Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
File: AS141998.roa (raw, json)
Hash identifier: axJSCqc4rvPK4V2jdludyls3ZGijCyz4YRBfpS3m3M8=
Subject key identifier: 8F:EE:66:F6:9B:B2:33:14:C4:57:61:86:6D:1E:C2:92:28:E0:45:B5
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 588A63E5E85C0DC78B75D0381F035BCA48181DFE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
Signing time: Fri 31 Jul 2026 03:24:35 +0000
ROA not before: Fri 31 Jul 2026 03:19:35 +0000
ROA not after: Fri 30 Jul 2027 03:24:35 +0000
asID: 141998
IP address blocks: 60.164.0.0/24 maxlen: 24
60.164.2.0/24 maxlen: 24
60.164.4.0/24 maxlen: 24
60.164.5.0/24 maxlen: 24
60.164.6.0/24 maxlen: 24
60.164.7.0/24 maxlen: 24
60.164.240.0/23 maxlen: 23
60.164.242.0/23 maxlen: 23
60.164.244.0/24 maxlen: 24
60.164.245.0/24 maxlen: 24
60.164.246.0/23 maxlen: 23
60.165.20.0/23 maxlen: 23
60.165.21.0/24 maxlen: 24
60.165.24.0/22 maxlen: 22
60.165.28.0/24 maxlen: 24
60.165.64.0/22 maxlen: 22
60.165.115.0/24 maxlen: 24
60.165.116.0/24 maxlen: 24
60.165.118.0/23 maxlen: 23
60.165.120.0/22 maxlen: 22
60.165.125.0/24 maxlen: 24
60.165.126.0/23 maxlen: 23
60.165.237.0/24 maxlen: 24
61.134.70.0/23 maxlen: 23
61.159.80.0/24 maxlen: 24
61.159.81.0/24 maxlen: 24
61.159.82.0/23 maxlen: 23
61.159.88.0/24 maxlen: 24
61.159.89.0/24 maxlen: 24
61.159.90.0/24 maxlen: 24
61.159.91.0/24 maxlen: 24
118.180.0.0/24 maxlen: 24
118.180.1.0/24 maxlen: 24
118.180.4.0/24 maxlen: 24
118.180.26.0/24 maxlen: 24
118.180.27.0/24 maxlen: 24
118.180.30.0/24 maxlen: 24
118.180.31.0/24 maxlen: 24
118.180.37.0/24 maxlen: 24
118.180.38.0/24 maxlen: 24
118.180.39.0/24 maxlen: 24
118.180.40.0/24 maxlen: 24
118.180.42.0/24 maxlen: 24
118.180.43.0/24 maxlen: 24
118.180.45.0/24 maxlen: 24
118.180.49.0/24 maxlen: 24
118.180.51.0/24 maxlen: 24
118.180.54.0/24 maxlen: 24
118.180.56.0/24 maxlen: 24
118.180.57.0/24 maxlen: 24
118.180.58.0/24 maxlen: 24
118.180.59.0/24 maxlen: 24
118.180.60.0/24 maxlen: 24
118.180.62.0/24 maxlen: 24
118.180.63.0/24 maxlen: 24
118.181.54.0/24 maxlen: 24
118.181.55.0/24 maxlen: 24
118.181.98.0/23 maxlen: 23
118.181.103.0/24 maxlen: 24
118.181.110.0/24 maxlen: 24
118.182.56.0/22 maxlen: 22
118.182.56.0/24 maxlen: 24
118.182.57.0/24 maxlen: 24
118.182.96.0/23 maxlen: 23
118.182.98.0/23 maxlen: 23
118.182.100.0/23 maxlen: 23
118.182.102.0/23 maxlen: 23
118.182.224.0/24 maxlen: 24
118.182.225.0/24 maxlen: 24
118.182.226.0/24 maxlen: 24
118.182.249.0/24 maxlen: 24
118.183.8.0/24 maxlen: 24
118.183.9.0/24 maxlen: 24
118.183.10.0/24 maxlen: 24
118.183.11.0/24 maxlen: 24
118.183.12.0/24 maxlen: 24
118.183.13.0/24 maxlen: 24
118.183.32.0/24 maxlen: 24
118.183.33.0/24 maxlen: 24
118.183.35.0/24 maxlen: 24
118.183.37.0/24 maxlen: 24
118.183.40.0/24 maxlen: 24
118.183.61.0/24 maxlen: 24
118.183.152.0/22 maxlen: 22
118.183.168.0/24 maxlen: 24
118.183.169.0/24 maxlen: 24
118.183.171.0/24 maxlen: 24
118.183.172.0/24 maxlen: 24
118.183.173.0/24 maxlen: 24
118.183.174.0/24 maxlen: 24
118.183.211.0/24 maxlen: 24
118.183.240.0/21 maxlen: 21
125.74.1.0/24 maxlen: 24
125.74.3.0/24 maxlen: 24
125.74.4.0/24 maxlen: 24
125.74.5.0/24 maxlen: 24
125.74.6.0/24 maxlen: 24
125.74.7.0/24 maxlen: 24
125.74.8.0/22 maxlen: 22
125.74.12.0/24 maxlen: 24
125.74.14.0/24 maxlen: 24
125.74.16.0/24 maxlen: 24
125.74.17.0/24 maxlen: 24
125.74.18.0/24 maxlen: 24
125.74.19.0/24 maxlen: 24
125.74.20.0/24 maxlen: 24
125.74.21.0/24 maxlen: 24
125.74.23.0/24 maxlen: 24
125.74.24.0/24 maxlen: 24
125.74.26.0/24 maxlen: 24
125.74.27.0/24 maxlen: 24
125.74.28.0/24 maxlen: 24
125.74.29.0/24 maxlen: 24
125.74.30.0/24 maxlen: 24
125.74.32.0/24 maxlen: 24
125.74.33.0/24 maxlen: 24
125.74.34.0/24 maxlen: 24
125.74.38.0/24 maxlen: 24
125.74.42.0/24 maxlen: 24
125.74.43.0/24 maxlen: 24
125.74.44.0/24 maxlen: 24
125.74.45.0/24 maxlen: 24
125.74.47.0/24 maxlen: 24
125.74.48.0/24 maxlen: 24
125.74.52.0/24 maxlen: 24
125.74.53.0/24 maxlen: 24
125.74.54.0/24 maxlen: 24
125.74.55.0/24 maxlen: 24
125.74.78.0/24 maxlen: 24
125.74.80.0/24 maxlen: 24
125.74.84.0/22 maxlen: 22
125.74.88.0/23 maxlen: 23
125.74.90.0/24 maxlen: 24
125.74.91.0/24 maxlen: 24
125.74.92.0/23 maxlen: 23
125.74.94.0/24 maxlen: 24
125.74.95.0/24 maxlen: 24
125.74.108.0/24 maxlen: 24
125.74.109.0/24 maxlen: 24
125.74.128.0/23 maxlen: 23
125.74.130.0/23 maxlen: 23
125.74.132.0/23 maxlen: 23
125.74.134.0/24 maxlen: 24
125.74.135.0/24 maxlen: 24
125.74.192.0/21 maxlen: 21
125.74.232.0/21 maxlen: 21
125.75.64.0/24 maxlen: 24
125.75.66.0/23 maxlen: 23
125.75.68.0/23 maxlen: 23
125.75.96.0/23 maxlen: 23
125.75.98.0/24 maxlen: 24
125.75.102.0/24 maxlen: 24
125.75.103.0/24 maxlen: 24
125.75.104.0/24 maxlen: 24
125.75.105.0/24 maxlen: 24
125.75.106.0/24 maxlen: 24
125.75.107.0/24 maxlen: 24
125.75.108.0/24 maxlen: 24
125.75.109.0/24 maxlen: 24
125.75.110.0/23 maxlen: 23
125.75.148.0/23 maxlen: 23
125.75.150.0/23 maxlen: 23
125.76.82.0/24 maxlen: 24
125.76.112.0/22 maxlen: 22
202.100.73.0/24 maxlen: 24
202.100.74.0/24 maxlen: 24
202.100.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8a:63:e5:e8:5c:0d:c7:8b:75:d0:38:1f:03:5b:ca:48:18:1d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 31 03:19:35 2026 GMT
Not After : Jul 30 03:24:35 2027 GMT
Subject: CN=8FEE66F69BB23314C45761866D1EC29228E045B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:8a:5d:12:ca:8e:93:b1:77:8d:4c:d6:ac:
9f:72:86:76:ee:9b:27:b0:a3:3a:2e:e1:b9:f5:04:
96:62:7a:7f:7c:3b:4b:61:91:f8:c8:f7:b9:f5:44:
f2:65:57:47:b2:fb:a2:73:8a:e9:64:d3:d4:42:20:
ec:c4:d6:1a:0c:4f:c0:04:f6:73:4b:39:cc:21:9c:
aa:c2:28:1a:a0:fa:4d:da:ac:28:67:83:5a:c9:1a:
30:2b:a4:fe:97:e8:32:a1:6f:4b:49:94:01:6b:b5:
18:b3:e4:df:15:71:bf:59:11:a7:7c:ca:4d:56:64:
b1:59:f7:9a:d8:4f:18:1b:7c:54:71:45:7b:81:b3:
aa:41:d6:03:bd:cf:36:20:85:f9:c3:c1:96:48:85:
d8:0b:8c:df:8d:1b:c4:7b:7e:e0:71:f3:f9:22:e4:
af:3c:04:2f:a8:1e:b5:b5:e0:d9:29:58:1b:88:07:
1a:69:00:b1:c6:5f:25:8a:6f:38:e4:18:a5:67:01:
14:8a:c4:66:4f:03:e9:ab:fc:ac:27:db:cc:cc:59:
8a:94:7e:18:c8:60:f9:e6:98:31:db:00:f8:08:cf:
46:fd:38:0a:9b:1e:24:75:86:be:3c:6d:b4:f6:9a:
0f:ef:65:7b:08:d8:a1:80:01:43:61:bd:a8:b3:68:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:66:F6:9B:B2:33:14:C4:57:61:86:6D:1E:C2:92:28:E0:45:B5
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.0.0/24
60.164.2.0/24
60.164.4.0/22
60.164.240.0/21
60.165.20.0/23
60.165.24.0-60.165.28.255
60.165.64.0/22
60.165.115.0-60.165.116.255
60.165.118.0-60.165.123.255
60.165.125.0-60.165.127.255
60.165.237.0/24
61.134.70.0/23
61.159.80.0/22
61.159.88.0/22
118.180.0.0/23
118.180.4.0/24
118.180.26.0/23
118.180.30.0/23
118.180.37.0-118.180.40.255
118.180.42.0/23
118.180.45.0/24
118.180.49.0/24
118.180.51.0/24
118.180.54.0/24
118.180.56.0-118.180.60.255
118.180.62.0/23
118.181.54.0/23
118.181.98.0/23
118.181.103.0/24
118.181.110.0/24
118.182.56.0/22
118.182.96.0/21
118.182.224.0-118.182.226.255
118.182.249.0/24
118.183.8.0-118.183.13.255
118.183.32.0/23
118.183.35.0/24
118.183.37.0/24
118.183.40.0/24
118.183.61.0/24
118.183.152.0/22
118.183.168.0/23
118.183.171.0-118.183.174.255
118.183.211.0/24
118.183.240.0/21
125.74.1.0/24
125.74.3.0-125.74.12.255
125.74.14.0/24
125.74.16.0-125.74.21.255
125.74.23.0-125.74.24.255
125.74.26.0-125.74.30.255
125.74.32.0-125.74.34.255
125.74.38.0/24
125.74.42.0-125.74.45.255
125.74.47.0-125.74.48.255
125.74.52.0/22
125.74.78.0/24
125.74.80.0/24
125.74.84.0-125.74.95.255
125.74.108.0/23
125.74.128.0/21
125.74.192.0/21
125.74.232.0/21
125.75.64.0/24
125.75.66.0-125.75.69.255
125.75.96.0-125.75.98.255
125.75.102.0-125.75.111.255
125.75.148.0/22
125.76.82.0/24
125.76.112.0/22
202.100.73.0-202.100.74.255
202.100.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f4:7c:76:d2:23:d6:73:b4:63:f8:7f:28:c1:10:d8:0e:95:
4e:d3:0f:97:5b:05:7d:b8:e2:36:f6:62:85:69:58:99:0e:43:
24:83:45:44:39:19:13:18:5d:22:d7:81:c9:4a:c7:be:f6:be:
a4:12:47:67:7f:8f:05:67:42:ec:26:d2:d4:25:ee:91:66:27:
5c:f3:48:5b:7e:48:d7:cb:96:1a:c2:c3:22:ad:8b:b2:11:f5:
60:60:df:8b:8a:da:4b:cb:1b:3f:1d:5f:59:2a:23:14:93:2a:
e3:b8:eb:49:49:c1:36:18:af:bc:8a:3c:c0:4a:93:50:ba:17:
30:f3:b1:c6:4b:e1:c2:f3:f3:24:17:42:ae:ae:8b:58:af:7a:
2a:22:14:e7:b0:49:17:4c:6d:5d:74:5e:41:a1:9a:b5:1d:90:
ae:c3:f1:1f:65:c3:96:1e:53:a6:14:1d:56:a2:6d:6f:18:78:
65:9e:50:30:21:78:eb:00:4b:74:15:ae:97:2d:33:28:2b:a4:
8b:ac:41:ab:3d:8f:71:f9:44:78:8d:79:6e:b5:11:cb:f8:88:
27:86:42:89:5d:72:ce:f9:25:6b:b1:62:eb:17:ea:0d:ec:7f:
68:ce:a4:84:15:93:94:08:a7:9a:64:78:ac:8b:d5:ef:1f:f8:
ed:40:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:41:11 2026 by rpki-client