Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141771.roa
File: AS141771.roa (raw, json)
Hash identifier: Z540QXtdOxcnDBjYgh3gghSyGPIrIBN2+R3FjBrXhBs=
Subject key identifier: 67:B7:13:DC:6C:B8:AA:93:42:E9:BF:58:6F:97:02:EA:38:EB:47:67
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5C6552FDD021EFAA7BF779643AD23987F2911016
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141771.roa
Signing time: Thu 11 Jun 2026 16:09:38 +0000
ROA not before: Thu 11 Jun 2026 16:04:38 +0000
ROA not after: Thu 10 Jun 2027 16:09:38 +0000
asID: 141771
IP address blocks: 27.129.52.0/22 maxlen: 22
27.129.55.0/24 maxlen: 24
106.8.128.0/19 maxlen: 19
106.9.36.0/23 maxlen: 23
106.112.128.0/19 maxlen: 19
106.118.128.0/18 maxlen: 18
106.118.128.0/19 maxlen: 19
111.225.128.0/18 maxlen: 18
123.180.128.0/19 maxlen: 19
123.182.0.0/18 maxlen: 18
123.183.224.0/19 maxlen: 19
124.237.32.0/19 maxlen: 19
124.239.0.0/19 maxlen: 19
219.148.104.0/22 maxlen: 22
222.223.160.0/20 maxlen: 20
240e:c:6000::/37 maxlen: 37
240e:4c:6000::/37 maxlen: 37
240e:4c:6003::/48 maxlen: 48
240e:b1:e000::/37 maxlen: 37
240e:b2:a000::/35 maxlen: 35
240e:340:6b00::/40 maxlen: 40
240e:340:6c00::/38 maxlen: 38
240e:340:7000::/37 maxlen: 37
240e:340:7800::/38 maxlen: 38
240e:341:6b00::/40 maxlen: 40
240e:341:6c00::/38 maxlen: 38
240e:341:7000::/37 maxlen: 37
240e:341:7800::/38 maxlen: 38
240e:342:6b00::/40 maxlen: 40
240e:342:6c00::/38 maxlen: 38
240e:342:7000::/37 maxlen: 37
240e:342:7800::/38 maxlen: 38
240e:343:6b00::/40 maxlen: 40
240e:343:6c00::/38 maxlen: 38
240e:343:7000::/37 maxlen: 37
240e:343:7800::/38 maxlen: 38
240e:640:a00::/40 maxlen: 40
240e:640:8a00::/40 maxlen: 40
240e:640:ca00::/40 maxlen: 40
240e:640:ea00::/40 maxlen: 40
240e:940:a00::/40 maxlen: 40
240e:940:8a00::/40 maxlen: 40
240e:940:ca00::/40 maxlen: 40
240e:940:ea00::/40 maxlen: 40
240e:983:f06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:65:52:fd:d0:21:ef:aa:7b:f7:79:64:3a:d2:39:87:f2:91:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:04:38 2026 GMT
Not After : Jun 10 16:09:38 2027 GMT
Subject: CN=67B713DC6CB8AA9342E9BF586F9702EA38EB4767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:bb:ca:6e:f2:68:ed:b6:c4:ab:5e:72:26:
4b:94:bc:ff:70:f9:d0:53:18:0b:02:6e:f8:11:67:
04:f6:51:be:e7:d5:90:5d:4a:cb:51:19:c1:a1:37:
61:a8:7e:96:28:74:4b:10:65:88:9f:3b:44:02:b4:
ec:9f:ef:b5:70:d6:04:95:e6:62:4e:ff:3d:79:bd:
c0:71:37:40:a6:3b:88:54:57:34:fc:9c:79:15:78:
12:10:ce:43:d1:91:ef:4b:f6:2f:b8:46:0a:bc:67:
52:d0:8a:47:99:83:59:10:e8:6f:4b:2f:d2:fe:2c:
04:0f:7f:ef:a0:21:94:3a:de:1d:f3:fd:5f:25:65:
09:00:d7:7d:a6:b5:36:b5:90:a4:c9:67:a9:2a:14:
42:1d:b8:79:de:91:fe:00:44:59:b0:25:cc:ee:31:
6f:27:49:99:6e:63:e7:04:e8:c9:5a:ed:d1:e3:f6:
b5:e0:88:23:52:c5:ec:d0:19:3c:07:b3:2f:5d:f1:
28:19:9a:9a:2b:b4:bf:44:31:b3:ca:fc:84:26:60:
5a:0f:8a:cc:cb:7d:92:4d:ce:7b:a6:bf:66:01:d5:
32:bf:ca:9a:1f:d7:70:88:a9:d1:ba:1a:31:25:0e:
f6:42:57:02:22:43:19:54:32:8b:c7:02:2a:94:40:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B7:13:DC:6C:B8:AA:93:42:E9:BF:58:6F:97:02:EA:38:EB:47:67
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.129.52.0/22
106.8.128.0/19
106.9.36.0/23
106.112.128.0/19
106.118.128.0/18
111.225.128.0/18
123.180.128.0/19
123.182.0.0/18
123.183.224.0/19
124.237.32.0/19
124.239.0.0/19
219.148.104.0/22
222.223.160.0/20
IPv6:
240e:c:6000::/37
240e:4c:6000::/37
240e:b1:e000::/37
240e:b2:a000::/35
240e:340:6b00::-240e:340:7bff:ffff:ffff:ffff:ffff:ffff
240e:341:6b00::-240e:341:7bff:ffff:ffff:ffff:ffff:ffff
240e:342:6b00::-240e:342:7bff:ffff:ffff:ffff:ffff:ffff
240e:343:6b00::-240e:343:7bff:ffff:ffff:ffff:ffff:ffff
240e:640:a00::/40
240e:640:8a00::/40
240e:640:ca00::/40
240e:640:ea00::/40
240e:940:a00::/40
240e:940:8a00::/40
240e:940:ca00::/40
240e:940:ea00::/40
240e:983:f06::/48
Signature Algorithm: sha256WithRSAEncryption
46:be:d2:50:4f:5d:f0:5d:8f:bc:33:ab:c9:6c:a5:04:b7:a3:
a5:1d:99:e6:00:2a:d9:a5:88:03:62:9b:c7:ea:63:00:02:fa:
cf:62:9b:8c:1d:f3:80:04:56:a7:97:47:25:15:34:7c:b6:68:
6b:e6:0c:0a:62:db:27:af:98:80:71:37:6d:68:13:f5:f2:b0:
a3:3e:55:19:bf:34:0a:5d:ac:8b:d2:a5:34:1b:2b:11:91:ec:
d5:05:20:a9:f0:4b:90:2e:56:8b:02:b1:3d:39:1a:ff:22:dd:
f0:59:a7:9a:15:b8:fe:bf:69:19:38:77:17:97:a1:1b:05:c5:
1c:d8:dc:8a:c2:93:0a:1a:fc:bf:ec:e8:72:1e:5f:3f:51:9c:
55:b7:f1:15:0e:5d:d0:c5:d9:ef:2e:c0:43:b7:2e:d9:ff:20:
05:f8:b6:2d:89:31:a4:90:b5:4c:db:09:d1:5c:73:e6:25:9b:
d9:95:f8:3a:86:1b:be:50:0b:bc:5b:66:bb:bc:f4:b1:d4:97:
c8:a3:bb:b7:66:17:39:82:1f:61:c7:af:c0:ae:d0:16:aa:39:
4b:04:d6:48:32:1e:43:03:c7:ad:ec:e0:14:8e:f4:db:bc:8c:
cc:dd:e4:30:16:ef:26:c7:72:95:66:37:43:c5:61:3b:27:6b:
e0:08:19:90
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUXGVS/dAh76p793lkOtI5h/KREBYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE2MDQzOFoX
DTI3MDYxMDE2MDkzOFowMzExMC8GA1UEAxMoNjdCNzEzREM2Q0I4QUE5MzQyRTlC
RjU4NkY5NzAyRUEzOEVCNDc2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjNu8pu8mjttsSrXnImS5S8/3D50FMYCwJu+BFnBPZRvufVkF1Ky1EZwaE3
Yah+lih0SxBliJ87RAK07J/vtXDWBJXmYk7/PXm9wHE3QKY7iFRXNPyceRV4EhDO
Q9GR70v2L7hGCrxnUtCKR5mDWRDob0sv0v4sBA9/76AhlDreHfP9XyVlCQDXfaa1
NrWQpMlnqSoUQh24ed6R/gBEWbAlzO4xbydJmW5j5wToyVrt0eP2teCII1LF7NAZ
PAezL13xKBmamiu0v0Qxs8r8hCZgWg+KzMt9kk3Oe6a/ZgHVMr/Kmh/XcIip0boa
MSUO9kJXAiJDGVQyi8cCKpRAmGMCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRntxPc
bLiqk0Lpv1hvlwLqOOtHZzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQxNzcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBJgYIKwYBBQUHAQcBAf8EggEVMIIBETBUBAIAATBOAwQCG4E0AwQFagiAAwQB
agkkAwQFanCAAwQGanaAAwQGb+GAAwQFe7SAAwQGe7YAAwQFe7fgAwQFfO0gAwQF
fO8AAwQC25RoAwQE3t+gMIG4BAIAAjCBsQMGAyQOAAxgAwYDJA4ATGADBgMkDgCx
4AMGBSQOALKgMBADBgAkDgNAawMGAiQOA0B4MBADBgAkDgNBawMGAiQOA0F4MBAD
BgAkDgNCawMGAiQOA0J4MBADBgAkDgNDawMGAiQOA0N4AwYAJA4GQAoDBgAkDgZA
igMGACQOBkDKAwYAJA4GQOoDBgAkDglACgMGACQOCUCKAwYAJA4JQMoDBgAkDglA
6gMHACQOCYMPBjANBgkqhkiG9w0BAQsFAAOCAQEARr7SUE9d8F2PvDOryWylBLej
pR2Z5gAq2aWIA2Kbx+pjAAL6z2KbjB3zgARWp5dHJRU0fLZoa+YMCmLbJ6+YgHE3
bWgT9fKwoz5VGb80Cl2si9KlNBsrEZHs1QUgqfBLkC5WiwKxPTka/yLd8FmnmhW4
/r9pGTh3F5ehGwXFHNjcisKTChr8v+zoch5fP1GcVbfxFQ5d0MXZ7y7AQ7cu2f8g
Bfi2LYkxpJC1TNsJ0Vxz5iWb2ZX4OoYbvlALvFtmu7z0sdSXyKO7t2YXOYIfYcev
wK7QFqo5SwTWSDIeQwPHrezgFI7027yMzN3kMBbvJsdylWY3Q8VhOydr4AgZkA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:39 2026 by rpki-client