Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa
File:                     AS140330.roa (raw, json)
Hash identifier:          AfPUBlBQw468c+tEttNc2OOL4aZRbs6iJScB/aTy7Bk=
Subject key identifier:   6E:7D:94:4C:09:B1:36:B0:73:FA:31:CD:A1:D0:78:90:6F:48:B1:CF
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       353C02F70AE564F3D671BD6E2266354DC0FD0BFE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa
Signing time:             Thu 02 Jul 2026 16:06:16 +0000
ROA not before:           Thu 02 Jul 2026 16:01:16 +0000
ROA not after:            Thu 01 Jul 2027 16:06:16 +0000
asID:                     140330
IP address blocks:        59.60.8.0/22 maxlen: 22
                          59.60.12.0/23 maxlen: 23
                          61.154.226.0/24 maxlen: 24
                          117.25.187.0/24 maxlen: 24
                          117.28.232.0/21 maxlen: 21
                          117.28.235.0/24 maxlen: 24
                          240e:14:1000::/36 maxlen: 36
                          240e:14:9000::/36 maxlen: 36
                          240e:55::/34 maxlen: 34
                          240e:d2::/33 maxlen: 33
                          240e:d6:1000::/36 maxlen: 36
                          240e:108:4344::/48 maxlen: 48
                          240e:108:4b44::/48 maxlen: 48
                          240e:264:2000::/36 maxlen: 36
                          240e:267:2000::/40 maxlen: 40
                          240e:267:2100::/40 maxlen: 40
                          240e:267:2200::/40 maxlen: 40
                          240e:267:2300::/40 maxlen: 40
                          240e:378:1a00::/39 maxlen: 39
                          240e:378:1c00::/38 maxlen: 38
                          240e:378:2000::/38 maxlen: 38
                          240e:378:2400::/39 maxlen: 39
                          240e:378:aa00::/39 maxlen: 39
                          240e:379:1a00::/39 maxlen: 39
                          240e:379:1c00::/38 maxlen: 38
                          240e:379:2000::/38 maxlen: 38
                          240e:379:2400::/39 maxlen: 39
                          240e:379:aa00::/39 maxlen: 39
                          240e:37a:1a00::/39 maxlen: 39
                          240e:37a:1c00::/38 maxlen: 38
                          240e:37a:2000::/38 maxlen: 38
                          240e:37a:2400::/39 maxlen: 39
                          240e:37a:aa00::/39 maxlen: 39
                          240e:37b:1a00::/39 maxlen: 39
                          240e:37b:1c00::/38 maxlen: 38
                          240e:37b:2000::/38 maxlen: 38
                          240e:37b:2400::/39 maxlen: 39
                          240e:37b:aa00::/39 maxlen: 39
                          240e:37c:1a00::/39 maxlen: 39
                          240e:37c:1c00::/38 maxlen: 38
                          240e:37c:2000::/38 maxlen: 38
                          240e:37c:2400::/39 maxlen: 39
                          240e:37c:aa00::/39 maxlen: 39
                          240e:37d:1a00::/39 maxlen: 39
                          240e:37d:1c00::/38 maxlen: 38
                          240e:37d:2000::/38 maxlen: 38
                          240e:37d:2400::/39 maxlen: 39
                          240e:37d:aa00::/39 maxlen: 39
                          240e:37e:1a00::/39 maxlen: 39
                          240e:37e:1c00::/38 maxlen: 38
                          240e:37e:2000::/38 maxlen: 38
                          240e:37e:2400::/39 maxlen: 39
                          240e:37e:aa00::/39 maxlen: 39
                          240e:37f:1a00::/39 maxlen: 39
                          240e:37f:1c00::/38 maxlen: 38
                          240e:37f:2000::/38 maxlen: 38
                          240e:37f:2400::/39 maxlen: 39
                          240e:37f:aa00::/39 maxlen: 39
                          240e:678:1a00::/39 maxlen: 39
                          240e:678:1c00::/38 maxlen: 38
                          240e:678:2000::/38 maxlen: 38
                          240e:678:2400::/39 maxlen: 39
                          240e:679:80::/41 maxlen: 41
                          240e:679:80::/42 maxlen: 42
                          240e:679:c0::/42 maxlen: 42
                          240e:679:1000::/37 maxlen: 37
                          240e:679:8800::/38 maxlen: 38
                          240e:679:c400::/39 maxlen: 39
                          240e:679:e400::/39 maxlen: 39
                          240e:67a:1000::/37 maxlen: 37
                          240e:67a:8800::/38 maxlen: 38
                          240e:67a:c400::/39 maxlen: 39
                          240e:67a:e400::/39 maxlen: 39
                          240e:67b:1000::/37 maxlen: 37
                          240e:67b:8800::/38 maxlen: 38
                          240e:67b:c400::/39 maxlen: 39
                          240e:67b:e400::/39 maxlen: 39
                          240e:67c:1000::/37 maxlen: 37
                          240e:67c:8800::/38 maxlen: 38
                          240e:67c:c400::/39 maxlen: 39
                          240e:67c:e400::/39 maxlen: 39
                          240e:67d:1000::/37 maxlen: 37
                          240e:67d:8800::/38 maxlen: 38
                          240e:67d:c400::/39 maxlen: 39
                          240e:67d:e400::/39 maxlen: 39
                          240e:67e:1000::/37 maxlen: 37
                          240e:67e:8800::/38 maxlen: 38
                          240e:67e:c400::/39 maxlen: 39
                          240e:67e:e400::/39 maxlen: 39
                          240e:67f:1000::/37 maxlen: 37
                          240e:67f:1002::/48 maxlen: 48
                          240e:67f:8800::/38 maxlen: 38
                          240e:67f:c400::/39 maxlen: 39
                          240e:67f:e400::/39 maxlen: 39
                          240e:983:1806::/48 maxlen: 48
                          240e:a64:1a00::/39 maxlen: 39
                          240e:a64:1c00::/38 maxlen: 38
                          240e:a64:2000::/38 maxlen: 38
                          240e:a64:2400::/39 maxlen: 39
                          240e:a65:1a00::/39 maxlen: 39
                          240e:a65:1c00::/38 maxlen: 38
                          240e:a65:2000::/38 maxlen: 38
                          240e:a65:2400::/39 maxlen: 39
                          240e:a66:1a00::/39 maxlen: 39
                          240e:a66:1c00::/38 maxlen: 38
                          240e:a66:2000::/38 maxlen: 38
                          240e:a66:2400::/39 maxlen: 39
                          240e:a67:1a00::/39 maxlen: 39
                          240e:a67:1c00::/38 maxlen: 38
                          240e:a67:2000::/38 maxlen: 38
                          240e:a67:2400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 04:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3c:02:f7:0a:e5:64:f3:d6:71:bd:6e:22:66:35:4d:c0:fd:0b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: Jul  2 16:01:16 2026 GMT
            Not After : Jul  1 16:06:16 2027 GMT
        Subject: CN=6E7D944C09B136B073FA31CDA1D078906F48B1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:15:fd:f2:da:89:13:24:a8:f5:84:8e:4d:
                    89:ae:2a:96:3d:a1:02:80:35:5b:fa:b2:2b:4c:87:
                    b5:d3:8b:41:62:da:cf:a0:4e:cc:e7:1f:cd:72:26:
                    ae:fe:7e:d5:eb:6d:af:7a:66:a9:8f:5b:5a:7e:71:
                    04:43:6d:e6:eb:91:45:5e:95:a0:80:0a:f1:65:88:
                    4d:66:0f:2c:1f:6a:0d:17:ad:97:ff:b5:1b:05:49:
                    3e:b6:dc:33:b3:56:82:11:02:c9:f3:65:ba:d5:85:
                    be:42:7b:8e:1c:28:20:c5:62:21:9c:e9:29:62:49:
                    53:52:fa:b4:e6:42:8d:b7:28:75:ec:c0:3c:d2:6a:
                    78:d9:61:ae:3d:50:1f:f9:5d:51:01:97:93:c6:19:
                    f5:97:af:c1:25:e3:c5:91:cc:6c:b9:84:bf:cc:fb:
                    01:8c:a4:d5:16:c7:d4:63:75:52:02:50:f4:b6:5a:
                    8a:9d:ef:1c:f5:04:7e:aa:9f:6c:a0:c8:a2:e4:ed:
                    26:61:f5:df:72:66:58:cc:3e:21:bf:4a:6a:29:7f:
                    34:3b:24:fb:16:b1:e3:86:ed:79:19:fb:f2:5a:f8:
                    2d:0c:0a:4a:8e:b3:cd:05:da:c7:16:75:92:e1:27:
                    8d:da:04:33:c2:98:62:fd:87:9b:01:a8:53:a5:48:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7D:94:4C:09:B1:36:B0:73:FA:31:CD:A1:D0:78:90:6F:48:B1:CF
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.60.8.0-59.60.13.255
                  61.154.226.0/24
                  117.25.187.0/24
                  117.28.232.0/21
                IPv6:
                  240e:14:1000::/36
                  240e:14:9000::/36
                  240e:55::/34
                  240e:d2::/33
                  240e:d6:1000::/36
                  240e:108:4344::/48
                  240e:108:4b44::/48
                  240e:264:2000::/36
                  240e:267:2000::/38
                  240e:378:1a00::-240e:378:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:378:aa00::/39
                  240e:379:1a00::-240e:379:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:379:aa00::/39
                  240e:37a:1a00::-240e:37a:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:37a:aa00::/39
                  240e:37b:1a00::-240e:37b:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:37b:aa00::/39
                  240e:37c:1a00::-240e:37c:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:37c:aa00::/39
                  240e:37d:1a00::-240e:37d:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:37d:aa00::/39
                  240e:37e:1a00::-240e:37e:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:37e:aa00::/39
                  240e:37f:1a00::-240e:37f:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:37f:aa00::/39
                  240e:678:1a00::-240e:678:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:679:80::/41
                  240e:679:1000::/37
                  240e:679:8800::/38
                  240e:679:c400::/39
                  240e:679:e400::/39
                  240e:67a:1000::/37
                  240e:67a:8800::/38
                  240e:67a:c400::/39
                  240e:67a:e400::/39
                  240e:67b:1000::/37
                  240e:67b:8800::/38
                  240e:67b:c400::/39
                  240e:67b:e400::/39
                  240e:67c:1000::/37
                  240e:67c:8800::/38
                  240e:67c:c400::/39
                  240e:67c:e400::/39
                  240e:67d:1000::/37
                  240e:67d:8800::/38
                  240e:67d:c400::/39
                  240e:67d:e400::/39
                  240e:67e:1000::/37
                  240e:67e:8800::/38
                  240e:67e:c400::/39
                  240e:67e:e400::/39
                  240e:67f:1000::/37
                  240e:67f:8800::/38
                  240e:67f:c400::/39
                  240e:67f:e400::/39
                  240e:983:1806::/48
                  240e:a64:1a00::-240e:a64:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:a65:1a00::-240e:a65:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:a66:1a00::-240e:a66:25ff:ffff:ffff:ffff:ffff:ffff
                  240e:a67:1a00::-240e:a67:25ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:81:53:14:57:d1:d1:a3:0d:ca:05:e0:ed:2b:cb:9f:f9:
         5d:1f:1f:c3:78:7e:36:08:a8:35:c5:e0:4a:bf:f2:3a:c8:e9:
         e1:89:2a:32:17:12:f4:99:bd:be:0e:7b:5b:f7:9d:38:bf:48:
         87:64:1b:bf:46:b4:3f:28:a4:e8:ba:39:ab:1d:dc:87:64:76:
         05:ff:23:88:8c:ae:14:cd:ac:80:fe:6d:6e:a6:f7:23:b6:4d:
         80:d1:4a:be:e7:00:4e:6d:91:7e:4f:d2:da:90:86:bf:ec:0e:
         13:8c:70:a9:82:ac:26:ef:a6:95:42:ba:dd:08:6e:4d:7e:90:
         4a:e5:77:28:21:16:ad:98:31:d5:4c:10:f8:2f:97:1a:83:73:
         2a:b1:61:c2:28:9d:ea:ad:15:5d:eb:2e:23:21:b7:f6:d1:85:
         e3:5c:d1:be:92:97:ba:33:f3:80:3a:e4:64:9f:0a:2f:c9:ab:
         25:bf:5a:81:14:d5:d1:3c:5e:76:c2:a6:c2:f8:21:ad:90:54:
         af:ca:b3:b7:14:e9:eb:1a:d1:89:24:a7:c5:71:19:36:5b:ed:
         80:43:0d:cc:03:bc:04:a5:6b:c0:ab:2d:f3:28:6b:18:a7:4a:
         81:01:bb:72:c1:94:e0:66:fb:a5:66:86:5b:c5:80:42:50:d3:
         67:63:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 16:01:00 2026 by rpki-client