Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141679.roa
File: AS141679.roa (raw, json)
Hash identifier: 9BNeYx8hGdVGcW1uupulq4XW7NW8R7oI1K8WgL1Sn3w=
Subject key identifier: B2:73:49:22:4E:53:3D:82:3E:B3:B8:98:80:D2:A9:CF:D3:BC:84:73
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 635FB60BF8F48E4860890A96EF96B56FD8B927E6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141679.roa
Signing time: Thu 28 May 2026 16:21:11 +0000
ROA not before: Thu 28 May 2026 16:16:11 +0000
ROA not after: Thu 27 May 2027 16:21:11 +0000
asID: 141679
IP address blocks: 36.110.213.0/24 maxlen: 24
36.110.216.0/24 maxlen: 24
36.110.226.0/23 maxlen: 23
36.110.234.0/24 maxlen: 24
36.110.235.0/24 maxlen: 24
36.111.80.0/23 maxlen: 23
36.111.82.0/24 maxlen: 24
36.111.83.0/24 maxlen: 24
36.111.148.0/23 maxlen: 23
36.111.150.0/24 maxlen: 24
36.111.151.0/24 maxlen: 24
106.0.4.0/24 maxlen: 24
106.0.5.0/24 maxlen: 24
106.38.190.0/24 maxlen: 24
106.39.219.0/24 maxlen: 24
106.63.0.0/17 maxlen: 17
106.63.54.0/24 maxlen: 24
106.63.55.0/24 maxlen: 24
106.120.160.0/24 maxlen: 24
183.78.180.0/23 maxlen: 23
203.83.232.0/24 maxlen: 24
203.83.233.0/24 maxlen: 24
203.83.234.0/24 maxlen: 24
203.83.235.0/24 maxlen: 24
203.83.236.0/24 maxlen: 24
203.83.237.0/24 maxlen: 24
203.83.238.0/24 maxlen: 24
203.83.239.0/24 maxlen: 24
203.176.92.0/22 maxlen: 22
218.30.118.0/24 maxlen: 24
240e:108:1093::/48 maxlen: 48
240e:900::/40 maxlen: 40
240e:900:8::/48 maxlen: 48
240e:900:9::/48 maxlen: 48
240e:904:2802::/47 maxlen: 47
240e:981:a00::/40 maxlen: 40
240e:981:9200::/48 maxlen: 48
240e:981:9300::/40 maxlen: 40
240e:981:f500::/41 maxlen: 41
240e:981:f580::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:5f:b6:0b:f8:f4:8e:48:60:89:0a:96:ef:96:b5:6f:d8:b9:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:16:11 2026 GMT
Not After : May 27 16:21:11 2027 GMT
Subject: CN=B27349224E533D823EB3B89880D2A9CFD3BC8473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:09:24:0a:ae:12:4c:24:13:e4:86:6d:65:
6c:4f:41:dd:b9:50:0e:20:1e:b3:a9:7d:96:5b:6a:
dc:f5:39:54:b9:9f:20:a4:83:75:40:bf:1e:87:cc:
db:b3:45:3b:a7:d8:4f:ce:6b:f2:fd:51:51:ee:11:
18:02:7f:e0:5b:09:58:2e:0f:de:a7:af:b5:fa:fa:
a0:d4:ba:d2:c3:d7:15:36:5d:9e:37:c6:05:84:12:
87:26:23:78:b0:01:a3:55:64:0c:6f:b7:dd:65:50:
54:35:aa:69:3c:ba:a5:63:a2:5c:d2:5f:1d:f6:a0:
c0:cb:b1:56:66:60:2a:3d:2e:ea:3e:f3:d0:d2:55:
5e:89:5e:19:66:7e:c1:85:8a:fa:04:69:be:4e:ec:
7d:70:49:fa:2a:cb:9b:57:d9:d6:73:38:1a:4b:01:
e9:b2:68:1f:c0:99:f6:88:d2:87:13:3b:a1:3a:83:
7f:19:d9:bb:ab:16:d6:b0:2c:a1:2d:2c:64:7b:52:
ec:1b:d3:8c:69:04:9a:3a:4b:be:11:46:e2:83:a0:
c4:d0:01:f4:b8:55:80:a4:3b:5c:57:7f:35:49:f7:
c9:1b:3a:e8:46:97:92:5a:3c:f9:42:14:4d:92:6d:
bb:2f:b2:64:a9:ff:de:d7:38:4b:85:ca:0f:44:8c:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:73:49:22:4E:53:3D:82:3E:B3:B8:98:80:D2:A9:CF:D3:BC:84:73
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.110.213.0/24
36.110.216.0/24
36.110.226.0/23
36.110.234.0/23
36.111.80.0/22
36.111.148.0/22
106.0.4.0/23
106.38.190.0/24
106.39.219.0/24
106.63.0.0/17
106.120.160.0/24
183.78.180.0/23
203.83.232.0/21
203.176.92.0/22
218.30.118.0/24
IPv6:
240e:108:1093::/48
240e:900::/40
240e:904:2802::/47
240e:981:a00::/40
240e:981:9200::/48
240e:981:9300::/40
240e:981:f500::/40
Signature Algorithm: sha256WithRSAEncryption
84:f1:77:15:d6:79:c9:bd:28:26:ed:a2:4f:53:a1:0d:07:cd:
2a:e2:6c:e3:0f:b9:26:24:b1:fb:e1:7d:87:e6:06:a3:dd:52:
c4:38:8d:16:b8:4a:2d:ca:75:24:7a:09:88:01:d6:f2:f3:9a:
89:12:93:3a:b4:d5:30:36:84:ea:b9:77:5d:3c:00:c2:38:e8:
34:fe:75:83:13:ef:89:3c:d9:ed:02:9b:ed:24:71:dc:c7:72:
ad:38:07:fa:05:1b:dc:26:c9:1e:f0:0a:3f:6d:93:0b:de:b7:
14:9a:f6:e9:f2:b6:1e:dd:0f:38:d6:fb:bc:61:c7:07:a0:cf:
1d:b9:cd:c2:80:8c:f4:54:0f:9e:e2:d2:73:42:88:28:05:61:
cf:86:68:71:b0:c1:11:fd:c3:46:49:8a:f4:a8:8d:6a:f2:5e:
9e:57:2b:dc:67:48:6e:3d:c6:79:62:87:86:73:00:82:b4:6c:
52:c8:80:7b:fb:bc:41:d0:52:10:c0:3d:4e:4e:e3:a1:d4:89:
2a:35:cc:dd:e7:bd:6d:3b:24:d1:bd:35:e8:16:a3:d9:eb:31:
bd:2a:80:ea:05:f1:43:59:81:50:68:c7:e4:3b:61:bc:52:ad:
92:1b:90:7b:d6:e2:3f:a9:6e:f6:cc:90:17:e9:3b:4a:67:a2:
dd:70:25:19
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUY1+2C/j0jkhgiQqW75a1b9i5J+YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MTYxMVoX
DTI3MDUyNzE2MjExMVowMzExMC8GA1UEAxMoQjI3MzQ5MjI0RTUzM0Q4MjNFQjNC
ODk4ODBEMkE5Q0ZEM0JDODQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANuCCSQKrhJMJBPkhm1lbE9B3blQDiAes6l9lltq3PU5VLmfIKSDdUC/HofM
27NFO6fYT85r8v1RUe4RGAJ/4FsJWC4P3qevtfr6oNS60sPXFTZdnjfGBYQShyYj
eLABo1VkDG+33WVQVDWqaTy6pWOiXNJfHfagwMuxVmZgKj0u6j7z0NJVXoleGWZ+
wYWK+gRpvk7sfXBJ+irLm1fZ1nM4GksB6bJoH8CZ9ojShxM7oTqDfxnZu6sW1rAs
oS0sZHtS7BvTjGkEmjpLvhFG4oOgxNAB9LhVgKQ7XFd/NUn3yRs66EaXklo8+UIU
TZJtuy+yZKn/3tc4S4XKD0SMzKcCAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBSyc0ki
TlM9gj6zuJiA0qnP07yEczAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQxNjc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIG4BggrBgEFBQcBBwEB/wSBqDCBpTBgBAIAATBaAwQAJG7VAwQAJG7YAwQBJG7i
AwQBJG7qAwQCJG9QAwQCJG+UAwQBagAEAwQAaia+AwQAaifbAwQHaj8AAwQAanig
AwQBt060AwQDy1PoAwQCy7BcAwQA2h52MEEEAgACMDsDBwAkDgEIEJMDBgAkDgkA
AAMHASQOCQQoAgMGACQOCYEKAwcAJA4JgZIAAwYAJA4JgZMDBgAkDgmB9TANBgkq
hkiG9w0BAQsFAAOCAQEAhPF3FdZ5yb0oJu2iT1OhDQfNKuJs4w+5JiSx++F9h+YG
o91SxDiNFrhKLcp1JHoJiAHW8vOaiRKTOrTVMDaE6rl3XTwAwjjoNP51gxPviTzZ
7QKb7SRx3MdyrTgH+gUb3CbJHvAKP22TC963FJr26fK2Ht0PONb7vGHHB6DPHbnN
woCM9FQPnuLSc0KIKAVhz4ZocbDBEf3DRkmK9KiNavJenlcr3GdIbj3GeWKHhnMA
grRsUsiAe/u8QdBSEMA9Tk7jodSJKjXM3ee9bTsk0b016Baj2esxvSqA6gXxQ1mB
UGjH5DthvFKtkhuQe9biP6lu9syQF+k7Smei3XAlGQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:49 2026 by rpki-client