Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140853.roa
File: AS140853.roa (raw, json)
Hash identifier: w7xGqyXbCW14JXtK+r1n04QGsuieDncEUYYElQx1BMM=
Subject key identifier: D9:47:EB:E7:3C:C8:A9:F2:1D:B2:F5:1B:D4:23:F5:EA:22:E0:E3:6A
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3F8060468EC212D01ED96BBFCA81B8E1A804283F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140853.roa
Signing time: Wed 10 Jun 2026 16:09:13 +0000
ROA not before: Wed 10 Jun 2026 16:04:13 +0000
ROA not after: Wed 09 Jun 2027 16:09:13 +0000
asID: 140853
IP address blocks: 59.53.40.0/21 maxlen: 21
59.53.136.0/21 maxlen: 21
106.4.172.0/22 maxlen: 22
106.4.252.0/22 maxlen: 22
106.5.164.0/22 maxlen: 22
106.225.204.0/23 maxlen: 23
106.228.0.0/17 maxlen: 17
111.76.40.0/21 maxlen: 21
111.76.200.0/21 maxlen: 21
111.78.104.0/21 maxlen: 21
115.148.168.0/21 maxlen: 21
115.152.80.0/21 maxlen: 21
115.153.8.0/21 maxlen: 21
117.40.100.0/22 maxlen: 22
117.43.120.0/21 maxlen: 21
117.43.184.0/21 maxlen: 21
182.85.172.0/22 maxlen: 22
182.85.184.0/22 maxlen: 22
182.85.192.0/22 maxlen: 22
182.87.88.0/21 maxlen: 21
182.96.144.0/21 maxlen: 21
182.96.232.0/21 maxlen: 21
220.175.80.0/20 maxlen: 20
240e:13:801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:80:60:46:8e:c2:12:d0:1e:d9:6b:bf:ca:81:b8:e1:a8:04:28:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 10 16:04:13 2026 GMT
Not After : Jun 9 16:09:13 2027 GMT
Subject: CN=D947EBE73CC8A9F21DB2F51BD423F5EA22E0E36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:35:a7:07:38:a6:03:ab:d6:09:b3:ef:cf:
cd:71:79:eb:27:ef:23:0f:9f:e3:d9:af:4d:02:a6:
b1:ff:fa:ad:5b:a1:4c:33:de:2c:24:eb:ea:6a:3b:
f2:89:d9:48:37:ea:2a:81:a4:9c:d7:5b:41:cf:56:
6d:d6:2f:c3:8c:3c:5e:1c:39:08:30:13:19:5f:e1:
75:59:c1:8f:91:44:65:84:f2:d2:f3:a9:0c:6c:35:
c6:01:92:2e:f3:be:55:63:bd:e6:73:39:c9:0d:6e:
59:bf:bd:24:9f:8b:6f:19:60:f8:0a:30:47:30:a3:
45:89:37:7e:de:5f:af:8b:b6:11:6e:64:42:fa:2e:
50:81:a4:e4:c8:1b:2a:3e:ac:3f:e5:1d:cc:49:e6:
25:82:96:f9:6d:86:8c:4b:5d:fa:25:6c:f0:6d:f2:
7f:74:c4:eb:98:bc:4e:9f:6f:53:80:05:80:6f:af:
c1:2d:ce:72:db:d4:a7:0f:86:92:24:31:c8:a1:86:
3b:b5:00:8a:d4:ef:6c:7b:f5:0c:9f:59:b5:8c:cd:
4d:5a:8b:9d:1b:d3:61:ee:9a:f5:25:19:a3:46:49:
ab:48:c5:c5:d8:79:27:09:79:74:72:7f:fc:0a:09:
64:ec:0c:e7:9f:95:bf:5f:92:fd:9f:bc:39:78:38:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:EB:E7:3C:C8:A9:F2:1D:B2:F5:1B:D4:23:F5:EA:22:E0:E3:6A
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.53.40.0/21
59.53.136.0/21
106.4.172.0/22
106.4.252.0/22
106.5.164.0/22
106.225.204.0/23
106.228.0.0/17
111.76.40.0/21
111.76.200.0/21
111.78.104.0/21
115.148.168.0/21
115.152.80.0/21
115.153.8.0/21
117.40.100.0/22
117.43.120.0/21
117.43.184.0/21
182.85.172.0/22
182.85.184.0/22
182.85.192.0/22
182.87.88.0/21
182.96.144.0/21
182.96.232.0/21
220.175.80.0/20
IPv6:
240e:13:801::/48
Signature Algorithm: sha256WithRSAEncryption
67:c7:a2:af:63:5a:35:d6:73:5f:7c:c2:c6:63:63:56:65:f5:
e9:dd:c7:09:87:5a:fd:84:27:a3:b5:c7:66:b1:c8:20:93:7d:
4e:9e:53:f1:a6:aa:0c:4d:9c:92:25:f0:52:f8:89:38:a6:73:
b0:ef:2c:36:9f:47:cf:65:c8:69:7d:65:89:87:ba:e3:4d:2f:
ae:2a:a8:ca:58:9b:30:55:a3:c4:8a:d5:8d:63:db:a8:fd:ba:
99:e7:05:ac:da:d1:26:33:4c:72:48:64:aa:3a:43:ac:5d:36:
c2:7f:e0:58:30:97:3e:91:b8:f0:c3:f6:58:72:37:31:67:00:
ef:34:42:d6:8f:87:47:6f:de:2b:39:0b:fd:8d:ef:88:d6:8c:
3d:bd:b4:a5:82:69:7b:49:bd:c5:72:5a:e6:bb:d5:f5:a1:e2:
48:fe:b4:2d:e9:5d:93:19:4d:32:c9:fd:1e:0d:1c:ff:53:d1:
a1:52:3e:9d:ef:16:a0:3a:cb:b4:53:e9:da:49:31:a2:35:ab:
0d:ce:e6:e6:96:ea:ec:1e:41:08:98:76:64:4e:63:98:8b:85:
d8:05:8f:f7:5b:4d:fc:1e:4e:fc:ea:61:64:45:e5:34:8f:82:
d9:d0:3e:8b:26:73:04:a3:73:46:74:93:7d:cc:57:f8:65:b7:
21:b6:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:38 2026 by rpki-client