Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140320.roa
File: AS140320.roa (raw, json)
Hash identifier: rR471nhv+d0ccYa763aT6koB7M6+g2qkI54YswNvK58=
Subject key identifier: 92:48:F2:D5:8B:CD:04:A2:D9:CB:CD:1F:86:DF:B5:C6:A4:13:E9:DB
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 36EE990ED47D2C96EE479E5FEB1690656929209C
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140320.roa
Signing time: Thu 16 Jul 2026 16:02:11 +0000
ROA not before: Thu 16 Jul 2026 15:57:11 +0000
ROA not after: Thu 15 Jul 2027 16:02:11 +0000
asID: 140320
IP address blocks: 14.21.113.0/24 maxlen: 24
14.121.24.0/24 maxlen: 24
14.144.64.0/18 maxlen: 18
14.144.68.0/24 maxlen: 24
14.144.69.0/24 maxlen: 24
14.144.76.0/22 maxlen: 22
14.144.120.0/22 maxlen: 22
14.148.160.0/21 maxlen: 21
14.148.167.0/24 maxlen: 24
59.35.144.0/20 maxlen: 20
59.35.152.0/24 maxlen: 24
59.35.154.0/23 maxlen: 23
59.35.156.0/24 maxlen: 24
59.35.157.0/24 maxlen: 24
59.35.158.0/24 maxlen: 24
59.35.160.0/20 maxlen: 20
59.35.176.0/22 maxlen: 22
59.35.176.0/23 maxlen: 23
59.35.178.0/24 maxlen: 24
59.35.179.0/24 maxlen: 24
59.35.184.0/21 maxlen: 21
59.35.190.0/23 maxlen: 23
59.37.42.0/24 maxlen: 24
61.143.168.0/21 maxlen: 21
61.146.102.0/23 maxlen: 23
61.146.144.0/21 maxlen: 21
61.146.148.0/24 maxlen: 24
113.82.128.0/19 maxlen: 19
113.82.128.0/23 maxlen: 23
113.82.130.0/23 maxlen: 23
113.82.132.0/22 maxlen: 22
113.82.136.0/24 maxlen: 24
113.82.137.0/24 maxlen: 24
113.82.138.0/24 maxlen: 24
113.82.139.0/24 maxlen: 24
113.82.140.0/22 maxlen: 22
113.82.144.0/24 maxlen: 24
113.82.145.0/24 maxlen: 24
113.82.146.0/24 maxlen: 24
113.82.147.0/24 maxlen: 24
113.82.148.0/23 maxlen: 23
113.82.150.0/23 maxlen: 23
113.82.152.0/22 maxlen: 22
113.82.160.0/19 maxlen: 19
113.82.160.0/24 maxlen: 24
113.82.161.0/24 maxlen: 24
113.82.166.0/23 maxlen: 23
113.82.172.0/23 maxlen: 23
113.82.180.0/22 maxlen: 22
113.82.184.0/22 maxlen: 22
113.82.192.0/19 maxlen: 19
113.82.200.0/24 maxlen: 24
113.82.201.0/24 maxlen: 24
113.82.202.0/24 maxlen: 24
113.82.203.0/24 maxlen: 24
113.82.204.0/22 maxlen: 22
113.82.208.0/22 maxlen: 22
113.82.212.0/22 maxlen: 22
113.82.216.0/22 maxlen: 22
113.82.220.0/22 maxlen: 22
113.82.224.0/19 maxlen: 19
113.82.228.0/22 maxlen: 22
113.82.232.0/22 maxlen: 22
113.82.240.0/24 maxlen: 24
113.82.241.0/24 maxlen: 24
113.82.250.0/24 maxlen: 24
113.101.0.0/20 maxlen: 20
113.101.0.0/22 maxlen: 22
113.101.12.0/22 maxlen: 22
113.101.16.0/20 maxlen: 20
113.101.20.0/23 maxlen: 23
113.101.22.0/23 maxlen: 23
113.101.24.0/23 maxlen: 23
113.101.28.0/24 maxlen: 24
116.19.46.0/23 maxlen: 23
116.19.149.0/24 maxlen: 24
116.26.192.0/19 maxlen: 19
116.26.204.0/22 maxlen: 22
116.26.224.0/19 maxlen: 19
116.26.224.0/22 maxlen: 22
116.26.228.0/22 maxlen: 22
116.29.152.0/21 maxlen: 21
116.29.160.0/20 maxlen: 20
116.29.172.0/22 maxlen: 22
116.29.176.0/21 maxlen: 21
116.29.180.0/22 maxlen: 22
119.134.128.0/20 maxlen: 20
119.134.144.0/20 maxlen: 20
119.134.144.0/22 maxlen: 22
119.134.148.0/22 maxlen: 22
119.134.152.0/22 maxlen: 22
119.134.160.0/20 maxlen: 20
119.134.160.0/22 maxlen: 22
119.134.164.0/22 maxlen: 22
119.134.168.0/24 maxlen: 24
119.134.169.0/24 maxlen: 24
119.134.170.0/24 maxlen: 24
119.134.171.0/24 maxlen: 24
119.134.172.0/22 maxlen: 22
119.134.176.0/20 maxlen: 20
119.134.178.0/24 maxlen: 24
119.134.179.0/24 maxlen: 24
119.134.180.0/24 maxlen: 24
119.134.181.0/24 maxlen: 24
119.134.182.0/24 maxlen: 24
119.134.192.0/20 maxlen: 20
119.134.192.0/22 maxlen: 22
119.134.200.0/24 maxlen: 24
119.134.201.0/24 maxlen: 24
119.134.202.0/24 maxlen: 24
119.134.203.0/24 maxlen: 24
119.134.208.0/22 maxlen: 22
119.134.212.0/22 maxlen: 22
119.134.216.0/21 maxlen: 21
119.134.224.0/20 maxlen: 20
119.134.224.0/23 maxlen: 23
119.134.240.0/22 maxlen: 22
119.134.240.0/23 maxlen: 23
119.134.242.0/23 maxlen: 23
119.146.28.0/22 maxlen: 22
119.146.30.0/23 maxlen: 23
119.146.208.0/21 maxlen: 21
119.146.224.0/20 maxlen: 20
125.88.91.0/24 maxlen: 24
125.88.92.0/24 maxlen: 24
183.1.128.0/18 maxlen: 18
183.1.128.0/23 maxlen: 23
183.1.130.0/23 maxlen: 23
183.1.132.0/24 maxlen: 24
183.1.133.0/24 maxlen: 24
183.1.134.0/24 maxlen: 24
183.1.135.0/24 maxlen: 24
183.1.136.0/24 maxlen: 24
183.1.137.0/24 maxlen: 24
183.1.138.0/24 maxlen: 24
183.1.139.0/24 maxlen: 24
183.36.128.0/19 maxlen: 19
183.36.140.0/23 maxlen: 23
183.36.142.0/23 maxlen: 23
183.36.144.0/24 maxlen: 24
183.52.160.0/20 maxlen: 20
183.53.192.0/20 maxlen: 20
183.55.0.0/17 maxlen: 17
183.55.65.0/24 maxlen: 24
183.55.86.0/24 maxlen: 24
183.55.87.0/24 maxlen: 24
183.55.88.0/24 maxlen: 24
183.55.89.0/24 maxlen: 24
183.57.191.0/24 maxlen: 24
183.58.64.0/19 maxlen: 19
183.58.110.0/23 maxlen: 23
183.59.188.0/22 maxlen: 22
202.104.6.0/24 maxlen: 24
202.104.252.0/22 maxlen: 22
202.105.246.0/23 maxlen: 23
202.105.246.0/24 maxlen: 24
218.13.53.0/24 maxlen: 24
218.13.54.0/23 maxlen: 23
218.13.61.0/24 maxlen: 24
218.13.62.0/23 maxlen: 23
218.15.116.0/22 maxlen: 22
218.15.120.0/21 maxlen: 21
218.15.120.0/22 maxlen: 22
219.129.160.0/20 maxlen: 20
240e:5e:10d0::/46 maxlen: 46
240e:5e:10d4::/46 maxlen: 46
240e:5e:10d8::/46 maxlen: 46
240e:5e:10dc::/46 maxlen: 46
240e:108:4054::/48 maxlen: 48
240e:108:4854::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ee:99:0e:d4:7d:2c:96:ee:47:9e:5f:eb:16:90:65:69:29:20:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 16 15:57:11 2026 GMT
Not After : Jul 15 16:02:11 2027 GMT
Subject: CN=9248F2D58BCD04A2D9CBCD1F86DFB5C6A413E9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:92:3b:ac:24:36:df:a0:8e:ef:62:5c:e5:
f0:84:a7:43:3f:b7:fb:3f:a2:f5:69:cb:25:42:93:
66:f6:78:11:b4:de:b1:13:89:7f:75:aa:1c:1f:ec:
38:aa:ea:79:67:44:d0:21:c8:3d:d3:18:0b:09:b2:
24:42:1e:9f:3b:87:4a:d9:d5:37:4c:8b:35:ee:11:
a3:0e:f3:61:da:10:7c:e5:42:bc:1d:16:71:af:e1:
38:cf:c2:49:85:e4:ef:f1:f8:30:bc:94:53:06:b3:
45:2b:4b:eb:11:3a:f2:d0:f4:a7:8f:c6:0f:8e:83:
53:5f:0a:99:9e:06:40:cb:b3:e3:c1:b2:7b:08:09:
15:24:ea:86:14:0a:7b:fa:cc:59:ca:92:3a:02:f5:
47:ed:f9:99:2c:34:e7:bd:04:18:29:1c:ca:77:8e:
6a:38:0f:b7:c8:91:f3:07:de:e4:f5:93:76:cf:07:
f7:4b:e6:c5:c3:0c:86:eb:af:45:c7:7c:ef:8d:26:
5c:16:0f:8b:8b:cd:10:31:86:c8:e8:09:c2:6d:d7:
ed:63:f8:75:78:21:3d:4c:56:48:49:fa:d6:e6:4b:
c5:bf:3f:5f:98:4c:bf:8e:08:a5:31:01:ea:4f:51:
ef:20:9c:9e:2c:e2:84:cd:f7:d4:0e:30:5e:35:f3:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:48:F2:D5:8B:CD:04:A2:D9:CB:CD:1F:86:DF:B5:C6:A4:13:E9:DB
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.113.0/24
14.121.24.0/24
14.144.64.0/18
14.148.160.0/21
59.35.144.0-59.35.179.255
59.35.184.0/21
59.37.42.0/24
61.143.168.0/21
61.146.102.0/23
61.146.144.0/21
113.82.128.0/17
113.101.0.0/19
116.19.46.0/23
116.19.149.0/24
116.26.192.0/18
116.29.152.0-116.29.183.255
119.134.128.0-119.134.243.255
119.146.28.0/22
119.146.208.0/21
119.146.224.0/20
125.88.91.0-125.88.92.255
183.1.128.0/18
183.36.128.0/19
183.52.160.0/20
183.53.192.0/20
183.55.0.0/17
183.57.191.0/24
183.58.64.0/19
183.58.110.0/23
183.59.188.0/22
202.104.6.0/24
202.104.252.0/22
202.105.246.0/23
218.13.53.0-218.13.55.255
218.13.61.0-218.13.63.255
218.15.116.0-218.15.127.255
219.129.160.0/20
IPv6:
240e:5e:10d0::/44
240e:108:4054::/48
240e:108:4854::/48
Signature Algorithm: sha256WithRSAEncryption
2d:fa:6a:67:0d:37:c5:e9:4d:57:b7:b1:c1:92:22:86:3b:64:
46:e1:d0:ae:42:fe:59:35:05:e1:52:b6:44:ae:b1:bb:24:34:
91:03:78:d6:a4:f8:c5:e2:2c:ee:0d:17:02:62:c8:75:f1:02:
21:e1:7a:02:11:87:99:f8:78:d7:35:1a:2c:95:38:0c:8d:81:
1a:fb:10:40:c4:d7:91:93:b7:8a:39:75:54:42:fc:2d:db:b6:
74:11:5d:a7:aa:d1:b1:b2:5e:27:51:7a:73:6d:e9:a5:8c:10:
de:30:2c:fe:62:94:bf:c9:9e:1c:a8:0f:f6:19:59:d3:bd:6a:
ae:9b:27:16:b6:4d:7b:16:e3:d2:55:18:f8:65:4c:4e:cf:8c:
65:f8:47:f3:74:e7:f4:f7:67:58:15:85:7b:a0:2a:3d:46:9a:
a2:ec:67:fc:fa:f9:07:ea:3c:62:b3:8a:fa:d4:0f:e8:6e:0e:
39:26:0a:4f:7d:31:dc:2d:8b:28:d7:48:68:35:95:1b:b6:3c:
14:30:de:be:09:8f:62:2e:ea:d5:95:1f:1d:d9:14:60:1f:7c:
e4:b7:81:3c:5c:18:a4:9a:12:da:c5:5d:34:0a:1d:97:e7:10:
67:a8:f9:fa:20:8b:3a:cc:5a:08:b0:58:21:ce:5a:f0:87:05:
d4:3e:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:27 2026 by rpki-client