Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
File: AS136958.roa (raw, json)
Hash identifier: itcr1ClEzj1IhHty+wJhgdKhy54GDFiyT6kZBJqI/Ks=
Subject key identifier: D1:F3:2D:97:58:4B:DA:A3:C2:3C:4C:02:2F:23:4C:8D:D7:E1:91:6C
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 4F2B00A6C6D4AF4AAFA1C4C3CAD145F27A11D288
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
Signing time: Thu 10 Sep 2026 06:49:49 +0000
ROA not before: Thu 10 Sep 2026 06:44:49 +0000
ROA not after: Thu 09 Sep 2027 06:49:49 +0000
asID: 136958
IP address blocks: 157.122.208.0/21 maxlen: 21
157.122.211.0/24 maxlen: 24
157.122.214.0/24 maxlen: 24
157.122.224.0/21 maxlen: 21
157.122.226.0/24 maxlen: 24
157.122.230.0/24 maxlen: 24
157.122.231.0/24 maxlen: 24
157.148.1.0/24 maxlen: 24
157.148.2.0/24 maxlen: 24
157.148.3.0/24 maxlen: 24
157.148.4.0/24 maxlen: 24
157.148.5.0/24 maxlen: 24
157.148.6.0/24 maxlen: 24
157.148.7.0/24 maxlen: 24
157.148.8.0/24 maxlen: 24
157.148.11.0/24 maxlen: 24
157.148.12.0/24 maxlen: 24
157.148.13.0/24 maxlen: 24
157.148.14.0/24 maxlen: 24
157.148.15.0/24 maxlen: 24
157.148.16.0/24 maxlen: 24
157.148.17.0/24 maxlen: 24
157.148.18.0/24 maxlen: 24
157.148.19.0/24 maxlen: 24
157.148.20.0/24 maxlen: 24
157.148.21.0/24 maxlen: 24
157.148.22.0/24 maxlen: 24
157.148.23.0/24 maxlen: 24
157.148.24.0/21 maxlen: 21
157.148.26.0/24 maxlen: 24
157.148.27.0/24 maxlen: 24
157.148.28.0/24 maxlen: 24
157.148.29.0/24 maxlen: 24
157.148.30.0/24 maxlen: 24
157.148.32.0/24 maxlen: 24
157.148.33.0/24 maxlen: 24
157.148.34.0/24 maxlen: 24
157.148.35.0/24 maxlen: 24
157.148.36.0/24 maxlen: 24
157.148.37.0/24 maxlen: 24
157.148.38.0/24 maxlen: 24
157.148.39.0/24 maxlen: 24
157.148.40.0/24 maxlen: 24
157.148.41.0/24 maxlen: 24
157.148.42.0/24 maxlen: 24
157.148.43.0/24 maxlen: 24
157.148.44.0/24 maxlen: 24
157.148.45.0/24 maxlen: 24
157.148.46.0/24 maxlen: 24
157.148.47.0/24 maxlen: 24
157.148.48.0/24 maxlen: 24
157.148.49.0/24 maxlen: 24
157.148.50.0/24 maxlen: 24
157.148.51.0/24 maxlen: 24
157.148.52.0/24 maxlen: 24
157.148.53.0/24 maxlen: 24
157.148.54.0/24 maxlen: 24
157.148.55.0/24 maxlen: 24
157.148.56.0/24 maxlen: 24
157.148.57.0/24 maxlen: 24
157.148.58.0/24 maxlen: 24
157.148.59.0/24 maxlen: 24
157.148.60.0/24 maxlen: 24
157.148.61.0/24 maxlen: 24
157.148.62.0/24 maxlen: 24
157.148.63.0/24 maxlen: 24
157.148.64.0/24 maxlen: 24
157.148.65.0/24 maxlen: 24
157.148.66.0/24 maxlen: 24
157.148.67.0/24 maxlen: 24
157.148.68.0/24 maxlen: 24
157.148.69.0/24 maxlen: 24
157.148.70.0/24 maxlen: 24
157.148.71.0/24 maxlen: 24
157.148.72.0/24 maxlen: 24
157.148.73.0/24 maxlen: 24
157.148.74.0/24 maxlen: 24
157.148.75.0/24 maxlen: 24
157.148.76.0/24 maxlen: 24
157.148.77.0/24 maxlen: 24
157.148.78.0/24 maxlen: 24
157.148.79.0/24 maxlen: 24
157.148.80.0/21 maxlen: 21
157.148.81.0/24 maxlen: 24
157.148.82.0/24 maxlen: 24
157.148.83.0/24 maxlen: 24
157.148.84.0/24 maxlen: 24
157.148.85.0/24 maxlen: 24
157.148.86.0/24 maxlen: 24
157.148.87.0/24 maxlen: 24
157.148.88.0/24 maxlen: 24
157.148.89.0/24 maxlen: 24
157.148.90.0/24 maxlen: 24
157.148.91.0/24 maxlen: 24
157.148.92.0/24 maxlen: 24
157.148.93.0/24 maxlen: 24
157.148.94.0/24 maxlen: 24
157.148.95.0/24 maxlen: 24
157.148.96.0/21 maxlen: 21
157.148.97.0/24 maxlen: 24
157.148.102.0/24 maxlen: 24
157.148.103.0/24 maxlen: 24
157.148.104.0/24 maxlen: 24
157.148.105.0/24 maxlen: 24
157.148.106.0/24 maxlen: 24
157.148.107.0/24 maxlen: 24
157.148.108.0/24 maxlen: 24
157.148.110.0/24 maxlen: 24
157.148.111.0/24 maxlen: 24
157.148.112.0/24 maxlen: 24
157.148.113.0/24 maxlen: 24
157.148.114.0/24 maxlen: 24
157.148.115.0/24 maxlen: 24
157.148.116.0/24 maxlen: 24
157.148.117.0/24 maxlen: 24
157.148.118.0/24 maxlen: 24
157.148.119.0/24 maxlen: 24
157.148.120.0/24 maxlen: 24
157.148.121.0/24 maxlen: 24
157.148.122.0/24 maxlen: 24
157.148.123.0/24 maxlen: 24
157.148.124.0/24 maxlen: 24
157.148.125.0/24 maxlen: 24
157.148.126.0/24 maxlen: 24
157.148.127.0/24 maxlen: 24
157.255.0.0/24 maxlen: 24
157.255.1.0/24 maxlen: 24
157.255.2.0/24 maxlen: 24
157.255.3.0/24 maxlen: 24
157.255.4.0/24 maxlen: 24
157.255.5.0/24 maxlen: 24
157.255.6.0/24 maxlen: 24
157.255.7.0/24 maxlen: 24
157.255.8.0/24 maxlen: 24
157.255.9.0/24 maxlen: 24
157.255.10.0/24 maxlen: 24
157.255.11.0/24 maxlen: 24
157.255.12.0/24 maxlen: 24
157.255.13.0/24 maxlen: 24
157.255.14.0/24 maxlen: 24
157.255.15.0/24 maxlen: 24
157.255.16.0/24 maxlen: 24
157.255.17.0/24 maxlen: 24
157.255.18.0/24 maxlen: 24
157.255.19.0/24 maxlen: 24
157.255.20.0/23 maxlen: 23
157.255.22.0/24 maxlen: 24
157.255.23.0/24 maxlen: 24
157.255.27.0/24 maxlen: 24
157.255.28.0/24 maxlen: 24
157.255.29.0/24 maxlen: 24
157.255.30.0/24 maxlen: 24
157.255.32.0/21 maxlen: 21
157.255.33.0/24 maxlen: 24
157.255.34.0/24 maxlen: 24
157.255.35.0/24 maxlen: 24
157.255.39.0/24 maxlen: 24
157.255.40.0/21 maxlen: 21
157.255.42.0/24 maxlen: 24
157.255.45.0/24 maxlen: 24
157.255.48.0/21 maxlen: 21
157.255.48.0/24 maxlen: 24
157.255.49.0/24 maxlen: 24
157.255.50.0/24 maxlen: 24
157.255.51.0/24 maxlen: 24
157.255.52.0/24 maxlen: 24
157.255.55.0/24 maxlen: 24
157.255.56.0/21 maxlen: 21
157.255.56.0/24 maxlen: 24
157.255.57.0/24 maxlen: 24
157.255.58.0/24 maxlen: 24
157.255.59.0/24 maxlen: 24
157.255.60.0/24 maxlen: 24
157.255.61.0/24 maxlen: 24
157.255.62.0/24 maxlen: 24
157.255.64.0/20 maxlen: 20
157.255.65.0/24 maxlen: 24
157.255.66.0/24 maxlen: 24
157.255.67.0/24 maxlen: 24
157.255.68.0/24 maxlen: 24
157.255.71.0/24 maxlen: 24
157.255.72.0/24 maxlen: 24
157.255.73.0/24 maxlen: 24
157.255.74.0/24 maxlen: 24
157.255.77.0/24 maxlen: 24
157.255.78.0/24 maxlen: 24
157.255.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 15:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2b:00:a6:c6:d4:af:4a:af:a1:c4:c3:ca:d1:45:f2:7a:11:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Sep 10 06:44:49 2026 GMT
Not After : Sep 9 06:49:49 2027 GMT
Subject: CN=D1F32D97584BDAA3C23C4C022F234C8DD7E1916C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:8b:3e:46:0f:10:8a:45:f6:c3:ab:c7:ec:
51:88:e3:ea:da:8a:9b:b3:14:cd:3a:13:db:ce:75:
54:34:b8:26:1a:95:13:49:fa:24:12:d5:39:7a:5a:
25:b0:cb:57:fe:11:5c:9c:57:36:0f:3a:df:1e:b5:
a5:28:0d:16:7e:5a:78:6a:68:ac:20:6a:26:5f:ab:
f6:7e:65:01:da:55:3c:d7:e0:e4:3e:6a:29:13:2e:
27:dc:3f:b3:a9:cf:42:0c:4f:01:8f:4b:6c:0c:2c:
a1:20:be:69:15:5b:d2:cf:54:f3:4b:64:80:d0:07:
1d:e9:fb:b8:01:50:e0:bc:76:72:82:f3:84:19:2a:
e7:66:8d:75:a8:13:5c:0b:4e:d4:c7:6a:17:c5:b3:
b0:ff:fc:3b:62:4e:a4:9c:28:57:b9:23:11:0f:4f:
0d:dc:e0:b1:74:95:56:a4:63:15:60:63:68:41:2e:
7a:6b:fc:ae:a7:23:2a:cb:fc:f3:1c:3a:d0:cd:e3:
3c:e3:68:7c:80:b9:d0:24:45:ac:b0:06:57:b3:c9:
a8:76:75:fc:b9:40:f7:5c:d3:c4:59:34:ce:d4:d1:
25:61:89:73:01:26:09:a2:86:35:0c:77:fa:82:e4:
73:1d:5d:b5:92:f9:ca:e7:a1:c1:43:92:f4:3e:83:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F3:2D:97:58:4B:DA:A3:C2:3C:4C:02:2F:23:4C:8D:D7:E1:91:6C
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.208.0/21
157.122.224.0/21
157.148.1.0-157.148.8.255
157.148.11.0-157.148.108.255
157.148.110.0-157.148.127.255
157.255.0.0-157.255.23.255
157.255.27.0-157.255.30.255
157.255.32.0-157.255.79.255
Signature Algorithm: sha256WithRSAEncryption
81:f2:aa:ef:00:ad:4e:55:eb:39:ed:7e:b2:c0:a6:98:f8:4b:
de:f0:bd:f2:cb:52:7b:99:f0:a6:e5:8d:fe:7a:83:91:1a:74:
31:68:e1:34:18:33:7e:2a:c2:24:65:62:25:05:1e:83:ee:90:
ba:b4:16:e2:e2:a8:96:80:2e:fd:8d:89:ee:b2:c7:4d:b7:4d:
60:14:10:85:58:82:50:b9:6e:bf:2b:83:03:70:ea:94:59:27:
c5:37:6f:93:b2:24:a4:71:e1:f4:03:45:70:f9:22:5c:97:6b:
b4:94:a4:ac:bb:f5:4f:c7:f0:e7:0d:86:fb:c0:b4:a6:53:c3:
8c:a4:c9:be:13:e6:80:91:7c:99:f4:3c:9a:8f:25:9b:0b:ed:
e6:36:b6:cf:c4:02:66:3c:be:46:f9:a9:0b:6c:5a:0d:f5:f0:
49:61:4a:0e:4e:26:7e:48:8c:c9:2b:cd:63:41:b7:15:d4:f3:
44:14:17:b3:06:e9:8e:a7:4a:93:6c:fe:6b:6e:03:8e:2f:64:
db:d1:dd:ad:51:b5:88:b3:33:98:fb:51:f5:b5:5f:ae:be:3d:
3b:ce:b9:af:f8:e1:11:33:b0:e1:e2:d4:e7:1a:a9:3e:0a:3b:
3b:5c:31:43:c7:8b:63:26:96:47:16:8a:5d:81:8c:a3:52:67:
d0:d1:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:41:55 2026 by rpki-client