Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
File: AS141739.roa (raw, json)
Hash identifier: Pmzav7kC2Ta5wM3VzeKFszyeePMFO/9XO99gRjKkmIg=
Subject key identifier: 76:42:EA:1D:AE:7D:3A:AE:71:C6:F9:E6:45:E7:4F:2C:E1:B7:BE:BD
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 41D497CE83DEF2ED21E1ACF506CA755BE5A88E16
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
Signing time: Tue 02 Jun 2026 16:01:27 +0000
ROA not before: Tue 02 Jun 2026 15:56:27 +0000
ROA not after: Tue 01 Jun 2027 16:01:27 +0000
asID: 141739
IP address blocks: 14.107.160.0/22 maxlen: 22
14.107.172.0/22 maxlen: 22
14.107.176.0/21 maxlen: 21
14.110.80.0/20 maxlen: 20
14.110.120.0/21 maxlen: 21
106.80.120.0/21 maxlen: 21
106.80.176.0/20 maxlen: 20
106.89.48.0/20 maxlen: 20
106.89.64.0/20 maxlen: 20
113.248.96.0/20 maxlen: 20
113.248.160.0/19 maxlen: 19
113.248.208.0/21 maxlen: 21
113.248.216.0/21 maxlen: 21
113.248.224.0/19 maxlen: 19
113.249.32.0/20 maxlen: 20
113.249.224.0/20 maxlen: 20
113.250.128.0/20 maxlen: 20
113.250.144.0/21 maxlen: 21
113.251.208.0/21 maxlen: 21
113.251.224.0/21 maxlen: 21
113.251.248.0/21 maxlen: 21
125.80.108.0/22 maxlen: 22
125.80.152.0/21 maxlen: 21
125.80.192.0/19 maxlen: 19
125.80.248.0/21 maxlen: 21
125.81.232.0/21 maxlen: 21
125.84.232.0/22 maxlen: 22
125.85.64.0/18 maxlen: 18
125.85.128.0/19 maxlen: 19
125.86.0.0/20 maxlen: 20
125.86.16.0/20 maxlen: 20
125.86.84.0/22 maxlen: 22
125.86.128.0/22 maxlen: 22
125.86.132.0/22 maxlen: 22
125.86.136.0/21 maxlen: 21
125.87.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d4:97:ce:83:de:f2:ed:21:e1:ac:f5:06:ca:75:5b:e5:a8:8e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 15:56:27 2026 GMT
Not After : Jun 1 16:01:27 2027 GMT
Subject: CN=7642EA1DAE7D3AAE71C6F9E645E74F2CE1B7BEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:07:18:6d:c4:90:0d:eb:0c:31:d0:08:af:
31:fa:74:e6:3a:96:83:25:4c:0d:99:be:09:b0:da:
fb:06:c7:da:fb:cf:36:a1:0d:1e:c8:d2:3c:43:6c:
2a:eb:61:2b:74:83:4c:d5:2a:35:6c:c9:e3:f1:91:
8d:14:15:a2:a1:5e:77:68:6b:46:35:e6:13:9b:fe:
7a:88:4f:a9:75:90:f8:6d:be:2e:39:45:24:d6:3e:
e7:66:fe:32:79:c8:70:93:3e:05:b4:dc:3d:27:b8:
3e:b3:cc:55:09:16:f3:b3:33:41:17:4c:a5:04:75:
3e:e4:59:d4:d3:5e:98:36:f3:27:84:f2:51:48:6e:
fc:85:d5:02:e1:09:47:77:07:82:44:04:95:0c:a5:
7b:27:58:ec:f5:49:5b:06:b0:28:d7:bf:8f:48:8c:
b2:7e:3e:cd:29:66:a2:3b:65:3d:86:84:54:a2:c2:
38:62:ac:d0:81:90:66:60:49:e0:f0:f1:b4:2a:18:
cb:59:00:4a:66:5c:1c:44:18:5d:79:2a:5b:d4:10:
1e:0c:98:f5:bc:54:b8:92:70:e9:7a:2f:19:98:9d:
a6:18:96:14:9c:b5:c3:68:c4:a3:bb:b2:74:84:9c:
82:1d:f0:ec:f0:bf:a1:d0:70:00:f8:8e:64:d3:ff:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:EA:1D:AE:7D:3A:AE:71:C6:F9:E6:45:E7:4F:2C:E1:B7:BE:BD
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.107.160.0/22
14.107.172.0-14.107.183.255
14.110.80.0/20
14.110.120.0/21
106.80.120.0/21
106.80.176.0/20
106.89.48.0-106.89.79.255
113.248.96.0/20
113.248.160.0/19
113.248.208.0-113.248.255.255
113.249.32.0/20
113.249.224.0/20
113.250.128.0-113.250.151.255
113.251.208.0/21
113.251.224.0/21
113.251.248.0/21
125.80.108.0/22
125.80.152.0/21
125.80.192.0/19
125.80.248.0/21
125.81.232.0/21
125.84.232.0/22
125.85.64.0-125.85.159.255
125.86.0.0/19
125.86.84.0/22
125.86.128.0/20
125.87.148.0/22
Signature Algorithm: sha256WithRSAEncryption
74:43:1d:89:83:66:d1:a3:3d:ca:e3:a9:7a:7b:6e:27:51:a2:
e9:06:b6:07:27:98:7e:0d:21:7a:cc:2e:29:c3:da:ba:96:25:
54:42:21:d3:e3:18:01:ba:e5:da:bd:4a:35:d9:86:46:84:5d:
6f:20:f2:14:b8:77:f0:38:ea:d2:8a:9e:c4:92:ef:d2:28:1a:
cf:e1:8a:01:d1:a5:24:92:0b:c6:0c:09:f3:1d:90:da:83:f8:
5f:24:38:92:fe:48:3c:1d:36:e2:85:a8:eb:68:96:14:9f:f9:
20:0e:bd:a1:cd:87:b7:bd:48:26:b6:3a:15:c2:ab:9a:5d:4b:
19:33:11:74:e8:67:fc:80:75:fe:7a:94:ed:4d:c1:1c:8a:93:
87:b5:20:3a:13:a3:64:02:bc:f9:70:aa:96:88:1a:fc:f6:6e:
58:14:28:ec:70:70:fb:04:81:83:1e:98:39:51:a2:f4:b3:fb:
f3:28:aa:ab:6d:2a:41:8f:5a:d2:28:a9:3c:57:d8:2d:69:0b:
d1:dd:e5:9e:c5:c3:ea:a4:5d:5a:e3:aa:f8:52:9c:2e:14:fa:
cd:12:39:b5:f8:58:75:7a:fe:f1:01:12:64:3c:75:94:9f:b1:
e8:20:7b:1d:32:3e:57:13:fd:1e:7a:f2:78:2e:d8:08:b1:d6:
e3:a6:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:42 2026 by rpki-client