Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
File: AS141739.roa (raw, json)
Hash identifier: dBPVZsmcxxOJrAdV3YUy/TDke51QEM8taFi8PIbSCd0=
Subject key identifier: FB:43:41:19:20:15:6D:49:42:1A:9C:B0:07:95:80:D8:B1:11:81:5F
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5ACCFCAD878EA11F80DECE5D3D6956AF0B9A1C11
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
Signing time: Fri 11 Sep 2026 02:03:42 +0000
ROA not before: Fri 11 Sep 2026 01:58:42 +0000
ROA not after: Fri 10 Sep 2027 02:03:42 +0000
asID: 141739
IP address blocks: 14.107.160.0/22 maxlen: 22
14.107.172.0/22 maxlen: 22
14.107.176.0/21 maxlen: 21
14.110.80.0/20 maxlen: 20
14.110.120.0/21 maxlen: 21
106.80.120.0/21 maxlen: 21
106.80.176.0/20 maxlen: 20
106.89.48.0/20 maxlen: 20
106.89.64.0/20 maxlen: 20
113.248.0.0/18 maxlen: 18
113.248.64.0/19 maxlen: 19
113.248.96.0/20 maxlen: 20
113.248.160.0/19 maxlen: 19
113.248.208.0/21 maxlen: 21
113.248.216.0/21 maxlen: 21
113.248.224.0/19 maxlen: 19
113.249.0.0/19 maxlen: 19
113.249.32.0/20 maxlen: 20
113.249.224.0/20 maxlen: 20
113.250.128.0/20 maxlen: 20
113.250.144.0/21 maxlen: 21
113.251.64.0/19 maxlen: 19
113.251.208.0/21 maxlen: 21
113.251.224.0/21 maxlen: 21
113.251.248.0/21 maxlen: 21
125.80.76.0/22 maxlen: 22
125.80.80.0/20 maxlen: 20
125.80.108.0/22 maxlen: 22
125.80.112.0/20 maxlen: 20
125.80.152.0/21 maxlen: 21
125.80.192.0/19 maxlen: 19
125.80.248.0/21 maxlen: 21
125.81.232.0/21 maxlen: 21
125.83.0.0/21 maxlen: 21
125.83.48.0/20 maxlen: 20
125.83.240.0/21 maxlen: 21
125.84.120.0/22 maxlen: 22
125.84.196.0/22 maxlen: 22
125.84.200.0/22 maxlen: 22
125.84.232.0/22 maxlen: 22
125.85.0.0/19 maxlen: 19
125.85.64.0/18 maxlen: 18
125.85.128.0/19 maxlen: 19
125.86.0.0/20 maxlen: 20
125.86.16.0/20 maxlen: 20
125.86.84.0/22 maxlen: 22
125.86.128.0/22 maxlen: 22
125.86.132.0/22 maxlen: 22
125.86.136.0/21 maxlen: 21
125.87.148.0/22 maxlen: 22
125.87.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 22:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cc:fc:ad:87:8e:a1:1f:80:de:ce:5d:3d:69:56:af:0b:9a:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 11 01:58:42 2026 GMT
Not After : Sep 10 02:03:42 2027 GMT
Subject: CN=FB43411920156D49421A9CB0079580D8B111815F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:c4:e0:4d:35:9c:a6:2e:7a:ae:8d:3e:15:
0c:2e:92:2b:7e:46:ef:0e:97:c8:9d:b2:80:b3:20:
ea:c2:33:d5:fd:2d:53:a5:fe:f9:91:70:5d:f0:e2:
c2:60:48:00:04:1f:65:66:f7:43:c0:a3:b8:af:4c:
88:d7:ce:b9:a0:ef:64:24:c0:cf:84:ff:aa:02:f9:
26:87:97:c2:40:a8:f3:16:a5:85:1d:38:aa:cb:cd:
4c:28:b7:5c:98:6c:b7:03:66:27:2a:bf:a8:71:2d:
84:69:a3:f9:80:15:0e:99:44:f8:40:8b:6a:2e:17:
83:9b:e9:11:4c:3f:f5:cd:6d:93:a2:50:b5:b5:87:
71:ef:7d:6d:70:b3:cb:9a:59:c7:8f:a9:8c:3e:6a:
7e:42:79:84:c0:c9:e8:a1:09:eb:45:ce:e4:a9:12:
b4:47:4e:b8:0c:9d:3e:6a:4f:99:e9:e4:c0:3c:08:
5d:9e:40:3b:56:5b:1c:c7:e9:84:f1:a3:ca:8a:4d:
ba:90:5b:99:2b:71:d0:96:22:8a:40:bc:dd:d9:b4:
7f:58:77:69:0c:55:85:87:6f:5d:5b:fe:b1:30:1b:
6e:36:cc:a9:c6:3e:8c:a2:f9:f8:26:4d:e5:5e:63:
e7:32:7f:56:0d:f6:7a:32:3f:74:21:54:98:a4:a8:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:41:19:20:15:6D:49:42:1A:9C:B0:07:95:80:D8:B1:11:81:5F
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.107.160.0/22
14.107.172.0-14.107.183.255
14.110.80.0/20
14.110.120.0/21
106.80.120.0/21
106.80.176.0/20
106.89.48.0-106.89.79.255
113.248.0.0-113.248.111.255
113.248.160.0/19
113.248.208.0-113.249.47.255
113.249.224.0/20
113.250.128.0-113.250.151.255
113.251.64.0/19
113.251.208.0/21
113.251.224.0/21
113.251.248.0/21
125.80.76.0-125.80.95.255
125.80.108.0-125.80.127.255
125.80.152.0/21
125.80.192.0/19
125.80.248.0/21
125.81.232.0/21
125.83.0.0/21
125.83.48.0/20
125.83.240.0/21
125.84.120.0/22
125.84.196.0-125.84.203.255
125.84.232.0/22
125.85.0.0/19
125.85.64.0-125.85.159.255
125.86.0.0/19
125.86.84.0/22
125.86.128.0/20
125.87.148.0/22
125.87.200.0/21
Signature Algorithm: sha256WithRSAEncryption
47:53:93:eb:37:99:9f:b7:cc:c4:8e:c0:9d:dc:ad:d0:93:da:
9f:f9:54:7f:ca:a3:bb:55:37:33:21:77:a7:87:af:d1:d9:5e:
b6:2a:04:9c:d0:23:a6:ce:07:f5:c6:26:b3:e2:97:0e:b8:07:
66:81:4c:b6:43:42:cd:99:2d:30:46:f5:fb:96:26:a5:97:aa:
ac:2a:20:de:36:4d:b6:49:07:b6:f1:f9:c2:02:9a:29:dc:14:
1b:c3:fd:71:ae:94:52:88:0e:27:01:74:ca:9e:8c:f0:64:b4:
1f:c5:26:4d:32:d6:2a:c5:b2:80:1b:b9:f2:6f:ba:6b:8f:b2:
f9:96:9e:b2:bd:69:81:8e:b6:f0:78:62:0e:d8:01:57:90:eb:
e0:29:a9:2f:18:28:f0:b3:d6:f6:dd:f9:35:0e:1d:7a:90:b4:
ba:64:93:04:a1:44:b7:ba:bd:76:71:d4:1a:64:38:09:f1:10:
f6:ae:08:e1:4b:91:35:de:ee:aa:95:fa:ec:70:71:f0:3d:e1:
ae:a4:25:02:3b:b3:40:5e:31:ca:a5:a8:90:f3:63:e3:5b:c7:
e5:74:2d:6f:00:d7:83:99:50:81:4b:62:cb:8f:08:3b:3e:cb:
af:45:9c:11:54:62:6c:9b:40:c9:17:20:17:06:e2:40:35:14:
c1:37:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:26:37 2026 by rpki-client