Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
File: AS141998.roa (raw, json)
Hash identifier: uIUmmTXVjlCKfRwRQJzaRjKPmanQnVTYx0hRZMNfb6c=
Subject key identifier: 8E:20:E9:58:AD:6A:D9:32:3C:2B:74:6E:7B:BC:1B:2C:47:47:69:61
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 423095F391415108C553DAED2A9787EE8FA453EC
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
Signing time: Fri 10 Jul 2026 08:29:11 +0000
ROA not before: Fri 10 Jul 2026 08:24:11 +0000
ROA not after: Fri 09 Jul 2027 08:29:11 +0000
asID: 141998
IP address blocks: 60.164.0.0/24 maxlen: 24
60.164.2.0/24 maxlen: 24
60.164.4.0/24 maxlen: 24
60.164.5.0/24 maxlen: 24
60.164.6.0/24 maxlen: 24
60.164.7.0/24 maxlen: 24
60.164.240.0/23 maxlen: 23
60.164.242.0/23 maxlen: 23
60.164.244.0/24 maxlen: 24
60.164.245.0/24 maxlen: 24
60.164.246.0/23 maxlen: 23
60.165.20.0/23 maxlen: 23
60.165.21.0/24 maxlen: 24
60.165.24.0/22 maxlen: 22
60.165.28.0/24 maxlen: 24
60.165.64.0/22 maxlen: 22
60.165.115.0/24 maxlen: 24
60.165.116.0/24 maxlen: 24
60.165.118.0/23 maxlen: 23
60.165.120.0/22 maxlen: 22
60.165.125.0/24 maxlen: 24
60.165.126.0/23 maxlen: 23
60.165.237.0/24 maxlen: 24
61.134.70.0/23 maxlen: 23
61.159.80.0/24 maxlen: 24
61.159.81.0/24 maxlen: 24
61.159.82.0/23 maxlen: 23
61.159.88.0/24 maxlen: 24
61.159.89.0/24 maxlen: 24
61.159.90.0/24 maxlen: 24
61.159.91.0/24 maxlen: 24
118.180.0.0/24 maxlen: 24
118.180.1.0/24 maxlen: 24
118.180.4.0/24 maxlen: 24
118.180.26.0/24 maxlen: 24
118.180.27.0/24 maxlen: 24
118.180.30.0/24 maxlen: 24
118.180.31.0/24 maxlen: 24
118.180.37.0/24 maxlen: 24
118.180.38.0/24 maxlen: 24
118.180.39.0/24 maxlen: 24
118.180.40.0/24 maxlen: 24
118.180.42.0/24 maxlen: 24
118.180.43.0/24 maxlen: 24
118.180.45.0/24 maxlen: 24
118.180.49.0/24 maxlen: 24
118.180.51.0/24 maxlen: 24
118.180.54.0/24 maxlen: 24
118.180.56.0/24 maxlen: 24
118.180.57.0/24 maxlen: 24
118.180.58.0/24 maxlen: 24
118.180.59.0/24 maxlen: 24
118.180.60.0/24 maxlen: 24
118.180.62.0/24 maxlen: 24
118.180.63.0/24 maxlen: 24
118.181.54.0/24 maxlen: 24
118.181.55.0/24 maxlen: 24
118.181.98.0/23 maxlen: 23
118.181.103.0/24 maxlen: 24
118.181.110.0/24 maxlen: 24
118.182.56.0/22 maxlen: 22
118.182.96.0/23 maxlen: 23
118.182.98.0/23 maxlen: 23
118.182.100.0/23 maxlen: 23
118.182.102.0/23 maxlen: 23
118.182.224.0/24 maxlen: 24
118.182.225.0/24 maxlen: 24
118.182.226.0/24 maxlen: 24
118.182.249.0/24 maxlen: 24
118.183.8.0/24 maxlen: 24
118.183.9.0/24 maxlen: 24
118.183.10.0/24 maxlen: 24
118.183.11.0/24 maxlen: 24
118.183.12.0/24 maxlen: 24
118.183.13.0/24 maxlen: 24
118.183.32.0/24 maxlen: 24
118.183.33.0/24 maxlen: 24
118.183.35.0/24 maxlen: 24
118.183.37.0/24 maxlen: 24
118.183.40.0/24 maxlen: 24
118.183.61.0/24 maxlen: 24
118.183.152.0/22 maxlen: 22
118.183.168.0/24 maxlen: 24
118.183.169.0/24 maxlen: 24
118.183.171.0/24 maxlen: 24
118.183.172.0/24 maxlen: 24
118.183.173.0/24 maxlen: 24
118.183.174.0/24 maxlen: 24
118.183.211.0/24 maxlen: 24
118.183.240.0/21 maxlen: 21
125.74.1.0/24 maxlen: 24
125.74.3.0/24 maxlen: 24
125.74.4.0/24 maxlen: 24
125.74.5.0/24 maxlen: 24
125.74.6.0/24 maxlen: 24
125.74.7.0/24 maxlen: 24
125.74.8.0/22 maxlen: 22
125.74.12.0/24 maxlen: 24
125.74.14.0/24 maxlen: 24
125.74.17.0/24 maxlen: 24
125.74.18.0/24 maxlen: 24
125.74.19.0/24 maxlen: 24
125.74.20.0/24 maxlen: 24
125.74.21.0/24 maxlen: 24
125.74.23.0/24 maxlen: 24
125.74.24.0/24 maxlen: 24
125.74.26.0/24 maxlen: 24
125.74.27.0/24 maxlen: 24
125.74.28.0/24 maxlen: 24
125.74.29.0/24 maxlen: 24
125.74.30.0/24 maxlen: 24
125.74.32.0/24 maxlen: 24
125.74.33.0/24 maxlen: 24
125.74.34.0/24 maxlen: 24
125.74.38.0/24 maxlen: 24
125.74.42.0/24 maxlen: 24
125.74.43.0/24 maxlen: 24
125.74.44.0/24 maxlen: 24
125.74.45.0/24 maxlen: 24
125.74.47.0/24 maxlen: 24
125.74.48.0/24 maxlen: 24
125.74.52.0/24 maxlen: 24
125.74.53.0/24 maxlen: 24
125.74.54.0/24 maxlen: 24
125.74.55.0/24 maxlen: 24
125.74.78.0/24 maxlen: 24
125.74.80.0/24 maxlen: 24
125.74.84.0/22 maxlen: 22
125.74.88.0/23 maxlen: 23
125.74.90.0/24 maxlen: 24
125.74.91.0/24 maxlen: 24
125.74.92.0/23 maxlen: 23
125.74.94.0/24 maxlen: 24
125.74.95.0/24 maxlen: 24
125.74.108.0/24 maxlen: 24
125.74.109.0/24 maxlen: 24
125.74.128.0/23 maxlen: 23
125.74.130.0/23 maxlen: 23
125.74.132.0/23 maxlen: 23
125.74.134.0/24 maxlen: 24
125.74.135.0/24 maxlen: 24
125.74.192.0/21 maxlen: 21
125.74.232.0/21 maxlen: 21
125.75.64.0/24 maxlen: 24
125.75.66.0/23 maxlen: 23
125.75.68.0/23 maxlen: 23
125.75.96.0/23 maxlen: 23
125.75.98.0/24 maxlen: 24
125.75.102.0/24 maxlen: 24
125.75.103.0/24 maxlen: 24
125.75.104.0/24 maxlen: 24
125.75.105.0/24 maxlen: 24
125.75.106.0/24 maxlen: 24
125.75.107.0/24 maxlen: 24
125.75.108.0/24 maxlen: 24
125.75.109.0/24 maxlen: 24
125.75.110.0/23 maxlen: 23
125.75.148.0/23 maxlen: 23
125.75.150.0/23 maxlen: 23
125.76.82.0/24 maxlen: 24
125.76.112.0/22 maxlen: 22
202.100.73.0/24 maxlen: 24
202.100.74.0/24 maxlen: 24
202.100.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:30:95:f3:91:41:51:08:c5:53:da:ed:2a:97:87:ee:8f:a4:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 10 08:24:11 2026 GMT
Not After : Jul 9 08:29:11 2027 GMT
Subject: CN=8E20E958AD6AD9323C2B746E7BBC1B2C47476961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:e6:02:3e:0b:f4:8f:91:a2:9d:3b:7e:d7:
f1:cf:50:b8:8a:6d:3f:83:ed:9b:40:af:63:f3:db:
86:fe:ad:83:1d:81:89:9c:13:32:c2:b1:9f:3e:90:
97:01:ec:e0:ca:5f:ec:dd:18:c5:8c:d8:bf:f4:b2:
f4:21:ec:48:b7:03:4f:c9:7e:2d:ce:f8:af:54:a2:
27:e8:6e:02:e1:69:eb:ae:68:c4:6f:86:4f:22:56:
1a:a3:34:dd:2c:f4:36:02:05:fe:f0:00:ff:21:c3:
d6:48:88:dd:8c:19:ae:d6:6b:02:a2:f0:50:2e:56:
61:36:28:1b:8f:95:8f:71:18:88:b0:4c:78:df:be:
ac:ab:50:fb:78:65:05:03:f5:39:53:cc:a5:28:52:
b9:ee:d1:1a:86:ce:57:e1:86:aa:c4:dc:c7:31:9c:
85:13:e6:16:4e:70:60:fd:aa:d5:23:d8:88:f5:4a:
24:1a:15:49:59:7e:4e:30:32:69:19:d2:75:44:6a:
39:ae:43:05:03:59:cd:c0:ea:53:82:fa:fb:85:3b:
30:dd:cf:16:88:85:27:08:b2:e2:2d:c4:47:75:13:
74:36:a5:53:ba:45:7b:c5:1b:77:5a:bf:59:9b:0d:
50:f7:a2:aa:87:36:46:49:cf:dc:fd:09:61:4b:bd:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:E9:58:AD:6A:D9:32:3C:2B:74:6E:7B:BC:1B:2C:47:47:69:61
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.0.0/24
60.164.2.0/24
60.164.4.0/22
60.164.240.0/21
60.165.20.0/23
60.165.24.0-60.165.28.255
60.165.64.0/22
60.165.115.0-60.165.116.255
60.165.118.0-60.165.123.255
60.165.125.0-60.165.127.255
60.165.237.0/24
61.134.70.0/23
61.159.80.0/22
61.159.88.0/22
118.180.0.0/23
118.180.4.0/24
118.180.26.0/23
118.180.30.0/23
118.180.37.0-118.180.40.255
118.180.42.0/23
118.180.45.0/24
118.180.49.0/24
118.180.51.0/24
118.180.54.0/24
118.180.56.0-118.180.60.255
118.180.62.0/23
118.181.54.0/23
118.181.98.0/23
118.181.103.0/24
118.181.110.0/24
118.182.56.0/22
118.182.96.0/21
118.182.224.0-118.182.226.255
118.182.249.0/24
118.183.8.0-118.183.13.255
118.183.32.0/23
118.183.35.0/24
118.183.37.0/24
118.183.40.0/24
118.183.61.0/24
118.183.152.0/22
118.183.168.0/23
118.183.171.0-118.183.174.255
118.183.211.0/24
118.183.240.0/21
125.74.1.0/24
125.74.3.0-125.74.12.255
125.74.14.0/24
125.74.17.0-125.74.21.255
125.74.23.0-125.74.24.255
125.74.26.0-125.74.30.255
125.74.32.0-125.74.34.255
125.74.38.0/24
125.74.42.0-125.74.45.255
125.74.47.0-125.74.48.255
125.74.52.0/22
125.74.78.0/24
125.74.80.0/24
125.74.84.0-125.74.95.255
125.74.108.0/23
125.74.128.0/21
125.74.192.0/21
125.74.232.0/21
125.75.64.0/24
125.75.66.0-125.75.69.255
125.75.96.0-125.75.98.255
125.75.102.0-125.75.111.255
125.75.148.0/22
125.76.82.0/24
125.76.112.0/22
202.100.73.0-202.100.74.255
202.100.79.0/24
Signature Algorithm: sha256WithRSAEncryption
13:62:1e:d2:c0:3c:7c:0f:66:fe:87:d7:61:1b:80:51:1e:c7:
98:f3:df:cf:ae:29:0a:23:10:2d:09:56:7e:20:4a:49:56:e7:
6d:f3:ea:c8:77:78:cc:fb:ed:48:6f:56:37:92:1c:9d:87:12:
5d:04:c0:15:e2:b4:17:89:eb:f5:50:d6:b1:ad:37:fd:57:56:
49:9d:5f:dc:44:0a:1f:9a:52:8b:c7:76:6d:c0:eb:88:ea:30:
0d:eb:2e:dc:25:9c:ea:bf:07:dd:b0:07:29:66:75:81:45:51:
17:fc:88:85:f6:a9:c2:39:4e:38:d8:6e:8b:bc:a5:28:76:95:
b0:6e:63:e9:66:f4:97:83:4d:5a:ed:58:c0:3a:3c:15:20:e6:
72:b1:8c:37:d0:40:11:7b:40:ff:16:27:94:11:fb:28:78:05:
0c:46:16:2e:da:37:bd:d0:4f:75:2b:db:3d:9a:20:25:04:e6:
bd:eb:41:23:cc:6a:1a:a3:32:41:19:da:13:08:88:1a:00:4e:
e1:46:3a:55:d0:3a:29:89:6d:15:17:75:b6:68:7d:69:06:92:
66:be:24:22:ee:59:a8:72:66:2f:44:ec:48:bb:d0:9b:bd:2d:
3c:00:ea:64:0a:70:f1:10:3d:5a:96:36:2b:cc:ce:da:79:56:
8a:ed:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:27 2026 by rpki-client