Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
File: AS140494.roa (raw, json)
Hash identifier: s77FC1DWAp0eiMv/OKipq3yLo/zUYcWcqf/ddQiPWcw=
Subject key identifier: 92:61:62:78:9A:44:E8:88:F1:8A:45:59:A8:FF:6C:19:7B:F3:92:57
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 6A5122CEC11D74249496E2C0834822ED5AA929D8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
Signing time: Mon 29 Jun 2026 02:37:28 +0000
ROA not before: Mon 29 Jun 2026 02:32:28 +0000
ROA not after: Mon 28 Jun 2027 02:37:28 +0000
asID: 140494
IP address blocks: 240e:390:5540::/44 maxlen: 44
240e:390:5550::/44 maxlen: 44
240e:390:5560::/44 maxlen: 44
240e:390:5570::/44 maxlen: 44
240e:390:5580::/44 maxlen: 44
240e:390:5590::/44 maxlen: 44
240e:390:5d00::/44 maxlen: 44
240e:390:5d10::/44 maxlen: 44
240e:390:5d20::/44 maxlen: 44
240e:390:5d30::/44 maxlen: 44
240e:390:5d40::/44 maxlen: 44
240e:690:5603::/48 maxlen: 48
240e:690:5b02::/48 maxlen: 48
240e:690:5b03::/48 maxlen: 48
240e:690:5b06::/48 maxlen: 48
240e:691:5902::/48 maxlen: 48
240e:691:5c02::/48 maxlen: 48
240e:693:5703::/48 maxlen: 48
240e:693:5704::/48 maxlen: 48
240e:695:5402::/48 maxlen: 48
240e:696:5522::/48 maxlen: 48
240e:696:5525::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:51:22:ce:c1:1d:74:24:94:96:e2:c0:83:48:22:ed:5a:a9:29:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 29 02:32:28 2026 GMT
Not After : Jun 28 02:37:28 2027 GMT
Subject: CN=926162789A44E888F18A4559A8FF6C197BF39257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:48:60:10:bb:fd:29:ef:f8:4d:62:d3:b6:
50:54:37:ef:49:2c:e4:59:94:dd:53:23:03:3d:9e:
9c:07:45:80:06:ee:5a:e7:d0:f6:62:d8:93:25:e8:
c7:4a:0e:35:8b:00:91:6f:dc:55:e2:54:7c:5d:70:
bd:e8:ef:a7:8b:f0:44:14:c7:68:ce:70:a8:78:0b:
ab:73:3f:b5:7d:ab:1e:ae:89:78:cb:2e:52:bc:01:
2b:ee:83:32:43:d5:88:78:3a:e5:0d:e1:3c:46:54:
73:81:c8:84:29:dd:87:37:cc:e2:cb:c7:6d:f9:08:
30:08:c0:0a:55:82:de:ff:92:35:68:1b:4c:b3:0e:
32:a1:3d:03:8c:76:09:49:b8:6a:f9:39:06:ca:09:
cf:15:49:f1:14:30:72:6a:38:7d:14:d6:de:f6:25:
a6:07:dc:f4:b0:86:be:3a:e8:4e:e7:34:74:4a:4d:
61:2a:cc:d1:46:78:54:91:3f:57:bf:52:e8:19:2b:
53:ae:17:89:6a:4a:f2:a9:4f:e1:35:1f:6e:b2:22:
29:da:06:e6:3d:f5:cb:3e:bf:39:2c:fc:a8:b4:cb:
2c:73:15:8a:d0:49:3f:58:3b:7f:0d:5f:a7:b2:34:
b7:0d:54:06:8b:49:ae:21:59:c5:94:00:b0:1c:d6:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:62:78:9A:44:E8:88:F1:8A:45:59:A8:FF:6C:19:7B:F3:92:57
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:390:5540::-240e:390:559f:ffff:ffff:ffff:ffff:ffff
240e:390:5d00::-240e:390:5d4f:ffff:ffff:ffff:ffff:ffff
240e:690:5603::/48
240e:690:5b02::/47
240e:690:5b06::/48
240e:691:5902::/48
240e:691:5c02::/48
240e:693:5703::-240e:693:5704:ffff:ffff:ffff:ffff:ffff
240e:695:5402::/48
240e:696:5522::/48
240e:696:5525::/48
Signature Algorithm: sha256WithRSAEncryption
76:ed:51:79:da:9b:91:98:e4:47:6e:0a:07:b7:4d:58:48:69:
11:f0:74:fd:d0:fe:42:12:00:f6:2d:c7:ef:01:b4:f9:a1:e8:
a6:20:ac:5a:d3:a1:c0:a5:aa:5f:2c:d3:5e:14:a2:ce:85:61:
db:09:fa:3b:ea:44:65:49:6d:a6:26:ad:e4:a1:64:71:79:06:
2d:6e:f4:a6:08:05:51:5b:52:62:45:47:0a:bf:94:26:41:5e:
83:50:97:f2:dd:75:e8:77:99:94:50:7b:29:ee:4a:7f:ad:82:
bb:42:b9:9f:bd:32:c8:bc:1d:e8:fe:f3:57:05:bd:09:9f:07:
eb:9c:ff:e2:de:42:38:9f:25:53:29:fb:fb:15:c8:76:3d:67:
d4:d4:ea:f5:31:8e:a9:58:4c:e4:e5:cd:02:b7:6d:a9:70:3a:
9e:14:69:78:ea:06:b3:11:c2:72:d8:06:07:52:1a:93:cc:ad:
57:41:8c:9c:35:a6:cb:e6:15:af:bc:c6:f8:a2:f6:67:15:46:
db:9b:08:22:55:3f:7c:6d:65:8e:81:f1:a0:0c:f7:e8:dc:82:
27:92:fe:60:bf:11:e2:cd:09:e5:7c:b5:92:db:9d:dc:80:47:
7a:9c:da:17:d3:97:46:72:6b:69:f0:7f:f1:7a:6e:8a:52:2b:
17:ed:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:06 2026 by rpki-client