Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140979.roa
File: AS140979.roa (raw, json)
Hash identifier: 3ZaH20GCcLuBW4CZhfJkyavct0/76doMmkuQUvPtUOA=
Subject key identifier: 91:9C:51:97:64:D0:D1:16:D1:17:7A:9C:BC:3E:8D:EE:8E:5F:C6:83
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 3CC2D1F0C3EE1A4AB3FE2487E1BEDE417F97000A
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140979.roa
Signing time: Tue 09 Jun 2026 08:30:50 +0000
ROA not before: Tue 09 Jun 2026 08:25:50 +0000
ROA not after: Tue 08 Jun 2027 08:30:50 +0000
asID: 140979
IP address blocks: 116.128.128.0/24 maxlen: 24
116.128.129.0/24 maxlen: 24
116.128.130.0/24 maxlen: 24
116.128.131.0/24 maxlen: 24
116.128.132.0/24 maxlen: 24
116.128.133.0/24 maxlen: 24
116.128.134.0/24 maxlen: 24
116.128.135.0/24 maxlen: 24
116.128.136.0/24 maxlen: 24
116.128.137.0/24 maxlen: 24
116.128.138.0/24 maxlen: 24
116.128.139.0/24 maxlen: 24
116.128.140.0/24 maxlen: 24
116.128.141.0/24 maxlen: 24
116.128.142.0/24 maxlen: 24
116.128.143.0/24 maxlen: 24
116.128.144.0/24 maxlen: 24
116.128.145.0/24 maxlen: 24
116.128.146.0/24 maxlen: 24
116.128.147.0/24 maxlen: 24
116.128.148.0/24 maxlen: 24
116.128.150.0/24 maxlen: 24
116.128.151.0/24 maxlen: 24
116.128.152.0/24 maxlen: 24
116.128.153.0/24 maxlen: 24
116.128.154.0/24 maxlen: 24
116.128.155.0/24 maxlen: 24
116.128.156.0/24 maxlen: 24
116.128.157.0/24 maxlen: 24
116.128.158.0/24 maxlen: 24
116.128.159.0/24 maxlen: 24
116.128.160.0/24 maxlen: 24
116.128.161.0/24 maxlen: 24
116.128.162.0/24 maxlen: 24
116.128.163.0/24 maxlen: 24
116.128.164.0/24 maxlen: 24
116.128.165.0/24 maxlen: 24
116.128.166.0/24 maxlen: 24
116.128.167.0/24 maxlen: 24
116.128.168.0/24 maxlen: 24
116.128.169.0/24 maxlen: 24
116.128.170.0/24 maxlen: 24
116.128.171.0/24 maxlen: 24
116.128.172.0/24 maxlen: 24
116.128.173.0/24 maxlen: 24
116.128.174.0/24 maxlen: 24
116.128.175.0/24 maxlen: 24
116.128.176.0/24 maxlen: 24
116.128.177.0/24 maxlen: 24
116.128.178.0/24 maxlen: 24
116.128.179.0/24 maxlen: 24
116.128.180.0/24 maxlen: 24
116.128.181.0/24 maxlen: 24
116.128.182.0/24 maxlen: 24
116.128.183.0/24 maxlen: 24
116.128.184.0/24 maxlen: 24
116.128.185.0/24 maxlen: 24
116.128.186.0/24 maxlen: 24
116.128.187.0/24 maxlen: 24
116.128.188.0/24 maxlen: 24
211.95.32.0/24 maxlen: 24
220.196.5.0/24 maxlen: 24
220.196.6.0/24 maxlen: 24
220.196.80.0/23 maxlen: 23
220.196.128.0/24 maxlen: 24
220.196.129.0/24 maxlen: 24
220.196.130.0/24 maxlen: 24
220.196.131.0/24 maxlen: 24
220.196.132.0/24 maxlen: 24
220.196.133.0/24 maxlen: 24
220.196.134.0/24 maxlen: 24
220.196.135.0/24 maxlen: 24
220.196.136.0/24 maxlen: 24
220.196.137.0/24 maxlen: 24
220.196.138.0/24 maxlen: 24
220.196.139.0/24 maxlen: 24
220.196.140.0/24 maxlen: 24
220.196.141.0/24 maxlen: 24
220.196.142.0/24 maxlen: 24
220.196.143.0/24 maxlen: 24
220.196.144.0/24 maxlen: 24
220.196.145.0/24 maxlen: 24
220.196.146.0/24 maxlen: 24
220.196.147.0/24 maxlen: 24
220.196.148.0/24 maxlen: 24
220.196.149.0/24 maxlen: 24
220.196.150.0/24 maxlen: 24
220.196.151.0/24 maxlen: 24
220.196.152.0/24 maxlen: 24
220.196.153.0/24 maxlen: 24
220.196.154.0/24 maxlen: 24
220.196.155.0/24 maxlen: 24
220.196.156.0/24 maxlen: 24
220.196.157.0/24 maxlen: 24
220.196.158.0/24 maxlen: 24
220.196.159.0/24 maxlen: 24
220.196.160.0/24 maxlen: 24
220.196.161.0/24 maxlen: 24
220.196.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c2:d1:f0:c3:ee:1a:4a:b3:fe:24:87:e1:be:de:41:7f:97:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Jun 9 08:25:50 2026 GMT
Not After : Jun 8 08:30:50 2027 GMT
Subject: CN=919C519764D0D116D1177A9CBC3E8DEE8E5FC683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:62:84:ab:09:20:44:38:e1:e7:a3:9b:1e:
35:6a:5a:5b:9a:99:e9:0a:8b:85:37:af:7a:3a:31:
0b:2f:86:7e:3f:7c:06:82:8e:34:95:d8:84:e7:f8:
d5:b2:d9:14:42:2f:07:e5:dc:d0:12:d7:ec:b9:69:
a6:0b:d6:ae:bb:00:d1:a4:60:3f:35:c6:50:f8:68:
5a:eb:09:4b:12:f0:db:26:81:a3:4e:1d:63:ed:8c:
28:90:1f:3f:a5:18:7d:ef:81:f1:1c:78:8b:f3:94:
dc:30:b6:f2:ce:42:f6:05:13:44:1d:b0:2d:5d:76:
4d:18:88:1a:a0:b1:67:c1:c1:a1:6e:66:e4:1f:f4:
c8:a6:11:2d:60:16:28:38:1e:30:ec:55:36:77:0b:
e7:f9:3c:71:05:ba:88:a6:2e:c1:ac:1f:35:fb:7d:
99:c0:a8:8a:00:18:5f:33:bc:59:ce:64:61:1f:a8:
b1:34:17:71:0c:a2:93:35:60:42:92:ed:d0:9f:9e:
13:a7:a2:78:fe:7d:5f:e8:d1:c1:d0:32:69:53:4d:
27:98:3e:e6:89:8b:b9:2d:65:63:23:c1:11:d0:6c:
01:d0:0e:18:0b:67:a8:09:85:85:31:02:bb:cb:21:
30:2f:3a:2d:0d:73:6c:67:6c:42:d9:87:6f:fe:33:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:51:97:64:D0:D1:16:D1:17:7A:9C:BC:3E:8D:EE:8E:5F:C6:83
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.128.128.0-116.128.148.255
116.128.150.0-116.128.188.255
211.95.32.0/24
220.196.5.0-220.196.6.255
220.196.80.0/23
220.196.128.0-220.196.161.255
220.196.196.0/22
Signature Algorithm: sha256WithRSAEncryption
18:10:b8:58:9a:9b:12:cb:9b:e8:5d:41:b7:2f:1a:71:f9:b9:
01:81:29:b1:ca:2f:6a:2e:21:65:f5:1d:e3:80:a4:d6:57:47:
98:74:4b:c8:04:a1:b0:7b:1c:0c:cc:1b:53:c5:74:4c:3e:7d:
a7:ba:4d:ac:e4:95:f6:b7:b9:b9:54:34:6a:1b:6f:f3:30:93:
76:da:74:27:23:ad:da:29:9d:80:2a:8f:e7:6e:76:96:2a:ba:
af:73:9e:5b:b6:27:11:92:72:e8:77:ae:8d:fd:d2:6c:96:bf:
a6:eb:bc:33:d7:d8:6a:82:7a:0f:d4:62:49:da:f1:a3:79:da:
25:32:72:93:e3:b3:0b:db:2a:56:4b:6d:77:2a:7e:f5:82:ad:
a1:76:e2:37:8e:f0:2b:08:37:e4:49:5a:7a:58:d8:f6:f1:4c:
12:59:10:ab:4f:42:ca:d8:42:d7:f8:f7:4c:22:4f:23:e1:bf:
49:46:6c:ef:2e:b7:51:78:b3:cf:26:52:f6:4e:25:dd:53:55:
42:de:66:b5:45:15:12:b1:31:65:c4:e1:bd:2c:ac:8b:57:a8:
67:b7:f8:f4:67:4a:2f:f3:40:58:80:7b:bf:fc:33:41:a4:af:
18:b3:e6:0c:08:34:10:12:10:a8:30:52:bc:2f:c3:93:8c:b0:
9b:54:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:45:09 2026 by rpki-client