Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140308.roa
File: AS140308.roa (raw, json)
Hash identifier: 5IIpzEI4WBwgvJFrGENDl4r4VOc8/viA0WyL1r7AXEc=
Subject key identifier: BD:BB:1A:25:0D:84:A7:B4:5C:71:FC:AE:52:4D:1C:B8:8E:02:41:6E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 55899B445ECA43C255905C52070E44A3AE62ACAA
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140308.roa
Signing time: Tue 16 Jun 2026 16:02:25 +0000
ROA not before: Tue 16 Jun 2026 15:57:25 +0000
ROA not after: Tue 15 Jun 2027 16:02:25 +0000
asID: 140308
IP address blocks: 14.21.24.0/22 maxlen: 22
14.21.112.0/24 maxlen: 24
14.121.13.0/24 maxlen: 24
14.147.216.0/24 maxlen: 24
14.148.48.0/20 maxlen: 20
14.215.208.0/22 maxlen: 22
59.35.0.0/19 maxlen: 19
59.35.32.0/19 maxlen: 19
59.35.58.0/24 maxlen: 24
59.35.59.0/24 maxlen: 24
59.35.64.0/19 maxlen: 19
59.35.96.0/21 maxlen: 21
59.35.104.0/21 maxlen: 21
59.35.112.0/21 maxlen: 21
59.35.216.0/21 maxlen: 21
59.35.224.0/21 maxlen: 21
59.35.232.0/21 maxlen: 21
59.35.240.0/21 maxlen: 21
59.35.248.0/21 maxlen: 21
61.141.0.0/22 maxlen: 22
61.141.1.0/24 maxlen: 24
61.141.4.0/24 maxlen: 24
61.141.6.0/23 maxlen: 23
61.141.8.0/21 maxlen: 21
61.141.16.0/20 maxlen: 20
61.141.33.0/24 maxlen: 24
61.141.34.0/23 maxlen: 23
61.141.63.0/24 maxlen: 24
61.143.184.0/21 maxlen: 21
113.64.0.0/20 maxlen: 20
113.100.224.0/20 maxlen: 20
113.100.240.0/21 maxlen: 21
113.100.248.0/22 maxlen: 22
113.100.252.0/22 maxlen: 22
113.103.48.0/20 maxlen: 20
113.106.168.0/21 maxlen: 21
113.106.224.0/21 maxlen: 21
113.106.232.0/21 maxlen: 21
113.106.240.0/21 maxlen: 21
116.6.38.0/23 maxlen: 23
116.19.36.0/23 maxlen: 23
116.19.144.0/24 maxlen: 24
116.26.0.0/17 maxlen: 17
116.26.128.0/19 maxlen: 19
116.26.160.0/20 maxlen: 20
116.26.176.0/20 maxlen: 20
116.31.128.0/18 maxlen: 18
116.31.176.0/20 maxlen: 20
119.121.63.0/24 maxlen: 24
119.121.64.0/23 maxlen: 23
119.121.66.0/24 maxlen: 24
119.121.191.0/24 maxlen: 24
119.121.192.0/23 maxlen: 23
119.121.194.0/24 maxlen: 24
121.10.190.0/23 maxlen: 23
121.10.192.0/20 maxlen: 20
121.10.208.0/21 maxlen: 21
121.10.216.0/21 maxlen: 21
121.10.224.0/21 maxlen: 21
121.11.16.0/20 maxlen: 20
125.94.152.0/21 maxlen: 21
125.94.160.0/20 maxlen: 20
125.94.176.0/22 maxlen: 22
125.94.180.0/22 maxlen: 22
125.94.184.0/21 maxlen: 21
183.4.0.0/18 maxlen: 18
183.7.0.0/18 maxlen: 18
183.7.64.0/19 maxlen: 19
183.7.96.0/19 maxlen: 19
183.7.128.0/19 maxlen: 19
183.7.160.0/20 maxlen: 20
183.7.176.0/21 maxlen: 21
183.7.184.0/22 maxlen: 22
183.7.192.0/18 maxlen: 18
183.10.80.0/20 maxlen: 20
183.10.96.0/21 maxlen: 21
183.10.104.0/22 maxlen: 22
183.44.208.0/20 maxlen: 20
183.44.224.0/20 maxlen: 20
183.44.240.0/20 maxlen: 20
183.47.32.0/21 maxlen: 21
183.50.0.0/21 maxlen: 21
183.50.8.0/21 maxlen: 21
183.50.16.0/21 maxlen: 21
183.50.24.0/21 maxlen: 21
183.50.32.0/19 maxlen: 19
183.57.0.0/22 maxlen: 22
183.57.4.0/22 maxlen: 22
183.57.8.0/22 maxlen: 22
183.57.181.0/24 maxlen: 24
183.59.24.0/22 maxlen: 22
183.59.216.0/22 maxlen: 22
202.96.144.0/23 maxlen: 23
202.103.171.0/24 maxlen: 24
202.104.232.0/22 maxlen: 22
202.104.243.0/24 maxlen: 24
202.104.244.0/22 maxlen: 22
202.105.224.0/22 maxlen: 22
202.105.248.0/23 maxlen: 23
202.105.250.0/24 maxlen: 24
218.16.184.0/21 maxlen: 21
218.16.192.0/20 maxlen: 20
218.16.208.0/21 maxlen: 21
218.16.216.0/22 maxlen: 22
218.16.220.0/23 maxlen: 23
218.16.222.0/24 maxlen: 24
218.16.230.0/23 maxlen: 23
218.16.232.0/21 maxlen: 21
218.16.240.0/20 maxlen: 20
219.128.143.0/24 maxlen: 24
219.128.168.0/22 maxlen: 22
219.128.168.0/23 maxlen: 23
219.128.172.0/23 maxlen: 23
219.128.188.0/24 maxlen: 24
219.128.204.0/22 maxlen: 22
219.131.112.0/22 maxlen: 22
219.131.120.0/22 maxlen: 22
240e:108:404b::/48 maxlen: 48
240e:108:484b::/48 maxlen: 48
240e:6b8:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:89:9b:44:5e:ca:43:c2:55:90:5c:52:07:0e:44:a3:ae:62:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 15:57:25 2026 GMT
Not After : Jun 15 16:02:25 2027 GMT
Subject: CN=BDBB1A250D84A7B45C71FCAE524D1CB88E02416E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:20:c7:e0:be:d3:31:55:e5:3b:c1:c7:7f:
1c:7d:bc:df:7a:d9:6d:ed:e0:1d:e3:cb:85:1e:e0:
b6:15:91:43:92:f2:28:88:a5:6d:f9:12:0c:43:40:
12:8c:03:73:25:52:e3:4b:ef:d2:95:cf:4f:d4:45:
e2:75:d7:29:0d:f5:0c:a3:9f:5e:86:93:50:03:df:
89:95:e1:45:6a:8e:30:60:4e:ef:81:00:77:88:7e:
a8:dd:89:9b:a5:93:9d:13:92:f6:e5:09:13:a2:53:
c3:be:eb:f8:be:40:34:48:2b:f9:41:c2:07:35:c6:
d9:ca:65:4f:f3:31:c2:7f:0f:58:6f:af:0d:62:bc:
a0:cf:d3:77:aa:fe:3f:99:5e:8e:9a:ce:82:31:f5:
85:8c:51:81:68:e2:04:44:34:18:58:35:7b:d9:20:
31:a6:c9:46:11:b9:17:d7:a0:4c:e8:0e:ed:45:30:
e8:44:f9:fb:05:68:43:7a:df:6a:3c:7c:ed:5d:c3:
21:d9:bb:3d:b3:ed:da:dd:1f:d3:bd:a2:5d:50:8a:
ee:d8:f5:fa:76:a1:28:fc:52:96:34:4f:0d:96:97:
ee:ef:59:e3:02:32:70:52:80:6f:b4:05:50:21:a8:
8e:c6:f6:a1:8c:c7:73:7b:67:5b:8a:32:c2:08:28:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:1A:25:0D:84:A7:B4:5C:71:FC:AE:52:4D:1C:B8:8E:02:41:6E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.24.0/22
14.21.112.0/24
14.121.13.0/24
14.147.216.0/24
14.148.48.0/20
14.215.208.0/22
59.35.0.0-59.35.119.255
59.35.216.0-59.35.255.255
61.141.0.0-61.141.4.255
61.141.6.0-61.141.31.255
61.141.33.0-61.141.35.255
61.141.63.0/24
61.143.184.0/21
113.64.0.0/20
113.100.224.0/19
113.103.48.0/20
113.106.168.0/21
113.106.224.0-113.106.247.255
116.6.38.0/23
116.19.36.0/23
116.19.144.0/24
116.26.0.0-116.26.191.255
116.31.128.0/18
119.121.63.0-119.121.66.255
119.121.191.0-119.121.194.255
121.10.190.0-121.10.231.255
121.11.16.0/20
125.94.152.0-125.94.191.255
183.4.0.0/18
183.7.0.0-183.7.187.255
183.7.192.0/18
183.10.80.0-183.10.107.255
183.44.208.0-183.44.255.255
183.47.32.0/21
183.50.0.0/18
183.57.0.0-183.57.11.255
183.57.181.0/24
183.59.24.0/22
183.59.216.0/22
202.96.144.0/23
202.103.171.0/24
202.104.232.0/22
202.104.243.0-202.104.247.255
202.105.224.0/22
202.105.248.0-202.105.250.255
218.16.184.0-218.16.222.255
218.16.230.0-218.16.255.255
219.128.143.0/24
219.128.168.0-219.128.173.255
219.128.188.0/24
219.128.204.0/22
219.131.112.0/22
219.131.120.0/22
IPv6:
240e:108:404b::/48
240e:108:484b::/48
240e:6b8:1020::/44
Signature Algorithm: sha256WithRSAEncryption
0a:58:66:d3:68:e7:55:62:41:ec:64:20:c5:d4:e0:00:73:c6:
19:1b:0e:8d:5c:ea:b1:6d:ec:be:56:36:05:61:75:39:ab:d5:
ea:34:dd:74:89:fe:44:d3:d1:34:be:1f:5d:28:a0:f8:ab:ff:
40:76:96:cf:2e:f1:ca:b2:7e:5d:54:89:11:6c:8d:95:97:63:
b4:c0:28:2c:f5:f6:e0:7c:73:45:cf:1b:10:94:e7:12:32:eb:
02:73:4b:cb:56:79:8d:e5:6e:29:e9:26:d8:7e:a6:7d:f1:53:
0c:b1:bf:d8:dc:45:de:1b:53:d2:2a:7a:5f:22:95:d0:5f:0d:
dc:2b:5e:f9:53:be:df:a6:f9:69:cc:eb:b7:67:7d:49:45:51:
f6:6e:29:f9:30:51:6b:b7:20:71:ab:21:c9:77:9c:21:e0:c1:
c7:db:ca:76:e2:c3:70:08:73:30:f6:ff:7e:a0:4b:7a:48:34:
05:47:51:eb:ab:d1:c3:66:04:11:16:1b:ea:fc:e6:fc:38:41:
ca:fb:a5:17:e6:aa:26:fe:3c:f1:e2:e0:54:3d:ff:0a:66:55:
45:ea:5b:fb:99:c6:e3:36:b5:59:7b:33:1b:c3:f0:09:a6:1b:
a0:96:a1:d5:5f:bd:cb:75:27:a6:32:21:ef:2e:cc:ea:20:22:
be:e7:dd:02
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIUVYmbRF7KQ8JVkFxSBw5Eo65irKowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE1NTcyNVoX
DTI3MDYxNTE2MDIyNVowMzExMC8GA1UEAxMoQkRCQjFBMjUwRDg0QTdCNDVDNzFG
Q0FFNTI0RDFDQjg4RTAyNDE2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJawIMfgvtMxVeU7wcd/HH2833rZbe3gHePLhR7gthWRQ5LyKIilbfkSDENA
EowDcyVS40vv0pXPT9RF4nXXKQ31DKOfXoaTUAPfiZXhRWqOMGBO74EAd4h+qN2J
m6WTnROS9uUJE6JTw77r+L5ANEgr+UHCBzXG2cplT/Mxwn8PWG+vDWK8oM/Td6r+
P5lejprOgjH1hYxRgWjiBEQ0GFg1e9kgMabJRhG5F9egTOgO7UUw6ET5+wVoQ3rf
ajx87V3DIdm7PbPt2t0f072iXVCK7tj1+nahKPxSljRPDZaX7u9Z4wIycFKAb7QF
UCGojsb2oYzHc3tnW4oywggoCdECAwEAAaOCA+EwggPdMB0GA1UdDgQWBBS9uxol
DYSntFxx/K5STRy4jgJBbjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwMzA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIICGgYIKwYBBQUHAQcBAf8EggIJMIICBTCCAd4EAgABMIIB1gMEAg4VGAMEAA4V
cAMEAA55DQMEAA6T2AMEBA6UMAMEAg7X0DALAwMAOyMDBAM7I3AwCwMEAzsj2AMD
AjsgMAsDAwA9jQMEAD2NBDAMAwQBPY0GAwQFPY0AMAwDBAA9jSEDBAI9jSADBAA9
jT8DBAM9j7gDBARxQAADBAVxZOADBARxZzADBANxaqgwDAMEBXFq4AMEA3Fq8AME
AXQGJgMEAXQTJAMEAHQTkDALAwMBdBoDBAZ0GoADBAZ0H4AwDAMEAHd5PwMEAHd5
QjAMAwQAd3m/AwQAd3nCMAwDBAF5Cr4DBAN5CuADBAR5CxAwDAMEA31emAMEBn1e
gAMEBrcEADALAwMAtwcDBAK3B7gDBAa3B8AwDAMEBLcKUAMEArcKaDALAwQEtyzQ
AwMAtywDBAO3LyADBAa3MgAwCwMDALc5AwQCtzkIAwQAtzm1AwQCtzsYAwQCtzvY
AwQBymCQAwQAymerAwQCymjoMAwDBADKaPMDBAPKaPADBALKaeAwDAMEA8pp+AME
AMpp+jAMAwQD2hC4AwQA2hDeMAsDBAHaEOYDAwDaEAMEANuAjzAMAwQD24CoAwQB
24CsAwQA24C8AwQC24DMAwQC24NwAwQC24N4MCEEAgACMBsDBwAkDgEIQEsDBwAk
DgEISEsDBwQkDga4ECAwDQYJKoZIhvcNAQELBQADggEBAApYZtNo51ViQexkIMXU
4ABzxhkbDo1c6rFt7L5WNgVhdTmr1eo03XSJ/kTT0TS+H10ooPir/0B2ls8u8cqy
fl1UiRFsjZWXY7TAKCz19uB8c0XPGxCU5xIy6wJzS8tWeY3lbinpJth+pn3xUwyx
v9jcRd4bU9Iqel8ildBfDdwrXvlTvt+m+WnM67dnfUlFUfZuKfkwUWu3IHGrIcl3
nCHgwcfbynbiw3AIczD2/36gS3pINAVHUeur0cNmBBEWG+r85vw4Qcr7pRfmqib+
PPHi4FQ9/wpmVUXqW/uZxuM2tVl7MxvD8AmmG6CWodVfvct1J6YyIe8uzOogIr7n
3QI=
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:56:55 2026 by rpki-client