Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS9814.roa
File: AS9814.roa (raw, json)
Hash identifier: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=
Subject key identifier: 76:18:13:57:F7:D3:B5:ED:AC:B7:CD:9B:70:9E:17:F0:7A:DF:27:EE
Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8
Certificate serial: 377785F081B0878E8309B5B67CC22D20617D579E
Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS9814.roa
Signing time: Wed 27 May 2026 07:18:20 +0000
ROA not before: Wed 27 May 2026 07:13:20 +0000
ROA not after: Wed 26 May 2027 07:18:20 +0000
asID: 9814
IP address blocks: 125.97.64.0/18 maxlen: 18
125.98.122.0/23 maxlen: 24
125.98.123.0/24 maxlen: 24
125.98.128.0/17 maxlen: 18
125.98.130.0/24 maxlen: 24
125.98.131.0/24 maxlen: 24
125.98.192.0/18 maxlen: 18
180.203.0.0/23 maxlen: 24
180.203.1.0/24 maxlen: 24
180.203.2.0/23 maxlen: 23
180.203.3.0/24 maxlen: 24
180.203.4.0/24 maxlen: 24
210.72.224.0/20 maxlen: 21
210.72.226.0/23 maxlen: 24
210.72.227.0/24 maxlen: 24
210.72.232.0/21 maxlen: 24
210.72.236.0/22 maxlen: 24
210.72.238.0/24 maxlen: 24
210.72.239.0/24 maxlen: 24
210.72.240.0/21 maxlen: 24
210.72.241.0/24 maxlen: 24
210.72.242.0/24 maxlen: 24
210.72.243.0/24 maxlen: 24
210.72.244.0/22 maxlen: 22
210.72.245.0/24 maxlen: 24
210.72.246.0/24 maxlen: 24
211.99.8.0/21 maxlen: 22
211.99.9.0/24 maxlen: 24
211.99.10.0/24 maxlen: 24
211.99.11.0/24 maxlen: 24
211.99.12.0/23 maxlen: 24
211.99.13.0/24 maxlen: 24
211.99.14.0/24 maxlen: 24
211.99.15.0/24 maxlen: 24
211.99.16.0/23 maxlen: 24
211.99.17.0/24 maxlen: 24
211.99.24.0/23 maxlen: 23
211.99.25.0/24 maxlen: 24
211.99.26.0/23 maxlen: 24
211.99.28.0/22 maxlen: 24
211.99.29.0/24 maxlen: 24
211.99.30.0/24 maxlen: 24
211.160.0.0/22 maxlen: 23
211.160.2.0/23 maxlen: 23
211.160.4.0/23 maxlen: 24
211.160.8.0/23 maxlen: 23
211.160.9.0/24 maxlen: 24
211.160.10.0/23 maxlen: 24
211.160.11.0/24 maxlen: 24
211.160.14.0/23 maxlen: 23
211.160.15.0/24 maxlen: 24
211.160.16.0/23 maxlen: 24
211.160.18.0/23 maxlen: 23
211.160.19.0/24 maxlen: 24
211.160.20.0/23 maxlen: 24
211.160.21.0/24 maxlen: 24
211.160.22.0/23 maxlen: 24
211.160.23.0/24 maxlen: 24
211.160.24.0/23 maxlen: 24
211.160.26.0/23 maxlen: 23
211.160.27.0/24 maxlen: 24
211.160.28.0/23 maxlen: 24
211.160.29.0/24 maxlen: 24
211.160.36.0/23 maxlen: 24
211.160.37.0/24 maxlen: 24
211.160.46.0/23 maxlen: 24
211.160.62.0/23 maxlen: 24
211.160.72.0/21 maxlen: 23
211.160.74.0/24 maxlen: 24
211.160.75.0/24 maxlen: 24
211.160.76.0/24 maxlen: 24
211.160.77.0/24 maxlen: 24
211.160.78.0/24 maxlen: 24
211.160.79.0/24 maxlen: 24
211.160.80.0/20 maxlen: 21
211.160.88.0/22 maxlen: 22
211.160.92.0/22 maxlen: 22
211.160.112.0/23 maxlen: 23
211.160.115.0/24 maxlen: 24
211.160.120.0/24 maxlen: 24
211.160.160.0/19 maxlen: 24
211.160.162.0/24 maxlen: 24
211.160.163.0/24 maxlen: 24
211.160.164.0/24 maxlen: 24
211.160.165.0/24 maxlen: 24
211.160.166.0/24 maxlen: 24
211.160.167.0/24 maxlen: 24
211.160.168.0/22 maxlen: 24
211.160.169.0/24 maxlen: 24
211.160.170.0/24 maxlen: 24
211.160.171.0/24 maxlen: 24
211.160.176.0/20 maxlen: 22
211.160.178.0/24 maxlen: 24
211.160.184.0/21 maxlen: 21
211.160.187.0/24 maxlen: 24
211.160.194.0/23 maxlen: 23
211.160.195.0/24 maxlen: 24
211.160.196.0/24 maxlen: 24
211.160.202.0/23 maxlen: 23
211.160.203.0/24 maxlen: 24
211.160.204.0/23 maxlen: 23
211.160.205.0/24 maxlen: 24
211.160.240.0/20 maxlen: 20
211.160.244.0/24 maxlen: 24
211.160.246.0/24 maxlen: 24
211.160.247.0/24 maxlen: 24
211.160.248.0/21 maxlen: 21
211.160.250.0/24 maxlen: 24
211.160.252.0/23 maxlen: 24
211.160.253.0/24 maxlen: 24
2402:3c00::/32 maxlen: 33
2402:3c00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 09:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:77:85:f0:81:b0:87:8e:83:09:b5:b6:7c:c2:2d:20:61:7d:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8
Validity
Not Before: May 27 07:13:20 2026 GMT
Not After : May 26 07:18:20 2027 GMT
Subject: CN=76181357F7D3B5EDACB7CD9B709E17F07ADF27EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:ed:e2:03:bb:b6:75:1a:71:7a:8a:e5:fa:
39:20:d2:d6:51:c3:1c:50:86:e4:54:a9:d1:a5:ce:
bc:10:85:26:10:14:43:d8:44:3f:54:85:24:a8:0e:
ec:90:24:51:8e:47:8f:6f:23:14:f0:67:a3:d9:6a:
ee:97:85:27:1b:e6:3b:0a:7e:06:08:4a:74:6e:75:
28:d7:30:f8:1e:8d:d4:49:a8:13:ab:b7:5a:7f:ca:
47:31:be:69:05:12:a9:3f:22:0b:31:09:62:23:5c:
ef:31:6c:fd:da:5e:21:ae:c6:cc:56:02:21:d2:04:
36:82:05:f5:1d:a1:48:5b:0e:4c:2c:9a:05:55:1f:
7e:61:06:f4:d2:9c:eb:ca:73:c8:b7:4b:04:14:7d:
8b:bb:9e:0f:ff:a1:09:7d:14:62:b0:29:2e:41:c0:
d6:9c:29:e4:90:13:69:d5:90:04:68:97:f5:4b:07:
fa:18:00:58:7a:0b:fc:bf:5e:17:3a:0a:f7:5f:db:
3d:d0:eb:94:a6:c8:f7:55:10:24:95:69:8c:24:72:
bd:da:3a:c9:17:d8:ec:63:a5:22:43:4f:25:18:fd:
66:32:f3:ee:47:be:da:19:ec:90:c3:bc:43:24:f2:
29:5f:3a:20:06:f6:dd:7a:2f:99:99:18:dc:93:f3:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:13:57:F7:D3:B5:ED:AC:B7:CD:9B:70:9E:17:F0:7A:DF:27:EE
X509v3 Authority Key Identifier:
keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS9814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.97.64.0/18
125.98.122.0/23
125.98.128.0/17
180.203.0.0-180.203.4.255
210.72.224.0-210.72.247.255
211.99.8.0-211.99.17.255
211.99.24.0/21
211.160.0.0-211.160.5.255
211.160.8.0/22
211.160.14.0-211.160.29.255
211.160.36.0/23
211.160.46.0/23
211.160.62.0/23
211.160.72.0-211.160.95.255
211.160.112.0/23
211.160.115.0/24
211.160.120.0/24
211.160.160.0/19
211.160.194.0-211.160.196.255
211.160.202.0-211.160.205.255
211.160.240.0/20
IPv6:
2402:3c00::/32
Signature Algorithm: sha256WithRSAEncryption
25:5e:2b:6f:8e:3c:c5:07:39:a7:01:6a:71:07:b0:20:ed:ee:
5d:c0:35:96:67:51:ee:16:f8:57:c1:72:69:9f:b6:71:88:1a:
57:9c:6c:36:f5:80:fd:d6:04:6a:58:37:e0:6f:bc:95:55:b2:
4c:11:e3:f7:40:fc:6f:1e:76:09:18:57:3c:c4:6f:56:d4:06:
d2:62:54:7d:a4:bd:be:1d:a6:a4:a6:c6:93:80:c1:b0:0d:df:
0c:25:ed:dc:01:2e:88:a8:56:38:37:eb:c9:6f:d0:21:c2:03:
13:20:39:47:fa:91:3e:fa:d6:c9:95:a9:9c:f5:b4:86:58:9f:
bc:a6:70:a6:a5:b0:48:fb:e5:46:2f:07:52:97:52:ca:5f:7d:
32:3b:a3:11:06:67:90:5e:52:39:90:84:9c:48:f9:27:b8:ef:
dc:0c:7c:d9:a1:f8:81:26:7f:8b:eb:b9:03:43:38:f3:dc:60:
42:0e:35:06:65:c2:53:0e:f5:06:b0:77:65:ee:dc:97:d6:d8:
26:7b:de:73:ce:2e:d1:57:8b:ff:af:d1:0c:f1:76:93:cc:eb:
36:f4:3b:5c:7f:4c:c9:4b:9c:bf:17:89:41:91:ce:6b:9a:23:
04:d8:76:f4:54:81:05:de:d7:52:db:30:0f:24:66:6e:84:83:
a3:95:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 14:02:12 2026 by rpki-client