Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140311.roa
File: AS140311.roa (raw, json)
Hash identifier: rnNUtNcjRyPffclyNDmLkqBqkn4+8ltULUVUE14UZ8k=
Subject key identifier: F6:0A:62:57:7B:DF:E8:90:47:81:20:D5:E8:F3:D5:8D:49:24:C9:CC
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4C402BFE8D4F7FD8BC58AE4720A51C0CF07946E4
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140311.roa
Signing time: Tue 16 Jun 2026 16:02:25 +0000
ROA not before: Tue 16 Jun 2026 15:57:25 +0000
ROA not after: Tue 15 Jun 2027 16:02:25 +0000
asID: 140311
IP address blocks: 14.18.136.0/22 maxlen: 22
14.21.48.0/22 maxlen: 22
14.21.105.0/24 maxlen: 24
14.148.80.0/21 maxlen: 21
58.63.219.0/24 maxlen: 24
59.35.180.0/22 maxlen: 22
59.35.192.0/21 maxlen: 21
61.142.49.0/24 maxlen: 24
61.143.136.0/21 maxlen: 21
61.146.92.0/22 maxlen: 22
113.64.212.0/22 maxlen: 22
113.64.252.0/22 maxlen: 22
113.85.0.0/17 maxlen: 17
113.101.64.0/19 maxlen: 19
113.107.64.0/20 maxlen: 20
113.107.80.0/21 maxlen: 21
113.107.88.0/22 maxlen: 22
116.5.176.0/20 maxlen: 20
116.5.192.0/20 maxlen: 20
116.6.6.0/24 maxlen: 24
116.16.120.0/21 maxlen: 21
116.16.128.0/19 maxlen: 19
116.16.160.0/20 maxlen: 20
116.19.38.0/23 maxlen: 23
116.19.145.0/24 maxlen: 24
119.120.192.0/18 maxlen: 18
119.121.67.0/24 maxlen: 24
119.121.68.0/23 maxlen: 23
119.121.195.0/24 maxlen: 24
119.121.196.0/23 maxlen: 23
119.142.176.0/20 maxlen: 20
119.142.192.0/18 maxlen: 18
125.91.96.0/21 maxlen: 21
125.91.142.0/23 maxlen: 23
125.91.224.0/22 maxlen: 22
125.91.228.0/24 maxlen: 24
125.91.231.0/24 maxlen: 24
125.91.232.0/22 maxlen: 22
125.91.236.0/23 maxlen: 23
125.91.238.0/24 maxlen: 24
125.91.240.0/21 maxlen: 21
125.91.248.0/22 maxlen: 22
125.91.252.0/24 maxlen: 24
125.91.254.0/23 maxlen: 23
183.10.0.0/18 maxlen: 18
183.10.64.0/20 maxlen: 20
183.10.108.0/22 maxlen: 22
183.10.112.0/20 maxlen: 20
183.10.128.0/17 maxlen: 17
183.24.192.0/18 maxlen: 18
183.57.30.0/23 maxlen: 23
183.58.224.0/22 maxlen: 22
183.59.78.0/24 maxlen: 24
183.59.212.0/22 maxlen: 22
202.104.248.0/22 maxlen: 22
202.105.228.0/23 maxlen: 23
202.105.244.0/23 maxlen: 23
218.15.64.0/22 maxlen: 22
218.15.92.0/22 maxlen: 22
219.128.97.0/24 maxlen: 24
219.131.156.0/22 maxlen: 22
240e:5e:10a0::/46 maxlen: 46
240e:5e:10a4::/46 maxlen: 46
240e:5e:10a8::/46 maxlen: 46
240e:5e:10ac::/46 maxlen: 46
240e:108:4051::/48 maxlen: 48
240e:108:4851::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:40:2b:fe:8d:4f:7f:d8:bc:58:ae:47:20:a5:1c:0c:f0:79:46:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 15:57:25 2026 GMT
Not After : Jun 15 16:02:25 2027 GMT
Subject: CN=F60A62577BDFE890478120D5E8F3D58D4924C9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:b8:65:89:b7:8e:9e:51:39:6a:c4:cf:a1:
af:33:19:10:37:33:6e:50:ee:0e:f7:a1:ad:62:46:
ea:bb:06:16:25:0a:3b:99:eb:37:fe:cd:b1:6e:4c:
a5:d4:6b:97:90:0a:52:c2:b6:8a:82:bc:0a:3b:38:
24:f3:2b:c1:16:cb:25:07:a7:99:f2:56:59:33:47:
83:89:b3:8b:b0:9e:af:76:b5:fd:60:04:fb:61:0c:
ab:75:17:af:08:2b:52:89:1b:9c:11:56:27:c7:e7:
ff:22:49:7e:f5:b1:86:df:30:2e:86:89:f8:a5:e4:
47:f7:1c:87:28:d6:1e:2a:99:95:d1:a1:47:5a:de:
63:01:27:ce:96:43:28:d1:f4:96:9f:18:ec:03:96:
fa:f0:83:f3:54:63:66:4a:b4:a7:a1:34:7e:12:10:
51:de:90:f3:48:18:83:b5:4f:7e:db:be:41:df:86:
8d:a9:6c:10:99:1a:f9:b5:24:6f:42:e1:ad:9a:29:
95:e6:7c:dd:23:37:60:14:a0:6c:cd:43:fe:8f:d3:
86:48:6b:4f:dd:62:b4:58:91:d9:89:7a:2a:de:16:
d1:8e:f1:7d:f4:3c:40:37:d0:0a:f5:a9:ad:59:60:
25:51:12:5f:31:c0:6c:17:7a:ee:e0:33:30:e8:d6:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:62:57:7B:DF:E8:90:47:81:20:D5:E8:F3:D5:8D:49:24:C9:CC
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.18.136.0/22
14.21.48.0/22
14.21.105.0/24
14.148.80.0/21
58.63.219.0/24
59.35.180.0/22
59.35.192.0/21
61.142.49.0/24
61.143.136.0/21
61.146.92.0/22
113.64.212.0/22
113.64.252.0/22
113.85.0.0/17
113.101.64.0/19
113.107.64.0-113.107.91.255
116.5.176.0-116.5.207.255
116.6.6.0/24
116.16.120.0-116.16.175.255
116.19.38.0/23
116.19.145.0/24
119.120.192.0/18
119.121.67.0-119.121.69.255
119.121.195.0-119.121.197.255
119.142.176.0-119.142.255.255
125.91.96.0/21
125.91.142.0/23
125.91.224.0-125.91.228.255
125.91.231.0-125.91.238.255
125.91.240.0-125.91.252.255
125.91.254.0/23
183.10.0.0-183.10.79.255
183.10.108.0-183.10.255.255
183.24.192.0/18
183.57.30.0/23
183.58.224.0/22
183.59.78.0/24
183.59.212.0/22
202.104.248.0/22
202.105.228.0/23
202.105.244.0/23
218.15.64.0/22
218.15.92.0/22
219.128.97.0/24
219.131.156.0/22
IPv6:
240e:5e:10a0::/44
240e:108:4051::/48
240e:108:4851::/48
Signature Algorithm: sha256WithRSAEncryption
80:c6:68:5c:b0:c2:cd:e6:07:6f:45:0c:79:15:fe:c6:6b:c1:
d2:47:ca:20:a5:63:b2:7f:f2:66:e7:0c:0a:1d:4c:f7:c3:54:
ca:c4:39:64:ae:5a:0c:89:89:34:f6:cb:8e:b7:70:3a:e5:9b:
52:76:e0:cc:1e:8f:c8:20:ba:06:2c:b6:36:78:ab:f4:be:27:
a0:50:a9:53:90:27:f5:2c:25:42:5e:cb:be:cc:90:33:72:fc:
1f:1a:74:c8:41:b0:9b:6e:e4:13:bd:7d:b7:ee:8c:85:89:2b:
2f:6e:2b:f6:0c:ab:ac:16:6a:5e:b8:6f:0f:69:9d:94:cd:c1:
67:d3:4e:bd:8c:ad:16:24:64:95:fe:15:16:98:92:63:d0:0b:
78:ac:4a:17:ce:07:10:72:78:41:6c:3d:57:e3:01:35:30:59:
ec:4c:7a:bd:0d:bf:a7:1c:a6:9b:43:e1:63:f5:2c:c4:07:68:
3d:0a:32:1e:6b:33:a0:cc:f5:bd:a5:93:5d:e5:60:61:81:b6:
fd:92:c7:57:ff:1f:32:d7:0f:07:93:f6:41:e2:a2:9f:23:7d:
05:82:2b:f3:eb:d2:1c:a0:fb:ca:0f:09:c4:8b:29:ae:03:c4:
f4:ab:cb:81:b4:0c:e5:75:f2:85:a2:8d:01:c3:d2:6c:7c:ff:
85:a3:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:34 2026 by rpki-client