Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140309.roa
File: AS140309.roa (raw, json)
Hash identifier: 4Z4NJmy+qcoTLR53kcGURC7+jaTZNr6fsNtE8NqHuB0=
Subject key identifier: A7:31:FD:BE:05:E4:09:60:AF:8C:1C:91:23:7E:38:1C:89:E5:07:10
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 186B436E2D6E71BAA1DCB659864FFCE594C5D401
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140309.roa
Signing time: Thu 16 Jul 2026 16:02:11 +0000
ROA not before: Thu 16 Jul 2026 15:57:11 +0000
ROA not after: Thu 15 Jul 2027 16:02:11 +0000
asID: 140309
IP address blocks: 59.35.120.0/22 maxlen: 22
59.35.124.0/23 maxlen: 23
59.35.124.0/24 maxlen: 24
59.35.126.0/23 maxlen: 23
59.35.126.0/24 maxlen: 24
59.35.127.0/24 maxlen: 24
59.35.128.0/21 maxlen: 21
59.35.136.0/22 maxlen: 22
59.35.136.0/23 maxlen: 23
59.35.140.0/22 maxlen: 22
59.35.140.0/23 maxlen: 23
59.35.143.0/24 maxlen: 24
61.142.48.0/24 maxlen: 24
113.64.16.0/22 maxlen: 22
113.64.21.0/24 maxlen: 24
113.64.23.0/24 maxlen: 24
113.64.27.0/24 maxlen: 24
113.64.128.0/22 maxlen: 22
113.64.132.0/24 maxlen: 24
113.64.133.0/24 maxlen: 24
113.64.134.0/24 maxlen: 24
113.64.135.0/24 maxlen: 24
113.64.136.0/22 maxlen: 22
113.64.144.0/24 maxlen: 24
113.64.145.0/24 maxlen: 24
113.64.146.0/24 maxlen: 24
113.64.147.0/24 maxlen: 24
113.64.148.0/23 maxlen: 23
113.64.150.0/23 maxlen: 23
113.64.152.0/22 maxlen: 22
113.64.156.0/22 maxlen: 22
113.64.160.0/22 maxlen: 22
113.64.168.0/22 maxlen: 22
113.64.172.0/23 maxlen: 23
113.64.174.0/23 maxlen: 23
113.64.176.0/22 maxlen: 22
113.64.180.0/22 maxlen: 22
113.64.184.0/23 maxlen: 23
113.64.186.0/23 maxlen: 23
113.64.188.0/22 maxlen: 22
113.100.0.0/20 maxlen: 20
113.100.0.0/23 maxlen: 23
113.100.2.0/23 maxlen: 23
113.100.4.0/23 maxlen: 23
113.100.6.0/23 maxlen: 23
113.100.8.0/24 maxlen: 24
113.100.10.0/23 maxlen: 23
113.100.14.0/24 maxlen: 24
113.100.15.0/24 maxlen: 24
113.100.16.0/20 maxlen: 20
113.100.16.0/24 maxlen: 24
113.100.17.0/24 maxlen: 24
113.100.18.0/24 maxlen: 24
113.100.20.0/22 maxlen: 22
113.100.25.0/24 maxlen: 24
113.100.26.0/24 maxlen: 24
113.100.27.0/24 maxlen: 24
113.100.30.0/23 maxlen: 23
113.101.32.0/21 maxlen: 21
113.101.32.0/23 maxlen: 23
113.101.34.0/23 maxlen: 23
113.101.36.0/23 maxlen: 23
113.101.38.0/23 maxlen: 23
113.101.40.0/21 maxlen: 21
113.101.40.0/23 maxlen: 23
113.101.42.0/23 maxlen: 23
113.101.46.0/24 maxlen: 24
113.101.47.0/24 maxlen: 24
113.101.48.0/21 maxlen: 21
113.101.48.0/22 maxlen: 22
113.101.52.0/23 maxlen: 23
113.101.54.0/23 maxlen: 23
113.101.56.0/21 maxlen: 21
113.101.56.0/23 maxlen: 23
113.101.58.0/23 maxlen: 23
113.101.60.0/23 maxlen: 23
113.101.62.0/23 maxlen: 23
113.103.96.0/19 maxlen: 19
113.103.96.0/22 maxlen: 22
113.103.104.0/22 maxlen: 22
113.103.112.0/23 maxlen: 23
113.103.114.0/23 maxlen: 23
113.103.124.0/22 maxlen: 22
113.107.32.0/22 maxlen: 22
113.107.52.0/22 maxlen: 22
113.110.0.0/20 maxlen: 20
113.110.0.0/22 maxlen: 22
113.110.4.0/22 maxlen: 22
113.110.8.0/22 maxlen: 22
113.110.12.0/22 maxlen: 22
113.110.16.0/20 maxlen: 20
113.110.16.0/22 maxlen: 22
113.110.20.0/22 maxlen: 22
113.110.24.0/22 maxlen: 22
113.110.28.0/22 maxlen: 22
113.110.32.0/20 maxlen: 20
113.110.32.0/23 maxlen: 23
113.110.34.0/23 maxlen: 23
113.110.36.0/22 maxlen: 22
113.110.40.0/22 maxlen: 22
113.110.48.0/20 maxlen: 20
113.117.0.0/23 maxlen: 23
113.117.2.0/23 maxlen: 23
113.117.4.0/22 maxlen: 22
113.117.12.0/22 maxlen: 22
113.117.16.0/22 maxlen: 22
113.117.20.0/22 maxlen: 22
113.117.40.0/23 maxlen: 23
113.117.42.0/23 maxlen: 23
113.117.44.0/22 maxlen: 22
113.117.48.0/22 maxlen: 22
113.117.52.0/22 maxlen: 22
113.117.56.0/23 maxlen: 23
113.117.58.0/23 maxlen: 23
113.117.60.0/24 maxlen: 24
113.117.61.0/24 maxlen: 24
113.117.62.0/24 maxlen: 24
113.117.63.0/24 maxlen: 24
113.117.68.0/23 maxlen: 23
113.117.70.0/23 maxlen: 23
113.117.72.0/24 maxlen: 24
113.117.73.0/24 maxlen: 24
113.117.74.0/24 maxlen: 24
113.117.75.0/24 maxlen: 24
113.117.76.0/22 maxlen: 22
113.117.80.0/22 maxlen: 22
113.117.80.0/24 maxlen: 24
113.117.81.0/24 maxlen: 24
113.117.82.0/24 maxlen: 24
113.117.83.0/24 maxlen: 24
113.117.84.0/22 maxlen: 22
113.117.84.0/24 maxlen: 24
113.117.85.0/24 maxlen: 24
113.117.86.0/24 maxlen: 24
113.117.87.0/24 maxlen: 24
113.117.88.0/22 maxlen: 22
113.117.92.0/22 maxlen: 22
113.117.96.0/22 maxlen: 22
113.117.96.0/24 maxlen: 24
113.117.97.0/24 maxlen: 24
113.117.98.0/24 maxlen: 24
113.117.99.0/24 maxlen: 24
113.117.100.0/22 maxlen: 22
113.117.104.0/22 maxlen: 22
113.117.112.0/22 maxlen: 22
113.117.124.0/23 maxlen: 23
113.117.127.0/24 maxlen: 24
116.16.184.0/23 maxlen: 23
116.16.186.0/23 maxlen: 23
116.16.188.0/24 maxlen: 24
116.16.189.0/24 maxlen: 24
116.16.192.0/22 maxlen: 22
116.16.196.0/22 maxlen: 22
116.16.200.0/23 maxlen: 23
116.16.202.0/23 maxlen: 23
116.16.204.0/23 maxlen: 23
116.16.206.0/23 maxlen: 23
116.16.208.0/22 maxlen: 22
116.16.212.0/22 maxlen: 22
116.16.216.0/22 maxlen: 22
116.16.220.0/22 maxlen: 22
116.16.224.0/22 maxlen: 22
116.16.228.0/24 maxlen: 24
116.16.229.0/24 maxlen: 24
116.16.230.0/24 maxlen: 24
116.16.231.0/24 maxlen: 24
116.16.232.0/23 maxlen: 23
116.16.234.0/23 maxlen: 23
116.16.236.0/23 maxlen: 23
116.16.238.0/23 maxlen: 23
116.16.240.0/23 maxlen: 23
116.16.242.0/23 maxlen: 23
116.16.244.0/23 maxlen: 23
116.16.246.0/23 maxlen: 23
116.16.248.0/23 maxlen: 23
116.16.250.0/23 maxlen: 23
119.140.56.0/24 maxlen: 24
119.140.58.0/24 maxlen: 24
119.140.60.0/24 maxlen: 24
119.140.61.0/24 maxlen: 24
119.140.62.0/24 maxlen: 24
119.140.179.0/24 maxlen: 24
121.11.142.0/23 maxlen: 23
125.91.160.0/24 maxlen: 24
125.91.188.0/23 maxlen: 23
125.91.190.0/23 maxlen: 23
183.1.200.0/23 maxlen: 23
183.1.202.0/23 maxlen: 23
183.1.204.0/22 maxlen: 22
183.1.248.0/22 maxlen: 22
183.1.252.0/23 maxlen: 23
183.1.254.0/23 maxlen: 23
183.47.149.0/24 maxlen: 24
183.47.150.0/24 maxlen: 24
183.47.153.0/24 maxlen: 24
183.47.155.0/24 maxlen: 24
183.56.112.0/22 maxlen: 22
183.56.120.0/23 maxlen: 23
218.16.160.0/24 maxlen: 24
218.16.161.0/24 maxlen: 24
218.16.164.0/24 maxlen: 24
218.16.165.0/24 maxlen: 24
218.16.166.0/24 maxlen: 24
218.16.167.0/24 maxlen: 24
218.16.175.0/24 maxlen: 24
219.132.112.0/20 maxlen: 20
219.132.112.0/22 maxlen: 22
219.132.116.0/23 maxlen: 23
219.132.118.0/23 maxlen: 23
219.132.120.0/22 maxlen: 22
240e:5e:1090::/46 maxlen: 46
240e:5e:1094::/46 maxlen: 46
240e:5e:1098::/46 maxlen: 46
240e:5e:109c::/46 maxlen: 46
240e:108:404c::/48 maxlen: 48
240e:108:484c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6b:43:6e:2d:6e:71:ba:a1:dc:b6:59:86:4f:fc:e5:94:c5:d4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 16 15:57:11 2026 GMT
Not After : Jul 15 16:02:11 2027 GMT
Subject: CN=A731FDBE05E40960AF8C1C91237E381C89E50710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:1d:ab:7f:46:a9:d1:66:dc:3f:d5:6c:1f:
e0:19:e5:22:6f:88:22:26:c1:77:a0:12:e7:26:58:
45:cf:94:65:4f:2e:ac:2f:e2:36:9c:d3:12:49:ed:
74:e6:3b:2d:3e:63:08:73:7f:90:48:ea:60:f4:e8:
8f:d0:c7:4c:86:34:84:a8:39:4d:d9:ad:6e:fc:95:
98:66:69:56:4f:e3:54:69:11:d4:32:d1:8a:0d:04:
76:f1:ff:36:ed:ad:1b:44:1c:3c:85:b5:0b:92:9f:
bc:a3:5d:30:c0:12:27:86:f7:ce:24:ed:66:fe:13:
f6:59:e9:b5:cd:68:c7:a9:40:da:0c:7d:ff:64:e3:
fa:c3:f9:e8:b7:f7:d3:60:1d:98:2a:ec:cc:e4:92:
48:6e:01:52:24:b2:73:a2:52:e5:40:a7:2b:1d:23:
f5:1e:37:a4:0e:6b:50:f3:0a:ff:f6:b6:21:d3:b3:
77:d2:26:1b:35:4b:34:a2:40:39:d5:42:ca:e3:cf:
02:ef:c3:68:ce:8e:c1:7d:cd:55:e4:9a:40:1d:e3:
f1:9c:08:90:46:01:00:77:da:9b:d9:7b:7e:a8:82:
93:2d:c9:66:56:b0:5f:5d:a8:cd:a1:1a:fe:54:34:
61:ae:e9:df:5b:23:2b:af:9d:42:c8:56:00:de:23:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:FD:BE:05:E4:09:60:AF:8C:1C:91:23:7E:38:1C:89:E5:07:10
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140309.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.35.120.0-59.35.143.255
61.142.48.0/24
113.64.16.0/22
113.64.21.0/24
113.64.23.0/24
113.64.27.0/24
113.64.128.0-113.64.139.255
113.64.144.0-113.64.163.255
113.64.168.0-113.64.191.255
113.100.0.0/19
113.101.32.0/19
113.103.96.0/19
113.107.32.0/22
113.107.52.0/22
113.110.0.0/18
113.117.0.0/21
113.117.12.0-113.117.23.255
113.117.40.0-113.117.63.255
113.117.68.0-113.117.107.255
113.117.112.0/22
113.117.124.0/23
113.117.127.0/24
116.16.184.0-116.16.189.255
116.16.192.0-116.16.251.255
119.140.56.0/24
119.140.58.0/24
119.140.60.0-119.140.62.255
119.140.179.0/24
121.11.142.0/23
125.91.160.0/24
125.91.188.0/22
183.1.200.0/21
183.1.248.0/21
183.47.149.0-183.47.150.255
183.47.153.0/24
183.47.155.0/24
183.56.112.0/22
183.56.120.0/23
218.16.160.0/23
218.16.164.0/22
218.16.175.0/24
219.132.112.0/20
IPv6:
240e:5e:1090::/44
240e:108:404c::/48
240e:108:484c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:5c:86:4c:da:ef:77:27:df:d4:49:5b:a0:2e:b9:81:ef:01:
05:cd:20:e7:11:8a:33:d3:78:10:64:88:05:1f:6d:fa:d4:3c:
5a:57:f2:25:e4:bd:ab:fb:2d:fd:20:00:ec:91:9b:a8:77:bf:
74:27:f6:ed:71:7e:97:ac:ca:24:a5:f7:15:04:f7:d1:a9:7c:
4b:68:8a:29:30:d9:67:f3:3c:8d:31:55:67:f6:07:de:59:d8:
98:87:94:96:9c:e4:ec:21:73:2c:5d:a5:b5:a7:de:29:8b:69:
02:68:97:13:37:1d:e3:ea:10:27:b9:29:bf:d2:71:f8:64:ce:
e4:3f:24:7c:5c:91:be:fc:6a:b6:ea:45:db:a9:d9:b6:03:51:
6b:f8:35:7f:5d:cc:d5:e1:fc:89:9c:1b:28:86:25:07:ab:ee:
5b:c0:bc:6d:9a:76:2c:ae:25:e0:f6:3e:61:04:91:36:9e:40:
b9:0e:69:ff:74:cc:1e:c6:33:1a:74:ff:b9:73:ce:07:d6:90:
dd:b1:68:7e:62:c4:ba:59:60:71:ce:d2:fa:ee:2e:cd:ec:2e:
8e:bd:d6:67:a2:d2:af:33:37:cf:ed:78:f5:80:de:70:15:5c:
9a:c3:bd:05:4b:d7:e8:21:0d:6c:c1:9e:71:66:b9:17:b0:e2:
22:8f:b9:1a
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUGGtDbi1ucbqh3LZZhk/85ZTF1AEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcxNjE1NTcxMVoX
DTI3MDcxNTE2MDIxMVowMzExMC8GA1UEAxMoQTczMUZEQkUwNUU0MDk2MEFGOEMx
QzkxMjM3RTM4MUM4OUU1MDcxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALAsHat/RqnRZtw/1Wwf4BnlIm+IIibBd6AS5yZYRc+UZU8urC/iNpzTEknt
dOY7LT5jCHN/kEjqYPToj9DHTIY0hKg5TdmtbvyVmGZpVk/jVGkR1DLRig0EdvH/
Nu2tG0QcPIW1C5KfvKNdMMASJ4b3ziTtZv4T9lnptc1ox6lA2gx9/2Tj+sP56Lf3
02AdmCrszOSSSG4BUiSyc6JS5UCnKx0j9R43pA5rUPMK//a2IdOzd9ImGzVLNKJA
OdVCyuPPAu/DaM6OwX3NVeSaQB3j8ZwIkEYBAHfam9l7fqiCky3JZlawX12ozaEa
/lQ0Ya7p31sjK6+dQshWAN4jZFECAwEAAaOCA18wggNbMB0GA1UdDgQWBBSnMf2+
BeQJYK+MHJEjfjgcieUHEDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwMzA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBmAYIKwYBBQUHAQcBAf8EggGHMIIBgzCCAVwEAgABMIIBVDAMAwQDOyN4AwQE
OyOAAwQAPY4wAwQCcUAQAwQAcUAVAwQAcUAXAwQAcUAbMAwDBAdxQIADBAJxQIgw
DAMEBHFAkAMEAnFAoDAMAwQDcUCoAwQGcUCAAwQFcWQAAwQFcWUgAwQFcWdgAwQC
cWsgAwQCcWs0AwQGcW4AAwQDcXUAMAwDBAJxdQwDBANxdRAwDAMEA3F1KAMEBnF1
ADAMAwQCcXVEAwQCcXVoAwQCcXVwAwQBcXV8AwQAcXV/MAwDBAN0ELgDBAF0ELww
DAMEBnQQwAMEAnQQ+AMEAHeMOAMEAHeMOjAMAwQCd4w8AwQAd4w+AwQAd4yzAwQB
eQuOAwQAfVugAwQCfVu8AwQDtwHIAwQDtwH4MAwDBAC3L5UDBAC3L5YDBAC3L5kD
BAC3L5sDBAK3OHADBAG3OHgDBAHaEKADBALaEKQDBADaEK8DBATbhHAwIQQCAAIw
GwMHBCQOAF4QkAMHACQOAQhATAMHACQOAQhITDANBgkqhkiG9w0BAQsFAAOCAQEA
LlyGTNrvdyff1ElboC65ge8BBc0g5xGKM9N4EGSIBR9t+tQ8WlfyJeS9q/st/SAA
7JGbqHe/dCf27XF+l6zKJKX3FQT30al8S2iKKTDZZ/M8jTFVZ/YH3lnYmIeUlpzk
7CFzLF2ltafeKYtpAmiXEzcd4+oQJ7kpv9Jx+GTO5D8kfFyRvvxqtupF26nZtgNR
a/g1f13M1eH8iZwbKIYlB6vuW8C8bZp2LK4l4PY+YQSRNp5AuQ5p/3TMHsYzGnT/
uXPOB9aQ3bFofmLEullgcc7S+u4uzewujr3WZ6LSrzM3z+149YDecBVcmsO9BUvX
6CENbMGecWa5F7DiIo+5Gg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:29 2026 by rpki-client