Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
File: AS141739.roa (raw, json)
Hash identifier: xKbriOqnYxTqh/+G8iXs2SDqeXpfn/tqqH5MAuRUDaI=
Subject key identifier: 13:33:6C:2D:F5:58:5E:55:CB:12:C2:28:5B:BC:0A:A1:63:2C:13:F3
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7C70C2E05C76CD36735F5845D0B104CA1EEC96C0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
Signing time: Mon 22 Jun 2026 18:46:33 +0000
ROA not before: Mon 22 Jun 2026 18:41:33 +0000
ROA not after: Mon 21 Jun 2027 18:46:33 +0000
asID: 141739
IP address blocks: 14.107.160.0/22 maxlen: 22
14.107.172.0/22 maxlen: 22
14.107.176.0/21 maxlen: 21
14.110.80.0/20 maxlen: 20
14.110.120.0/21 maxlen: 21
106.80.120.0/21 maxlen: 21
106.80.176.0/20 maxlen: 20
106.89.48.0/20 maxlen: 20
106.89.64.0/20 maxlen: 20
113.248.96.0/20 maxlen: 20
113.248.160.0/19 maxlen: 19
113.248.208.0/21 maxlen: 21
113.248.216.0/21 maxlen: 21
113.248.224.0/19 maxlen: 19
113.249.32.0/20 maxlen: 20
113.249.224.0/20 maxlen: 20
113.250.128.0/20 maxlen: 20
113.250.144.0/21 maxlen: 21
113.251.208.0/21 maxlen: 21
113.251.224.0/21 maxlen: 21
113.251.248.0/21 maxlen: 21
125.80.76.0/22 maxlen: 22
125.80.108.0/22 maxlen: 22
125.80.152.0/21 maxlen: 21
125.80.192.0/19 maxlen: 19
125.80.248.0/21 maxlen: 21
125.81.232.0/21 maxlen: 21
125.84.232.0/22 maxlen: 22
125.85.64.0/18 maxlen: 18
125.85.128.0/19 maxlen: 19
125.86.0.0/20 maxlen: 20
125.86.16.0/20 maxlen: 20
125.86.84.0/22 maxlen: 22
125.86.128.0/22 maxlen: 22
125.86.132.0/22 maxlen: 22
125.86.136.0/21 maxlen: 21
125.87.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:70:c2:e0:5c:76:cd:36:73:5f:58:45:d0:b1:04:ca:1e:ec:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 22 18:41:33 2026 GMT
Not After : Jun 21 18:46:33 2027 GMT
Subject: CN=13336C2DF5585E55CB12C2285BBC0AA1632C13F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:c1:09:f0:cd:60:a6:14:1b:72:5e:77:1d:
0c:25:98:22:6b:2f:89:3b:35:42:cb:fa:71:17:d9:
c8:61:64:b1:7c:56:bb:ba:84:0c:ab:3d:df:06:1a:
64:a0:00:fb:de:c8:42:9a:c4:da:4f:38:9b:25:69:
4e:0f:59:a8:13:d1:b3:d6:02:cc:41:88:b8:03:ba:
6c:32:3d:f5:20:f0:eb:77:8e:56:99:ac:27:5a:b0:
f7:f0:52:e6:0f:1b:3a:3a:42:0f:ac:f1:c7:e1:66:
dc:28:31:b3:e1:d1:73:37:0f:a2:e9:30:40:8a:6e:
7d:d7:8a:76:f7:e2:23:3f:e7:a8:27:b6:74:64:61:
9c:b1:85:32:fb:b6:98:81:44:5d:94:1a:22:e4:0b:
4c:a0:2f:75:d7:98:6c:a4:1d:a3:ca:cc:74:28:88:
9a:eb:fe:0b:2e:4d:52:2c:00:cf:a5:36:e7:c9:11:
69:e8:ad:a2:0d:70:54:45:8a:97:d5:b4:78:2d:61:
1d:bf:29:1a:97:6a:e5:76:1a:4d:47:67:bc:7f:64:
f9:67:c5:66:7b:7d:d0:c2:e7:3c:00:8d:fe:c3:94:
ae:c9:d4:5f:55:5c:e9:d2:b2:20:e1:ed:b0:aa:e6:
52:1e:dc:00:f4:a3:60:21:47:71:fd:76:6e:2f:c0:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:6C:2D:F5:58:5E:55:CB:12:C2:28:5B:BC:0A:A1:63:2C:13:F3
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.107.160.0/22
14.107.172.0-14.107.183.255
14.110.80.0/20
14.110.120.0/21
106.80.120.0/21
106.80.176.0/20
106.89.48.0-106.89.79.255
113.248.96.0/20
113.248.160.0/19
113.248.208.0-113.248.255.255
113.249.32.0/20
113.249.224.0/20
113.250.128.0-113.250.151.255
113.251.208.0/21
113.251.224.0/21
113.251.248.0/21
125.80.76.0/22
125.80.108.0/22
125.80.152.0/21
125.80.192.0/19
125.80.248.0/21
125.81.232.0/21
125.84.232.0/22
125.85.64.0-125.85.159.255
125.86.0.0/19
125.86.84.0/22
125.86.128.0/20
125.87.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:54:af:7d:29:aa:bc:28:d8:81:58:61:a6:3d:08:5a:77:c2:
fe:38:08:03:0e:e2:43:f9:58:3d:b6:f2:ad:a3:9c:a3:80:22:
e9:b4:47:06:f1:ee:c4:dd:ed:d7:73:af:09:58:bd:30:72:6a:
ce:55:4e:67:00:14:89:32:3f:7a:f3:41:27:00:62:c5:7b:d2:
1d:12:01:15:50:a4:c8:01:9d:6f:e7:ab:69:b5:8e:b5:b8:41:
35:7c:d6:70:ed:fc:11:35:ff:11:af:1d:ee:ca:fe:21:7b:9f:
f3:5f:bf:7a:d5:9d:ac:b3:ee:90:f1:ad:60:fc:78:44:10:37:
95:bd:08:7f:7f:70:c6:d7:0f:ac:6f:95:11:20:c3:28:3b:fa:
89:26:e6:29:cb:8e:b7:9e:26:dd:b5:70:8e:8c:2e:c1:4b:6d:
3b:ac:ca:ec:b0:08:fe:30:c3:a6:86:64:e9:ae:c0:2d:04:22:
1e:4c:59:a3:3c:33:4f:a9:d2:cb:5f:b2:a7:0a:cf:9a:7b:dc:
44:16:8f:64:f7:8f:4c:ab:28:5b:d7:58:d7:8f:8d:89:3c:86:
c7:b5:39:a2:67:bc:14:ae:90:a7:e6:66:b4:99:71:47:79:ae:
d8:2d:5a:03:81:5b:f7:da:af:b4:67:a8:c9:d8:ac:56:19:bd:
f9:b5:3a:e5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUfHDC4Fx2zTZzX1hF0LEEyh7slsAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYyMjE4NDEzM1oX
DTI3MDYyMTE4NDYzM1owMzExMC8GA1UEAxMoMTMzMzZDMkRGNTU4NUU1NUNCMTJD
MjI4NUJCQzBBQTE2MzJDMTNGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIoewQnwzWCmFBtyXncdDCWYImsviTs1Qsv6cRfZyGFksXxWu7qEDKs93wYa
ZKAA+97IQprE2k84myVpTg9ZqBPRs9YCzEGIuAO6bDI99SDw63eOVpmsJ1qw9/BS
5g8bOjpCD6zxx+Fm3Cgxs+HRczcPoukwQIpufdeKdvfiIz/nqCe2dGRhnLGFMvu2
mIFEXZQaIuQLTKAvddeYbKQdo8rMdCiImuv+Cy5NUiwAz6U258kRaeitog1wVEWK
l9W0eC1hHb8pGpdq5XYaTUdnvH9k+WfFZnt90MLnPACN/sOUrsnUX1Vc6dKyIOHt
sKrmUh7cAPSjYCFHcf12bi/AlxcCAwEAAaOCArIwggKuMB0GA1UdDgQWBBQTM2wt
9VheVcsSwihbvAqhYywT8zAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQxNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIHsBggrBgEFBQcBBwEB/wSB3DCB2TCB1gQCAAEwgc8DBAIOa6AwDAMEAg5rrAME
Aw5rsAMEBA5uUAMEAw5ueAMEA2pQeAMEBGpQsDAMAwQEalkwAwQEallAAwQEcfhg
AwQFcfigMAsDBARx+NADAwBx+AMEBHH5IAMEBHH54DAMAwQHcfqAAwQDcfqQAwQD
cfvQAwQDcfvgAwQDcfv4AwQCfVBMAwQCfVBsAwQDfVCYAwQFfVDAAwQDfVD4AwQD
fVHoAwQCfVToMAwDBAZ9VUADBAV9VYADBAV9VgADBAJ9VlQDBAR9VoADBAJ9V5Qw
DQYJKoZIhvcNAQELBQADggEBALBUr30pqrwo2IFYYaY9CFp3wv44CAMO4kP5WD22
8q2jnKOAIum0Rwbx7sTd7ddzrwlYvTByas5VTmcAFIkyP3rzQScAYsV70h0SARVQ
pMgBnW/nq2m1jrW4QTV81nDt/BE1/xGvHe7K/iF7n/Nfv3rVnayz7pDxrWD8eEQQ
N5W9CH9/cMbXD6xvlREgwyg7+okm5inLjreeJt21cI6MLsFLbTusyuywCP4ww6aG
ZOmuwC0EIh5MWaM8M0+p0stfsqcKz5p73EQWj2T3j0yrKFvXWNePjYk8hse1OaJn
vBSukKfmZrSZcUd5rtgtWgOBW/far7RnqMnYrFYZvfm1OuU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:12 2026 by rpki-client