Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
File: AS141998.roa (raw, json)
Hash identifier: AXTT+h1OtZDQggMVG+O96blWLqw2XDuo8QxBMZZJxJg=
Subject key identifier: 64:19:4B:84:E9:73:E2:F7:9B:C2:63:1F:EB:30:C5:5E:32:36:1D:92
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2A5A2698F2D97B01C6443D2E532D75F737A397BF
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
Signing time: Tue 28 Jul 2026 09:16:27 +0000
ROA not before: Tue 28 Jul 2026 09:11:27 +0000
ROA not after: Tue 27 Jul 2027 09:16:27 +0000
asID: 141998
IP address blocks: 60.164.0.0/24 maxlen: 24
60.164.2.0/24 maxlen: 24
60.164.4.0/24 maxlen: 24
60.164.5.0/24 maxlen: 24
60.164.6.0/24 maxlen: 24
60.164.7.0/24 maxlen: 24
60.164.240.0/23 maxlen: 23
60.164.242.0/23 maxlen: 23
60.164.244.0/24 maxlen: 24
60.164.245.0/24 maxlen: 24
60.164.246.0/23 maxlen: 23
60.165.20.0/23 maxlen: 23
60.165.21.0/24 maxlen: 24
60.165.24.0/22 maxlen: 22
60.165.28.0/24 maxlen: 24
60.165.64.0/22 maxlen: 22
60.165.115.0/24 maxlen: 24
60.165.116.0/24 maxlen: 24
60.165.118.0/23 maxlen: 23
60.165.120.0/22 maxlen: 22
60.165.125.0/24 maxlen: 24
60.165.126.0/23 maxlen: 23
60.165.237.0/24 maxlen: 24
61.134.70.0/23 maxlen: 23
61.159.80.0/24 maxlen: 24
61.159.81.0/24 maxlen: 24
61.159.82.0/23 maxlen: 23
61.159.88.0/24 maxlen: 24
61.159.89.0/24 maxlen: 24
61.159.90.0/24 maxlen: 24
61.159.91.0/24 maxlen: 24
118.180.0.0/24 maxlen: 24
118.180.1.0/24 maxlen: 24
118.180.4.0/24 maxlen: 24
118.180.26.0/24 maxlen: 24
118.180.27.0/24 maxlen: 24
118.180.30.0/24 maxlen: 24
118.180.31.0/24 maxlen: 24
118.180.37.0/24 maxlen: 24
118.180.38.0/24 maxlen: 24
118.180.39.0/24 maxlen: 24
118.180.40.0/24 maxlen: 24
118.180.42.0/24 maxlen: 24
118.180.43.0/24 maxlen: 24
118.180.45.0/24 maxlen: 24
118.180.49.0/24 maxlen: 24
118.180.51.0/24 maxlen: 24
118.180.54.0/24 maxlen: 24
118.180.56.0/24 maxlen: 24
118.180.57.0/24 maxlen: 24
118.180.58.0/24 maxlen: 24
118.180.59.0/24 maxlen: 24
118.180.60.0/24 maxlen: 24
118.180.62.0/24 maxlen: 24
118.180.63.0/24 maxlen: 24
118.181.54.0/24 maxlen: 24
118.181.55.0/24 maxlen: 24
118.181.98.0/23 maxlen: 23
118.181.103.0/24 maxlen: 24
118.181.110.0/24 maxlen: 24
118.182.56.0/22 maxlen: 22
118.182.96.0/23 maxlen: 23
118.182.98.0/23 maxlen: 23
118.182.100.0/23 maxlen: 23
118.182.102.0/23 maxlen: 23
118.182.224.0/24 maxlen: 24
118.182.225.0/24 maxlen: 24
118.182.226.0/24 maxlen: 24
118.182.249.0/24 maxlen: 24
118.183.8.0/24 maxlen: 24
118.183.9.0/24 maxlen: 24
118.183.10.0/24 maxlen: 24
118.183.11.0/24 maxlen: 24
118.183.12.0/24 maxlen: 24
118.183.13.0/24 maxlen: 24
118.183.32.0/24 maxlen: 24
118.183.33.0/24 maxlen: 24
118.183.35.0/24 maxlen: 24
118.183.37.0/24 maxlen: 24
118.183.40.0/24 maxlen: 24
118.183.61.0/24 maxlen: 24
118.183.152.0/22 maxlen: 22
118.183.168.0/24 maxlen: 24
118.183.169.0/24 maxlen: 24
118.183.171.0/24 maxlen: 24
118.183.172.0/24 maxlen: 24
118.183.173.0/24 maxlen: 24
118.183.174.0/24 maxlen: 24
118.183.211.0/24 maxlen: 24
118.183.240.0/21 maxlen: 21
125.74.1.0/24 maxlen: 24
125.74.3.0/24 maxlen: 24
125.74.4.0/24 maxlen: 24
125.74.5.0/24 maxlen: 24
125.74.6.0/24 maxlen: 24
125.74.7.0/24 maxlen: 24
125.74.8.0/22 maxlen: 22
125.74.12.0/24 maxlen: 24
125.74.14.0/24 maxlen: 24
125.74.16.0/24 maxlen: 24
125.74.17.0/24 maxlen: 24
125.74.18.0/24 maxlen: 24
125.74.19.0/24 maxlen: 24
125.74.20.0/24 maxlen: 24
125.74.21.0/24 maxlen: 24
125.74.23.0/24 maxlen: 24
125.74.24.0/24 maxlen: 24
125.74.26.0/24 maxlen: 24
125.74.27.0/24 maxlen: 24
125.74.28.0/24 maxlen: 24
125.74.29.0/24 maxlen: 24
125.74.30.0/24 maxlen: 24
125.74.32.0/24 maxlen: 24
125.74.33.0/24 maxlen: 24
125.74.34.0/24 maxlen: 24
125.74.38.0/24 maxlen: 24
125.74.42.0/24 maxlen: 24
125.74.43.0/24 maxlen: 24
125.74.44.0/24 maxlen: 24
125.74.45.0/24 maxlen: 24
125.74.47.0/24 maxlen: 24
125.74.48.0/24 maxlen: 24
125.74.52.0/24 maxlen: 24
125.74.53.0/24 maxlen: 24
125.74.54.0/24 maxlen: 24
125.74.55.0/24 maxlen: 24
125.74.78.0/24 maxlen: 24
125.74.80.0/24 maxlen: 24
125.74.84.0/22 maxlen: 22
125.74.88.0/23 maxlen: 23
125.74.90.0/24 maxlen: 24
125.74.91.0/24 maxlen: 24
125.74.92.0/23 maxlen: 23
125.74.94.0/24 maxlen: 24
125.74.95.0/24 maxlen: 24
125.74.108.0/24 maxlen: 24
125.74.109.0/24 maxlen: 24
125.74.128.0/23 maxlen: 23
125.74.130.0/23 maxlen: 23
125.74.132.0/23 maxlen: 23
125.74.134.0/24 maxlen: 24
125.74.135.0/24 maxlen: 24
125.74.192.0/21 maxlen: 21
125.74.232.0/21 maxlen: 21
125.75.64.0/24 maxlen: 24
125.75.66.0/23 maxlen: 23
125.75.68.0/23 maxlen: 23
125.75.96.0/23 maxlen: 23
125.75.98.0/24 maxlen: 24
125.75.102.0/24 maxlen: 24
125.75.103.0/24 maxlen: 24
125.75.104.0/24 maxlen: 24
125.75.105.0/24 maxlen: 24
125.75.106.0/24 maxlen: 24
125.75.107.0/24 maxlen: 24
125.75.108.0/24 maxlen: 24
125.75.109.0/24 maxlen: 24
125.75.110.0/23 maxlen: 23
125.75.148.0/23 maxlen: 23
125.75.150.0/23 maxlen: 23
125.76.82.0/24 maxlen: 24
125.76.112.0/22 maxlen: 22
202.100.73.0/24 maxlen: 24
202.100.74.0/24 maxlen: 24
202.100.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 11:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5a:26:98:f2:d9:7b:01:c6:44:3d:2e:53:2d:75:f7:37:a3:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 28 09:11:27 2026 GMT
Not After : Jul 27 09:16:27 2027 GMT
Subject: CN=64194B84E973E2F79BC2631FEB30C55E32361D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:89:9a:c1:58:02:5f:30:46:17:1d:d4:11:
59:c3:4e:d1:9d:be:19:2c:17:ca:c4:c2:fd:31:80:
3a:ff:40:58:ad:c6:72:79:7a:ea:51:24:56:d6:51:
0e:12:42:bc:8c:92:c2:9d:e3:21:a0:08:00:7b:e6:
2c:3e:0f:f6:c4:d9:53:96:49:a2:0e:db:fe:d7:2a:
ea:97:c8:b2:79:97:d5:27:70:b1:07:81:2e:fd:9b:
61:99:90:7e:f4:fb:0e:43:81:26:94:3a:d3:6e:6f:
2d:b6:df:24:a3:0b:6b:73:d6:8c:5f:ac:88:67:7f:
05:11:a8:24:54:27:8c:07:73:10:25:b5:a6:de:25:
81:32:58:90:64:19:8e:83:7f:bf:39:cd:31:66:97:
d7:5d:f5:c7:03:92:37:98:53:5a:1a:3e:73:93:bf:
46:fd:54:bf:43:e6:68:b1:78:30:af:83:28:42:18:
60:b5:da:71:5c:96:99:33:35:7d:ec:5c:b5:e9:ba:
0f:98:e3:b7:57:9d:f5:69:c9:89:f7:06:b6:a0:53:
2d:9b:42:4c:68:93:bf:c1:ab:aa:01:99:4e:85:6e:
80:ef:6b:c8:36:a0:0b:9a:be:a1:2e:1b:5d:6e:23:
e9:0f:42:53:34:bd:3b:e6:e0:01:21:33:a0:11:84:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:19:4B:84:E9:73:E2:F7:9B:C2:63:1F:EB:30:C5:5E:32:36:1D:92
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.0.0/24
60.164.2.0/24
60.164.4.0/22
60.164.240.0/21
60.165.20.0/23
60.165.24.0-60.165.28.255
60.165.64.0/22
60.165.115.0-60.165.116.255
60.165.118.0-60.165.123.255
60.165.125.0-60.165.127.255
60.165.237.0/24
61.134.70.0/23
61.159.80.0/22
61.159.88.0/22
118.180.0.0/23
118.180.4.0/24
118.180.26.0/23
118.180.30.0/23
118.180.37.0-118.180.40.255
118.180.42.0/23
118.180.45.0/24
118.180.49.0/24
118.180.51.0/24
118.180.54.0/24
118.180.56.0-118.180.60.255
118.180.62.0/23
118.181.54.0/23
118.181.98.0/23
118.181.103.0/24
118.181.110.0/24
118.182.56.0/22
118.182.96.0/21
118.182.224.0-118.182.226.255
118.182.249.0/24
118.183.8.0-118.183.13.255
118.183.32.0/23
118.183.35.0/24
118.183.37.0/24
118.183.40.0/24
118.183.61.0/24
118.183.152.0/22
118.183.168.0/23
118.183.171.0-118.183.174.255
118.183.211.0/24
118.183.240.0/21
125.74.1.0/24
125.74.3.0-125.74.12.255
125.74.14.0/24
125.74.16.0-125.74.21.255
125.74.23.0-125.74.24.255
125.74.26.0-125.74.30.255
125.74.32.0-125.74.34.255
125.74.38.0/24
125.74.42.0-125.74.45.255
125.74.47.0-125.74.48.255
125.74.52.0/22
125.74.78.0/24
125.74.80.0/24
125.74.84.0-125.74.95.255
125.74.108.0/23
125.74.128.0/21
125.74.192.0/21
125.74.232.0/21
125.75.64.0/24
125.75.66.0-125.75.69.255
125.75.96.0-125.75.98.255
125.75.102.0-125.75.111.255
125.75.148.0/22
125.76.82.0/24
125.76.112.0/22
202.100.73.0-202.100.74.255
202.100.79.0/24
Signature Algorithm: sha256WithRSAEncryption
47:76:b7:f3:f8:28:6e:35:5f:a0:3e:fd:73:3e:ce:72:80:2d:
98:91:26:b4:51:38:9b:54:8f:29:fa:04:45:78:cc:9c:2b:d7:
d3:e6:02:df:58:be:12:a3:51:6c:7f:8a:ba:bd:04:e3:2a:ba:
3f:6e:65:2f:a9:c7:b5:44:75:9e:2c:14:1b:b4:ac:e8:b2:de:
d6:e8:b2:02:a7:93:19:82:78:3b:62:eb:77:40:b4:06:7b:9a:
61:46:0e:b9:9a:14:fe:7f:dd:19:c4:17:61:50:c4:b5:c2:55:
ad:e9:79:c6:74:d9:f4:74:52:e0:41:6b:74:73:7d:d4:a8:fa:
89:d8:f6:d6:3f:a6:b1:3a:18:28:c7:50:03:85:ac:57:1f:1c:
84:7a:51:c4:20:d7:1e:91:0b:f7:a4:2d:3d:87:ac:1c:5a:52:
3d:8b:61:d5:b7:cc:df:53:c6:97:b9:df:11:b2:8e:cb:a3:65:
e0:6a:5e:42:73:92:66:47:5d:0a:0d:84:15:b6:da:14:30:bb:
bf:11:ce:d6:34:72:84:0e:06:f7:fd:c1:7d:65:61:3a:d7:3d:
c7:16:4b:9b:73:92:6b:dd:14:d1:66:c9:88:db:9b:88:3b:50:
bc:8d:48:c0:8c:67:ee:e3:db:1c:d1:28:17:94:c4:75:fc:dd:
dd:7d:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:21 2026 by rpki-client