Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
File: AS136958.roa (raw, json)
Hash identifier: 0gWfCUezTaSdC4dnDrQ7qjjlHWidOLKJTZlBZqq/NjI=
Subject key identifier: 37:01:FD:B7:F0:B5:A8:18:97:63:75:7D:7E:86:4D:F4:C9:24:93:96
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 2C8769676FFA9B51E04DBB6B2389DA1BC92C935D
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
Signing time: Tue 09 Jun 2026 06:15:02 +0000
ROA not before: Tue 09 Jun 2026 06:10:02 +0000
ROA not after: Tue 08 Jun 2027 06:15:02 +0000
asID: 136958
IP address blocks: 157.122.214.0/24 maxlen: 24
157.122.226.0/24 maxlen: 24
157.122.230.0/24 maxlen: 24
157.122.231.0/24 maxlen: 24
157.148.1.0/24 maxlen: 24
157.148.2.0/24 maxlen: 24
157.148.3.0/24 maxlen: 24
157.148.4.0/24 maxlen: 24
157.148.5.0/24 maxlen: 24
157.148.6.0/24 maxlen: 24
157.148.7.0/24 maxlen: 24
157.148.8.0/24 maxlen: 24
157.148.11.0/24 maxlen: 24
157.148.12.0/24 maxlen: 24
157.148.13.0/24 maxlen: 24
157.148.14.0/24 maxlen: 24
157.148.15.0/24 maxlen: 24
157.148.16.0/24 maxlen: 24
157.148.17.0/24 maxlen: 24
157.148.18.0/24 maxlen: 24
157.148.19.0/24 maxlen: 24
157.148.20.0/24 maxlen: 24
157.148.21.0/24 maxlen: 24
157.148.22.0/24 maxlen: 24
157.148.23.0/24 maxlen: 24
157.148.26.0/24 maxlen: 24
157.148.27.0/24 maxlen: 24
157.148.28.0/24 maxlen: 24
157.148.29.0/24 maxlen: 24
157.148.30.0/24 maxlen: 24
157.148.32.0/24 maxlen: 24
157.148.33.0/24 maxlen: 24
157.148.34.0/24 maxlen: 24
157.148.35.0/24 maxlen: 24
157.148.36.0/24 maxlen: 24
157.148.37.0/24 maxlen: 24
157.148.38.0/24 maxlen: 24
157.148.39.0/24 maxlen: 24
157.148.40.0/24 maxlen: 24
157.148.41.0/24 maxlen: 24
157.148.42.0/24 maxlen: 24
157.148.43.0/24 maxlen: 24
157.148.44.0/24 maxlen: 24
157.148.45.0/24 maxlen: 24
157.148.46.0/24 maxlen: 24
157.148.47.0/24 maxlen: 24
157.148.48.0/24 maxlen: 24
157.148.49.0/24 maxlen: 24
157.148.50.0/24 maxlen: 24
157.148.51.0/24 maxlen: 24
157.148.52.0/24 maxlen: 24
157.148.53.0/24 maxlen: 24
157.148.54.0/24 maxlen: 24
157.148.55.0/24 maxlen: 24
157.148.56.0/24 maxlen: 24
157.148.57.0/24 maxlen: 24
157.148.58.0/24 maxlen: 24
157.148.59.0/24 maxlen: 24
157.148.60.0/24 maxlen: 24
157.148.61.0/24 maxlen: 24
157.148.62.0/24 maxlen: 24
157.148.63.0/24 maxlen: 24
157.148.64.0/24 maxlen: 24
157.148.65.0/24 maxlen: 24
157.148.66.0/24 maxlen: 24
157.148.67.0/24 maxlen: 24
157.148.68.0/24 maxlen: 24
157.148.69.0/24 maxlen: 24
157.148.70.0/24 maxlen: 24
157.148.71.0/24 maxlen: 24
157.148.72.0/24 maxlen: 24
157.148.73.0/24 maxlen: 24
157.148.74.0/24 maxlen: 24
157.148.75.0/24 maxlen: 24
157.148.76.0/24 maxlen: 24
157.148.77.0/24 maxlen: 24
157.148.78.0/24 maxlen: 24
157.148.79.0/24 maxlen: 24
157.148.81.0/24 maxlen: 24
157.148.82.0/24 maxlen: 24
157.148.83.0/24 maxlen: 24
157.148.84.0/24 maxlen: 24
157.148.85.0/24 maxlen: 24
157.148.86.0/24 maxlen: 24
157.148.87.0/24 maxlen: 24
157.148.88.0/24 maxlen: 24
157.148.89.0/24 maxlen: 24
157.148.90.0/24 maxlen: 24
157.148.91.0/24 maxlen: 24
157.148.92.0/24 maxlen: 24
157.148.93.0/24 maxlen: 24
157.148.94.0/24 maxlen: 24
157.148.95.0/24 maxlen: 24
157.148.97.0/24 maxlen: 24
157.148.102.0/24 maxlen: 24
157.148.103.0/24 maxlen: 24
157.148.104.0/24 maxlen: 24
157.148.105.0/24 maxlen: 24
157.148.106.0/24 maxlen: 24
157.148.107.0/24 maxlen: 24
157.148.108.0/24 maxlen: 24
157.148.110.0/24 maxlen: 24
157.148.111.0/24 maxlen: 24
157.148.112.0/24 maxlen: 24
157.148.113.0/24 maxlen: 24
157.148.114.0/24 maxlen: 24
157.148.115.0/24 maxlen: 24
157.148.116.0/24 maxlen: 24
157.148.117.0/24 maxlen: 24
157.148.118.0/24 maxlen: 24
157.148.119.0/24 maxlen: 24
157.148.120.0/24 maxlen: 24
157.148.121.0/24 maxlen: 24
157.148.122.0/24 maxlen: 24
157.148.123.0/24 maxlen: 24
157.148.124.0/24 maxlen: 24
157.148.125.0/24 maxlen: 24
157.148.126.0/24 maxlen: 24
157.148.127.0/24 maxlen: 24
157.255.0.0/24 maxlen: 24
157.255.1.0/24 maxlen: 24
157.255.2.0/24 maxlen: 24
157.255.3.0/24 maxlen: 24
157.255.4.0/24 maxlen: 24
157.255.5.0/24 maxlen: 24
157.255.6.0/24 maxlen: 24
157.255.7.0/24 maxlen: 24
157.255.8.0/24 maxlen: 24
157.255.9.0/24 maxlen: 24
157.255.10.0/24 maxlen: 24
157.255.11.0/24 maxlen: 24
157.255.12.0/24 maxlen: 24
157.255.13.0/24 maxlen: 24
157.255.14.0/24 maxlen: 24
157.255.15.0/24 maxlen: 24
157.255.16.0/24 maxlen: 24
157.255.17.0/24 maxlen: 24
157.255.18.0/24 maxlen: 24
157.255.19.0/24 maxlen: 24
157.255.22.0/24 maxlen: 24
157.255.23.0/24 maxlen: 24
157.255.27.0/24 maxlen: 24
157.255.28.0/24 maxlen: 24
157.255.29.0/24 maxlen: 24
157.255.30.0/24 maxlen: 24
157.255.33.0/24 maxlen: 24
157.255.34.0/24 maxlen: 24
157.255.35.0/24 maxlen: 24
157.255.39.0/24 maxlen: 24
157.255.48.0/24 maxlen: 24
157.255.49.0/24 maxlen: 24
157.255.50.0/24 maxlen: 24
157.255.51.0/24 maxlen: 24
157.255.52.0/24 maxlen: 24
157.255.55.0/24 maxlen: 24
157.255.56.0/24 maxlen: 24
157.255.57.0/24 maxlen: 24
157.255.58.0/24 maxlen: 24
157.255.59.0/24 maxlen: 24
157.255.60.0/24 maxlen: 24
157.255.61.0/24 maxlen: 24
157.255.62.0/24 maxlen: 24
157.255.65.0/24 maxlen: 24
157.255.66.0/24 maxlen: 24
157.255.67.0/24 maxlen: 24
157.255.68.0/24 maxlen: 24
157.255.71.0/24 maxlen: 24
157.255.72.0/24 maxlen: 24
157.255.73.0/24 maxlen: 24
157.255.74.0/24 maxlen: 24
157.255.77.0/24 maxlen: 24
157.255.78.0/24 maxlen: 24
157.255.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 01:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:87:69:67:6f:fa:9b:51:e0:4d:bb:6b:23:89:da:1b:c9:2c:93:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jun 9 06:10:02 2026 GMT
Not After : Jun 8 06:15:02 2027 GMT
Subject: CN=3701FDB7F0B5A8189763757D7E864DF4C9249396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:c2:2c:51:18:05:66:00:c2:23:d5:a8:c7:
75:8e:27:0e:68:bb:00:d8:9b:e7:69:4e:62:6f:b9:
97:a1:c3:01:cf:9c:b5:b4:25:8a:91:f6:e6:81:3a:
62:f9:58:28:23:a6:81:95:86:d0:f1:61:18:12:dc:
f0:a7:06:f7:bd:3a:24:58:91:96:bc:89:25:5a:d9:
c7:ed:08:6a:11:34:df:a2:3b:da:4e:c5:2a:a5:e7:
4c:14:9e:18:1c:96:89:af:53:12:53:9c:f8:82:52:
77:61:37:3a:68:b3:2b:72:4c:3d:04:90:99:26:54:
1e:39:8c:d5:8f:29:37:d7:dd:fc:96:1e:85:1f:f9:
30:70:65:7a:bf:c1:31:07:9a:8d:79:b1:7e:d9:4f:
fc:1c:f3:e4:1a:1f:8c:18:63:df:65:60:18:a6:32:
11:f6:72:31:35:84:5f:71:85:28:30:72:33:9b:ac:
36:99:40:9e:2d:89:22:fb:b5:96:2e:cc:fd:3a:17:
0c:27:5b:10:f6:6a:c3:e1:54:d5:5e:d6:74:7d:5c:
53:da:46:da:f1:12:25:df:db:0b:f7:0c:1f:25:03:
c9:ef:f7:5a:79:d1:3d:2f:2c:96:33:d0:23:3e:3c:
59:6d:85:21:85:c8:df:69:43:fc:f4:78:95:b9:b1:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:FD:B7:F0:B5:A8:18:97:63:75:7D:7E:86:4D:F4:C9:24:93:96
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.214.0/24
157.122.226.0/24
157.122.230.0/23
157.148.1.0-157.148.8.255
157.148.11.0-157.148.23.255
157.148.26.0-157.148.30.255
157.148.32.0-157.148.79.255
157.148.81.0-157.148.95.255
157.148.97.0/24
157.148.102.0-157.148.108.255
157.148.110.0-157.148.127.255
157.255.0.0-157.255.19.255
157.255.22.0/23
157.255.27.0-157.255.30.255
157.255.33.0-157.255.35.255
157.255.39.0/24
157.255.48.0-157.255.52.255
157.255.55.0-157.255.62.255
157.255.65.0-157.255.68.255
157.255.71.0-157.255.74.255
157.255.77.0-157.255.79.255
Signature Algorithm: sha256WithRSAEncryption
22:b5:b4:d0:fe:a1:82:15:b4:04:f5:76:84:d3:83:f8:aa:91:
2d:43:85:bd:3f:44:96:cd:c0:44:8f:d2:7b:3c:f5:7d:da:52:
ed:a2:bb:0f:5b:19:02:23:89:0b:66:ef:00:93:c3:e6:fb:94:
3f:71:78:9c:3f:7a:7d:5e:32:84:2e:47:28:36:34:de:09:21:
49:2f:2b:0d:1c:1d:50:43:6a:40:ad:d2:89:c1:6d:47:03:c2:
73:a5:28:50:aa:4b:4a:fd:c7:40:ed:ee:50:37:d2:46:e5:c9:
7c:aa:a1:f3:6c:04:aa:bd:68:c3:fc:4d:43:ca:0e:42:b0:61:
c9:f7:49:e8:ae:ac:c1:7e:bc:41:e9:f3:e6:90:19:45:9e:60:
92:8e:8c:d3:60:8d:d8:fa:4b:b8:3e:9e:bf:6e:a3:d5:6d:79:
e0:b1:48:ed:5b:a5:4b:88:dc:7d:72:07:bf:1a:c9:71:43:4a:
32:b9:c3:2a:5d:09:81:9a:66:37:c8:c2:c1:e6:e3:b3:28:1d:
9c:e3:56:7b:67:f9:24:90:a7:ca:cc:9f:1b:b2:1c:e2:58:e0:
a9:f9:fe:5a:dd:9a:3f:47:f2:24:81:40:9c:db:0b:a0:17:c7:
08:9b:9e:11:8a:d7:81:84:34:d8:f8:19:30:03:cc:0e:e6:d7:
8c:e2:59:78
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIULIdpZ2/6m1HgTbtrI4naG8ksk10wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz
MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDYwOTA2MTAwMloX
DTI3MDYwODA2MTUwMlowMzExMC8GA1UEAxMoMzcwMUZEQjdGMEI1QTgxODk3NjM3
NTdEN0U4NjRERjRDOTI0OTM5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANHfwixRGAVmAMIj1ajHdY4nDmi7ANib52lOYm+5l6HDAc+ctbQlipH25oE6
YvlYKCOmgZWG0PFhGBLc8KcG9706JFiRlryJJVrZx+0IahE036I72k7FKqXnTBSe
GByWia9TElOc+IJSd2E3OmizK3JMPQSQmSZUHjmM1Y8pN9fd/JYehR/5MHBler/B
MQeajXmxftlP/Bzz5BofjBhj32VgGKYyEfZyMTWEX3GFKDByM5usNplAni2JIvu1
li7M/ToXDCdbEPZqw+FU1V7WdH1cU9pG2vESJd/bC/cMHyUDye/3WnnRPS8sljPQ
Iz48WW2FIYXI32lD/PR4lbmxVY0CAwEAAaOCAtowggLWMB0GA1UdDgQWBBQ3Af23
8LWoGJdjdX1+hk30ySSTljAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm
RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC
NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz
eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8wL0FTMTM2OTU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBEwYIKwYBBQUHAQcBAf8EggECMIH/MIH8BAIAATCB9QMEAJ161gMEAJ164gME
AZ165jAMAwQAnZQBAwQAnZQIMAwDBACdlAsDBAOdlBAwDAMEAZ2UGgMEAJ2UHjAM
AwQFnZQgAwQEnZRAMAwDBACdlFEDBAWdlEADBACdlGEwDAMEAZ2UZgMEAJ2UbDAM
AwQBnZRuAwQHnZQAMAsDAwCd/wMEAp3/EAMEAZ3/FjAMAwQAnf8bAwQAnf8eMAwD
BACd/yEDBAKd/yADBACd/ycwDAMEBJ3/MAMEAJ3/NDAMAwQAnf83AwQAnf8+MAwD
BACd/0EDBACd/0QwDAMEAJ3/RwMEAJ3/SjAMAwQAnf9NAwQEnf9AMA0GCSqGSIb3
DQEBCwUAA4IBAQAitbTQ/qGCFbQE9XaE04P4qpEtQ4W9P0SWzcBEj9J7PPV92lLt
orsPWxkCI4kLZu8Ak8Pm+5Q/cXicP3p9XjKELkcoNjTeCSFJLysNHB1QQ2pArdKJ
wW1HA8JzpShQqktK/cdA7e5QN9JG5cl8qqHzbASqvWjD/E1Dyg5CsGHJ90norqzB
frxB6fPmkBlFnmCSjozTYI3Y+ku4Pp6/bqPVbXngsUjtW6VLiNx9cge/GslxQ0oy
ucMqXQmBmmY3yMLB5uOzKB2c41Z7Z/kkkKfKzJ8bshziWOCp+f5a3Zo/R/IkgUCc
2wugF8cIm54RiteBhDTY+BkwA8wO5teM4ll4
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:05 2026 by rpki-client