Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
File: AS134543.roa (raw, json)
Hash identifier: l/s9il4j75q9mAFaKyqDRO2+e8pX4wx03PNyz+orPMo=
Subject key identifier: 1F:64:C8:6A:3C:89:DC:FA:AF:2B:22:D5:16:8B:AA:2C:9D:59:67:B5
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 64F93518069328E38E34178C02A99FF7B0A37F63
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
Signing time: Fri 05 Jun 2026 06:31:06 +0000
ROA not before: Fri 05 Jun 2026 06:26:06 +0000
ROA not after: Fri 04 Jun 2027 06:31:06 +0000
asID: 134543
IP address blocks: 157.122.220.0/24 maxlen: 24
157.122.221.0/24 maxlen: 24
157.122.222.0/24 maxlen: 24
157.148.128.0/24 maxlen: 24
157.148.130.0/24 maxlen: 24
157.148.131.0/24 maxlen: 24
157.148.132.0/24 maxlen: 24
157.148.133.0/24 maxlen: 24
157.255.120.0/24 maxlen: 24
157.255.121.0/24 maxlen: 24
157.255.122.0/24 maxlen: 24
157.255.123.0/24 maxlen: 24
157.255.128.0/24 maxlen: 24
157.255.129.0/24 maxlen: 24
157.255.130.0/24 maxlen: 24
157.255.131.0/24 maxlen: 24
157.255.132.0/24 maxlen: 24
157.255.133.0/24 maxlen: 24
157.255.134.0/24 maxlen: 24
157.255.136.0/24 maxlen: 24
157.255.137.0/24 maxlen: 24
157.255.138.0/24 maxlen: 24
157.255.142.0/24 maxlen: 24
157.255.143.0/24 maxlen: 24
157.255.145.0/24 maxlen: 24
157.255.148.0/24 maxlen: 24
157.255.150.0/24 maxlen: 24
157.255.151.0/24 maxlen: 24
157.255.154.0/24 maxlen: 24
157.255.156.0/24 maxlen: 24
157.255.157.0/24 maxlen: 24
157.255.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 01:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f9:35:18:06:93:28:e3:8e:34:17:8c:02:a9:9f:f7:b0:a3:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jun 5 06:26:06 2026 GMT
Not After : Jun 4 06:31:06 2027 GMT
Subject: CN=1F64C86A3C89DCFAAF2B22D5168BAA2C9D5967B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:81:90:f8:d4:a1:4f:e8:51:cb:f4:24:09:
f1:32:af:9b:08:47:f8:3e:2d:db:28:27:88:3f:ec:
8b:a8:8f:52:c5:47:c4:3e:47:81:11:e2:e5:fe:8a:
61:9a:d7:ba:c9:fe:f0:84:46:5d:37:19:d6:5a:8b:
e4:2a:66:4c:0c:26:4c:39:74:d8:1c:5b:78:35:fb:
6f:ed:17:2c:6d:2f:fa:52:40:e1:2b:0e:bd:9f:a7:
87:04:18:ed:74:68:51:a9:9e:cb:9d:e8:8d:9c:87:
30:6f:ff:2e:a7:fb:12:e8:d5:55:a5:e3:5f:ce:c9:
7b:15:a6:65:94:68:31:7d:d8:d3:46:82:09:3e:d3:
d2:ca:88:54:30:59:ae:98:42:29:6a:d1:ef:f6:84:
df:aa:06:b9:46:24:16:37:7e:89:38:c8:7b:f9:df:
46:c5:7a:0d:b3:b7:d3:da:81:17:e8:88:83:bf:07:
b9:02:1a:de:81:ad:65:7f:cd:30:97:b7:cc:cd:1b:
fd:22:be:3f:d0:d3:ba:a1:08:e8:b4:df:92:f0:e8:
c3:64:b1:bb:f1:89:49:73:1a:54:f1:5f:ac:26:07:
50:dc:d8:a2:9a:05:06:8b:b9:66:39:59:ac:21:ae:
95:27:86:b5:2f:0b:2c:cc:be:f8:3c:d0:0b:70:a2:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:C8:6A:3C:89:DC:FA:AF:2B:22:D5:16:8B:AA:2C:9D:59:67:B5
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.220.0-157.122.222.255
157.148.128.0/24
157.148.130.0-157.148.133.255
157.255.120.0/22
157.255.128.0-157.255.134.255
157.255.136.0-157.255.138.255
157.255.142.0/23
157.255.145.0/24
157.255.148.0/24
157.255.150.0/23
157.255.154.0/24
157.255.156.0-157.255.158.255
Signature Algorithm: sha256WithRSAEncryption
7e:f0:16:b2:5e:dc:f2:16:c5:a6:df:99:ff:3e:a4:e0:07:3f:
96:81:18:23:ed:37:d9:9b:2e:f7:ad:c5:94:57:16:5e:61:d0:
75:ea:65:87:14:ef:7e:f9:92:95:c8:ec:27:47:49:bb:4c:9b:
f4:e6:6d:fe:50:af:5f:6a:67:5c:df:3b:82:16:e0:b2:0f:08:
4c:86:f8:06:11:53:1b:2b:fc:3d:32:d8:69:2e:76:86:8b:ec:
e4:fe:1c:04:6b:5b:f8:83:71:4e:aa:b5:17:98:9b:0a:89:cf:
99:db:08:1a:75:c7:0b:5e:1a:5c:3e:7d:32:b5:2c:f2:96:1f:
4a:8e:bc:e4:b4:6d:38:cd:19:cc:e4:b3:48:00:c0:94:be:49:
4c:f9:c4:b6:0e:ce:be:69:bb:fe:0e:66:86:47:46:ed:bb:52:
9a:96:a3:76:5b:d7:0d:c8:b2:12:1a:68:3a:70:4b:38:a1:2d:
7d:78:79:ee:5d:5d:68:9e:9f:c1:be:1a:db:a6:a0:d4:82:18:
bb:3a:1f:7e:27:37:24:78:ad:77:db:8d:63:73:76:8f:95:e2:
43:d0:5e:3e:d5:90:93:f3:9b:f5:97:59:ec:23:0a:c7:84:4f:
95:3d:be:c5:c3:d2:ed:d7:96:e2:64:37:ba:d6:93:0d:a2:56:
69:7b:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:11 2026 by rpki-client