Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140486.roa
File: AS140486.roa (raw, json)
Hash identifier: WlYkeZQtBOdolWBM2pkrFGEN7lCQbGymukaO0r7WsgE=
Subject key identifier: A7:B9:4E:EA:3C:69:87:1E:B4:2E:8D:FC:DB:C6:11:C2:4C:94:AA:47
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0FF22F447360BF83AE53ED1A690EA042B22685A6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140486.roa
Signing time: Thu 28 May 2026 16:25:10 +0000
ROA not before: Thu 28 May 2026 16:20:10 +0000
ROA not after: Thu 27 May 2027 16:25:10 +0000
asID: 140486
IP address blocks: 36.21.128.0/17 maxlen: 17
36.28.128.0/17 maxlen: 17
60.163.66.0/23 maxlen: 23
115.220.65.0/24 maxlen: 24
115.233.186.0/24 maxlen: 24
183.137.128.0/17 maxlen: 17
240e:1c7:20::/44 maxlen: 44
240e:471::/32 maxlen: 32
240e:471:eeec::/48 maxlen: 48
240e:471:eeed::/48 maxlen: 48
240e:473:ff01::/48 maxlen: 48
240e:473:fffe::/48 maxlen: 48
240e:870:40::/44 maxlen: 44
240e:871:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f2:2f:44:73:60:bf:83:ae:53:ed:1a:69:0e:a0:42:b2:26:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:20:10 2026 GMT
Not After : May 27 16:25:10 2027 GMT
Subject: CN=A7B94EEA3C69871EB42E8DFCDBC611C24C94AA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:9b:44:db:4d:b9:05:53:1e:c9:49:70:ce:
13:2f:4c:13:cd:5d:bf:c7:99:b2:c6:29:9b:6c:ac:
34:f0:81:d2:02:11:63:69:76:70:35:32:da:84:61:
e3:13:af:fd:8a:bf:c5:57:7b:7b:3a:30:b7:02:f1:
25:86:dc:72:ba:31:14:42:df:24:e6:f1:81:3b:c0:
53:2e:e8:83:e9:1e:97:12:ea:3e:42:3e:a3:79:8d:
e0:c6:0b:bb:11:f6:1c:3c:77:08:fa:08:01:9a:fe:
e3:2c:89:2b:d6:5d:30:b5:62:b1:28:9d:18:80:93:
8b:c7:b2:e9:e4:ac:61:52:be:bf:27:3f:01:5c:87:
2a:10:9d:d0:f9:f4:8b:bb:6b:ed:24:db:1e:ac:ae:
11:57:17:7f:26:e0:f6:48:e1:3e:33:17:0b:e9:c6:
e1:d7:40:f5:34:bd:30:6b:79:2d:87:41:fd:6f:22:
de:81:e3:c9:f8:dd:42:99:8e:58:d8:1a:8b:bb:46:
13:97:8c:d3:83:7d:02:6e:8d:8f:49:f6:1c:49:72:
84:ec:b7:e5:c8:f3:aa:e5:6e:06:f0:c9:fe:2c:88:
a4:ee:74:ab:98:63:92:18:3b:dd:c3:71:23:cf:77:
a2:c9:57:54:c6:99:29:0f:4a:6c:39:6d:00:46:84:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:4E:EA:3C:69:87:1E:B4:2E:8D:FC:DB:C6:11:C2:4C:94:AA:47
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.21.128.0/17
36.28.128.0/17
60.163.66.0/23
115.220.65.0/24
115.233.186.0/24
183.137.128.0/17
IPv6:
240e:1c7:20::/44
240e:471::/32
240e:473:ff01::/48
240e:473:fffe::/48
240e:870:40::/44
240e:871:10::/44
Signature Algorithm: sha256WithRSAEncryption
92:88:5b:ec:48:6b:9e:f9:8c:ed:0b:0f:2b:c0:8b:20:19:4a:
1d:39:60:c5:bb:c0:d4:ee:94:ea:13:96:15:1b:a0:90:a7:b0:
16:34:3e:86:14:31:53:7f:8f:e5:42:21:d9:75:6e:c9:57:70:
d7:4c:d8:71:2c:95:3c:9c:ba:f0:33:6c:d1:fc:13:b1:84:38:
fd:a4:b0:86:a1:f5:bc:bf:39:26:a9:ab:f6:39:14:31:77:a5:
13:3b:fc:56:c1:a0:77:16:b1:e4:81:aa:14:fe:4d:93:af:ad:
93:13:f0:9e:50:08:ad:7e:b3:da:b9:1f:2a:8c:49:2f:9f:64:
87:39:9a:8c:ef:5a:d2:1c:83:57:c0:70:e6:a6:7b:1e:4e:43:
bf:eb:c6:2a:3f:67:bc:bb:74:24:b9:8c:ce:df:c5:ac:a0:51:
de:8d:64:c2:f7:89:34:9a:83:bd:61:1e:9f:f2:a7:71:54:0b:
3d:62:34:20:0d:74:25:d3:19:aa:95:ac:52:5b:a1:3e:f4:c2:
bb:c7:b9:79:cf:f9:f8:c0:9e:34:0f:82:bd:91:71:8e:e0:78:
5d:09:c6:d1:f1:0c:93:a3:0d:da:f9:74:a2:7d:6c:b3:6e:40:
d8:fd:71:98:f1:1c:69:e7:44:60:0a:eb:0c:27:46:0a:e4:ed:
5b:6c:03:4b
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUD/IvRHNgv4OuU+0aaQ6gQrImhaYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MjAxMFoX
DTI3MDUyNzE2MjUxMFowMzExMC8GA1UEAxMoQTdCOTRFRUEzQzY5ODcxRUI0MkU4
REZDREJDNjExQzI0Qzk0QUE0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/Pm0TbTbkFUx7JSXDOEy9ME81dv8eZssYpm2ysNPCB0gIRY2l2cDUy2oRh
4xOv/Yq/xVd7ezowtwLxJYbccroxFELfJObxgTvAUy7og+kelxLqPkI+o3mN4MYL
uxH2HDx3CPoIAZr+4yyJK9ZdMLVisSidGICTi8ey6eSsYVK+vyc/AVyHKhCd0Pn0
i7tr7STbHqyuEVcXfybg9kjhPjMXC+nG4ddA9TS9MGt5LYdB/W8i3oHjyfjdQpmO
WNgai7tGE5eM04N9Am6Nj0n2HElyhOy35cjzquVuBvDJ/iyIpO50q5hjkhg73cNx
I893oslXVMaZKQ9KbDltAEaEpo0CAwEAAaOCAj4wggI6MB0GA1UdDgQWBBSnuU7q
PGmHHrQujfzbxhHCTJSqRzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwNDg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MHkGCCsGAQUFBwEHAQH/BGowaDAqBAIAATAkAwQHJBWAAwQHJByAAwQBPKNCAwQA
c9xBAwQAc+m6AwQHt4mAMDoEAgACMDQDBwQkDgHHACADBQAkDgRxAwcAJA4Ec/8B
AwcAJA4Ec//+AwcEJA4IcABAAwcEJA4IcQAQMA0GCSqGSIb3DQEBCwUAA4IBAQCS
iFvsSGue+YztCw8rwIsgGUodOWDFu8DU7pTqE5YVG6CQp7AWND6GFDFTf4/lQiHZ
dW7JV3DXTNhxLJU8nLrwM2zR/BOxhDj9pLCGofW8vzkmqav2ORQxd6UTO/xWwaB3
FrHkgaoU/k2Tr62TE/CeUAitfrPauR8qjEkvn2SHOZqM71rSHINXwHDmpnseTkO/
68YqP2e8u3QkuYzO38WsoFHejWTC94k0moO9YR6f8qdxVAs9YjQgDXQl0xmqlaxS
W6E+9MK7x7l5z/n4wJ40D4K9kXGO4HhdCcbR8QyTow3a+XSifWyzbkDY/XGY8Rxp
50RgCusMJ0YK5O1bbANL
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:21:58 2026 by rpki-client