Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
File: AS140319.roa (raw, json)
Hash identifier: nsn2n0n9jaYgMtuzZ8X0WG7N3YuOM2sq8ZkSkXjYjus=
Subject key identifier: AA:AE:2E:D5:13:27:D0:0D:81:9F:95:A8:A9:55:E2:AC:B8:26:EB:2F
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 56EA3033392D131E6CEE16DAB28D64F10099CF68
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
Signing time: Thu 09 Jul 2026 16:00:35 +0000
ROA not before: Thu 09 Jul 2026 15:55:35 +0000
ROA not after: Thu 08 Jul 2027 16:00:35 +0000
asID: 140319
IP address blocks: 14.21.36.0/22 maxlen: 22
14.21.106.0/24 maxlen: 24
14.121.15.0/24 maxlen: 24
14.121.23.0/24 maxlen: 24
14.124.64.0/19 maxlen: 19
14.148.152.0/21 maxlen: 21
14.149.128.0/18 maxlen: 18
14.215.224.0/22 maxlen: 22
59.32.0.0/19 maxlen: 19
59.32.8.0/24 maxlen: 24
59.32.32.0/20 maxlen: 20
59.37.43.0/24 maxlen: 24
61.143.144.0/21 maxlen: 21
61.143.145.0/24 maxlen: 24
61.146.96.0/23 maxlen: 23
61.146.104.0/21 maxlen: 21
61.146.112.0/21 maxlen: 21
113.64.230.0/23 maxlen: 23
113.64.248.0/24 maxlen: 24
113.75.0.0/21 maxlen: 21
113.75.8.0/21 maxlen: 21
113.75.16.0/20 maxlen: 20
113.75.32.0/21 maxlen: 21
113.75.40.0/21 maxlen: 21
113.75.48.0/21 maxlen: 21
113.75.56.0/21 maxlen: 21
113.75.64.0/18 maxlen: 18
113.100.64.0/22 maxlen: 22
113.100.68.0/22 maxlen: 22
113.100.72.0/21 maxlen: 21
113.100.80.0/21 maxlen: 21
113.100.88.0/21 maxlen: 21
113.104.32.0/19 maxlen: 19
113.104.32.0/22 maxlen: 22
113.106.64.0/21 maxlen: 21
113.106.69.0/24 maxlen: 24
113.107.172.0/23 maxlen: 23
116.6.27.0/24 maxlen: 24
116.17.180.0/22 maxlen: 22
116.17.184.0/21 maxlen: 21
116.17.192.0/18 maxlen: 18
116.19.44.0/23 maxlen: 23
116.19.148.0/24 maxlen: 24
119.121.95.0/24 maxlen: 24
119.121.96.0/23 maxlen: 23
119.121.98.0/24 maxlen: 24
119.121.223.0/24 maxlen: 24
119.121.224.0/23 maxlen: 23
119.121.226.0/24 maxlen: 24
119.124.176.0/22 maxlen: 22
119.124.180.0/22 maxlen: 22
119.124.184.0/22 maxlen: 22
119.124.188.0/22 maxlen: 22
119.124.192.0/21 maxlen: 21
119.124.200.0/21 maxlen: 21
119.124.208.0/21 maxlen: 21
119.124.216.0/21 maxlen: 21
119.124.224.0/21 maxlen: 21
119.124.232.0/21 maxlen: 21
119.124.240.0/21 maxlen: 21
119.124.248.0/21 maxlen: 21
119.140.160.0/21 maxlen: 21
119.140.168.0/21 maxlen: 21
119.145.184.0/21 maxlen: 21
119.145.192.0/21 maxlen: 21
119.145.200.0/22 maxlen: 22
119.145.204.0/22 maxlen: 22
119.146.42.0/23 maxlen: 23
119.146.44.0/22 maxlen: 22
119.146.48.0/22 maxlen: 22
125.89.92.0/22 maxlen: 22
125.89.128.0/21 maxlen: 21
183.29.0.0/17 maxlen: 17
183.35.0.0/18 maxlen: 18
183.35.64.0/19 maxlen: 19
183.35.96.0/19 maxlen: 19
183.52.128.0/20 maxlen: 20
183.52.144.0/20 maxlen: 20
183.57.57.0/24 maxlen: 24
183.57.190.0/24 maxlen: 24
183.59.200.0/22 maxlen: 22
183.63.56.0/21 maxlen: 21
183.63.153.0/24 maxlen: 24
183.63.154.0/23 maxlen: 23
183.63.233.0/24 maxlen: 24
183.63.234.0/23 maxlen: 23
183.63.236.0/22 maxlen: 22
202.104.8.0/22 maxlen: 22
202.105.174.0/23 maxlen: 23
218.16.144.0/20 maxlen: 20
219.128.92.0/22 maxlen: 22
219.128.100.0/23 maxlen: 23
219.129.128.0/19 maxlen: 19
219.129.152.0/21 maxlen: 21
240e:5e:10c0::/46 maxlen: 46
240e:5e:10c4::/46 maxlen: 46
240e:5e:10c8::/46 maxlen: 46
240e:5e:10cc::/46 maxlen: 46
240e:108:4057::/48 maxlen: 48
240e:108:4857::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ea:30:33:39:2d:13:1e:6c:ee:16:da:b2:8d:64:f1:00:99:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 9 15:55:35 2026 GMT
Not After : Jul 8 16:00:35 2027 GMT
Subject: CN=AAAE2ED51327D00D819F95A8A955E2ACB826EB2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:7c:4c:b3:75:6a:03:95:4b:d1:d2:42:ee:
4c:ea:9d:5f:ce:94:08:98:70:8d:2f:42:85:bf:fa:
2b:1a:33:2b:d4:54:7f:b8:f4:6b:33:bc:93:d8:36:
a4:c5:8d:21:50:2e:87:e9:f6:32:61:82:a0:db:e6:
8f:e5:85:66:8c:f0:61:ce:be:87:01:a3:e6:07:63:
66:44:2c:7f:45:43:70:71:f1:56:56:ab:1d:34:fe:
d4:2a:47:d6:56:31:ec:e7:c3:b8:15:e2:69:2d:c2:
42:29:b7:44:88:86:1b:4d:46:9c:4d:24:73:87:e0:
e3:fc:3c:16:26:eb:7a:b6:dc:ed:b0:69:0d:25:3d:
f3:a6:ff:cf:38:30:a3:27:1c:08:56:dc:3e:8d:2e:
84:6c:4f:fb:e7:16:d5:7d:1e:63:44:81:3a:b0:3d:
19:2b:1b:d9:9c:35:75:e0:40:f8:45:f6:c6:c5:79:
3f:fe:d0:d1:41:75:5b:f3:df:89:0d:b9:78:44:f7:
ff:3d:67:64:2d:22:94:f1:6b:ad:91:71:e1:96:35:
a2:d3:0a:e2:08:c4:fe:30:ed:16:8c:55:ea:6f:20:
16:c2:bf:6d:af:27:d4:49:37:bc:57:71:51:b9:21:
2b:eb:ec:52:55:5f:17:7b:f5:ac:54:a3:50:4e:50:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:2E:D5:13:27:D0:0D:81:9F:95:A8:A9:55:E2:AC:B8:26:EB:2F
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.36.0/22
14.21.106.0/24
14.121.15.0/24
14.121.23.0/24
14.124.64.0/19
14.148.152.0/21
14.149.128.0/18
14.215.224.0/22
59.32.0.0-59.32.47.255
59.37.43.0/24
61.143.144.0/21
61.146.96.0/23
61.146.104.0-61.146.119.255
113.64.230.0/23
113.64.248.0/24
113.75.0.0/17
113.100.64.0/19
113.104.32.0/19
113.106.64.0/21
113.107.172.0/23
116.6.27.0/24
116.17.180.0-116.17.255.255
116.19.44.0/23
116.19.148.0/24
119.121.95.0-119.121.98.255
119.121.223.0-119.121.226.255
119.124.176.0-119.124.255.255
119.140.160.0/20
119.145.184.0-119.145.207.255
119.146.42.0-119.146.51.255
125.89.92.0/22
125.89.128.0/21
183.29.0.0/17
183.35.0.0/17
183.52.128.0/19
183.57.57.0/24
183.57.190.0/24
183.59.200.0/22
183.63.56.0/21
183.63.153.0-183.63.155.255
183.63.233.0-183.63.239.255
202.104.8.0/22
202.105.174.0/23
218.16.144.0/20
219.128.92.0/22
219.128.100.0/23
219.129.128.0/19
IPv6:
240e:5e:10c0::/44
240e:108:4057::/48
240e:108:4857::/48
Signature Algorithm: sha256WithRSAEncryption
a0:26:f7:81:c0:32:19:b1:3d:a7:91:90:fc:aa:32:a5:8c:06:
11:36:c5:84:b9:20:ff:dd:d8:03:87:a8:07:d4:b6:1a:a2:4b:
2c:61:18:e0:eb:59:42:27:04:3f:4a:4d:30:c5:3c:86:98:ed:
5e:34:53:df:71:92:7b:c3:de:e8:a2:38:df:fb:26:0e:48:20:
3b:8d:6e:f8:c9:3b:7c:c3:e4:b8:57:51:81:da:95:fe:63:0a:
3d:64:f1:b4:ed:0c:06:1b:27:8c:ac:89:6f:c7:d3:87:d4:50:
d0:08:07:3d:96:f9:f9:3c:7f:d9:88:29:f4:81:0e:db:3b:69:
fc:54:5e:9f:46:35:1b:92:98:05:f3:a4:73:69:c9:1e:ec:88:
34:bc:84:3a:c9:b9:cb:a8:f1:ec:79:9f:54:6e:56:f1:eb:21:
c1:35:6a:43:f0:77:d5:2f:a1:ee:b8:bb:b4:00:3e:34:ea:68:
e1:24:1c:ee:a7:a0:4a:3a:98:bc:9c:f5:b6:3d:18:d2:72:f1:
43:b3:c0:45:98:23:de:a7:60:6c:19:17:9f:b2:2d:29:e7:a5:
21:83:4d:a9:0e:54:43:8a:2c:29:e6:90:81:fa:22:79:6c:fa:
86:28:a0:2a:35:4b:f2:67:fd:87:36:a6:8b:4f:00:4d:b9:73:
72:e1:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:20 2026 by rpki-client