Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140484.roa
File: AS140484.roa (raw, json)
Hash identifier: t5SPJMn7qAmc8sGQtOQucyttfos8gQTxrBFSxEOTbtA=
Subject key identifier: AC:48:64:86:D5:A0:11:8D:01:EE:0B:D5:90:66:19:C6:96:A3:26:A4
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 09EB086B4D6A16F7B3D2FC83C6DA5C9678179DC0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140484.roa
Signing time: Wed 02 Sep 2026 07:52:08 +0000
ROA not before: Wed 02 Sep 2026 07:47:08 +0000
ROA not after: Wed 01 Sep 2027 07:52:08 +0000
asID: 140484
IP address blocks: 115.228.133.0/24 maxlen: 24
115.228.134.0/24 maxlen: 24
115.228.135.0/24 maxlen: 24
115.228.136.0/24 maxlen: 24
115.228.137.0/24 maxlen: 24
115.228.138.0/23 maxlen: 23
115.228.140.0/22 maxlen: 22
125.122.12.0/23 maxlen: 23
125.122.14.0/23 maxlen: 23
125.122.32.0/23 maxlen: 23
125.122.34.0/23 maxlen: 23
125.122.36.0/23 maxlen: 23
125.122.38.0/23 maxlen: 23
125.122.86.0/23 maxlen: 23
125.122.90.0/23 maxlen: 23
125.122.96.0/23 maxlen: 23
125.122.98.0/23 maxlen: 23
125.122.100.0/23 maxlen: 23
125.122.102.0/23 maxlen: 23
125.122.116.0/23 maxlen: 23
125.122.118.0/23 maxlen: 23
125.122.120.0/23 maxlen: 23
125.122.132.0/23 maxlen: 23
125.122.134.0/23 maxlen: 23
125.122.152.0/23 maxlen: 23
125.122.154.0/23 maxlen: 23
125.122.156.0/23 maxlen: 23
240e:971:4100::/41 maxlen: 41
240e:971:4180::/41 maxlen: 41
240e:982:b800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 10:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:eb:08:6b:4d:6a:16:f7:b3:d2:fc:83:c6:da:5c:96:78:17:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 2 07:47:08 2026 GMT
Not After : Sep 1 07:52:08 2027 GMT
Subject: CN=AC486486D5A0118D01EE0BD5906619C696A326A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:87:e1:15:b2:e5:7e:e9:58:f0:0d:32:4d:
8a:af:58:03:11:f3:7e:a2:c5:42:e1:5c:21:a8:c2:
ca:d1:50:0c:7c:95:22:0b:83:dc:86:46:d1:b8:0d:
42:d1:40:b4:02:82:c8:30:09:87:dd:ac:08:ae:81:
ed:c3:ac:d7:5b:eb:47:a5:1c:95:5a:5f:01:23:06:
79:22:36:e7:67:fc:6f:f4:39:5e:30:fa:60:9d:ad:
e2:03:1e:2b:07:c0:b0:ff:ad:05:83:1c:43:d5:c6:
b2:6a:08:c6:13:6f:6c:e0:f2:90:ed:2f:70:f4:a8:
e3:1f:d7:8d:37:57:96:8a:59:1f:5e:da:f4:4c:30:
49:c3:30:93:13:fb:28:a1:51:48:0a:da:02:08:12:
b6:06:2f:fc:e6:0a:e5:3b:14:71:c3:58:58:00:28:
88:07:31:88:6f:b5:b3:a5:d1:fd:c4:d2:9e:24:d2:
f6:91:ed:73:f7:59:2c:32:31:9b:7a:e0:55:1b:90:
3d:0a:bb:21:a0:c9:a2:ae:2c:a2:c4:9a:73:a0:a5:
20:e3:2b:bc:12:13:45:3d:31:b6:dd:aa:8f:00:8c:
a9:bf:e3:8f:fe:3a:2d:dc:af:4d:34:cc:d0:5c:92:
bb:f7:d7:87:14:69:4b:1d:42:1d:23:2c:ac:e6:19:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:64:86:D5:A0:11:8D:01:EE:0B:D5:90:66:19:C6:96:A3:26:A4
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.228.133.0-115.228.143.255
125.122.12.0/22
125.122.32.0/21
125.122.86.0/23
125.122.90.0/23
125.122.96.0/21
125.122.116.0-125.122.121.255
125.122.132.0/22
125.122.152.0-125.122.157.255
IPv6:
240e:971:4100::/40
240e:982:b800::/40
Signature Algorithm: sha256WithRSAEncryption
90:c2:3e:93:9b:6a:73:4b:53:fa:b1:78:ce:91:95:69:6b:bd:
37:3c:b9:27:01:4c:d4:c5:76:02:1e:5a:be:bc:0d:e3:1f:9a:
c7:f7:b6:73:31:06:01:2f:e2:df:03:19:08:4c:84:a9:49:84:
13:98:95:53:82:a4:62:3a:39:f6:64:f4:4d:28:aa:41:5e:11:
68:fb:af:e0:57:bb:38:a0:7f:a4:64:08:1e:af:78:46:16:77:
fd:4e:81:43:a3:6e:31:6d:3a:bb:79:fc:34:a1:c5:d1:81:b2:
0b:e0:e1:c9:3c:1a:19:13:0a:c3:8a:99:bc:dd:78:58:6b:2c:
ff:a8:d0:c9:b7:6e:13:35:c2:5a:4e:07:bc:0b:07:12:e9:73:
df:de:5c:c8:60:38:73:cd:56:cf:5b:83:19:db:83:ea:b2:16:
44:cc:ac:63:ef:f7:7c:bf:99:cc:27:69:80:91:7c:03:70:94:
dd:22:69:58:94:e6:38:fd:c7:87:3b:37:08:2f:26:51:84:21:
68:fd:fe:a8:11:f6:af:c6:e6:56:dc:df:e5:c8:17:0a:4f:ac:
8c:e0:8e:1a:51:42:9c:62:e8:38:69:1e:0e:e1:60:17:99:92:
f7:75:7d:ba:f7:e1:fb:f4:aa:57:0f:e0:08:8e:b2:ef:ed:ef:
05:61:3c:9e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCesIa01qFvez0vyDxtpclngXncAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDkwMjA3NDcwOFoX
DTI3MDkwMTA3NTIwOFowMzExMC8GA1UEAxMoQUM0ODY0ODZENUEwMTE4RDAxRUUw
QkQ1OTA2NjE5QzY5NkEzMjZBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVsh+EVsuV+6VjwDTJNiq9YAxHzfqLFQuFcIajCytFQDHyVIguD3IZG0bgN
QtFAtAKCyDAJh92sCK6B7cOs11vrR6UclVpfASMGeSI252f8b/Q5XjD6YJ2t4gMe
KwfAsP+tBYMcQ9XGsmoIxhNvbODykO0vcPSo4x/XjTdXlopZH17a9EwwScMwkxP7
KKFRSAraAggStgYv/OYK5TsUccNYWAAoiAcxiG+1s6XR/cTSniTS9pHtc/dZLDIx
m3rgVRuQPQq7IaDJoq4sosSac6ClIOMrvBITRT0xtt2qjwCMqb/jj/46LdyvTTTM
0FySu/fXhxRpSx1CHSMsrOYZY/8CAwEAAaOCAkQwggJAMB0GA1UdDgQWBBSsSGSG
1aARjQHuC9WQZhnGlqMmpDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwNDg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MH8GCCsGAQUFBwEHAQH/BHAwbjBUBAIAATBOMAwDBABz5IUDBARz5IADBAJ9egwD
BAN9eiADBAF9elYDBAF9eloDBAN9emAwDAMEAn16dAMEAX16eAMEAn16hDAMAwQD
fXqYAwQBfXqcMBYEAgACMBADBgAkDglxQQMGACQOCYK4MA0GCSqGSIb3DQEBCwUA
A4IBAQCQwj6Tm2pzS1P6sXjOkZVpa703PLknAUzUxXYCHlq+vA3jH5rH97ZzMQYB
L+LfAxkITISpSYQTmJVTgqRiOjn2ZPRNKKpBXhFo+6/gV7s4oH+kZAger3hGFnf9
ToFDo24xbTq7efw0ocXRgbIL4OHJPBoZEwrDipm83XhYayz/qNDJt24TNcJaTge8
CwcS6XPf3lzIYDhzzVbPW4MZ24PqshZEzKxj7/d8v5nMJ2mAkXwDcJTdImlYlOY4
/ceHOzcILyZRhCFo/f6oEfavxuZW3N/lyBcKT6yM4I4aUUKcYug4aR4O4WAXmZL3
dX269+H79KpXD+AIjrLv7e8FYTye
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:51 2026 by rpki-client