Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140979.roa
File: AS140979.roa (raw, json)
Hash identifier: isfIR3s4vIU5gx8nouRGVuuHOdanQ6uXZpeYAJruGMs=
Subject key identifier: 7E:A6:D6:08:F8:58:C5:C7:7A:AD:EF:51:57:85:E3:68:A5:42:BA:A5
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 6B10E2BE4BA9B959B66B43ED5AE1F360264865BB
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140979.roa
Signing time: Thu 06 Aug 2026 05:11:07 +0000
ROA not before: Thu 06 Aug 2026 05:06:07 +0000
ROA not after: Thu 05 Aug 2027 05:11:07 +0000
asID: 140979
IP address blocks: 43.250.144.0/23 maxlen: 23
58.246.163.0/24 maxlen: 24
58.246.220.0/22 maxlen: 22
58.247.204.0/22 maxlen: 22
58.247.212.0/22 maxlen: 22
112.64.235.0/24 maxlen: 24
112.64.236.0/24 maxlen: 24
112.64.237.0/24 maxlen: 24
112.65.192.0/24 maxlen: 24
112.65.193.0/24 maxlen: 24
112.65.194.0/24 maxlen: 24
112.65.195.0/24 maxlen: 24
210.22.240.0/24 maxlen: 24
210.22.241.0/24 maxlen: 24
210.22.242.0/24 maxlen: 24
210.22.243.0/24 maxlen: 24
210.22.244.0/24 maxlen: 24
210.22.245.0/24 maxlen: 24
210.22.246.0/24 maxlen: 24
210.22.247.0/24 maxlen: 24
210.51.43.0/24 maxlen: 24
210.51.44.0/24 maxlen: 24
220.248.42.0/23 maxlen: 23
220.248.42.0/24 maxlen: 24
223.166.64.0/23 maxlen: 23
223.166.150.0/23 maxlen: 23
223.166.152.0/22 maxlen: 22
223.166.173.0/24 maxlen: 24
223.166.222.0/24 maxlen: 24
223.166.252.0/22 maxlen: 22
223.167.80.0/24 maxlen: 24
223.167.81.0/24 maxlen: 24
223.167.82.0/24 maxlen: 24
223.167.83.0/24 maxlen: 24
223.167.104.0/24 maxlen: 24
223.167.152.0/22 maxlen: 22
223.167.156.0/23 maxlen: 23
223.167.222.0/23 maxlen: 23
223.167.238.0/23 maxlen: 23
223.167.240.0/22 maxlen: 22
223.167.252.0/22 maxlen: 22
2408:8000:9ffd::/48 maxlen: 48
2408:80f1:20::/44 maxlen: 44
2408:80f1:30::/44 maxlen: 44
2408:870c:160::/44 maxlen: 44
2408:870c:4000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 03:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:10:e2:be:4b:a9:b9:59:b6:6b:43:ed:5a:e1:f3:60:26:48:65:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Aug 6 05:06:07 2026 GMT
Not After : Aug 5 05:11:07 2027 GMT
Subject: CN=7EA6D608F858C5C77AADEF515785E368A542BAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:76:c2:85:3e:6e:4f:f7:f4:00:69:a5:1f:
7a:51:37:bb:2c:93:76:0e:f7:b5:77:6c:00:42:f0:
26:59:ff:85:9c:f8:f5:f9:9e:17:e2:81:49:47:cc:
f1:f8:40:c2:b5:35:17:0c:cf:5d:5e:7f:5f:be:28:
db:c0:39:86:ec:4c:80:7e:b8:d5:58:83:dd:a4:01:
28:42:bc:d9:27:6f:63:18:95:c1:a6:20:96:38:76:
4f:d4:bd:e5:f4:da:3e:8c:cf:ff:2b:d3:79:03:1d:
33:32:47:93:1a:69:53:04:55:8b:42:bf:a7:4b:a6:
45:32:71:1c:f1:5c:fe:6a:9f:70:1f:4c:0f:76:3b:
77:73:25:a2:09:4b:11:32:e6:16:58:dd:f5:b9:63:
d4:f8:99:e5:7a:1f:0f:19:70:6f:45:d4:01:98:02:
93:fc:bb:70:2d:3a:26:d2:a2:47:3c:71:6b:4b:3c:
7e:ea:f8:d8:e2:0e:67:ae:32:7c:38:a9:46:7e:5a:
7b:52:f8:5e:a7:2d:92:2b:6b:81:17:2c:24:6d:a0:
39:44:b0:fc:00:9b:49:f8:78:dd:e6:72:a8:f5:7b:
ba:e6:0a:a3:4e:c4:47:a7:d1:41:e3:a9:c3:91:7a:
88:44:30:d8:48:89:ff:1c:dd:62:da:1d:d5:3e:c6:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:D6:08:F8:58:C5:C7:7A:AD:EF:51:57:85:E3:68:A5:42:BA:A5
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.250.144.0/23
58.246.163.0/24
58.246.220.0/22
58.247.204.0/22
58.247.212.0/22
112.64.235.0-112.64.237.255
112.65.192.0/22
210.22.240.0/21
210.51.43.0-210.51.44.255
220.248.42.0/23
223.166.64.0/23
223.166.150.0-223.166.155.255
223.166.173.0/24
223.166.222.0/24
223.166.252.0/22
223.167.80.0/22
223.167.104.0/24
223.167.152.0-223.167.157.255
223.167.222.0/23
223.167.238.0-223.167.243.255
223.167.252.0/22
IPv6:
2408:8000:9ffd::/48
2408:80f1:20::/43
2408:870c:160::/44
2408:870c:4000::/44
Signature Algorithm: sha256WithRSAEncryption
51:21:23:59:16:92:42:e0:5b:f5:e7:64:77:da:f5:1f:71:3d:
76:ed:95:c1:81:dc:51:9b:3f:7a:32:3e:e8:f7:b0:d1:43:08:
1d:ff:08:1e:81:6c:e5:79:bc:29:90:43:79:d5:e6:0f:01:2c:
8d:ba:33:69:4f:8b:4b:a5:8c:76:5e:39:e9:2e:ea:5f:23:c6:
82:89:22:35:fd:65:c0:4b:c9:b8:09:67:d0:54:3e:75:ee:61:
f8:17:6a:d2:34:4c:25:9e:c2:de:38:65:f1:13:24:d0:0a:d6:
14:3b:c1:4f:81:66:25:58:87:f8:b2:5d:c7:37:cd:d4:17:7d:
3c:13:55:71:0a:70:50:d6:87:ba:5e:45:46:82:3a:fa:69:ea:
74:fc:de:a1:8d:bc:c8:a8:63:14:7e:c9:af:8b:84:7b:df:fd:
19:59:f3:a3:a8:5b:b1:a5:58:bd:ed:83:99:2b:24:24:80:03:
67:8a:04:22:6d:67:9f:77:c6:53:64:83:6a:a5:1d:f7:37:58:
0f:16:91:ee:8f:98:c5:1e:78:1d:4c:73:25:ec:32:36:85:37:
60:0e:7b:5e:c9:45:65:a6:69:b9:f8:70:9f:fb:14:59:d9:9c:
3c:47:29:50:7e:fb:7b:1a:c7:93:90:15:42:c3:55:ed:71:de:
99:96:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:52:37 2026 by rpki-client