Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS9814.roa
File: AS9814.roa (raw, json)
Hash identifier: Fx0jP4aQ4pcOqireF4CpHMswJZljyUdoFx8vMnPRQjI=
Subject key identifier: 37:31:1F:62:F1:00:9A:88:8C:5D:3B:6D:9B:1E:FE:15:E8:3D:B3:A4
Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8
Certificate serial: 63204148C5CC2C4F3F20CA305EB9183EF14028F5
Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS9814.roa
Signing time: Tue 14 Apr 2026 08:03:56 +0000
ROA not before: Tue 14 Apr 2026 07:58:56 +0000
ROA not after: Tue 13 Apr 2027 08:03:56 +0000
asID: 9814
IP address blocks: 125.98.122.0/23 maxlen: 24
125.98.123.0/24 maxlen: 24
125.98.128.0/17 maxlen: 18
125.98.130.0/24 maxlen: 24
125.98.131.0/24 maxlen: 24
125.98.192.0/18 maxlen: 18
180.203.0.0/23 maxlen: 24
180.203.1.0/24 maxlen: 24
180.203.2.0/23 maxlen: 23
180.203.3.0/24 maxlen: 24
180.203.4.0/24 maxlen: 24
210.72.224.0/20 maxlen: 21
210.72.226.0/23 maxlen: 24
210.72.227.0/24 maxlen: 24
210.72.232.0/21 maxlen: 24
210.72.236.0/22 maxlen: 24
210.72.238.0/24 maxlen: 24
210.72.239.0/24 maxlen: 24
210.72.240.0/21 maxlen: 24
210.72.241.0/24 maxlen: 24
210.72.242.0/24 maxlen: 24
210.72.243.0/24 maxlen: 24
210.72.244.0/22 maxlen: 22
210.72.245.0/24 maxlen: 24
210.72.246.0/24 maxlen: 24
211.99.8.0/21 maxlen: 22
211.99.9.0/24 maxlen: 24
211.99.10.0/24 maxlen: 24
211.99.11.0/24 maxlen: 24
211.99.12.0/23 maxlen: 24
211.99.13.0/24 maxlen: 24
211.99.14.0/24 maxlen: 24
211.99.15.0/24 maxlen: 24
211.99.16.0/23 maxlen: 24
211.99.17.0/24 maxlen: 24
211.99.24.0/23 maxlen: 23
211.99.25.0/24 maxlen: 24
211.99.26.0/23 maxlen: 24
211.99.28.0/22 maxlen: 24
211.99.29.0/24 maxlen: 24
211.99.30.0/24 maxlen: 24
211.160.0.0/22 maxlen: 23
211.160.2.0/23 maxlen: 23
211.160.4.0/23 maxlen: 24
211.160.8.0/23 maxlen: 23
211.160.9.0/24 maxlen: 24
211.160.10.0/23 maxlen: 24
211.160.11.0/24 maxlen: 24
211.160.14.0/23 maxlen: 23
211.160.15.0/24 maxlen: 24
211.160.16.0/23 maxlen: 24
211.160.18.0/23 maxlen: 23
211.160.19.0/24 maxlen: 24
211.160.20.0/23 maxlen: 24
211.160.21.0/24 maxlen: 24
211.160.22.0/23 maxlen: 24
211.160.23.0/24 maxlen: 24
211.160.24.0/23 maxlen: 24
211.160.26.0/23 maxlen: 23
211.160.27.0/24 maxlen: 24
211.160.28.0/23 maxlen: 24
211.160.29.0/24 maxlen: 24
211.160.36.0/23 maxlen: 24
211.160.37.0/24 maxlen: 24
211.160.46.0/23 maxlen: 24
211.160.62.0/23 maxlen: 24
211.160.72.0/21 maxlen: 23
211.160.74.0/24 maxlen: 24
211.160.75.0/24 maxlen: 24
211.160.76.0/24 maxlen: 24
211.160.77.0/24 maxlen: 24
211.160.78.0/24 maxlen: 24
211.160.79.0/24 maxlen: 24
211.160.80.0/20 maxlen: 21
211.160.88.0/22 maxlen: 22
211.160.92.0/22 maxlen: 22
211.160.112.0/23 maxlen: 23
211.160.115.0/24 maxlen: 24
211.160.120.0/24 maxlen: 24
211.160.160.0/19 maxlen: 24
211.160.162.0/24 maxlen: 24
211.160.163.0/24 maxlen: 24
211.160.164.0/24 maxlen: 24
211.160.165.0/24 maxlen: 24
211.160.166.0/24 maxlen: 24
211.160.167.0/24 maxlen: 24
211.160.168.0/22 maxlen: 24
211.160.169.0/24 maxlen: 24
211.160.170.0/24 maxlen: 24
211.160.171.0/24 maxlen: 24
211.160.176.0/20 maxlen: 22
211.160.178.0/24 maxlen: 24
211.160.184.0/21 maxlen: 21
211.160.187.0/24 maxlen: 24
211.160.194.0/23 maxlen: 23
211.160.195.0/24 maxlen: 24
211.160.196.0/24 maxlen: 24
211.160.202.0/23 maxlen: 23
211.160.203.0/24 maxlen: 24
211.160.204.0/23 maxlen: 23
211.160.205.0/24 maxlen: 24
211.160.240.0/20 maxlen: 20
211.160.244.0/24 maxlen: 24
211.160.246.0/24 maxlen: 24
211.160.247.0/24 maxlen: 24
211.160.248.0/21 maxlen: 21
211.160.250.0/24 maxlen: 24
211.160.252.0/23 maxlen: 24
211.160.253.0/24 maxlen: 24
2402:3c00::/32 maxlen: 33
2402:3c00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:20:41:48:c5:cc:2c:4f:3f:20:ca:30:5e:b9:18:3e:f1:40:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8
Validity
Not Before: Apr 14 07:58:56 2026 GMT
Not After : Apr 13 08:03:56 2027 GMT
Subject: CN=37311F62F1009A888C5D3B6D9B1EFE15E83DB3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:49:a1:48:9e:7f:2a:d3:d3:ae:7e:0c:0d:
dc:84:e0:71:46:98:25:e5:c9:56:3b:33:0c:a8:ad:
a3:b8:0e:78:41:20:ea:45:1d:63:7c:be:5c:78:52:
79:c5:70:d4:8f:72:f3:38:57:ba:af:df:d8:1a:49:
2a:9c:6a:04:82:06:28:b2:ad:fe:fe:eb:9b:f2:01:
eb:8b:6b:a0:4b:25:d5:5d:34:f3:2a:b5:1b:81:6c:
ae:38:a7:1c:c1:8b:ac:76:b0:2a:2b:40:52:81:a5:
86:d0:d0:11:17:43:41:ea:66:2b:ac:36:0a:00:2a:
ae:d8:0a:d1:4d:52:d9:05:52:29:8b:3a:8d:1e:b1:
ec:54:43:62:c7:9e:18:1a:df:59:b0:08:db:e0:fb:
30:fb:be:d2:0d:25:dc:7c:7f:28:89:e8:00:68:80:
af:0b:c8:88:9e:8b:f4:88:73:ba:e4:93:a5:de:1d:
bd:cb:34:f2:fa:36:c2:e8:ae:27:3c:ef:9b:9a:51:
3c:a3:28:67:af:42:e9:9c:29:8e:a9:5d:7b:12:74:
91:56:3d:2b:e5:e0:c9:f9:4b:d0:29:bc:1e:92:7a:
c8:1f:3e:c4:7b:ca:f1:ea:b0:d0:4a:ce:90:4a:2c:
74:9d:55:cb:4c:85:01:53:02:86:d3:b8:c1:5a:b5:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:1F:62:F1:00:9A:88:8C:5D:3B:6D:9B:1E:FE:15:E8:3D:B3:A4
X509v3 Authority Key Identifier:
keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS9814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.98.122.0/23
125.98.128.0/17
180.203.0.0-180.203.4.255
210.72.224.0-210.72.247.255
211.99.8.0-211.99.17.255
211.99.24.0/21
211.160.0.0-211.160.5.255
211.160.8.0/22
211.160.14.0-211.160.29.255
211.160.36.0/23
211.160.46.0/23
211.160.62.0/23
211.160.72.0-211.160.95.255
211.160.112.0/23
211.160.115.0/24
211.160.120.0/24
211.160.160.0/19
211.160.194.0-211.160.196.255
211.160.202.0-211.160.205.255
211.160.240.0/20
IPv6:
2402:3c00::/32
Signature Algorithm: sha256WithRSAEncryption
29:a2:80:3d:7c:58:15:bd:7e:d8:f5:8a:f4:3e:e1:c0:ee:a1:
ab:05:ef:ce:ce:4b:5e:1e:82:de:08:b5:c7:f7:09:36:d1:0b:
e1:8f:f3:1d:28:11:9b:12:09:ba:28:d5:e5:a8:af:7c:f0:e6:
7c:1e:93:32:f8:6c:08:a0:16:76:9d:55:b2:cf:58:45:82:9b:
5c:01:35:f8:e4:f9:92:96:45:18:50:d3:61:f4:bc:ae:ec:f2:
df:62:0c:c2:2c:d6:2e:ba:1b:27:79:51:65:57:49:53:0e:3e:
90:81:a3:a7:e5:89:9d:6a:ff:7e:e3:d7:46:13:f4:83:86:eb:
3f:0c:98:50:84:bd:75:31:df:b6:a8:16:77:09:07:41:d5:88:
fd:63:97:42:84:28:da:95:02:75:0b:e1:7c:4a:46:dc:da:45:
6a:e5:02:a5:66:19:d1:03:5f:08:f9:37:8c:43:4b:88:95:ba:
15:2c:8b:52:1b:2e:03:db:b4:b8:0c:67:97:a1:e6:39:d5:e2:
a9:4f:5b:d6:75:7b:d0:07:30:94:f8:ee:65:d5:93:91:86:1b:
e5:22:d7:ca:ce:59:41:51:36:85:c6:ee:0b:b4:ea:dd:d4:9a:
87:8c:d5:21:34:e4:07:21:1f:b4:dc:97:81:81:c0:cf:4f:d7:
18:6a:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:16 2026 by rpki-client