Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140329.roa
File: AS140329.roa (raw, json)
Hash identifier: 6vXOW1ZmT301+RUyurdxJvC/RX4Xh4EAnm/iN5sUgkU=
Subject key identifier: 85:E6:03:28:57:E3:EA:1C:F6:E8:39:8D:4C:34:28:06:B9:32:50:F5
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2169ADA79125C9E4BCA158B0A336662882DA2BF0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140329.roa
Signing time: Thu 02 Jul 2026 16:05:41 +0000
ROA not before: Thu 02 Jul 2026 16:00:41 +0000
ROA not after: Thu 01 Jul 2027 16:05:41 +0000
asID: 140329
IP address blocks: 61.154.8.0/24 maxlen: 24
202.111.241.0/24 maxlen: 24
202.111.245.0/24 maxlen: 24
202.111.246.0/24 maxlen: 24
240e:14::/36 maxlen: 36
240e:14:8000::/36 maxlen: 36
240e:54:8000::/34 maxlen: 34
240e:54:c000::/36 maxlen: 36
240e:54:c000::/48 maxlen: 48
240e:54:c001::/48 maxlen: 48
240e:54:c002::/48 maxlen: 48
240e:54:c003::/48 maxlen: 48
240e:54:d000::/36 maxlen: 36
240e:54:e000::/35 maxlen: 35
240e:d0::/33 maxlen: 33
240e:d6::/36 maxlen: 36
240e:108:4341::/48 maxlen: 48
240e:108:4b41::/48 maxlen: 48
240e:264:1000::/36 maxlen: 36
240e:378::/36 maxlen: 36
240e:378:1000::/37 maxlen: 37
240e:378:1800::/39 maxlen: 39
240e:379::/36 maxlen: 36
240e:379:1000::/37 maxlen: 37
240e:379:1800::/39 maxlen: 39
240e:37a::/36 maxlen: 36
240e:37a:1000::/37 maxlen: 37
240e:37a:1800::/39 maxlen: 39
240e:37b::/36 maxlen: 36
240e:37b:1000::/37 maxlen: 37
240e:37b:1800::/39 maxlen: 39
240e:37c::/36 maxlen: 36
240e:37c:1000::/37 maxlen: 37
240e:37c:1800::/39 maxlen: 39
240e:37d::/36 maxlen: 36
240e:37d:1000::/37 maxlen: 37
240e:37d:1800::/39 maxlen: 39
240e:37e::/36 maxlen: 36
240e:37e:1000::/37 maxlen: 37
240e:37e:1800::/39 maxlen: 39
240e:37f::/36 maxlen: 36
240e:37f:1000::/37 maxlen: 37
240e:37f:1800::/39 maxlen: 39
240e:678::/37 maxlen: 37
240e:678:800::/37 maxlen: 37
240e:678:c00::/48 maxlen: 48
240e:678:8400::/38 maxlen: 38
240e:678:c200::/39 maxlen: 39
240e:678:e200::/39 maxlen: 39
240e:679::/41 maxlen: 41
240e:679:800::/37 maxlen: 37
240e:679:8400::/38 maxlen: 38
240e:679:c200::/39 maxlen: 39
240e:679:e200::/39 maxlen: 39
240e:67a:800::/37 maxlen: 37
240e:67a:8400::/38 maxlen: 38
240e:67a:c200::/39 maxlen: 39
240e:67a:e200::/39 maxlen: 39
240e:67b:800::/37 maxlen: 37
240e:67b:8400::/38 maxlen: 38
240e:67b:c200::/39 maxlen: 39
240e:67b:e200::/39 maxlen: 39
240e:67c:800::/37 maxlen: 37
240e:67c:8400::/38 maxlen: 38
240e:67c:c200::/39 maxlen: 39
240e:67c:e200::/39 maxlen: 39
240e:67d:800::/37 maxlen: 37
240e:67d:8400::/38 maxlen: 38
240e:67d:c200::/39 maxlen: 39
240e:67d:e200::/39 maxlen: 39
240e:67e:800::/37 maxlen: 37
240e:67e:8400::/38 maxlen: 38
240e:67e:c200::/39 maxlen: 39
240e:67e:e200::/39 maxlen: 39
240e:67f:800::/37 maxlen: 37
240e:67f:8400::/38 maxlen: 38
240e:67f:c200::/39 maxlen: 39
240e:67f:e200::/39 maxlen: 39
240e:983:1803::/48 maxlen: 48
240e:a64::/36 maxlen: 36
240e:a64:1000::/37 maxlen: 37
240e:a64:1800::/39 maxlen: 39
240e:a65::/36 maxlen: 36
240e:a65:1000::/37 maxlen: 37
240e:a65:1800::/39 maxlen: 39
240e:a66::/36 maxlen: 36
240e:a66:1000::/37 maxlen: 37
240e:a66:1800::/39 maxlen: 39
240e:a67::/36 maxlen: 36
240e:a67:1000::/37 maxlen: 37
240e:a67:1800::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:69:ad:a7:91:25:c9:e4:bc:a1:58:b0:a3:36:66:28:82:da:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 2 16:00:41 2026 GMT
Not After : Jul 1 16:05:41 2027 GMT
Subject: CN=85E6032857E3EA1CF6E8398D4C342806B93250F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:2e:11:db:69:f0:2f:83:fa:3f:c3:a3:be:
27:e6:e0:a9:43:b6:a9:61:46:bb:9d:70:ac:e1:70:
aa:4c:d0:6c:c6:f3:62:e0:bb:19:7e:19:47:b2:5a:
20:2f:18:91:d7:f9:09:cf:4e:10:45:d5:01:02:6f:
0d:f8:8d:f0:ba:fb:bb:bc:92:26:94:ad:34:94:24:
ce:4a:c5:27:d4:ca:6d:40:fd:34:1e:6f:56:37:14:
94:7e:c4:db:f0:08:42:f6:4d:91:7b:64:43:3d:fa:
f0:74:ba:21:a6:f6:fa:33:eb:9a:ce:5b:ad:da:16:
d3:e6:78:78:cb:f8:f4:46:91:c0:30:b6:9c:e4:c0:
f8:60:0c:28:75:37:84:f8:d5:0d:a1:6a:b4:fc:4b:
95:57:17:a5:90:61:de:ea:e2:98:96:77:56:6a:a5:
ff:2b:54:f9:d1:b6:97:a9:b3:61:50:aa:ab:97:9b:
76:69:e9:43:ec:82:b0:3e:d9:62:98:2b:b6:d3:0a:
d2:b7:62:7f:1f:9d:6d:94:2c:fe:63:c4:02:02:9a:
f0:98:1e:64:35:a5:11:21:15:c5:c8:9b:82:15:9a:
32:02:8d:27:24:47:49:c9:06:a0:4f:1d:47:cd:41:
f7:54:16:dc:8a:cd:6b:ef:df:b8:a9:ed:19:2e:22:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:03:28:57:E3:EA:1C:F6:E8:39:8D:4C:34:28:06:B9:32:50:F5
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.154.8.0/24
202.111.241.0/24
202.111.245.0-202.111.246.255
IPv6:
240e:14::/36
240e:14:8000::/36
240e:54:8000::/33
240e:d0::/33
240e:d6::/36
240e:108:4341::/48
240e:108:4b41::/48
240e:264:1000::/36
240e:378::-240e:378:19ff:ffff:ffff:ffff:ffff:ffff
240e:379::-240e:379:19ff:ffff:ffff:ffff:ffff:ffff
240e:37a::-240e:37a:19ff:ffff:ffff:ffff:ffff:ffff
240e:37b::-240e:37b:19ff:ffff:ffff:ffff:ffff:ffff
240e:37c::-240e:37c:19ff:ffff:ffff:ffff:ffff:ffff
240e:37d::-240e:37d:19ff:ffff:ffff:ffff:ffff:ffff
240e:37e::-240e:37e:19ff:ffff:ffff:ffff:ffff:ffff
240e:37f::-240e:37f:19ff:ffff:ffff:ffff:ffff:ffff
240e:678::/36
240e:678:8400::/38
240e:678:c200::/39
240e:678:e200::/39
240e:679::/41
240e:679:800::/37
240e:679:8400::/38
240e:679:c200::/39
240e:679:e200::/39
240e:67a:800::/37
240e:67a:8400::/38
240e:67a:c200::/39
240e:67a:e200::/39
240e:67b:800::/37
240e:67b:8400::/38
240e:67b:c200::/39
240e:67b:e200::/39
240e:67c:800::/37
240e:67c:8400::/38
240e:67c:c200::/39
240e:67c:e200::/39
240e:67d:800::/37
240e:67d:8400::/38
240e:67d:c200::/39
240e:67d:e200::/39
240e:67e:800::/37
240e:67e:8400::/38
240e:67e:c200::/39
240e:67e:e200::/39
240e:67f:800::/37
240e:67f:8400::/38
240e:67f:c200::/39
240e:67f:e200::/39
240e:983:1803::/48
240e:a64::-240e:a64:19ff:ffff:ffff:ffff:ffff:ffff
240e:a65::-240e:a65:19ff:ffff:ffff:ffff:ffff:ffff
240e:a66::-240e:a66:19ff:ffff:ffff:ffff:ffff:ffff
240e:a67::-240e:a67:19ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:e6:c0:b2:52:3e:bd:b8:b5:a3:9d:e5:36:e8:bd:9e:3b:56:
2e:87:47:9b:64:ce:9e:63:09:86:73:59:a9:a2:54:db:16:38:
e3:be:fe:55:57:a9:58:56:59:36:12:b7:59:b6:21:9c:ef:5e:
b3:69:1d:e7:8b:25:5f:33:3a:b6:3c:0e:68:46:7e:67:23:78:
81:73:bd:b5:5d:e7:37:bb:7f:d8:1f:13:84:c8:e4:fe:65:24:
8f:b8:19:cd:2d:36:16:b1:33:32:3f:b8:65:85:b2:1d:91:86:
e0:29:7f:a0:1d:22:23:13:4f:b1:42:34:f6:0f:48:8c:91:e5:
b3:4d:bb:b9:22:8a:e0:42:a5:7a:48:6b:68:9b:e4:0d:f3:dc:
67:b7:fa:fa:0b:14:cc:8c:8f:e9:b1:97:06:48:a8:50:1a:c6:
aa:c2:cc:4b:18:b5:76:5c:18:6f:55:d0:00:81:72:b6:a9:cf:
24:ee:5a:20:06:6f:05:43:f3:b5:af:cc:4c:27:4f:7a:3d:fe:
a7:3d:c6:b2:6c:3a:e2:1a:c6:3b:f7:9b:79:0d:c4:81:28:cd:
ac:ee:71:b1:4e:b6:d2:8c:8b:c5:9f:d8:a5:d2:12:a3:98:53:
d9:bf:91:b1:e2:0e:f0:1c:ec:28:c7:65:fa:55:6a:e6:5d:e1:
c0:25:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:57:47 2026 by rpki-client