Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
File: AS141998.roa (raw, json)
Hash identifier: oaD8ASAnNfWOyMKD3td0Mc0EtK4J6My9APK76Okmj5Q=
Subject key identifier: D3:74:D7:20:A9:31:1A:C2:EA:DD:25:2A:84:38:84:FA:6C:54:A7:1E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2C2428C691BA514866324ECED22779D4F79EAA07
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
Signing time: Fri 05 Jun 2026 17:21:30 +0000
ROA not before: Fri 05 Jun 2026 17:16:30 +0000
ROA not after: Fri 04 Jun 2027 17:21:30 +0000
asID: 141998
IP address blocks: 60.164.0.0/24 maxlen: 24
60.164.2.0/24 maxlen: 24
60.164.4.0/24 maxlen: 24
60.164.5.0/24 maxlen: 24
60.164.6.0/24 maxlen: 24
60.164.7.0/24 maxlen: 24
60.164.240.0/23 maxlen: 23
60.164.242.0/23 maxlen: 23
60.164.244.0/24 maxlen: 24
60.164.245.0/24 maxlen: 24
60.164.246.0/23 maxlen: 23
60.165.20.0/23 maxlen: 23
60.165.64.0/22 maxlen: 22
60.165.115.0/24 maxlen: 24
60.165.116.0/24 maxlen: 24
60.165.118.0/23 maxlen: 23
60.165.120.0/22 maxlen: 22
60.165.125.0/24 maxlen: 24
60.165.126.0/23 maxlen: 23
60.165.237.0/24 maxlen: 24
61.134.70.0/23 maxlen: 23
61.159.80.0/24 maxlen: 24
61.159.81.0/24 maxlen: 24
61.159.82.0/23 maxlen: 23
61.159.88.0/24 maxlen: 24
61.159.89.0/24 maxlen: 24
61.159.90.0/24 maxlen: 24
61.159.91.0/24 maxlen: 24
118.180.0.0/24 maxlen: 24
118.180.1.0/24 maxlen: 24
118.180.4.0/24 maxlen: 24
118.180.26.0/24 maxlen: 24
118.180.27.0/24 maxlen: 24
118.180.30.0/24 maxlen: 24
118.180.31.0/24 maxlen: 24
118.180.37.0/24 maxlen: 24
118.180.38.0/24 maxlen: 24
118.180.39.0/24 maxlen: 24
118.180.40.0/24 maxlen: 24
118.180.42.0/24 maxlen: 24
118.180.43.0/24 maxlen: 24
118.180.45.0/24 maxlen: 24
118.180.51.0/24 maxlen: 24
118.180.54.0/24 maxlen: 24
118.180.56.0/24 maxlen: 24
118.180.57.0/24 maxlen: 24
118.180.58.0/24 maxlen: 24
118.180.59.0/24 maxlen: 24
118.180.60.0/24 maxlen: 24
118.180.62.0/24 maxlen: 24
118.180.63.0/24 maxlen: 24
118.181.54.0/24 maxlen: 24
118.181.55.0/24 maxlen: 24
118.181.103.0/24 maxlen: 24
118.181.110.0/24 maxlen: 24
118.182.96.0/23 maxlen: 23
118.182.98.0/23 maxlen: 23
118.182.100.0/23 maxlen: 23
118.182.102.0/23 maxlen: 23
118.182.224.0/24 maxlen: 24
118.182.225.0/24 maxlen: 24
118.182.226.0/24 maxlen: 24
118.182.249.0/24 maxlen: 24
118.183.8.0/24 maxlen: 24
118.183.9.0/24 maxlen: 24
118.183.10.0/24 maxlen: 24
118.183.11.0/24 maxlen: 24
118.183.12.0/24 maxlen: 24
118.183.13.0/24 maxlen: 24
118.183.32.0/24 maxlen: 24
118.183.33.0/24 maxlen: 24
118.183.35.0/24 maxlen: 24
118.183.37.0/24 maxlen: 24
118.183.40.0/24 maxlen: 24
118.183.61.0/24 maxlen: 24
118.183.152.0/22 maxlen: 22
118.183.168.0/24 maxlen: 24
118.183.169.0/24 maxlen: 24
118.183.171.0/24 maxlen: 24
118.183.172.0/24 maxlen: 24
118.183.173.0/24 maxlen: 24
118.183.174.0/24 maxlen: 24
118.183.211.0/24 maxlen: 24
118.183.240.0/21 maxlen: 21
125.74.1.0/24 maxlen: 24
125.74.3.0/24 maxlen: 24
125.74.4.0/24 maxlen: 24
125.74.5.0/24 maxlen: 24
125.74.6.0/24 maxlen: 24
125.74.7.0/24 maxlen: 24
125.74.8.0/22 maxlen: 22
125.74.12.0/24 maxlen: 24
125.74.14.0/24 maxlen: 24
125.74.17.0/24 maxlen: 24
125.74.18.0/24 maxlen: 24
125.74.19.0/24 maxlen: 24
125.74.20.0/24 maxlen: 24
125.74.23.0/24 maxlen: 24
125.74.24.0/24 maxlen: 24
125.74.26.0/24 maxlen: 24
125.74.27.0/24 maxlen: 24
125.74.28.0/24 maxlen: 24
125.74.29.0/24 maxlen: 24
125.74.30.0/24 maxlen: 24
125.74.32.0/24 maxlen: 24
125.74.33.0/24 maxlen: 24
125.74.34.0/24 maxlen: 24
125.74.38.0/24 maxlen: 24
125.74.42.0/24 maxlen: 24
125.74.43.0/24 maxlen: 24
125.74.44.0/24 maxlen: 24
125.74.45.0/24 maxlen: 24
125.74.47.0/24 maxlen: 24
125.74.48.0/24 maxlen: 24
125.74.52.0/24 maxlen: 24
125.74.53.0/24 maxlen: 24
125.74.54.0/24 maxlen: 24
125.74.55.0/24 maxlen: 24
125.74.78.0/24 maxlen: 24
125.74.80.0/24 maxlen: 24
125.74.84.0/22 maxlen: 22
125.74.88.0/23 maxlen: 23
125.74.90.0/24 maxlen: 24
125.74.91.0/24 maxlen: 24
125.74.92.0/23 maxlen: 23
125.74.94.0/24 maxlen: 24
125.74.95.0/24 maxlen: 24
125.74.108.0/24 maxlen: 24
125.74.109.0/24 maxlen: 24
125.74.128.0/23 maxlen: 23
125.74.130.0/23 maxlen: 23
125.74.132.0/23 maxlen: 23
125.74.134.0/24 maxlen: 24
125.74.135.0/24 maxlen: 24
125.74.192.0/21 maxlen: 21
125.74.232.0/21 maxlen: 21
125.75.64.0/24 maxlen: 24
125.75.66.0/23 maxlen: 23
125.75.68.0/23 maxlen: 23
125.75.96.0/23 maxlen: 23
125.75.98.0/24 maxlen: 24
125.75.102.0/24 maxlen: 24
125.75.103.0/24 maxlen: 24
125.75.104.0/24 maxlen: 24
125.75.105.0/24 maxlen: 24
125.75.106.0/24 maxlen: 24
125.75.107.0/24 maxlen: 24
125.75.108.0/24 maxlen: 24
125.75.109.0/24 maxlen: 24
125.75.110.0/23 maxlen: 23
125.75.148.0/23 maxlen: 23
125.75.150.0/23 maxlen: 23
125.76.82.0/24 maxlen: 24
125.76.112.0/22 maxlen: 22
202.100.73.0/24 maxlen: 24
202.100.74.0/24 maxlen: 24
202.100.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:24:28:c6:91:ba:51:48:66:32:4e:ce:d2:27:79:d4:f7:9e:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 5 17:16:30 2026 GMT
Not After : Jun 4 17:21:30 2027 GMT
Subject: CN=D374D720A9311AC2EADD252A843884FA6C54A71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:bc:62:65:f9:6c:99:90:e7:3d:b1:4a:dd:
e6:de:66:d3:4d:d4:47:a4:f3:01:62:ef:ac:25:5a:
6b:94:f7:99:f1:04:09:d1:6c:19:26:56:89:cb:80:
77:5e:35:8b:ae:17:b8:e9:c6:db:94:1b:ec:49:31:
47:97:15:af:8c:8c:22:8a:0f:d5:4c:81:14:46:b8:
aa:97:98:50:a0:18:6f:3a:55:e2:c0:8c:5b:1d:12:
d9:80:2e:8d:6e:4b:e3:2e:11:81:7e:c9:a8:57:3e:
15:ac:c1:93:83:5e:5f:cf:33:bd:23:29:41:97:08:
fe:fc:b9:e9:d7:f7:a0:b4:1b:ee:d4:12:d8:08:c6:
21:38:e3:b6:1b:55:77:6e:7e:37:ff:f2:4e:35:f8:
b7:88:3c:2b:95:73:56:50:29:03:61:2b:26:43:3d:
44:85:3f:25:5c:9f:1c:fb:2a:d4:20:13:c0:10:99:
00:09:82:31:7e:12:95:86:8c:9a:9c:4e:a2:99:4a:
39:90:50:b4:bc:5d:82:68:f9:65:e4:7d:84:82:24:
61:91:e2:b6:68:9d:b1:dc:ae:29:38:2c:bf:c4:88:
f3:42:2d:6b:eb:97:08:b4:0b:bc:75:49:f6:ec:31:
d9:79:52:b6:e7:e7:00:73:ad:0e:a4:f9:14:f0:99:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:D7:20:A9:31:1A:C2:EA:DD:25:2A:84:38:84:FA:6C:54:A7:1E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.0.0/24
60.164.2.0/24
60.164.4.0/22
60.164.240.0/21
60.165.20.0/23
60.165.64.0/22
60.165.115.0-60.165.116.255
60.165.118.0-60.165.123.255
60.165.125.0-60.165.127.255
60.165.237.0/24
61.134.70.0/23
61.159.80.0/22
61.159.88.0/22
118.180.0.0/23
118.180.4.0/24
118.180.26.0/23
118.180.30.0/23
118.180.37.0-118.180.40.255
118.180.42.0/23
118.180.45.0/24
118.180.51.0/24
118.180.54.0/24
118.180.56.0-118.180.60.255
118.180.62.0/23
118.181.54.0/23
118.181.103.0/24
118.181.110.0/24
118.182.96.0/21
118.182.224.0-118.182.226.255
118.182.249.0/24
118.183.8.0-118.183.13.255
118.183.32.0/23
118.183.35.0/24
118.183.37.0/24
118.183.40.0/24
118.183.61.0/24
118.183.152.0/22
118.183.168.0/23
118.183.171.0-118.183.174.255
118.183.211.0/24
118.183.240.0/21
125.74.1.0/24
125.74.3.0-125.74.12.255
125.74.14.0/24
125.74.17.0-125.74.20.255
125.74.23.0-125.74.24.255
125.74.26.0-125.74.30.255
125.74.32.0-125.74.34.255
125.74.38.0/24
125.74.42.0-125.74.45.255
125.74.47.0-125.74.48.255
125.74.52.0/22
125.74.78.0/24
125.74.80.0/24
125.74.84.0-125.74.95.255
125.74.108.0/23
125.74.128.0/21
125.74.192.0/21
125.74.232.0/21
125.75.64.0/24
125.75.66.0-125.75.69.255
125.75.96.0-125.75.98.255
125.75.102.0-125.75.111.255
125.75.148.0/22
125.76.82.0/24
125.76.112.0/22
202.100.73.0-202.100.74.255
202.100.79.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ed:8a:6c:dc:03:61:bb:54:e7:c9:9e:0c:b5:38:f6:40:dd:
37:72:fd:02:c1:49:08:0d:b9:dd:d8:bc:e3:65:72:45:df:8e:
59:e2:8f:96:ad:5f:fa:49:30:f3:76:cd:27:c7:6f:ce:ca:33:
07:e7:fb:76:23:67:af:1e:6e:ce:78:55:14:fc:70:06:a6:7e:
7e:6b:32:7d:6f:2f:f6:4e:a4:af:0a:6a:a5:e9:1c:41:6a:eb:
8f:d7:7e:be:9e:c8:fd:a3:8c:7b:c8:39:5b:62:c4:c2:f7:7b:
ad:25:80:ef:1e:f8:98:79:b7:bc:4d:dc:81:a7:83:e5:f0:0a:
3d:3d:f1:6c:c8:85:06:a1:26:f1:de:b5:e5:70:f1:69:ba:52:
f4:b1:ef:16:c5:99:96:80:0e:41:b4:f5:c9:6c:f2:ee:72:7f:
93:c4:af:80:7a:fe:1b:58:35:0e:13:33:e9:3d:ac:a4:f1:2f:
ee:60:b4:04:9c:23:1d:a5:a4:32:a7:60:8c:cf:25:6b:7e:41:
84:f7:9f:19:a1:fa:5b:cd:39:d0:3e:ff:fe:9c:47:78:a5:b5:
86:70:ff:46:a6:a7:cd:21:3b:24:88:80:67:ac:c3:bc:a7:86:
ff:5c:52:bb:1a:b1:d5:e1:27:6a:fd:46:24:82:88:6a:03:64:
81:6b:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:42 2026 by rpki-client