Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
File: AS140319.roa (raw, json)
Hash identifier: lGjEpxclm2+gILn86JeYFlY9XkRmOiGB9NMxywV7g+I=
Subject key identifier: 73:69:8F:25:8B:AF:7B:F9:B8:33:7A:3E:B9:3A:AF:D8:67:02:CA:E4
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7D7890C7DB0E5A9FDCE52C4AE9920B52B691AA11
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
Signing time: Tue 16 Jun 2026 16:02:25 +0000
ROA not before: Tue 16 Jun 2026 15:57:25 +0000
ROA not after: Tue 15 Jun 2027 16:02:25 +0000
asID: 140319
IP address blocks: 14.21.36.0/22 maxlen: 22
14.21.106.0/24 maxlen: 24
14.121.15.0/24 maxlen: 24
14.121.23.0/24 maxlen: 24
14.124.64.0/19 maxlen: 19
14.148.152.0/21 maxlen: 21
14.149.128.0/18 maxlen: 18
14.215.224.0/22 maxlen: 22
59.32.0.0/19 maxlen: 19
59.32.8.0/24 maxlen: 24
59.32.32.0/20 maxlen: 20
59.37.43.0/24 maxlen: 24
61.143.144.0/21 maxlen: 21
61.143.145.0/24 maxlen: 24
61.146.96.0/23 maxlen: 23
61.146.104.0/21 maxlen: 21
61.146.112.0/21 maxlen: 21
113.64.230.0/23 maxlen: 23
113.64.248.0/24 maxlen: 24
113.75.0.0/21 maxlen: 21
113.75.8.0/21 maxlen: 21
113.75.16.0/20 maxlen: 20
113.75.32.0/21 maxlen: 21
113.75.40.0/21 maxlen: 21
113.75.48.0/21 maxlen: 21
113.75.56.0/21 maxlen: 21
113.75.64.0/18 maxlen: 18
113.100.64.0/22 maxlen: 22
113.100.68.0/22 maxlen: 22
113.100.72.0/21 maxlen: 21
113.100.80.0/21 maxlen: 21
113.100.88.0/21 maxlen: 21
113.104.32.0/22 maxlen: 22
113.106.64.0/21 maxlen: 21
113.106.69.0/24 maxlen: 24
113.107.172.0/23 maxlen: 23
116.6.27.0/24 maxlen: 24
116.17.180.0/22 maxlen: 22
116.17.184.0/21 maxlen: 21
116.17.192.0/18 maxlen: 18
116.19.44.0/23 maxlen: 23
116.19.148.0/24 maxlen: 24
119.121.95.0/24 maxlen: 24
119.121.96.0/23 maxlen: 23
119.121.98.0/24 maxlen: 24
119.121.223.0/24 maxlen: 24
119.121.224.0/23 maxlen: 23
119.121.226.0/24 maxlen: 24
119.124.176.0/22 maxlen: 22
119.124.180.0/22 maxlen: 22
119.124.184.0/22 maxlen: 22
119.124.188.0/22 maxlen: 22
119.124.192.0/21 maxlen: 21
119.124.200.0/21 maxlen: 21
119.124.208.0/21 maxlen: 21
119.124.216.0/21 maxlen: 21
119.124.224.0/21 maxlen: 21
119.124.232.0/21 maxlen: 21
119.124.240.0/21 maxlen: 21
119.124.248.0/21 maxlen: 21
119.140.160.0/21 maxlen: 21
119.140.168.0/21 maxlen: 21
119.145.184.0/21 maxlen: 21
119.145.192.0/21 maxlen: 21
119.145.200.0/22 maxlen: 22
119.145.204.0/22 maxlen: 22
119.146.42.0/23 maxlen: 23
119.146.44.0/22 maxlen: 22
119.146.48.0/22 maxlen: 22
125.89.92.0/22 maxlen: 22
125.89.128.0/21 maxlen: 21
183.29.0.0/17 maxlen: 17
183.35.0.0/18 maxlen: 18
183.35.64.0/19 maxlen: 19
183.35.96.0/19 maxlen: 19
183.52.128.0/20 maxlen: 20
183.52.144.0/20 maxlen: 20
183.57.57.0/24 maxlen: 24
183.57.190.0/24 maxlen: 24
183.59.200.0/22 maxlen: 22
183.63.56.0/21 maxlen: 21
183.63.153.0/24 maxlen: 24
183.63.154.0/23 maxlen: 23
183.63.233.0/24 maxlen: 24
183.63.234.0/23 maxlen: 23
183.63.236.0/22 maxlen: 22
202.104.8.0/22 maxlen: 22
202.105.174.0/23 maxlen: 23
218.16.144.0/20 maxlen: 20
219.128.92.0/22 maxlen: 22
219.128.100.0/23 maxlen: 23
219.129.128.0/19 maxlen: 19
219.129.152.0/21 maxlen: 21
240e:5e:10c0::/46 maxlen: 46
240e:5e:10c4::/46 maxlen: 46
240e:5e:10c8::/46 maxlen: 46
240e:5e:10cc::/46 maxlen: 46
240e:108:4057::/48 maxlen: 48
240e:108:4857::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:78:90:c7:db:0e:5a:9f:dc:e5:2c:4a:e9:92:0b:52:b6:91:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 15:57:25 2026 GMT
Not After : Jun 15 16:02:25 2027 GMT
Subject: CN=73698F258BAF7BF9B8337A3EB93AAFD86702CAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:c2:8c:b5:81:14:1d:20:aa:15:5b:02:bb:
4b:38:fb:d7:31:3d:d8:14:34:0e:56:3b:bf:f9:92:
77:99:36:2c:7b:7a:33:83:86:62:b9:21:78:69:73:
9f:c1:1d:bd:90:91:f5:ee:43:e1:af:23:9e:bf:20:
99:a3:1c:d9:ac:df:7b:7b:28:b2:9a:8c:12:00:a9:
1b:ba:83:62:23:54:04:d4:a0:3b:98:2d:69:01:c4:
7e:a6:69:c2:e2:d2:a1:c2:62:8d:e4:7f:cc:36:2f:
48:b1:d2:17:9a:88:9f:04:d7:bc:44:b1:54:93:8b:
c2:cb:4f:15:07:60:9b:a3:4a:23:4a:1f:c7:8a:a9:
64:eb:d8:40:8d:2d:6f:f4:97:c5:9f:cd:fb:93:4b:
61:fb:e3:05:7c:68:eb:f2:32:d6:34:ac:8b:66:73:
f1:7f:ca:38:4a:3e:d7:01:2a:b2:6f:28:47:7d:9f:
51:54:06:a4:b2:99:24:02:a9:05:91:63:ac:4e:0d:
44:a6:12:38:16:ff:00:e7:52:15:92:e0:73:7b:d4:
83:d0:92:2a:fb:66:70:47:92:6f:d6:5b:c2:d9:2d:
a7:64:ae:fb:12:45:e4:c0:0c:89:20:f9:99:c9:4b:
90:30:a9:eb:00:69:1d:4a:b1:4f:35:9d:1b:9d:c7:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:8F:25:8B:AF:7B:F9:B8:33:7A:3E:B9:3A:AF:D8:67:02:CA:E4
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.36.0/22
14.21.106.0/24
14.121.15.0/24
14.121.23.0/24
14.124.64.0/19
14.148.152.0/21
14.149.128.0/18
14.215.224.0/22
59.32.0.0-59.32.47.255
59.37.43.0/24
61.143.144.0/21
61.146.96.0/23
61.146.104.0-61.146.119.255
113.64.230.0/23
113.64.248.0/24
113.75.0.0/17
113.100.64.0/19
113.104.32.0/22
113.106.64.0/21
113.107.172.0/23
116.6.27.0/24
116.17.180.0-116.17.255.255
116.19.44.0/23
116.19.148.0/24
119.121.95.0-119.121.98.255
119.121.223.0-119.121.226.255
119.124.176.0-119.124.255.255
119.140.160.0/20
119.145.184.0-119.145.207.255
119.146.42.0-119.146.51.255
125.89.92.0/22
125.89.128.0/21
183.29.0.0/17
183.35.0.0/17
183.52.128.0/19
183.57.57.0/24
183.57.190.0/24
183.59.200.0/22
183.63.56.0/21
183.63.153.0-183.63.155.255
183.63.233.0-183.63.239.255
202.104.8.0/22
202.105.174.0/23
218.16.144.0/20
219.128.92.0/22
219.128.100.0/23
219.129.128.0/19
IPv6:
240e:5e:10c0::/44
240e:108:4057::/48
240e:108:4857::/48
Signature Algorithm: sha256WithRSAEncryption
4f:78:7d:f9:04:7e:f5:1e:46:ff:a6:6f:f5:4d:e5:62:bf:aa:
9f:32:36:dc:db:09:20:d8:c6:69:15:cd:48:f2:17:e4:79:7a:
10:61:bc:0c:31:5c:46:c7:dd:aa:5c:e6:07:6d:f5:e0:aa:a2:
29:dd:24:b8:0c:23:3a:61:f5:53:d7:03:1a:41:d0:cf:3a:0e:
99:c2:0d:31:de:71:41:4f:b6:07:4a:c1:7d:a4:5c:4b:e3:44:
07:7f:eb:65:6a:0a:29:74:f0:d2:ab:10:cb:5a:46:b6:a4:0c:
79:96:0c:19:d0:56:9b:e0:44:78:fe:5a:9d:28:b7:42:0d:85:
df:42:fb:58:a3:a0:13:7f:7d:f3:c7:06:a8:67:86:59:89:56:
e6:83:e4:df:00:e3:cd:14:d3:54:4d:c8:23:c5:13:1d:eb:09:
7b:35:05:a7:7c:30:1a:81:b8:a4:90:75:a3:cd:de:e4:27:7e:
7b:ad:f1:57:b2:12:64:c2:be:92:b2:a2:4b:b4:ff:1b:d8:7c:
9e:c3:3e:08:a1:86:78:4b:f3:a1:a2:7e:2f:43:bd:74:99:6f:
f6:e3:07:6b:9c:96:6f:d9:1f:10:c8:a5:6a:c0:5e:3a:4d:93:
95:27:59:05:ee:81:a1:48:f8:2d:36:3c:d3:1f:f8:9d:9c:d1:
88:f0:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:06 2026 by rpki-client