Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
File: AS141998.roa (raw, json)
Hash identifier: FLhLMKlgqLTUF6/TapV2BHdtkUefCCMSSv4fvN1wnlg=
Subject key identifier: AB:EE:D0:13:4D:44:89:E3:54:BE:C4:08:65:5F:9A:B7:74:96:62:FE
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1084854AE620D4066DD9761F4E7939F263965B2F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
Signing time: Wed 01 Jul 2026 10:06:31 +0000
ROA not before: Wed 01 Jul 2026 10:01:31 +0000
ROA not after: Wed 30 Jun 2027 10:06:31 +0000
asID: 141998
IP address blocks: 60.164.0.0/24 maxlen: 24
60.164.2.0/24 maxlen: 24
60.164.4.0/24 maxlen: 24
60.164.5.0/24 maxlen: 24
60.164.6.0/24 maxlen: 24
60.164.7.0/24 maxlen: 24
60.164.240.0/23 maxlen: 23
60.164.242.0/23 maxlen: 23
60.164.244.0/24 maxlen: 24
60.164.245.0/24 maxlen: 24
60.164.246.0/23 maxlen: 23
60.165.20.0/23 maxlen: 23
60.165.21.0/24 maxlen: 24
60.165.64.0/22 maxlen: 22
60.165.115.0/24 maxlen: 24
60.165.116.0/24 maxlen: 24
60.165.118.0/23 maxlen: 23
60.165.120.0/22 maxlen: 22
60.165.125.0/24 maxlen: 24
60.165.126.0/23 maxlen: 23
60.165.237.0/24 maxlen: 24
61.134.70.0/23 maxlen: 23
61.159.80.0/24 maxlen: 24
61.159.81.0/24 maxlen: 24
61.159.82.0/23 maxlen: 23
61.159.88.0/24 maxlen: 24
61.159.89.0/24 maxlen: 24
61.159.90.0/24 maxlen: 24
61.159.91.0/24 maxlen: 24
118.180.0.0/24 maxlen: 24
118.180.1.0/24 maxlen: 24
118.180.4.0/24 maxlen: 24
118.180.26.0/24 maxlen: 24
118.180.27.0/24 maxlen: 24
118.180.30.0/24 maxlen: 24
118.180.31.0/24 maxlen: 24
118.180.37.0/24 maxlen: 24
118.180.38.0/24 maxlen: 24
118.180.39.0/24 maxlen: 24
118.180.40.0/24 maxlen: 24
118.180.42.0/24 maxlen: 24
118.180.43.0/24 maxlen: 24
118.180.45.0/24 maxlen: 24
118.180.49.0/24 maxlen: 24
118.180.51.0/24 maxlen: 24
118.180.54.0/24 maxlen: 24
118.180.56.0/24 maxlen: 24
118.180.57.0/24 maxlen: 24
118.180.58.0/24 maxlen: 24
118.180.59.0/24 maxlen: 24
118.180.60.0/24 maxlen: 24
118.180.62.0/24 maxlen: 24
118.180.63.0/24 maxlen: 24
118.181.54.0/24 maxlen: 24
118.181.55.0/24 maxlen: 24
118.181.98.0/23 maxlen: 23
118.181.103.0/24 maxlen: 24
118.181.110.0/24 maxlen: 24
118.182.56.0/22 maxlen: 22
118.182.96.0/23 maxlen: 23
118.182.98.0/23 maxlen: 23
118.182.100.0/23 maxlen: 23
118.182.102.0/23 maxlen: 23
118.182.224.0/24 maxlen: 24
118.182.225.0/24 maxlen: 24
118.182.226.0/24 maxlen: 24
118.182.249.0/24 maxlen: 24
118.183.8.0/24 maxlen: 24
118.183.9.0/24 maxlen: 24
118.183.10.0/24 maxlen: 24
118.183.11.0/24 maxlen: 24
118.183.12.0/24 maxlen: 24
118.183.13.0/24 maxlen: 24
118.183.32.0/24 maxlen: 24
118.183.33.0/24 maxlen: 24
118.183.35.0/24 maxlen: 24
118.183.37.0/24 maxlen: 24
118.183.40.0/24 maxlen: 24
118.183.61.0/24 maxlen: 24
118.183.152.0/22 maxlen: 22
118.183.168.0/24 maxlen: 24
118.183.169.0/24 maxlen: 24
118.183.171.0/24 maxlen: 24
118.183.172.0/24 maxlen: 24
118.183.173.0/24 maxlen: 24
118.183.174.0/24 maxlen: 24
118.183.211.0/24 maxlen: 24
118.183.240.0/21 maxlen: 21
125.74.1.0/24 maxlen: 24
125.74.3.0/24 maxlen: 24
125.74.4.0/24 maxlen: 24
125.74.5.0/24 maxlen: 24
125.74.6.0/24 maxlen: 24
125.74.7.0/24 maxlen: 24
125.74.8.0/22 maxlen: 22
125.74.12.0/24 maxlen: 24
125.74.14.0/24 maxlen: 24
125.74.17.0/24 maxlen: 24
125.74.18.0/24 maxlen: 24
125.74.19.0/24 maxlen: 24
125.74.20.0/24 maxlen: 24
125.74.23.0/24 maxlen: 24
125.74.24.0/24 maxlen: 24
125.74.26.0/24 maxlen: 24
125.74.27.0/24 maxlen: 24
125.74.28.0/24 maxlen: 24
125.74.29.0/24 maxlen: 24
125.74.30.0/24 maxlen: 24
125.74.32.0/24 maxlen: 24
125.74.33.0/24 maxlen: 24
125.74.34.0/24 maxlen: 24
125.74.38.0/24 maxlen: 24
125.74.42.0/24 maxlen: 24
125.74.43.0/24 maxlen: 24
125.74.44.0/24 maxlen: 24
125.74.45.0/24 maxlen: 24
125.74.47.0/24 maxlen: 24
125.74.48.0/24 maxlen: 24
125.74.52.0/24 maxlen: 24
125.74.53.0/24 maxlen: 24
125.74.54.0/24 maxlen: 24
125.74.55.0/24 maxlen: 24
125.74.78.0/24 maxlen: 24
125.74.80.0/24 maxlen: 24
125.74.84.0/22 maxlen: 22
125.74.88.0/23 maxlen: 23
125.74.90.0/24 maxlen: 24
125.74.91.0/24 maxlen: 24
125.74.92.0/23 maxlen: 23
125.74.94.0/24 maxlen: 24
125.74.95.0/24 maxlen: 24
125.74.108.0/24 maxlen: 24
125.74.109.0/24 maxlen: 24
125.74.128.0/23 maxlen: 23
125.74.130.0/23 maxlen: 23
125.74.132.0/23 maxlen: 23
125.74.134.0/24 maxlen: 24
125.74.135.0/24 maxlen: 24
125.74.192.0/21 maxlen: 21
125.74.232.0/21 maxlen: 21
125.75.64.0/24 maxlen: 24
125.75.66.0/23 maxlen: 23
125.75.68.0/23 maxlen: 23
125.75.96.0/23 maxlen: 23
125.75.98.0/24 maxlen: 24
125.75.102.0/24 maxlen: 24
125.75.103.0/24 maxlen: 24
125.75.104.0/24 maxlen: 24
125.75.105.0/24 maxlen: 24
125.75.106.0/24 maxlen: 24
125.75.107.0/24 maxlen: 24
125.75.108.0/24 maxlen: 24
125.75.109.0/24 maxlen: 24
125.75.110.0/23 maxlen: 23
125.75.148.0/23 maxlen: 23
125.75.150.0/23 maxlen: 23
125.76.82.0/24 maxlen: 24
125.76.112.0/22 maxlen: 22
202.100.73.0/24 maxlen: 24
202.100.74.0/24 maxlen: 24
202.100.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:84:85:4a:e6:20:d4:06:6d:d9:76:1f:4e:79:39:f2:63:96:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 1 10:01:31 2026 GMT
Not After : Jun 30 10:06:31 2027 GMT
Subject: CN=ABEED0134D4489E354BEC408655F9AB7749662FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:f3:ec:3b:8c:3c:45:64:5d:37:8f:3d:5e:
bb:0f:d7:63:ce:5f:f9:d1:f1:49:b4:cd:4d:dd:87:
24:fd:d3:30:10:d9:4c:a6:69:69:4c:d4:33:13:16:
01:57:b8:22:a2:a3:18:31:62:76:06:ce:4c:e3:e6:
5c:9a:67:5e:68:f1:95:a9:72:d5:be:d3:f5:bd:90:
1d:8c:12:54:d5:15:b6:bc:7f:f3:61:3a:78:9d:33:
69:44:31:a0:c4:c1:23:a4:1e:5b:bc:c0:52:d8:f4:
8b:5e:4b:34:99:fd:6e:fa:b0:23:af:07:82:4c:ab:
22:95:15:3f:ea:6b:f1:d4:11:7e:46:65:67:04:39:
b7:2d:95:ff:85:77:f2:b3:58:6d:a6:e4:85:2a:6f:
75:b3:9c:5a:0c:67:96:a6:38:75:ad:b4:f3:b4:b2:
0c:c3:3a:1f:59:7d:ca:8c:b9:24:93:2c:df:48:81:
63:e2:8e:97:20:c9:2b:d6:f6:14:94:fa:ec:37:f8:
be:ec:c0:8b:84:9b:49:b4:db:05:21:91:07:c3:00:
d8:99:c6:72:c1:bb:bb:81:69:dc:23:94:4d:9c:8d:
47:fd:42:16:f8:70:32:2b:ed:f8:94:3d:05:7b:70:
6f:37:ad:6a:78:14:db:22:f1:71:fd:7f:2f:7f:83:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:D0:13:4D:44:89:E3:54:BE:C4:08:65:5F:9A:B7:74:96:62:FE
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.0.0/24
60.164.2.0/24
60.164.4.0/22
60.164.240.0/21
60.165.20.0/23
60.165.64.0/22
60.165.115.0-60.165.116.255
60.165.118.0-60.165.123.255
60.165.125.0-60.165.127.255
60.165.237.0/24
61.134.70.0/23
61.159.80.0/22
61.159.88.0/22
118.180.0.0/23
118.180.4.0/24
118.180.26.0/23
118.180.30.0/23
118.180.37.0-118.180.40.255
118.180.42.0/23
118.180.45.0/24
118.180.49.0/24
118.180.51.0/24
118.180.54.0/24
118.180.56.0-118.180.60.255
118.180.62.0/23
118.181.54.0/23
118.181.98.0/23
118.181.103.0/24
118.181.110.0/24
118.182.56.0/22
118.182.96.0/21
118.182.224.0-118.182.226.255
118.182.249.0/24
118.183.8.0-118.183.13.255
118.183.32.0/23
118.183.35.0/24
118.183.37.0/24
118.183.40.0/24
118.183.61.0/24
118.183.152.0/22
118.183.168.0/23
118.183.171.0-118.183.174.255
118.183.211.0/24
118.183.240.0/21
125.74.1.0/24
125.74.3.0-125.74.12.255
125.74.14.0/24
125.74.17.0-125.74.20.255
125.74.23.0-125.74.24.255
125.74.26.0-125.74.30.255
125.74.32.0-125.74.34.255
125.74.38.0/24
125.74.42.0-125.74.45.255
125.74.47.0-125.74.48.255
125.74.52.0/22
125.74.78.0/24
125.74.80.0/24
125.74.84.0-125.74.95.255
125.74.108.0/23
125.74.128.0/21
125.74.192.0/21
125.74.232.0/21
125.75.64.0/24
125.75.66.0-125.75.69.255
125.75.96.0-125.75.98.255
125.75.102.0-125.75.111.255
125.75.148.0/22
125.76.82.0/24
125.76.112.0/22
202.100.73.0-202.100.74.255
202.100.79.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9c:88:ff:41:e0:47:9b:59:a9:40:90:a1:ea:bc:e0:b4:bb:
f3:80:71:a9:21:62:d2:a6:ed:d2:0d:3e:49:fa:cd:21:95:c3:
ce:a3:28:7e:37:1c:ab:c2:cd:fa:1e:71:a1:a5:a3:9e:a7:3f:
a1:f3:c9:44:52:76:95:5d:59:31:a6:81:69:19:e8:a1:4f:bd:
d6:b1:0f:cb:c9:16:1e:f1:2e:6f:2d:d3:27:21:ab:89:22:a7:
98:79:24:41:6d:df:32:43:12:1d:99:91:8b:12:47:af:1c:80:
c6:1a:1a:b4:00:5c:23:a9:d2:2b:74:0a:88:bb:0a:99:fa:ce:
9b:05:f4:3f:54:f9:19:ff:25:78:42:0e:72:d7:fe:68:7a:81:
a6:01:7b:4b:49:13:05:ca:04:25:aa:16:47:2d:69:cb:1a:48:
4a:ac:09:e6:b6:fb:2b:47:bb:36:f2:b6:7c:39:51:ac:3b:b1:
47:c5:ed:6c:68:c5:f7:87:50:46:db:f9:2e:d8:4a:a8:8c:dd:
63:b9:83:48:3e:96:37:d6:89:f2:90:b1:87:09:ba:ac:2b:55:
96:26:2e:33:5e:f9:c9:56:64:7f:18:48:53:7e:78:33:3f:db:
e5:3d:24:59:c9:16:56:e2:dd:fb:36:7d:7e:28:1a:17:dd:81:
01:cd:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:57:09 2026 by rpki-client