Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS138421.roa
File: AS138421.roa (raw, json)
Hash identifier: J9yMxI6USC+ksSFB2Qwi+mpP/CqZ/DZx2XXXcFz1maw=
Subject key identifier: 40:F5:CF:22:2A:A8:4D:27:4F:3F:09:5E:A3:04:56:79:57:74:43:B0
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 46A66A69F600BB183A96B8CA77308EBF5B7B7C0D
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS138421.roa
Signing time: Thu 06 Aug 2026 05:11:06 +0000
ROA not before: Thu 06 Aug 2026 05:06:06 +0000
ROA not after: Thu 05 Aug 2027 05:11:06 +0000
asID: 138421
IP address blocks: 139.227.231.0/24 maxlen: 24
140.206.167.0/24 maxlen: 24
140.206.200.0/22 maxlen: 22
140.206.200.0/24 maxlen: 24
140.206.201.0/24 maxlen: 24
140.206.202.0/24 maxlen: 24
140.206.203.0/24 maxlen: 24
140.206.204.0/24 maxlen: 24
140.206.208.0/23 maxlen: 23
140.206.211.0/24 maxlen: 24
140.206.212.0/22 maxlen: 22
140.206.212.0/24 maxlen: 24
140.206.213.0/24 maxlen: 24
140.206.216.0/22 maxlen: 22
140.206.219.0/24 maxlen: 24
140.206.228.0/24 maxlen: 24
140.206.229.0/24 maxlen: 24
140.206.230.0/24 maxlen: 24
140.206.231.0/24 maxlen: 24
140.206.232.0/24 maxlen: 24
140.206.234.0/24 maxlen: 24
140.206.238.0/24 maxlen: 24
140.206.240.0/22 maxlen: 22
140.206.244.0/24 maxlen: 24
140.206.247.0/24 maxlen: 24
140.207.69.0/24 maxlen: 24
140.207.70.0/24 maxlen: 24
140.207.72.0/24 maxlen: 24
140.207.73.0/24 maxlen: 24
140.207.130.0/24 maxlen: 24
140.207.131.0/24 maxlen: 24
140.207.134.0/24 maxlen: 24
140.207.135.0/24 maxlen: 24
140.207.138.0/23 maxlen: 23
140.207.140.0/23 maxlen: 23
140.207.208.0/21 maxlen: 21
140.207.208.0/24 maxlen: 24
140.207.209.0/24 maxlen: 24
140.207.210.0/24 maxlen: 24
140.207.211.0/24 maxlen: 24
140.207.212.0/24 maxlen: 24
140.207.213.0/24 maxlen: 24
140.207.214.0/24 maxlen: 24
140.207.215.0/24 maxlen: 24
140.207.216.0/21 maxlen: 21
140.207.216.0/22 maxlen: 22
140.207.216.0/24 maxlen: 24
140.207.217.0/24 maxlen: 24
140.207.218.0/24 maxlen: 24
140.207.219.0/24 maxlen: 24
140.207.220.0/22 maxlen: 22
140.207.220.0/24 maxlen: 24
140.207.224.0/21 maxlen: 21
140.207.233.0/24 maxlen: 24
140.207.235.0/24 maxlen: 24
140.207.237.0/24 maxlen: 24
140.207.238.0/23 maxlen: 23
140.207.240.0/23 maxlen: 23
140.207.241.0/24 maxlen: 24
140.207.244.0/23 maxlen: 23
140.207.245.0/24 maxlen: 24
140.207.246.0/24 maxlen: 24
140.207.248.0/23 maxlen: 23
140.207.249.0/24 maxlen: 24
140.207.251.0/24 maxlen: 24
140.207.252.0/22 maxlen: 22
140.207.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 20:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a6:6a:69:f6:00:bb:18:3a:96:b8:ca:77:30:8e:bf:5b:7b:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Aug 6 05:06:06 2026 GMT
Not After : Aug 5 05:11:06 2027 GMT
Subject: CN=40F5CF222AA84D274F3F095EA3045679577443B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:81:f7:2e:92:fe:4a:e1:54:13:58:8d:e8:
07:b4:39:75:48:db:ae:b3:f0:ed:59:90:29:22:86:
26:5f:71:a2:66:b3:a0:5b:8e:c0:e5:2d:d3:57:77:
dd:79:2e:fa:59:04:37:21:0f:3d:1f:f7:58:7d:aa:
0d:cf:1b:80:ec:53:2a:bc:71:99:0d:7a:a1:66:93:
77:13:e1:55:b2:0b:bc:0b:48:4f:0c:54:2c:b5:b3:
9a:b3:68:96:42:23:a7:58:a4:12:f5:20:4e:c2:41:
83:9f:31:89:0e:12:c0:32:83:98:12:84:d5:fd:f3:
fa:eb:2b:19:bb:42:af:4f:cc:ba:7b:fa:6a:75:95:
02:41:56:83:f6:73:5e:01:75:f6:3c:2e:ed:b1:52:
06:fa:ba:73:b0:8a:8d:18:b8:8e:e7:83:f8:2d:1d:
d2:9a:e8:fa:28:59:9f:80:cc:30:1b:2b:b7:f6:6c:
16:5b:b8:0e:b4:1c:44:ff:2f:2e:b7:1a:f4:54:c8:
d3:cf:12:aa:b8:88:52:ed:9c:e7:1f:14:88:8c:bd:
9e:ca:14:d9:2c:1b:3b:06:b7:6a:45:ca:59:d9:8a:
f6:d8:c3:9a:71:9c:d8:d4:5e:db:cb:df:46:c6:46:
7d:ed:89:69:28:80:ed:40:76:4a:80:ab:aa:8b:a9:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:CF:22:2A:A8:4D:27:4F:3F:09:5E:A3:04:56:79:57:74:43:B0
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS138421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.227.231.0/24
140.206.167.0/24
140.206.200.0-140.206.204.255
140.206.208.0/23
140.206.211.0-140.206.219.255
140.206.228.0-140.206.232.255
140.206.234.0/24
140.206.238.0/24
140.206.240.0-140.206.244.255
140.206.247.0/24
140.207.69.0-140.207.70.255
140.207.72.0/23
140.207.130.0/23
140.207.134.0/23
140.207.138.0-140.207.141.255
140.207.208.0-140.207.231.255
140.207.233.0/24
140.207.235.0/24
140.207.237.0-140.207.241.255
140.207.244.0-140.207.246.255
140.207.248.0/23
140.207.251.0-140.207.255.255
Signature Algorithm: sha256WithRSAEncryption
9d:aa:ca:90:52:af:53:9d:aa:cc:7a:08:f0:91:0b:1e:02:0d:
ca:0b:e5:e0:9c:30:8d:0f:15:c4:98:7d:c6:cf:b4:84:ef:6b:
99:3f:f2:d8:3e:3f:70:50:e5:41:28:7c:a6:7a:5a:de:52:1e:
61:90:56:e6:2d:1e:62:d5:24:6e:ea:49:6f:7f:35:f9:56:74:
2f:6a:91:fd:3b:b6:90:6a:ac:4e:0c:97:cd:9d:78:b6:6b:f9:
24:5e:b6:1f:83:c0:aa:c0:ab:40:04:55:29:23:50:b3:82:48:
69:6f:e6:8a:12:09:b9:85:77:ef:91:e3:a4:1a:5a:4a:9c:fb:
85:ff:35:f4:60:a4:3b:7f:66:8a:93:02:89:5c:7f:b1:b0:9f:
ed:48:1f:3d:64:65:ec:82:99:da:bc:7a:37:bf:ad:0d:70:8c:
ff:d1:cc:3b:be:2f:b6:43:25:52:57:15:12:fe:04:83:57:39:
a2:ac:3f:2b:71:2f:84:44:c3:9d:f0:aa:9e:6b:b4:9d:b7:35:
99:7e:c6:e4:03:ad:a7:2d:01:19:d4:7c:12:9f:04:5e:44:42:
2a:b0:ac:12:51:81:b3:fe:c5:8a:4e:ee:65:1a:20:c2:c5:47:
37:25:e7:68:72:00:04:29:73:47:6f:51:c5:e1:de:64:46:53:
9a:21:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:55 2026 by rpki-client