Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140485.roa
File: AS140485.roa (raw, json)
Hash identifier: PALPx4SHqutQ+kY4GVuElXES6RWMHH/b2cVZNaROJzE=
Subject key identifier: F0:71:78:C0:09:85:46:B9:9F:54:30:36:E5:11:6C:19:1C:06:1E:3E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2193389EE1B99A601C0C53DE3C0789FC6248017A
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140485.roa
Signing time: Thu 28 May 2026 16:25:10 +0000
ROA not before: Thu 28 May 2026 16:20:10 +0000
ROA not after: Thu 27 May 2027 16:25:10 +0000
asID: 140485
IP address blocks: 36.21.0.0/17 maxlen: 17
36.28.0.0/17 maxlen: 17
60.163.64.0/23 maxlen: 23
115.220.64.0/24 maxlen: 24
115.233.185.0/24 maxlen: 24
183.137.0.0/17 maxlen: 17
240e:1c7:10::/44 maxlen: 44
240e:473::/32 maxlen: 32
240e:473:ddff::/48 maxlen: 48
240e:473:eeec::/48 maxlen: 48
240e:473:eeed::/48 maxlen: 48
240e:473:eeee::/48 maxlen: 48
240e:473:ff00::/48 maxlen: 48
240e:473:ffff::/48 maxlen: 48
240e:870::/44 maxlen: 44
240e:870:80::/46 maxlen: 46
240e:871::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:93:38:9e:e1:b9:9a:60:1c:0c:53:de:3c:07:89:fc:62:48:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:20:10 2026 GMT
Not After : May 27 16:25:10 2027 GMT
Subject: CN=F07178C0098546B99F543036E5116C191C061E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:7a:09:fb:68:d2:05:83:7e:10:2d:b4:09:
59:82:5b:4e:da:7b:af:58:5c:65:8f:1e:96:f6:a8:
54:ec:03:80:42:84:09:15:cb:5a:80:28:9c:e1:35:
f7:05:6a:7b:27:f2:76:08:fb:d4:ad:e9:d2:b2:6b:
11:40:6d:24:8b:2b:e9:90:c8:8a:c5:07:e0:cb:a5:
3c:2a:55:25:bc:c6:64:ae:b3:00:a9:26:fa:a3:b2:
eb:a7:82:b1:e6:bd:5f:02:7a:8c:80:58:2e:46:eb:
11:c5:65:84:8f:8b:3d:ad:bd:f1:8b:bd:8e:26:b0:
42:d8:ab:5f:58:5c:de:24:5d:9c:53:99:ec:7a:0c:
cd:97:aa:0b:18:cc:34:ad:2f:21:5a:e7:71:82:66:
5e:3a:bf:80:37:1b:c5:55:2d:0e:a7:85:84:5d:2c:
40:41:b3:90:b6:a5:e9:86:ee:8e:bc:08:9a:17:63:
cd:8c:b8:22:22:ed:49:8b:1b:68:f3:43:6f:9c:b4:
8c:30:d8:33:5a:e4:5b:94:eb:2c:e5:c7:5c:03:c6:
f1:73:71:22:44:2b:8d:c6:e5:3e:cc:d6:9d:5b:3e:
73:ab:69:a5:63:e4:2b:d7:7f:11:c3:94:d6:f5:54:
c6:a6:56:ed:7a:7a:e9:4b:33:9d:2c:f1:c4:38:ee:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:78:C0:09:85:46:B9:9F:54:30:36:E5:11:6C:19:1C:06:1E:3E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.21.0.0/17
36.28.0.0/17
60.163.64.0/23
115.220.64.0/24
115.233.185.0/24
183.137.0.0/17
IPv6:
240e:1c7:10::/44
240e:473::/32
240e:870::/44
240e:870:80::/46
240e:871::/44
Signature Algorithm: sha256WithRSAEncryption
a0:bb:fe:6f:ab:32:6d:6b:59:08:94:cb:eb:ac:7c:17:c4:8b:
a0:5f:e1:c0:23:7d:ce:77:ff:a7:3e:fd:54:65:82:9b:dd:42:
27:b2:2b:3e:1e:fc:34:12:6b:68:2e:d5:04:ec:84:26:2f:3b:
7e:46:a3:75:5d:83:e6:6c:0c:c2:3e:80:88:47:1a:47:e8:3d:
bb:6a:fa:b3:60:c4:aa:bf:ef:64:dc:56:38:72:74:e5:01:e7:
a7:0f:0e:07:fc:4b:1b:eb:b6:97:05:28:34:8e:6d:68:14:b5:
54:97:94:6a:5e:92:86:b8:bc:db:42:17:10:33:a9:4c:19:e5:
d5:6c:ef:55:37:e8:7b:a6:53:d4:5e:3e:ed:64:3a:59:47:42:
c6:16:c7:6b:ad:41:59:6b:f0:0f:35:7c:d8:a2:b4:7d:cc:76:
82:f5:de:2b:ad:f7:d0:00:56:98:6e:77:a1:26:34:d2:9f:08:
49:8d:5c:ec:ce:82:e4:c3:21:2b:f9:0b:03:91:c6:59:69:9d:
61:67:75:79:86:47:04:a5:ce:e3:4a:50:20:38:69:d3:f1:d2:
6c:b9:f0:b3:ff:de:d8:e3:41:5e:50:58:66:5f:d8:a5:e6:b0:
5b:d7:5e:1e:79:1e:0c:e5:e3:41:63:77:d4:24:99:14:6d:6d:
22:b3:e4:5b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIZM4nuG5mmAcDFPePAeJ/GJIAXowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MjAxMFoX
DTI3MDUyNzE2MjUxMFowMzExMC8GA1UEAxMoRjA3MTc4QzAwOTg1NDZCOTlGNTQz
MDM2RTUxMTZDMTkxQzA2MUUzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMs4egn7aNIFg34QLbQJWYJbTtp7r1hcZY8elvaoVOwDgEKECRXLWoAonOE1
9wVqeyfydgj71K3p0rJrEUBtJIsr6ZDIisUH4MulPCpVJbzGZK6zAKkm+qOy66eC
sea9XwJ6jIBYLkbrEcVlhI+LPa298Yu9jiawQtirX1hc3iRdnFOZ7HoMzZeqCxjM
NK0vIVrncYJmXjq/gDcbxVUtDqeFhF0sQEGzkLal6YbujrwImhdjzYy4IiLtSYsb
aPNDb5y0jDDYM1rkW5TrLOXHXAPG8XNxIkQrjcblPszWnVs+c6tppWPkK9d/EcOU
1vVUxqZW7Xp66UsznSzxxDjuP60CAwEAAaOCAjUwggIxMB0GA1UdDgQWBBTwcXjA
CYVGuZ9UMDblEWwZHAYePjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwNDg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MHAGCCsGAQUFBwEHAQH/BGEwXzAqBAIAATAkAwQHJBUAAwQHJBwAAwQBPKNAAwQA
c9xAAwQAc+m5AwQHt4kAMDEEAgACMCsDBwQkDgHHABADBQAkDgRzAwcEJA4IcAAA
AwcCJA4IcACAAwcEJA4IcQAAMA0GCSqGSIb3DQEBCwUAA4IBAQCgu/5vqzJta1kI
lMvrrHwXxIugX+HAI33Od/+nPv1UZYKb3UInsis+Hvw0EmtoLtUE7IQmLzt+RqN1
XYPmbAzCPoCIRxpH6D27avqzYMSqv+9k3FY4cnTlAeenDw4H/Esb67aXBSg0jm1o
FLVUl5RqXpKGuLzbQhcQM6lMGeXVbO9VN+h7plPUXj7tZDpZR0LGFsdrrUFZa/AP
NXzYorR9zHaC9d4rrffQAFaYbnehJjTSnwhJjVzszoLkwyEr+QsDkcZZaZ1hZ3V5
hkcEpc7jSlAgOGnT8dJsufCz/97Y40FeUFhmX9il5rBb114eeR4M5eNBY3fUJJkU
bW0is+Rb
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:43 2026 by rpki-client