Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
File: AS141998.roa (raw, json)
Hash identifier: h9E7m0spEqu4JuTeiiATsFFFLsBd1jpztX26gudwSqY=
Subject key identifier: F6:06:A4:5D:C7:EE:F0:D5:50:91:06:0B:7B:64:07:DA:85:BE:00:BC
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 161805CE026EC82870DFBA4D33ED4D906B08BEF3
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
Signing time: Thu 03 Sep 2026 01:19:54 +0000
ROA not before: Thu 03 Sep 2026 01:14:54 +0000
ROA not after: Thu 02 Sep 2027 01:19:54 +0000
asID: 141998
IP address blocks: 60.164.0.0/24 maxlen: 24
60.164.2.0/24 maxlen: 24
60.164.4.0/24 maxlen: 24
60.164.5.0/24 maxlen: 24
60.164.6.0/24 maxlen: 24
60.164.7.0/24 maxlen: 24
60.164.240.0/23 maxlen: 23
60.164.242.0/23 maxlen: 23
60.164.244.0/24 maxlen: 24
60.164.245.0/24 maxlen: 24
60.164.246.0/23 maxlen: 23
60.165.20.0/23 maxlen: 23
60.165.21.0/24 maxlen: 24
60.165.24.0/22 maxlen: 22
60.165.28.0/24 maxlen: 24
60.165.64.0/22 maxlen: 22
60.165.115.0/24 maxlen: 24
60.165.116.0/24 maxlen: 24
60.165.118.0/23 maxlen: 23
60.165.120.0/22 maxlen: 22
60.165.125.0/24 maxlen: 24
60.165.126.0/23 maxlen: 23
60.165.237.0/24 maxlen: 24
61.134.70.0/23 maxlen: 23
61.159.80.0/24 maxlen: 24
61.159.81.0/24 maxlen: 24
61.159.82.0/23 maxlen: 23
61.159.88.0/24 maxlen: 24
61.159.89.0/24 maxlen: 24
61.159.90.0/24 maxlen: 24
61.159.91.0/24 maxlen: 24
118.180.0.0/24 maxlen: 24
118.180.1.0/24 maxlen: 24
118.180.4.0/24 maxlen: 24
118.180.26.0/24 maxlen: 24
118.180.27.0/24 maxlen: 24
118.180.30.0/24 maxlen: 24
118.180.31.0/24 maxlen: 24
118.180.37.0/24 maxlen: 24
118.180.38.0/24 maxlen: 24
118.180.39.0/24 maxlen: 24
118.180.40.0/24 maxlen: 24
118.180.42.0/24 maxlen: 24
118.180.43.0/24 maxlen: 24
118.180.45.0/24 maxlen: 24
118.180.49.0/24 maxlen: 24
118.180.51.0/24 maxlen: 24
118.180.54.0/24 maxlen: 24
118.180.56.0/24 maxlen: 24
118.180.57.0/24 maxlen: 24
118.180.58.0/24 maxlen: 24
118.180.59.0/24 maxlen: 24
118.180.60.0/24 maxlen: 24
118.180.62.0/24 maxlen: 24
118.180.63.0/24 maxlen: 24
118.181.54.0/24 maxlen: 24
118.181.55.0/24 maxlen: 24
118.181.98.0/23 maxlen: 23
118.181.103.0/24 maxlen: 24
118.181.110.0/24 maxlen: 24
118.182.56.0/22 maxlen: 22
118.182.56.0/24 maxlen: 24
118.182.57.0/24 maxlen: 24
118.182.58.0/24 maxlen: 24
118.182.96.0/23 maxlen: 23
118.182.98.0/23 maxlen: 23
118.182.100.0/23 maxlen: 23
118.182.102.0/23 maxlen: 23
118.182.224.0/24 maxlen: 24
118.182.225.0/24 maxlen: 24
118.182.226.0/24 maxlen: 24
118.182.249.0/24 maxlen: 24
118.183.8.0/24 maxlen: 24
118.183.9.0/24 maxlen: 24
118.183.10.0/24 maxlen: 24
118.183.11.0/24 maxlen: 24
118.183.12.0/24 maxlen: 24
118.183.13.0/24 maxlen: 24
118.183.32.0/24 maxlen: 24
118.183.33.0/24 maxlen: 24
118.183.35.0/24 maxlen: 24
118.183.37.0/24 maxlen: 24
118.183.40.0/24 maxlen: 24
118.183.61.0/24 maxlen: 24
118.183.152.0/22 maxlen: 22
118.183.168.0/24 maxlen: 24
118.183.169.0/24 maxlen: 24
118.183.171.0/24 maxlen: 24
118.183.172.0/24 maxlen: 24
118.183.173.0/24 maxlen: 24
118.183.174.0/24 maxlen: 24
118.183.211.0/24 maxlen: 24
118.183.240.0/21 maxlen: 21
125.74.1.0/24 maxlen: 24
125.74.2.0/24 maxlen: 24
125.74.3.0/24 maxlen: 24
125.74.4.0/24 maxlen: 24
125.74.5.0/24 maxlen: 24
125.74.6.0/24 maxlen: 24
125.74.7.0/24 maxlen: 24
125.74.8.0/22 maxlen: 22
125.74.12.0/24 maxlen: 24
125.74.14.0/24 maxlen: 24
125.74.16.0/24 maxlen: 24
125.74.17.0/24 maxlen: 24
125.74.18.0/24 maxlen: 24
125.74.19.0/24 maxlen: 24
125.74.20.0/24 maxlen: 24
125.74.21.0/24 maxlen: 24
125.74.23.0/24 maxlen: 24
125.74.24.0/24 maxlen: 24
125.74.26.0/24 maxlen: 24
125.74.27.0/24 maxlen: 24
125.74.28.0/24 maxlen: 24
125.74.29.0/24 maxlen: 24
125.74.30.0/24 maxlen: 24
125.74.32.0/24 maxlen: 24
125.74.33.0/24 maxlen: 24
125.74.34.0/24 maxlen: 24
125.74.38.0/24 maxlen: 24
125.74.42.0/24 maxlen: 24
125.74.43.0/24 maxlen: 24
125.74.44.0/24 maxlen: 24
125.74.45.0/24 maxlen: 24
125.74.47.0/24 maxlen: 24
125.74.48.0/24 maxlen: 24
125.74.52.0/24 maxlen: 24
125.74.53.0/24 maxlen: 24
125.74.54.0/24 maxlen: 24
125.74.55.0/24 maxlen: 24
125.74.78.0/24 maxlen: 24
125.74.80.0/24 maxlen: 24
125.74.84.0/22 maxlen: 22
125.74.88.0/23 maxlen: 23
125.74.90.0/24 maxlen: 24
125.74.91.0/24 maxlen: 24
125.74.92.0/23 maxlen: 23
125.74.94.0/24 maxlen: 24
125.74.95.0/24 maxlen: 24
125.74.108.0/24 maxlen: 24
125.74.109.0/24 maxlen: 24
125.74.128.0/23 maxlen: 23
125.74.130.0/23 maxlen: 23
125.74.132.0/23 maxlen: 23
125.74.134.0/24 maxlen: 24
125.74.135.0/24 maxlen: 24
125.74.192.0/21 maxlen: 21
125.74.232.0/21 maxlen: 21
125.75.64.0/24 maxlen: 24
125.75.66.0/23 maxlen: 23
125.75.68.0/23 maxlen: 23
125.75.96.0/23 maxlen: 23
125.75.98.0/24 maxlen: 24
125.75.102.0/24 maxlen: 24
125.75.103.0/24 maxlen: 24
125.75.104.0/24 maxlen: 24
125.75.105.0/24 maxlen: 24
125.75.106.0/24 maxlen: 24
125.75.107.0/24 maxlen: 24
125.75.108.0/24 maxlen: 24
125.75.109.0/24 maxlen: 24
125.75.110.0/23 maxlen: 23
125.75.148.0/23 maxlen: 23
125.75.150.0/23 maxlen: 23
125.76.82.0/24 maxlen: 24
125.76.112.0/22 maxlen: 22
202.100.73.0/24 maxlen: 24
202.100.74.0/24 maxlen: 24
202.100.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 10:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:18:05:ce:02:6e:c8:28:70:df:ba:4d:33:ed:4d:90:6b:08:be:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 3 01:14:54 2026 GMT
Not After : Sep 2 01:19:54 2027 GMT
Subject: CN=F606A45DC7EEF0D55091060B7B6407DA85BE00BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:67:a2:7d:ba:2f:1f:c0:c7:df:e1:ca:9b:
16:1e:d3:f8:54:cb:21:af:65:41:d2:d3:27:f3:20:
0c:08:82:2b:7d:45:72:d6:ff:50:62:b1:da:fe:f0:
c0:5e:2c:e7:d9:7e:d8:94:95:38:0e:6b:22:51:a1:
3f:d5:6e:40:f7:ad:5f:50:99:2d:2c:62:39:cd:16:
43:a0:c9:03:2c:29:fc:8d:67:de:0f:8b:bb:63:13:
e0:ce:5d:18:8e:1d:e3:6b:19:fa:31:4d:3c:dd:e9:
e5:f9:64:e9:b1:50:4d:75:33:92:22:80:32:34:97:
0b:8f:38:e0:5a:2f:25:86:4d:75:7b:a6:c2:a6:9f:
39:17:70:2c:98:56:5e:4b:3c:fc:77:ff:56:73:dc:
54:3c:8a:af:a2:60:b5:a8:e0:55:4b:fd:ad:6a:76:
0e:14:cf:7e:d3:24:d3:40:05:58:cc:b4:b2:30:d6:
53:ac:a8:9d:81:e3:b7:c1:c8:5d:a9:53:e5:3d:ea:
2e:fc:a7:a0:40:1a:df:1a:e8:a2:8c:c0:1c:e8:44:
b8:da:36:0c:47:01:7b:47:55:f8:c0:30:12:e7:13:
3a:2e:7d:dc:78:1d:d6:5b:72:c0:96:81:5d:54:d1:
bf:81:c8:0a:c4:89:f3:99:9f:b0:60:71:e4:16:37:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:A4:5D:C7:EE:F0:D5:50:91:06:0B:7B:64:07:DA:85:BE:00:BC
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.0.0/24
60.164.2.0/24
60.164.4.0/22
60.164.240.0/21
60.165.20.0/23
60.165.24.0-60.165.28.255
60.165.64.0/22
60.165.115.0-60.165.116.255
60.165.118.0-60.165.123.255
60.165.125.0-60.165.127.255
60.165.237.0/24
61.134.70.0/23
61.159.80.0/22
61.159.88.0/22
118.180.0.0/23
118.180.4.0/24
118.180.26.0/23
118.180.30.0/23
118.180.37.0-118.180.40.255
118.180.42.0/23
118.180.45.0/24
118.180.49.0/24
118.180.51.0/24
118.180.54.0/24
118.180.56.0-118.180.60.255
118.180.62.0/23
118.181.54.0/23
118.181.98.0/23
118.181.103.0/24
118.181.110.0/24
118.182.56.0/22
118.182.96.0/21
118.182.224.0-118.182.226.255
118.182.249.0/24
118.183.8.0-118.183.13.255
118.183.32.0/23
118.183.35.0/24
118.183.37.0/24
118.183.40.0/24
118.183.61.0/24
118.183.152.0/22
118.183.168.0/23
118.183.171.0-118.183.174.255
118.183.211.0/24
118.183.240.0/21
125.74.1.0-125.74.12.255
125.74.14.0/24
125.74.16.0-125.74.21.255
125.74.23.0-125.74.24.255
125.74.26.0-125.74.30.255
125.74.32.0-125.74.34.255
125.74.38.0/24
125.74.42.0-125.74.45.255
125.74.47.0-125.74.48.255
125.74.52.0/22
125.74.78.0/24
125.74.80.0/24
125.74.84.0-125.74.95.255
125.74.108.0/23
125.74.128.0/21
125.74.192.0/21
125.74.232.0/21
125.75.64.0/24
125.75.66.0-125.75.69.255
125.75.96.0-125.75.98.255
125.75.102.0-125.75.111.255
125.75.148.0/22
125.76.82.0/24
125.76.112.0/22
202.100.73.0-202.100.74.255
202.100.79.0/24
Signature Algorithm: sha256WithRSAEncryption
07:15:5e:bd:c3:12:aa:b1:92:68:aa:65:81:23:fa:0c:1d:25:
53:2d:22:47:2d:35:cf:c6:43:f0:94:45:fd:6e:56:20:e5:7c:
41:a4:cd:4c:1c:18:3c:45:fe:0d:af:ac:4f:59:5a:d0:e5:cd:
83:d2:68:07:94:fa:ea:b7:59:f3:b2:43:86:ba:95:37:1b:9f:
32:00:8e:a8:d8:1c:da:7d:db:9a:8b:31:11:e1:18:92:41:d4:
70:69:ba:93:d2:87:2e:e2:62:93:1c:53:66:9c:ca:51:80:46:
22:71:2f:d9:3a:b7:d7:18:6d:61:45:48:ea:62:68:b7:53:a6:
cc:70:42:d1:58:6a:c8:c4:79:45:91:ea:68:5b:48:a8:31:43:
88:43:49:5e:0a:08:18:cc:09:b6:35:40:28:7a:2a:46:da:43:
c5:f5:68:63:cb:ec:28:b1:01:c6:87:db:a7:d0:f7:f9:9f:49:
8f:1d:19:58:9e:f5:aa:7a:48:7e:ea:47:f3:fd:8e:d9:27:6a:
e2:ea:d9:22:d8:b4:d8:6b:8b:87:fc:94:c2:25:e6:88:11:02:
47:46:dc:37:a6:73:ce:48:2b:ee:25:c9:cf:60:07:b1:ad:89:
4b:e5:de:e6:02:0c:f9:0c:4d:69:aa:73:ef:0b:8e:bd:15:09:
a1:6d:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:41:13 2026 by rpki-client