Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140638.roa
File: AS140638.roa (raw, json)
Hash identifier: EWqW1JE5X+8B1ADVNlQCro7SwhA5FHw1xF4jP20aCx4=
Subject key identifier: 3E:50:39:33:72:57:7F:89:9D:3E:36:9E:F6:84:E2:70:E3:BE:BC:74
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5FEEC4C21BC77405CED695D6398DEE5BF7EDC990
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140638.roa
Signing time: Sat 15 Aug 2026 16:10:29 +0000
ROA not before: Sat 15 Aug 2026 16:05:29 +0000
ROA not after: Sat 14 Aug 2027 16:10:29 +0000
asID: 140638
IP address blocks: 36.113.178.0/24 maxlen: 24
36.113.179.0/24 maxlen: 24
36.113.180.0/24 maxlen: 24
36.113.181.0/24 maxlen: 24
36.113.182.0/24 maxlen: 24
36.113.183.0/24 maxlen: 24
36.113.210.0/24 maxlen: 24
36.113.211.0/24 maxlen: 24
36.113.212.0/24 maxlen: 24
36.113.215.0/24 maxlen: 24
36.113.216.0/24 maxlen: 24
36.113.217.0/24 maxlen: 24
36.113.218.0/24 maxlen: 24
36.113.219.0/24 maxlen: 24
117.61.0.0/20 maxlen: 20
117.61.0.0/24 maxlen: 24
117.61.6.0/24 maxlen: 24
117.61.7.0/24 maxlen: 24
117.61.8.0/24 maxlen: 24
117.61.9.0/24 maxlen: 24
117.61.13.0/24 maxlen: 24
117.61.14.0/24 maxlen: 24
117.61.15.0/24 maxlen: 24
117.61.56.0/21 maxlen: 21
117.61.56.0/22 maxlen: 22
117.61.60.0/24 maxlen: 24
117.61.61.0/24 maxlen: 24
117.61.62.0/23 maxlen: 23
117.61.64.0/23 maxlen: 23
117.61.66.0/24 maxlen: 24
117.61.67.0/24 maxlen: 24
117.61.72.0/24 maxlen: 24
117.61.73.0/24 maxlen: 24
117.61.74.0/24 maxlen: 24
117.61.75.0/24 maxlen: 24
117.61.76.0/24 maxlen: 24
117.61.77.0/24 maxlen: 24
117.61.78.0/24 maxlen: 24
117.61.79.0/24 maxlen: 24
117.61.134.0/24 maxlen: 24
117.61.143.0/24 maxlen: 24
117.61.146.0/24 maxlen: 24
117.61.147.0/24 maxlen: 24
117.61.148.0/24 maxlen: 24
117.61.149.0/24 maxlen: 24
117.61.150.0/24 maxlen: 24
117.61.151.0/24 maxlen: 24
240e:874::/42 maxlen: 42
240e:874:40::/42 maxlen: 42
240e:874:80::/42 maxlen: 42
240e:874:c0::/42 maxlen: 42
240e:874:100::/42 maxlen: 42
240e:874:140::/42 maxlen: 42
240e:874:180::/42 maxlen: 42
240e:874:1c0::/43 maxlen: 43
240e:874:200::/42 maxlen: 42
240e:874:240::/43 maxlen: 43
240e:874:260::/43 maxlen: 43
240e:874:280::/42 maxlen: 42
240e:874:300::/42 maxlen: 42
240e:874:340::/43 maxlen: 43
240e:874:360::/43 maxlen: 43
240e:874:380::/42 maxlen: 42
240e:874:500::/42 maxlen: 42
240e:874:540::/43 maxlen: 43
240e:874:600::/42 maxlen: 42
240e:874:640::/43 maxlen: 43
240e:874:700::/43 maxlen: 43
240e:874:720::/43 maxlen: 43
240e:874:740::/43 maxlen: 43
240e:874:780::/43 maxlen: 43
240e:874:7a0::/43 maxlen: 43
240e:874:800::/42 maxlen: 42
240e:874:840::/43 maxlen: 43
240e:874:880::/42 maxlen: 42
240e:874:8c0::/43 maxlen: 43
240e:874:900::/41 maxlen: 41
240e:874:980::/41 maxlen: 41
240e:874:a00::/42 maxlen: 42
240e:874:a40::/42 maxlen: 42
240e:874:a80::/42 maxlen: 42
240e:874:ac0::/42 maxlen: 42
240e:874:b00::/41 maxlen: 41
240e:874:b80::/41 maxlen: 41
240e:874:c00::/43 maxlen: 43
240e:874:c20::/43 maxlen: 43
240e:874:c40::/44 maxlen: 44
240e:874:c50::/44 maxlen: 44
240e:874:c60::/43 maxlen: 43
240e:874:c80::/43 maxlen: 43
240e:874:ca0::/44 maxlen: 44
240e:874:cb0::/44 maxlen: 44
240e:874:e00::/42 maxlen: 42
240e:874:e40::/42 maxlen: 42
240e:874:e80::/42 maxlen: 42
240e:874:ec0::/44 maxlen: 44
240e:874:ed0::/44 maxlen: 44
240e:874:ee0::/44 maxlen: 44
240e:874:ef0::/44 maxlen: 44
240e:874:f00::/41 maxlen: 41
240e:874:f80::/41 maxlen: 41
240e:874:1000::/41 maxlen: 41
240e:874:1100::/42 maxlen: 42
240e:874:1140::/42 maxlen: 42
240e:874:1180::/42 maxlen: 42
240e:874:11c0::/42 maxlen: 42
240e:875:8000::/44 maxlen: 44
240e:875:8010::/44 maxlen: 44
240e:875:8020::/44 maxlen: 44
240e:875:8030::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ee:c4:c2:1b:c7:74:05:ce:d6:95:d6:39:8d:ee:5b:f7:ed:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Aug 15 16:05:29 2026 GMT
Not After : Aug 14 16:10:29 2027 GMT
Subject: CN=3E50393372577F899D3E369EF684E270E3BEBC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:53:63:ff:ed:9e:2a:9c:b6:99:f4:6a:2f:
7a:9f:6e:5b:22:df:22:78:e5:a2:d1:3e:58:75:d7:
1f:3a:e9:e3:45:77:25:44:1a:68:12:7b:e3:47:3b:
7f:05:58:df:f7:ae:89:a0:a0:fe:41:3f:47:52:db:
01:b0:d9:29:5c:81:bd:52:fa:b3:32:f0:91:84:d3:
21:d9:6c:f4:62:d7:49:4a:f2:84:b5:60:31:31:e0:
10:d1:fc:ce:a7:18:f2:1d:c1:1f:eb:58:d4:b7:f2:
88:ec:bd:44:cb:f4:45:0e:c4:ca:a6:38:c2:9e:d9:
4e:8a:6d:3a:44:88:7e:aa:fe:35:90:3c:34:1d:a7:
d2:b6:51:ec:f5:fc:03:e6:e5:ed:71:2d:3c:3f:93:
b9:3e:18:90:80:d8:98:1a:ce:77:11:b9:26:30:0b:
bc:85:5d:f3:57:eb:c1:b3:77:c0:3d:f1:9d:39:14:
cf:70:a0:7d:fc:b5:57:97:e2:3e:72:a5:f8:83:43:
2d:dd:ce:a7:a2:b7:09:75:e0:8f:09:c9:8e:4f:71:
06:d7:0a:1b:51:52:14:64:4e:a5:3f:7c:d3:5f:52:
8a:02:fa:8e:86:17:44:ee:64:36:52:67:6a:76:03:
13:93:43:e3:b7:61:76:21:91:c8:73:a3:3f:40:a2:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:39:33:72:57:7F:89:9D:3E:36:9E:F6:84:E2:70:E3:BE:BC:74
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.113.178.0-36.113.183.255
36.113.210.0-36.113.212.255
36.113.215.0-36.113.219.255
117.61.0.0/20
117.61.56.0-117.61.67.255
117.61.72.0/21
117.61.134.0/24
117.61.143.0/24
117.61.146.0-117.61.151.255
IPv6:
240e:874::-240e:874:1df:ffff:ffff:ffff:ffff:ffff
240e:874:200::-240e:874:2bf:ffff:ffff:ffff:ffff:ffff
240e:874:300::-240e:874:3bf:ffff:ffff:ffff:ffff:ffff
240e:874:500::-240e:874:55f:ffff:ffff:ffff:ffff:ffff
240e:874:600::-240e:874:65f:ffff:ffff:ffff:ffff:ffff
240e:874:700::-240e:874:75f:ffff:ffff:ffff:ffff:ffff
240e:874:780::/42
240e:874:800::-240e:874:85f:ffff:ffff:ffff:ffff:ffff
240e:874:880::-240e:874:8df:ffff:ffff:ffff:ffff:ffff
240e:874:900::-240e:874:cbf:ffff:ffff:ffff:ffff:ffff
240e:874:e00::-240e:874:107f:ffff:ffff:ffff:ffff:ffff
240e:874:1100::/40
240e:875:8000::/42
Signature Algorithm: sha256WithRSAEncryption
95:af:17:42:07:e3:0d:66:d1:eb:bc:89:b1:28:36:02:b9:fa:
a9:47:74:b2:67:45:c6:70:85:2e:0b:6f:8b:90:98:14:4f:a7:
b0:93:62:07:f7:90:0a:d4:c8:f4:8d:7b:b9:76:db:2b:22:88:
52:dc:c3:44:a9:5a:ce:9b:34:1b:b8:f2:91:a7:1e:14:cd:b7:
9f:3d:25:9b:73:c9:98:b0:3d:5e:7c:f7:fd:56:08:a2:03:99:
45:b1:02:d6:77:7c:14:09:39:ee:53:72:52:eb:7f:c6:19:43:
88:57:5d:47:ac:08:57:d9:c1:23:6e:e3:62:0a:b4:eb:58:ed:
a6:4b:56:da:4c:fe:9d:21:b5:b5:3b:73:48:52:67:f6:3e:ca:
ea:26:19:ff:8d:90:d7:cd:d1:6f:dd:5f:47:33:2c:43:6f:b2:
46:28:66:b6:1b:52:23:53:ee:25:f8:f8:d8:b6:4d:7c:97:1a:
93:54:f9:40:18:6d:60:a1:55:61:cb:b2:79:6c:89:b7:74:31:
53:e9:6c:a4:ea:44:23:d1:94:92:1f:f8:33:d4:ba:30:81:53:
30:0a:57:10:79:ba:a8:a4:9a:59:30:3e:e5:47:cc:83:97:95:
90:68:e7:86:5c:9b:8a:9a:10:58:9c:38:80:63:9b:93:8c:ad:
f1:fd:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:42:20 2026 by rpki-client