Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS138407.roa
File: AS138407.roa (raw, json)
Hash identifier: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=
Subject key identifier: E4:44:56:FB:2F:F0:4C:AA:C7:23:33:CD:AB:9C:E2:00:1B:5E:D5:1B
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 4838BA91E833F08BEF8803D81AFF7C7DEECB8823
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS138407.roa
Signing time: Fri 24 Jul 2026 16:08:30 +0000
ROA not before: Fri 24 Jul 2026 16:03:30 +0000
ROA not after: Fri 23 Jul 2027 16:08:30 +0000
asID: 138407
IP address blocks: 117.135.194.0/24 maxlen: 24
117.135.195.0/24 maxlen: 24
117.135.198.0/24 maxlen: 24
117.135.206.0/24 maxlen: 24
117.135.207.0/24 maxlen: 24
117.135.209.0/24 maxlen: 24
117.135.210.0/24 maxlen: 24
117.135.214.0/24 maxlen: 24
117.135.215.0/24 maxlen: 24
117.135.216.0/24 maxlen: 24
117.135.217.0/24 maxlen: 24
117.135.218.0/24 maxlen: 24
117.135.220.0/24 maxlen: 24
117.135.221.0/24 maxlen: 24
117.135.222.0/24 maxlen: 24
117.135.223.0/24 maxlen: 24
117.135.230.0/23 maxlen: 23
117.135.232.0/22 maxlen: 22
117.135.236.0/24 maxlen: 24
117.135.238.0/24 maxlen: 24
117.135.240.0/24 maxlen: 24
117.135.242.0/24 maxlen: 24
117.135.243.0/24 maxlen: 24
117.135.244.0/24 maxlen: 24
117.135.246.0/24 maxlen: 24
117.135.247.0/24 maxlen: 24
117.135.249.0/24 maxlen: 24
117.135.252.0/24 maxlen: 24
117.187.7.0/24 maxlen: 24
117.187.21.0/24 maxlen: 24
117.187.22.0/24 maxlen: 24
117.187.24.0/24 maxlen: 24
117.187.38.0/23 maxlen: 23
117.187.38.0/24 maxlen: 24
117.187.40.0/23 maxlen: 23
117.187.46.0/24 maxlen: 24
117.187.51.0/24 maxlen: 24
117.187.112.0/24 maxlen: 24
117.187.113.0/24 maxlen: 24
117.187.114.0/24 maxlen: 24
117.187.115.0/24 maxlen: 24
117.187.116.0/24 maxlen: 24
117.187.117.0/24 maxlen: 24
117.187.118.0/24 maxlen: 24
117.187.119.0/24 maxlen: 24
117.187.128.0/22 maxlen: 22
117.187.132.0/22 maxlen: 22
117.187.132.0/24 maxlen: 24
117.187.136.0/24 maxlen: 24
117.187.137.0/24 maxlen: 24
117.187.138.0/24 maxlen: 24
117.187.139.0/24 maxlen: 24
117.187.140.0/24 maxlen: 24
117.187.141.0/24 maxlen: 24
117.187.142.0/24 maxlen: 24
117.187.143.0/24 maxlen: 24
117.187.144.0/24 maxlen: 24
117.187.145.0/24 maxlen: 24
117.187.146.0/24 maxlen: 24
117.187.147.0/24 maxlen: 24
117.187.148.0/24 maxlen: 24
117.187.149.0/24 maxlen: 24
117.187.150.0/24 maxlen: 24
117.187.178.0/24 maxlen: 24
117.187.179.0/24 maxlen: 24
117.187.180.0/23 maxlen: 23
117.187.182.0/24 maxlen: 24
117.187.183.0/24 maxlen: 24
117.187.184.0/24 maxlen: 24
117.187.185.0/24 maxlen: 24
117.187.186.0/24 maxlen: 24
117.187.187.0/24 maxlen: 24
117.187.188.0/24 maxlen: 24
117.187.189.0/24 maxlen: 24
117.187.190.0/24 maxlen: 24
117.187.191.0/24 maxlen: 24
117.187.201.0/24 maxlen: 24
117.187.202.0/24 maxlen: 24
117.187.203.0/24 maxlen: 24
117.187.204.0/24 maxlen: 24
117.187.205.0/24 maxlen: 24
117.187.206.0/24 maxlen: 24
117.187.207.0/24 maxlen: 24
117.187.208.0/22 maxlen: 22
117.187.209.0/24 maxlen: 24
117.187.212.0/22 maxlen: 22
117.187.213.0/24 maxlen: 24
117.187.216.0/24 maxlen: 24
117.187.217.0/24 maxlen: 24
117.187.218.0/24 maxlen: 24
117.187.219.0/24 maxlen: 24
117.187.221.0/24 maxlen: 24
117.187.222.0/23 maxlen: 23
117.187.223.0/24 maxlen: 24
117.187.240.0/24 maxlen: 24
117.187.241.0/24 maxlen: 24
117.187.243.0/24 maxlen: 24
117.187.244.0/24 maxlen: 24
117.187.245.0/24 maxlen: 24
117.187.246.0/24 maxlen: 24
117.187.247.0/24 maxlen: 24
117.187.252.0/24 maxlen: 24
117.187.253.0/24 maxlen: 24
117.187.254.0/24 maxlen: 24
2409:806a:3000::/48 maxlen: 48
2409:806a:b020::/44 maxlen: 44
2409:8c6a:1412::/48 maxlen: 48
2409:8c6a:1e12::/48 maxlen: 48
2409:8c6a:3a10::/44 maxlen: 44
2409:8c6a:4c00::/40 maxlen: 40
2409:8c6a:5c12::/48 maxlen: 48
2409:8c6a:6c12::/48 maxlen: 48
2409:8c6a:6f10::/44 maxlen: 44
2409:8c6a:7812::/48 maxlen: 48
2409:8c6a:9812::/48 maxlen: 48
2409:8c6a:b010::/44 maxlen: 44
2409:8c6a:b011::/48 maxlen: 48
2409:8c6a:b012::/48 maxlen: 48
2409:8c6a:b020::/44 maxlen: 44
2409:8c6a:b021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:38:ba:91:e8:33:f0:8b:ef:88:03:d8:1a:ff:7c:7d:ee:cb:88:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Jul 24 16:03:30 2026 GMT
Not After : Jul 23 16:08:30 2027 GMT
Subject: CN=E44456FB2FF04CAAC72333CDAB9CE2001B5ED51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:2e:19:ce:ad:69:a5:fc:17:25:4b:23:c4:
14:17:2a:b9:0f:0b:44:d2:a1:1f:dc:c2:f4:45:55:
9d:fd:2b:e3:72:6a:ae:75:21:61:a5:f7:e6:a1:ae:
31:f9:63:c8:8c:79:2c:05:4b:ca:32:8b:46:d3:25:
6e:ad:45:0b:d9:60:ea:9e:3a:8e:c0:62:ea:b4:cd:
8b:65:11:5c:75:37:b9:91:69:7a:95:05:7a:fd:9e:
a9:1a:f5:c2:60:57:55:b1:7e:0f:47:3a:44:59:7e:
33:82:20:0f:19:4d:20:1f:db:f8:a6:39:d7:70:8a:
83:65:38:be:af:36:cf:64:c4:f0:11:bd:49:ee:6b:
c0:78:10:d5:e0:03:5e:f7:41:0f:7b:5b:3d:b9:76:
fe:7f:8f:65:cf:79:e4:22:4f:03:90:8b:72:d9:00:
7d:d7:18:c0:81:79:de:4f:82:e8:36:79:30:cf:38:
a9:8b:b3:40:b3:e7:66:c8:53:22:9c:52:ba:97:4a:
ba:54:aa:93:82:2c:7e:dd:e0:9b:ec:d1:da:ef:67:
dc:06:4e:79:aa:06:76:07:ef:a7:0f:a5:43:41:09:
e7:5d:8c:90:f1:63:ea:e4:47:81:9b:f1:3d:82:ad:
90:41:f8:7f:b1:aa:7b:29:f5:fe:94:49:be:cf:76:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:56:FB:2F:F0:4C:AA:C7:23:33:CD:AB:9C:E2:00:1B:5E:D5:1B
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS138407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.135.194.0/23
117.135.198.0/24
117.135.206.0/23
117.135.209.0-117.135.210.255
117.135.214.0-117.135.218.255
117.135.220.0/22
117.135.230.0-117.135.236.255
117.135.238.0/24
117.135.240.0/24
117.135.242.0-117.135.244.255
117.135.246.0/23
117.135.249.0/24
117.135.252.0/24
117.187.7.0/24
117.187.21.0-117.187.22.255
117.187.24.0/24
117.187.38.0-117.187.41.255
117.187.46.0/24
117.187.51.0/24
117.187.112.0/21
117.187.128.0-117.187.150.255
117.187.178.0-117.187.191.255
117.187.201.0-117.187.219.255
117.187.221.0-117.187.223.255
117.187.240.0/23
117.187.243.0-117.187.247.255
117.187.252.0-117.187.254.255
IPv6:
2409:806a:3000::/48
2409:806a:b020::/44
2409:8c6a:1412::/48
2409:8c6a:1e12::/48
2409:8c6a:3a10::/44
2409:8c6a:4c00::/40
2409:8c6a:5c12::/48
2409:8c6a:6c12::/48
2409:8c6a:6f10::/44
2409:8c6a:7812::/48
2409:8c6a:9812::/48
2409:8c6a:b010::-2409:8c6a:b02f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:3d:f4:14:51:12:f7:54:47:62:13:9a:43:a5:ba:a8:a2:fa:
f5:ce:c4:ee:a1:b6:a0:65:4e:02:20:7e:99:51:11:ec:7e:1c:
27:72:5c:42:98:e7:b7:70:30:45:91:3a:62:84:05:2e:64:85:
35:e3:26:34:db:03:c4:68:e7:57:1b:c1:11:c4:21:81:f5:b2:
8b:e8:a2:ce:25:fd:c0:bb:99:82:af:9d:8b:77:24:d2:d1:f2:
0a:e5:12:c3:7a:bd:37:45:02:d7:f2:45:52:dd:3f:bf:cb:93:
dd:9c:a1:14:a5:5a:61:38:8d:06:20:c4:45:53:26:8a:63:a0:
50:6b:9e:84:d4:33:19:5d:b1:42:19:ec:6a:92:59:8c:3f:85:
71:5b:c1:6e:7f:43:7a:6c:0c:80:4c:97:59:00:3a:0d:44:d2:
60:02:09:39:3c:08:6a:d6:04:b9:05:3c:09:bd:3d:7e:e3:53:
10:e4:50:11:3d:33:07:79:7e:bf:bd:ef:64:38:0c:21:ef:e7:
3d:08:fd:99:c2:a9:b6:bf:8a:ea:ee:65:1f:0d:e2:47:2e:c8:
c2:01:1f:de:d0:f7:17:ea:9e:aa:ec:a7:db:9a:d0:84:07:86:
f9:96:74:0d:4e:6e:39:ff:7c:1c:7f:fa:14:7e:7a:cd:8e:26:
f9:4a:d5:e2
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUSDi6kegz8IvviAPYGv98fe7LiCMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0
OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDcyNDE2MDMzMFoX
DTI3MDcyMzE2MDgzMFowMzExMC8GA1UEAxMoRTQ0NDU2RkIyRkYwNENBQUM3MjMz
M0NEQUI5Q0UyMDAxQjVFRDUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALKTLhnOrWml/BclSyPEFBcquQ8LRNKhH9zC9EVVnf0r43JqrnUhYaX35qGu
MfljyIx5LAVLyjKLRtMlbq1FC9lg6p46jsBi6rTNi2URXHU3uZFpepUFev2eqRr1
wmBXVbF+D0c6RFl+M4IgDxlNIB/b+KY513CKg2U4vq82z2TE8BG9Se5rwHgQ1eAD
XvdBD3tbPbl2/n+PZc955CJPA5CLctkAfdcYwIF53k+C6DZ5MM84qYuzQLPnZshT
IpxSupdKulSqk4Isft3gm+zR2u9n3AZOeaoGdgfvpw+lQ0EJ512MkPFj6uRHgZvx
PYKtkEH4f7Gqeyn1/pRJvs92oXsCAwEAAaOCA2gwggNkMB0GA1UdDgQWBBTkRFb7
L/BMqscjM82rnOIAG17VGzAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs
1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND
N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ
UzZvV0xlT0hHYV9JcGpsck5RLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5
NTc3NTc0Ny8wL0FTMTM4NDA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBoQYIKwYBBQUHAQcBAf8EggGQMIIBjDCCAQoEAgABMIIBAgMEAXWHwgMEAHWH
xgMEAXWHzjAMAwQAdYfRAwQAdYfSMAwDBAF1h9YDBAB1h9oDBAJ1h9wwDAMEAXWH
5gMEAHWH7AMEAHWH7gMEAHWH8DAMAwQBdYfyAwQAdYf0AwQBdYf2AwQAdYf5AwQA
dYf8AwQAdbsHMAwDBAB1uxUDBAB1uxYDBAB1uxgwDAMEAXW7JgMEAXW7KAMEAHW7
LgMEAHW7MwMEA3W7cDAMAwQHdbuAAwQAdbuWMAwDBAF1u7IDBAZ1u4AwDAMEAHW7
yQMEAnW72DAMAwQAdbvdAwQFdbvAAwQBdbvwMAwDBAB1u/MDBAN1u/AwDAMEAnW7
/AMEAHW7/jB8BAIAAjB2AwcAJAmAajAAAwcEJAmAarAgAwcAJAmMahQSAwcAJAmM
ah4SAwcEJAmMajoQAwYAJAmMakwDBwAkCYxqXBIDBwAkCYxqbBIDBwQkCYxqbxAD
BwAkCYxqeBIDBwAkCYxqmBIwEgMHBCQJjGqwEAMHBCQJjGqwIDANBgkqhkiG9w0B
AQsFAAOCAQEASj30FFES91RHYhOaQ6W6qKL69c7E7qG2oGVOAiB+mVER7H4cJ3Jc
Qpjnt3AwRZE6YoQFLmSFNeMmNNsDxGjnVxvBEcQhgfWyi+iiziX9wLuZgq+di3ck
0tHyCuUSw3q9N0UC1/JFUt0/v8uT3ZyhFKVaYTiNBiDERVMmimOgUGuehNQzGV2x
QhnsapJZjD+FcVvBbn9DemwMgEyXWQA6DUTSYAIJOTwIatYEuQU8Cb09fuNTEORQ
ET0zB3l+v73vZDgMIe/nPQj9mcKptr+K6u5lHw3iRy7IwgEf3tD3F+qequyn25rQ
hAeG+ZZ0DU5uOf98HH/6FH56zY4m+UrV4g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:11 2026 by rpki-client