e:67f:e400::/39 maxlen: 39
240e:983:1806::/48 maxlen: 48
240e:a64:1a00::/39 maxlen: 39
240e:a64:1c00::/38 maxlen: 38
240e:a64:2000::/38 maxlen: 38
240e:a64:2400::/39 maxlen: 39
240e:a65:1a00::/39 maxlen: 39
240e:a65:1c00::/38 maxlen: 38
240e:a65:2000::/38 maxlen: 38
240e:a65:2400::/39 maxlen: 39
240e:a66:1a00::/39 maxlen: 39
240e:a66:1c00::/38 maxlen: 38
240e:a66:2000::/38 maxlen: 38
240e:a66:2400::/39 maxlen: 39
240e:a67:1a00::/39 maxlen: 39
240e:a67:1c00::/38 maxlen: 38
240e:a67:2000::/38 maxlen: 38
240e:a67:2400::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:31:ee:29:bc:d4:50:4a:8f:f6:b0:0f:18:9a:01:43:a9:98:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 17:18:09 2026 GMT
Not After : Jun 3 17:23:09 2027 GMT
Subject: CN=EA9157866110C504A2CACB01A6BA0CB598F22DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:65:07:3a:80:f4:fb:d6:25:9e:36:17:6f:
9c:5e:91:d1:90:17:c3:01:53:6d:72:87:1a:d2:f4:
2e:6e:f4:a2:67:d7:6f:1d:dd:c8:6f:31:db:37:30:
e2:ba:6f:90:00:6c:8e:40:dd:c8:a0:ce:6a:7d:29:
a1:42:1f:c6:94:47:c8:a7:a7:96:c1:ad:d8:0a:ba:
35:5d:1e:8a:e2:8e:fb:53:38:27:89:f7:82:66:66:
84:9e:17:df:25:3a:3b:64:34:9f:68:ec:2a:bd:f1:
01:26:f0:af:4f:f9:20:97:d8:95:61:6a:c3:90:82:
14:4e:71:ec:05:ac:d6:77:87:b7:c3:a6:c7:4a:00:
26:42:25:ff:36:e0:d2:18:57:31:09:de:f9:7e:5e:
55:df:0c:93:fb:d5:52:19:e0:ec:f4:4b:a9:2a:4b:
64:12:7d:01:a2:dc:09:05:83:c8:d6:15:32:20:34:
c5:ee:98:57:61:b1:82:cd:f2:b1:79:8f:0c:07:e2:
f3:43:34:fd:10:69:63:0e:7c:05:92:8f:e0:6f:a9:
66:a4:06:fe:dd:31:c2:59:c6:e4:74:ea:5d:dc:e4:
3e:10:e9:2b:9c:d3:a7:ac:9d:c4:d6:1b:32:20:f3:
6c:f8:99:9b:4b:8e:86:65:7c:a4:34:22:e8:75:35:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:57:86:61:10:C5:04:A2:CA:CB:01:A6:BA:0C:B5:98:F2:2D:A4
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.154.226.0/24
117.25.187.0/24
IPv6:
240e:14:1000::/36
240e:14:9000::/36
240e:55::/34
240e:d2::/33
240e:d6:1000::/36
240e:108:4344::/48
240e:108:4b44::/48
240e:264:2000::/36
240e:267:2000::/38
240e:378:1a00::-240e:378:25ff:ffff:ffff:ffff:ffff:ffff
240e:378:aa00::/39
240e:379:1a00::-240e:379:25ff:ffff:ffff:ffff:ffff:ffff
240e:379:aa00::/39
240e:37a:1a00::-240e:37a:25ff:ffff:ffff:ffff:ffff:ffff
240e:37a:aa00::/39
240e:37b:1a00::-240e:37b:25ff:ffff:ffff:ffff:ffff:ffff
240e:37b:aa00::/39
240e:37c:1a00::-240e:37c:25ff:ffff:ffff:ffff:ffff:ffff
240e:37c:aa00::/39
240e:37d:1a00::-240e:37d:25ff:ffff:ffff:ffff:ffff:ffff
240e:37d:aa00::/39
240e:37e:1a00::-240e:37e:25ff:ffff:ffff:ffff:ffff:ffff
240e:37e:aa00::/39
240e:37f:1a00::-240e:37f:25ff:ffff:ffff:ffff:ffff:ffff
240e:37f:aa00::/39
240e:678:1a00::-240e:678:25ff:ffff:ffff:ffff:ffff:ffff
240e:679:80::/41
240e:679:8800::/38
240e:679:c400::/39
240e:679:e400::/39
240e:67a:1000::/37
240e:67a:8800::/38
240e:67a:c400::/39
240e:67a:e400::/39
240e:67b:1000::/37
240e:67b:8800::/38
240e:67b:c400::/39
240e:67b:e400::/39
240e:67c:1000::/37
240e:67c:8800::/38
240e:67c:c400::/39
240e:67c:e400::/39
240e:67d:1000::/37
240e:67d:8800::/38
240e:67d:c400::/39
240e:67d:e400::/39
240e:67e:1000::/37
240e:67e:8800::/38
240e:67e:c400::/39
240e:67e:e400::/39
240e:67f:1000::/37
240e:67f:8800::/38
240e:67f:c400::/39
240e:67f:e400::/39
240e:983:1806::/48
240e:a64:1a00::-240e:a64:25ff:ffff:ffff:ffff:ffff:ffff
240e:a65:1a00::-240e:a65:25ff:ffff:ffff:ffff:ffff:ffff
240e:a66:1a00::-240e:a66:25ff:ffff:ffff:ffff:ffff:ffff
240e:a67:1a00::-240e:a67:25ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
88:6a:b2:3e:1e:62:69:48:3c:08:a3:2f:7f:41:48:d9:f3:53:
25:eb:05:17:d2:41:c4:38:af:49:8f:87:8b:b5:01:eb:79:eb:
13:cb:4a:7e:fe:27:e5:54:08:e1:ce:ae:81:5f:fd:4b:ac:84:
6c:02:f8:5f:2f:e4:9a:1e:62:53:81:2d:1c:3b:d4:a7:70:a9:
3f:f6:98:7e:8e:3d:b3:72:d5:76:bb:78:c0:5b:5b:60:ba:36:
2d:03:cd:9e:94:ae:4e:08:20:19:42:fd:08:9c:a8:be:fa:9d:
ae:45:f8:94:33:d1:4a:d5:e7:d3:0c:fb:d4:96:7b:1f:8a:23:
9d:3c:e2:15:d0:a9:ee:93:2a:dc:f3:f5:95:ad:fe:97:70:a2:
34:c5:f7:79:da:0a:0d:d1:cb:9c:a4:93:33:01:19:8d:87:3f:
ea:30:14:c6:4d:35:c7:c0:d5:33:46:7b:91:0c:36:53:50:64:
97:d1:b5:33:24:76:84:93:85:69:eb:68:b0:8b:3f:8c:26:87:
d7:98:e3:09:b4:50:cc:e7:53:b9:de:22:8b:6b:e5:b2:14:58:
41:6c:4a:95:4f:50:9a:3e:d3:7b:db:fd:52:0c:14:21:78:36:
3f:11:20:e6:d8:76:ac:d5:52:4d:ae:c4:23:41:8e:ac:25:ff:
b5:ce:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:42 2026 by rpki-client