Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140903.roa
File: AS140903.roa (raw, json)
Hash identifier: x3GU4CD4j79auImloDsKm02uEi8J/O22oVjJjrgW9LA=
Subject key identifier: 9A:AA:51:E5:59:0C:B8:5E:DB:7F:5D:6B:AD:3C:FA:53:F8:AE:D6:62
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 49B7275E4689D02C55CE2D7D9A6DF236D6F6857C
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140903.roa
Signing time: Fri 29 May 2026 16:05:56 +0000
ROA not before: Fri 29 May 2026 16:00:56 +0000
ROA not after: Fri 28 May 2027 16:05:56 +0000
asID: 140903
IP address blocks: 27.128.192.0/20 maxlen: 20
27.129.16.0/21 maxlen: 21
27.129.128.0/18 maxlen: 18
27.186.0.0/15 maxlen: 15
111.225.0.0/17 maxlen: 17
111.225.240.0/20 maxlen: 20
123.183.0.0/17 maxlen: 17
124.237.128.0/17 maxlen: 17
124.239.200.0/22 maxlen: 22
124.239.204.0/22 maxlen: 22
219.148.96.0/21 maxlen: 21
219.148.136.0/21 maxlen: 21
219.148.148.0/22 maxlen: 22
222.222.80.0/20 maxlen: 20
222.222.128.0/18 maxlen: 18
222.223.34.0/23 maxlen: 23
222.223.96.0/21 maxlen: 21
240e:c:3000::/37 maxlen: 37
240e:c:7001::/48 maxlen: 48
240e:4c:3000::/37 maxlen: 37
240e:4c:7001::/48 maxlen: 48
240e:b0:8000::/34 maxlen: 34
240e:b1:b000::/37 maxlen: 37
240e:108:4222::/48 maxlen: 48
240e:108:4a22::/48 maxlen: 48
240e:340:5200::/39 maxlen: 39
240e:340:5400::/38 maxlen: 38
240e:340:5800::/37 maxlen: 37
240e:340:6000::/37 maxlen: 37
240e:340:6800::/39 maxlen: 39
240e:340:6a00::/40 maxlen: 40
240e:340:cf00::/40 maxlen: 40
240e:340:d000::/40 maxlen: 40
240e:340:d100::/40 maxlen: 40
240e:340:d200::/40 maxlen: 40
240e:340:e000::/40 maxlen: 40
240e:340:e100::/40 maxlen: 40
240e:340:e200::/40 maxlen: 40
240e:341:5200::/39 maxlen: 39
240e:341:5400::/38 maxlen: 38
240e:341:5800::/37 maxlen: 37
240e:341:6000::/37 maxlen: 37
240e:341:6800::/39 maxlen: 39
240e:341:6a00::/40 maxlen: 40
240e:341:cf00::/40 maxlen: 40
240e:341:d000::/40 maxlen: 40
240e:341:d100::/40 maxlen: 40
240e:341:d200::/40 maxlen: 40
240e:341:e000::/40 maxlen: 40
240e:341:e100::/40 maxlen: 40
240e:341:e200::/40 maxlen: 40
240e:342:5200::/39 maxlen: 39
240e:342:5400::/38 maxlen: 38
240e:342:5800::/37 maxlen: 37
240e:342:6000::/37 maxlen: 37
240e:342:6800::/39 maxlen: 39
240e:342:6a00::/40 maxlen: 40
240e:342:cf00::/40 maxlen: 40
240e:342:d000::/40 maxlen: 40
240e:342:d100::/40 maxlen: 40
240e:342:d200::/40 maxlen: 40
240e:342:e000::/40 maxlen: 40
240e:342:e100::/40 maxlen: 40
240e:342:e200::/40 maxlen: 40
240e:343:5200::/39 maxlen: 39
240e:343:5400::/38 maxlen: 38
240e:343:5800::/37 maxlen: 37
240e:343:6000::/37 maxlen: 37
240e:343:6800::/39 maxlen: 39
240e:343:6a00::/40 maxlen: 40
240e:343:cf00::/40 maxlen: 40
240e:343:d000::/40 maxlen: 40
240e:343:d100::/40 maxlen: 40
240e:343:d200::/40 maxlen: 40
240e:343:e000::/40 maxlen: 40
240e:343:e100::/40 maxlen: 40
240e:343:e200::/40 maxlen: 40
240e:640:600::/40 maxlen: 40
240e:640:8600::/40 maxlen: 40
240e:640:c600::/40 maxlen: 40
240e:640:e600::/40 maxlen: 40
240e:940:600::/40 maxlen: 40
240e:940:8600::/40 maxlen: 40
240e:940:c600::/40 maxlen: 40
240e:940:e600::/40 maxlen: 40
240e:983:f03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b7:27:5e:46:89:d0:2c:55:ce:2d:7d:9a:6d:f2:36:d6:f6:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 29 16:00:56 2026 GMT
Not After : May 28 16:05:56 2027 GMT
Subject: CN=9AAA51E5590CB85EDB7F5D6BAD3CFA53F8AED662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:66:ed:6d:c1:65:cf:7a:e4:5a:b1:a6:48:
62:d2:0f:78:f3:1d:a4:bf:39:b0:1c:09:8b:f2:93:
d9:59:e2:d7:9a:a2:61:62:af:a9:63:57:94:17:94:
43:04:ce:1c:a5:b3:59:8d:33:79:a9:0f:c5:cc:cb:
62:74:bc:b7:96:70:c5:ec:c2:bf:f3:59:92:cc:87:
7f:a6:06:59:26:da:62:1f:2f:01:52:ff:42:f6:0d:
2c:10:92:e4:66:4c:c0:08:a9:77:0e:e3:cb:35:05:
7c:de:a3:2f:cb:67:fc:81:41:91:01:2b:ea:91:22:
ea:00:69:11:58:20:f0:09:33:06:fc:07:e0:3a:7c:
7c:c3:ae:09:ba:cb:f8:b2:ca:38:e8:1f:7a:41:f6:
e6:35:95:a6:5c:6f:cc:5f:d8:20:6f:77:3a:df:71:
d0:19:4e:68:fe:e3:89:5a:ec:65:13:83:42:c7:32:
ed:e4:a9:90:80:d4:12:41:71:48:d3:03:78:77:f9:
b1:74:93:64:06:30:0d:dc:91:ac:ab:e6:ff:d3:5a:
f8:93:c8:67:48:ce:4f:11:27:c6:2a:ab:02:45:8d:
a3:38:80:84:7a:a3:6c:e1:7d:3c:f3:71:07:3a:f0:
52:df:af:12:70:2f:12:93:bc:64:49:c6:f2:e0:d3:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:51:E5:59:0C:B8:5E:DB:7F:5D:6B:AD:3C:FA:53:F8:AE:D6:62
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140903.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.128.192.0/20
27.129.16.0/21
27.129.128.0/18
27.186.0.0/15
111.225.0.0/17
111.225.240.0/20
123.183.0.0/17
124.237.128.0/17
124.239.200.0/21
219.148.96.0/21
219.148.136.0/21
219.148.148.0/22
222.222.80.0/20
222.222.128.0/18
222.223.34.0/23
222.223.96.0/21
IPv6:
240e:c:3000::/37
240e:c:7001::/48
240e:4c:3000::/37
240e:4c:7001::/48
240e:b0:8000::/34
240e:b1:b000::/37
240e:108:4222::/48
240e:108:4a22::/48
240e:340:5200::-240e:340:6aff:ffff:ffff:ffff:ffff:ffff
240e:340:cf00::-240e:340:d2ff:ffff:ffff:ffff:ffff:ffff
240e:340:e000::-240e:340:e2ff:ffff:ffff:ffff:ffff:ffff
240e:341:5200::-240e:341:6aff:ffff:ffff:ffff:ffff:ffff
240e:341:cf00::-240e:341:d2ff:ffff:ffff:ffff:ffff:ffff
240e:341:e000::-240e:341:e2ff:ffff:ffff:ffff:ffff:ffff
240e:342:5200::-240e:342:6aff:ffff:ffff:ffff:ffff:ffff
240e:342:cf00::-240e:342:d2ff:ffff:ffff:ffff:ffff:ffff
240e:342:e000::-240e:342:e2ff:ffff:ffff:ffff:ffff:ffff
240e:343:5200::-240e:343:6aff:ffff:ffff:ffff:ffff:ffff
240e:343:cf00::-240e:343:d2ff:ffff:ffff:ffff:ffff:ffff
240e:343:e000::-240e:343:e2ff:ffff:ffff:ffff:ffff:ffff
240e:640:600::/40
240e:640:8600::/40
240e:640:c600::/40
240e:640:e600::/40
240e:940:600::/40
240e:940:8600::/40
240e:940:c600::/40
240e:940:e600::/40
240e:983:f03::/48
Signature Algorithm: sha256WithRSAEncryption
53:9d:b5:9e:14:f1:3c:e6:c5:e6:07:11:44:dd:0a:87:0a:c3:
62:f4:19:bc:ac:72:1c:99:fe:0d:50:03:b5:e3:d9:57:e3:1e:
d2:89:d3:c0:ac:2e:98:5f:19:c8:a5:c8:90:a9:3c:fa:06:bf:
cb:d4:c9:d8:ae:cb:c0:f8:2d:87:a6:a1:7c:62:3d:80:5c:34:
7a:db:da:bc:97:8c:6f:f5:4a:cd:30:1d:15:53:ce:6a:80:70:
ba:59:58:78:26:52:e4:dc:ed:24:63:fd:be:2d:e0:a6:b1:11:
c6:5a:62:7e:9e:db:64:a3:b2:47:ce:20:d3:ef:04:95:c3:ba:
b6:7f:e7:22:e3:ce:a7:e6:1a:55:30:1d:55:0f:aa:ee:6c:4d:
7c:3f:5b:dc:7e:7c:2f:6d:6b:11:8f:1f:cb:8c:fd:73:a6:f6:
5f:07:e3:8f:62:fa:0d:2e:79:3b:4e:fa:f6:0a:dc:c2:a2:23:
37:1e:da:51:eb:cd:5a:d7:e2:da:22:ac:d9:82:96:1e:2b:1b:
ab:d2:86:29:38:9f:d8:07:8f:83:69:8a:16:4f:b3:24:3b:3a:
48:1e:f5:d9:00:fd:cc:1b:99:cc:4c:10:d0:5e:b1:8b:ab:4a:
c1:e4:5e:80:ee:ae:f5:38:31:00:f6:ce:4f:37:7f:fb:4b:e6:
4a:bc:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:21:53 2026 by rpki-client