Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140638.roa
File: AS140638.roa (raw, json)
Hash identifier: T3jzxicsXwZnlfJmHuBRd0I0b8w/T8btaU63YmWRdqI=
Subject key identifier: D6:1B:83:D1:8B:DB:DF:E1:A4:CD:0A:06:4C:E7:ED:DA:01:71:85:1D
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5EAA58110CE435E7CEBD26BEAC0DC30755F0272F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140638.roa
Signing time: Thu 25 Jun 2026 17:14:15 +0000
ROA not before: Thu 25 Jun 2026 17:09:15 +0000
ROA not after: Thu 24 Jun 2027 17:14:15 +0000
asID: 140638
IP address blocks: 36.113.178.0/24 maxlen: 24
36.113.179.0/24 maxlen: 24
36.113.180.0/24 maxlen: 24
36.113.181.0/24 maxlen: 24
36.113.182.0/24 maxlen: 24
36.113.183.0/24 maxlen: 24
36.113.210.0/24 maxlen: 24
36.113.211.0/24 maxlen: 24
36.113.212.0/24 maxlen: 24
36.113.215.0/24 maxlen: 24
36.113.216.0/24 maxlen: 24
36.113.217.0/24 maxlen: 24
36.113.218.0/24 maxlen: 24
36.113.219.0/24 maxlen: 24
117.61.0.0/20 maxlen: 20
117.61.0.0/24 maxlen: 24
117.61.6.0/24 maxlen: 24
117.61.7.0/24 maxlen: 24
117.61.8.0/24 maxlen: 24
117.61.9.0/24 maxlen: 24
117.61.13.0/24 maxlen: 24
117.61.14.0/24 maxlen: 24
117.61.15.0/24 maxlen: 24
117.61.56.0/21 maxlen: 21
117.61.56.0/22 maxlen: 22
117.61.60.0/24 maxlen: 24
117.61.61.0/24 maxlen: 24
117.61.62.0/23 maxlen: 23
117.61.64.0/23 maxlen: 23
117.61.66.0/24 maxlen: 24
117.61.67.0/24 maxlen: 24
117.61.134.0/24 maxlen: 24
117.61.143.0/24 maxlen: 24
117.61.146.0/24 maxlen: 24
117.61.147.0/24 maxlen: 24
117.61.148.0/24 maxlen: 24
117.61.149.0/24 maxlen: 24
117.61.150.0/24 maxlen: 24
117.61.151.0/24 maxlen: 24
240e:874::/42 maxlen: 42
240e:874:40::/42 maxlen: 42
240e:874:80::/42 maxlen: 42
240e:874:c0::/42 maxlen: 42
240e:874:100::/42 maxlen: 42
240e:874:140::/42 maxlen: 42
240e:874:180::/42 maxlen: 42
240e:874:1c0::/43 maxlen: 43
240e:874:200::/42 maxlen: 42
240e:874:240::/43 maxlen: 43
240e:874:260::/43 maxlen: 43
240e:874:280::/42 maxlen: 42
240e:874:300::/42 maxlen: 42
240e:874:340::/43 maxlen: 43
240e:874:360::/43 maxlen: 43
240e:874:380::/42 maxlen: 42
240e:874:500::/42 maxlen: 42
240e:874:540::/43 maxlen: 43
240e:874:600::/42 maxlen: 42
240e:874:640::/43 maxlen: 43
240e:874:700::/43 maxlen: 43
240e:874:720::/43 maxlen: 43
240e:874:740::/43 maxlen: 43
240e:874:780::/43 maxlen: 43
240e:874:7a0::/43 maxlen: 43
240e:874:800::/42 maxlen: 42
240e:874:840::/43 maxlen: 43
240e:874:880::/42 maxlen: 42
240e:874:8c0::/43 maxlen: 43
240e:874:900::/41 maxlen: 41
240e:874:980::/41 maxlen: 41
240e:874:a00::/42 maxlen: 42
240e:874:a40::/42 maxlen: 42
240e:874:a80::/42 maxlen: 42
240e:874:ac0::/42 maxlen: 42
240e:874:b00::/41 maxlen: 41
240e:874:b80::/41 maxlen: 41
240e:874:c00::/43 maxlen: 43
240e:874:c20::/43 maxlen: 43
240e:874:c40::/44 maxlen: 44
240e:874:c50::/44 maxlen: 44
240e:874:c60::/43 maxlen: 43
240e:874:c80::/43 maxlen: 43
240e:874:ca0::/44 maxlen: 44
240e:874:cb0::/44 maxlen: 44
240e:875:8000::/44 maxlen: 44
240e:875:8010::/44 maxlen: 44
240e:875:8020::/44 maxlen: 44
240e:875:8030::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:aa:58:11:0c:e4:35:e7:ce:bd:26:be:ac:0d:c3:07:55:f0:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 25 17:09:15 2026 GMT
Not After : Jun 24 17:14:15 2027 GMT
Subject: CN=D61B83D18BDBDFE1A4CD0A064CE7EDDA0171851D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:dd:29:7f:b9:26:8c:aa:a7:c1:f5:f8:20:
ae:ac:f0:9f:2b:4a:8f:96:35:a6:fc:98:e1:ca:42:
60:13:51:bf:7b:2a:37:89:b5:40:cd:34:83:fb:fc:
09:53:29:3e:33:2a:b6:4f:c6:84:1c:f6:9c:11:e7:
b0:23:33:35:96:78:f1:15:08:91:bf:4b:78:fc:5a:
27:f0:c4:69:17:a0:ee:18:e2:12:e2:84:4a:1b:ee:
7d:d0:e7:09:81:5d:8c:9a:d4:ca:f3:d3:26:44:9f:
6d:64:9d:05:b3:79:89:35:62:e0:df:89:54:35:fa:
18:37:86:a5:1b:61:93:a6:65:b6:5e:86:18:96:1c:
bb:a5:aa:e8:5c:07:8d:3d:89:6f:5d:82:dc:40:7e:
17:7d:bd:82:7b:e6:dc:77:47:84:ea:91:a0:13:74:
ec:40:70:d3:cc:7b:50:f4:14:16:4b:15:61:71:9e:
52:b6:78:f7:1f:ee:97:a7:ee:60:0f:42:e7:11:fe:
07:8b:2c:c0:01:a6:f4:b4:81:e9:62:7c:68:95:e0:
be:27:db:72:ce:11:8b:95:f1:88:a1:f1:ec:1e:79:
f4:b4:d2:94:07:5d:61:d4:b0:68:02:b4:45:9e:8c:
31:a1:d4:f8:b1:e8:8e:10:f0:7a:c4:d0:cf:ac:40:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:83:D1:8B:DB:DF:E1:A4:CD:0A:06:4C:E7:ED:DA:01:71:85:1D
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.113.178.0-36.113.183.255
36.113.210.0-36.113.212.255
36.113.215.0-36.113.219.255
117.61.0.0/20
117.61.56.0-117.61.67.255
117.61.134.0/24
117.61.143.0/24
117.61.146.0-117.61.151.255
IPv6:
240e:874::-240e:874:1df:ffff:ffff:ffff:ffff:ffff
240e:874:200::-240e:874:2bf:ffff:ffff:ffff:ffff:ffff
240e:874:300::-240e:874:3bf:ffff:ffff:ffff:ffff:ffff
240e:874:500::-240e:874:55f:ffff:ffff:ffff:ffff:ffff
240e:874:600::-240e:874:65f:ffff:ffff:ffff:ffff:ffff
240e:874:700::-240e:874:75f:ffff:ffff:ffff:ffff:ffff
240e:874:780::/42
240e:874:800::-240e:874:85f:ffff:ffff:ffff:ffff:ffff
240e:874:880::-240e:874:8df:ffff:ffff:ffff:ffff:ffff
240e:874:900::-240e:874:cbf:ffff:ffff:ffff:ffff:ffff
240e:875:8000::/42
Signature Algorithm: sha256WithRSAEncryption
3d:99:71:21:2e:f6:bb:bb:a1:e6:71:d9:a1:78:29:e9:c1:e2:
c5:dd:50:e8:e7:7d:91:dd:d6:bd:0d:62:b3:d4:46:16:7d:90:
fd:50:28:15:e6:04:b3:ff:39:d0:9e:cf:67:b4:9b:c1:2c:0e:
39:01:1a:4f:a0:99:5e:2f:57:10:36:0e:84:61:e5:89:24:bc:
07:36:3e:73:3a:46:30:0f:78:9f:0a:7b:8b:bf:2a:60:36:97:
eb:37:31:a1:dd:a4:1f:12:7d:69:3b:75:01:f0:d3:0f:bf:3a:
9d:e4:f8:ad:4b:48:b6:ee:27:5e:94:34:ed:88:91:67:48:d0:
a6:ee:2c:93:4a:da:51:35:48:60:6f:2d:93:3e:0b:e1:72:1a:
2e:98:50:19:b6:cb:e9:07:9c:d7:d0:dc:8a:97:0d:0e:fc:3e:
90:02:4e:51:c3:65:fa:36:5f:b4:e5:87:cc:6b:a5:ee:ad:80:
b2:8b:33:dd:99:d6:77:81:35:75:3e:b2:46:d7:88:69:ea:ae:
92:9c:8f:b0:65:b4:bf:17:46:c1:e8:a7:eb:ab:5c:6a:1b:14:
a2:5d:4e:96:90:93:18:be:2d:e5:be:6a:32:ab:41:33:18:ec:
71:20:eb:ba:a9:6f:c8:4e:47:cc:35:58:a4:89:44:49:19:10:
a7:cf:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:58:32 2026 by rpki-client