Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
File: AS140494.roa (raw, json)
Hash identifier: apXgCEHHwRYHqPxqjV9fVR1Sq5dzYL8uXVkmOp6doeM=
Subject key identifier: 78:38:91:5E:53:C5:86:1E:C2:B7:E9:9A:60:23:E9:2E:EB:4E:3C:7C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3FDF522891429A87AA37B2A488FD39BDD27DA273
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
Signing time: Thu 28 May 2026 16:38:27 +0000
ROA not before: Thu 28 May 2026 16:33:27 +0000
ROA not after: Thu 27 May 2027 16:38:27 +0000
asID: 140494
IP address blocks: 240e:390:5540::/44 maxlen: 44
240e:390:5550::/44 maxlen: 44
240e:390:5560::/44 maxlen: 44
240e:390:5570::/44 maxlen: 44
240e:390:5580::/44 maxlen: 44
240e:390:5590::/44 maxlen: 44
240e:390:5d00::/44 maxlen: 44
240e:390:5d10::/44 maxlen: 44
240e:390:5d20::/44 maxlen: 44
240e:390:5d30::/44 maxlen: 44
240e:390:5d40::/44 maxlen: 44
240e:690:5603::/48 maxlen: 48
240e:690:5b02::/48 maxlen: 48
240e:690:5b03::/48 maxlen: 48
240e:690:5b06::/48 maxlen: 48
240e:691:5902::/48 maxlen: 48
240e:691:5c02::/48 maxlen: 48
240e:695:5402::/48 maxlen: 48
240e:696:5522::/48 maxlen: 48
240e:696:5525::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:df:52:28:91:42:9a:87:aa:37:b2:a4:88:fd:39:bd:d2:7d:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:33:27 2026 GMT
Not After : May 27 16:38:27 2027 GMT
Subject: CN=7838915E53C5861EC2B7E99A6023E92EEB4E3C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:c5:b8:06:c1:ca:64:08:84:4a:23:83:e9:
fd:55:d9:1b:68:7f:24:bf:ce:71:13:53:c6:48:a8:
e5:68:00:4a:ae:5c:b6:2f:23:e0:d4:8d:1c:01:6f:
1f:95:72:7f:b3:3f:6b:d1:44:09:ed:13:2b:eb:18:
68:b6:75:82:c1:c0:dc:95:69:1a:97:28:ae:ab:77:
2d:70:53:6d:0b:ee:67:00:0b:b0:3f:ed:c7:69:1c:
52:7a:a8:62:99:b0:17:b5:dd:7b:34:12:51:7c:93:
fd:6a:15:68:d5:12:8e:2b:1e:7b:9d:45:86:44:1e:
4d:de:86:ae:fd:ec:bf:83:ee:fb:c3:37:98:50:0c:
34:0b:32:f4:92:4e:99:8a:8f:a4:ee:da:29:c1:84:
54:53:d9:d8:54:01:6d:60:83:16:fb:e3:ba:40:c6:
16:86:39:69:f9:bf:43:c2:1e:2c:e7:b3:ce:eb:4e:
98:c7:77:05:63:2f:aa:82:17:19:f6:95:4c:fb:6d:
40:18:02:06:fa:7f:56:21:60:18:ad:77:15:d7:69:
27:7c:c7:75:1c:88:3f:4d:36:86:06:a8:39:29:f4:
28:99:a5:65:68:44:78:da:99:f4:88:52:b6:91:02:
dd:8e:68:b9:1e:fe:d8:13:01:bd:70:37:de:dd:78:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:91:5E:53:C5:86:1E:C2:B7:E9:9A:60:23:E9:2E:EB:4E:3C:7C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:390:5540::-240e:390:559f:ffff:ffff:ffff:ffff:ffff
240e:390:5d00::-240e:390:5d4f:ffff:ffff:ffff:ffff:ffff
240e:690:5603::/48
240e:690:5b02::/47
240e:690:5b06::/48
240e:691:5902::/48
240e:691:5c02::/48
240e:695:5402::/48
240e:696:5522::/48
240e:696:5525::/48
Signature Algorithm: sha256WithRSAEncryption
97:b3:83:2b:65:13:45:6e:65:c6:0b:31:51:8d:03:6f:43:3f:
ac:a6:15:11:6c:84:bc:37:3c:47:1f:e7:47:9f:33:95:4f:19:
ac:5f:d9:91:af:59:ee:d7:ea:d4:83:09:3d:07:20:62:4c:18:
ab:d3:97:53:13:73:18:db:01:50:48:64:3d:25:b7:86:c0:7e:
d6:1d:9c:39:36:ec:7c:91:e5:3e:e6:e1:2c:0c:87:68:d5:e6:
79:36:d8:fd:07:63:f7:a2:65:47:4d:be:9e:e4:ba:cd:13:f6:
be:56:4c:36:1b:01:48:b5:fd:7c:ba:0a:6d:36:c9:d4:bd:7f:
d4:b2:bf:df:c8:36:32:a8:8c:8b:3f:39:c1:b4:06:a4:87:aa:
37:82:ba:d2:1b:80:e7:63:1a:c2:3c:82:67:59:fd:d8:67:0d:
65:5b:ef:e9:b4:b3:0c:69:ad:8d:b1:82:7c:34:fc:07:cf:34:
02:c4:37:dd:51:07:23:0d:b6:9d:93:b7:03:c6:a7:43:c7:52:
62:f2:49:fc:55:47:5e:c2:e0:8f:fa:09:85:a7:00:78:c7:47:
38:5a:2f:73:3d:b4:e8:1f:a4:f2:7d:61:91:18:d9:51:34:8e:
ba:f9:98:27:e9:c9:d8:fc:84:e0:a9:ca:76:44:5e:b6:8f:3a:
23:d9:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:34 2026 by rpki-client