Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
File: AS140494.roa (raw, json)
Hash identifier: c3c6G1hyDHCROivGqBYIC3tpZgon1b+3JUQxFwR1v4E=
Subject key identifier: 61:F7:00:1F:FC:93:0A:78:8D:24:40:CD:41:AF:FB:2B:C8:74:90:7B
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 13341FE3EC4B63FC7592709D784AA885D2F508FB
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
Signing time: Fri 21 Aug 2026 01:30:32 +0000
ROA not before: Fri 21 Aug 2026 01:25:32 +0000
ROA not after: Fri 20 Aug 2027 01:30:32 +0000
asID: 140494
IP address blocks: 240e:390:5540::/44 maxlen: 44
240e:390:5550::/44 maxlen: 44
240e:390:5560::/44 maxlen: 44
240e:390:5570::/44 maxlen: 44
240e:390:5580::/44 maxlen: 44
240e:390:5590::/44 maxlen: 44
240e:390:5d00::/44 maxlen: 44
240e:390:5d10::/44 maxlen: 44
240e:390:5d20::/44 maxlen: 44
240e:390:5d30::/44 maxlen: 44
240e:390:5d40::/44 maxlen: 44
240e:690:5603::/48 maxlen: 48
240e:690:5604::/48 maxlen: 48
240e:690:5b02::/48 maxlen: 48
240e:690:5b03::/48 maxlen: 48
240e:690:5b06::/48 maxlen: 48
240e:690:5b07::/48 maxlen: 48
240e:691:5902::/48 maxlen: 48
240e:691:5c02::/48 maxlen: 48
240e:693:5702::/48 maxlen: 48
240e:693:5703::/48 maxlen: 48
240e:693:5704::/48 maxlen: 48
240e:695:5402::/48 maxlen: 48
240e:695:5502::/48 maxlen: 48
240e:696:5522::/48 maxlen: 48
240e:696:5525::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:34:1f:e3:ec:4b:63:fc:75:92:70:9d:78:4a:a8:85:d2:f5:08:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Aug 21 01:25:32 2026 GMT
Not After : Aug 20 01:30:32 2027 GMT
Subject: CN=61F7001FFC930A788D2440CD41AFFB2BC874907B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:77:51:5e:ab:7e:61:8d:ff:9a:a6:63:14:
39:51:5d:8c:61:4a:f1:9e:41:33:2e:a7:6f:63:e9:
a6:a5:63:fc:00:fd:02:c7:76:9b:0e:a0:b9:3f:23:
0f:31:ad:94:29:49:4f:88:35:d6:8e:f9:0c:85:46:
7b:ae:62:0a:56:06:2d:5f:3b:f9:19:fb:c5:c2:58:
c7:42:10:01:e8:fd:0a:48:92:b2:91:fc:15:69:c7:
bd:47:d4:b7:0b:fe:83:da:a3:c4:f7:cb:41:49:6b:
7e:00:13:1d:41:5d:b0:ec:4f:44:0d:7a:fa:73:d2:
ce:46:40:22:ff:fd:96:71:76:ea:15:87:27:41:6c:
6a:ec:03:af:d6:30:c0:43:ea:2a:5a:fe:9f:18:29:
9a:59:9c:fd:b7:b6:08:d6:15:37:59:82:f5:3f:26:
b6:bc:80:90:c7:13:ca:20:4b:ae:55:ba:03:bc:bc:
f1:2a:9d:a2:a9:e5:a5:9a:65:33:91:82:ca:52:9b:
94:2b:f2:57:b0:cb:fa:2f:38:f3:e0:2f:6b:a8:b2:
ac:4c:df:c1:9b:54:4f:70:8e:10:21:58:17:30:e1:
96:95:7d:eb:35:58:b8:c5:bc:af:93:63:fc:ef:5e:
b6:bb:49:e7:8d:6f:cd:5e:00:11:0d:81:44:9f:91:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:00:1F:FC:93:0A:78:8D:24:40:CD:41:AF:FB:2B:C8:74:90:7B
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:390:5540::-240e:390:559f:ffff:ffff:ffff:ffff:ffff
240e:390:5d00::-240e:390:5d4f:ffff:ffff:ffff:ffff:ffff
240e:690:5603::-240e:690:5604:ffff:ffff:ffff:ffff:ffff
240e:690:5b02::/47
240e:690:5b06::/47
240e:691:5902::/48
240e:691:5c02::/48
240e:693:5702::-240e:693:5704:ffff:ffff:ffff:ffff:ffff
240e:695:5402::/48
240e:695:5502::/48
240e:696:5522::/48
240e:696:5525::/48
Signature Algorithm: sha256WithRSAEncryption
b6:0c:a4:9c:dc:a7:05:b5:1d:92:12:0f:71:66:ae:f3:81:8b:
48:9d:2e:e1:f8:a4:36:e5:08:0c:6d:92:3f:1e:19:ef:c0:f7:
61:c9:57:7b:0f:ea:51:84:d8:7a:56:d5:63:5a:2e:6b:2d:65:
02:0a:73:b7:e9:70:0f:33:a2:05:ae:92:07:e8:71:a0:4f:d9:
8d:3b:56:8d:2e:2f:ef:6a:fc:91:f0:15:7e:58:1f:25:e4:65:
6e:aa:e8:b9:f9:9a:5a:36:b3:d0:81:6e:c1:fd:7d:24:7a:6c:
59:71:eb:17:c7:ab:82:2a:33:0e:0a:cc:0a:f3:d1:1e:a9:c5:
28:55:a7:cb:b1:69:1a:a6:10:8f:b9:17:08:60:9d:44:0a:60:
88:15:31:2e:b4:bb:ba:26:35:6f:1f:d8:9c:d1:53:81:ec:5c:
63:7a:62:90:70:2c:73:25:f5:bb:dd:df:80:0f:70:a3:68:64:
47:92:c1:92:83:72:5a:dc:0f:c9:e2:d5:17:49:38:e3:d4:b5:
a6:9d:1c:84:3f:bb:5b:de:39:66:e1:33:d4:d5:04:5b:3d:87:
fd:b5:78:17:c7:7f:ea:0d:30:36:a6:29:62:70:16:b0:d9:4f:
9e:31:e8:48:7f:50:e5:35:6a:62:59:40:b9:2a:cd:db:e4:5c:
42:84:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:42:33 2026 by rpki-client