Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
File: AS138421.roa (raw, json)
Hash identifier: Se4QZj2/NWj99HUCHHCaMRJdzoKaGE9rkO4n0naMvsg=
Subject key identifier: 45:99:84:B3:B3:D1:F4:7D:6A:DE:8F:0A:71:6F:CA:F5:A5:CE:BB:39
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 04F6438FC0A6AE6CA1058D8FE2C95C9A0CDC9E88
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
Signing time: Fri 12 Jun 2026 07:51:47 +0000
ROA not before: Fri 12 Jun 2026 07:46:47 +0000
ROA not after: Fri 11 Jun 2027 07:51:47 +0000
asID: 138421
IP address blocks: 58.246.165.0/24 maxlen: 24
58.246.207.0/24 maxlen: 24
58.247.254.0/23 maxlen: 23
112.64.32.0/24 maxlen: 24
112.64.33.0/24 maxlen: 24
112.64.34.0/24 maxlen: 24
112.64.35.0/24 maxlen: 24
112.64.45.0/24 maxlen: 24
112.64.64.0/24 maxlen: 24
112.64.112.0/22 maxlen: 22
112.64.212.0/22 maxlen: 22
112.65.64.0/24 maxlen: 24
112.65.66.0/24 maxlen: 24
112.65.72.0/24 maxlen: 24
112.65.73.0/24 maxlen: 24
112.65.74.0/24 maxlen: 24
112.65.75.0/24 maxlen: 24
112.65.94.0/24 maxlen: 24
112.65.112.0/24 maxlen: 24
112.65.116.0/23 maxlen: 23
112.65.116.0/24 maxlen: 24
112.65.117.0/24 maxlen: 24
112.65.216.0/24 maxlen: 24
112.65.217.0/24 maxlen: 24
112.65.219.0/24 maxlen: 24
112.65.220.0/24 maxlen: 24
112.65.222.0/23 maxlen: 23
112.65.222.0/24 maxlen: 24
112.65.223.0/24 maxlen: 24
112.65.224.0/23 maxlen: 23
112.65.226.0/24 maxlen: 24
112.65.227.0/24 maxlen: 24
112.65.228.0/22 maxlen: 22
112.65.232.0/23 maxlen: 23
112.65.235.0/24 maxlen: 24
112.65.237.0/24 maxlen: 24
112.65.238.0/24 maxlen: 24
112.65.240.0/20 maxlen: 20
210.51.20.0/22 maxlen: 22
210.51.25.0/24 maxlen: 24
210.51.26.0/24 maxlen: 24
210.51.27.0/24 maxlen: 24
210.51.29.0/24 maxlen: 24
210.51.32.0/24 maxlen: 24
210.51.34.0/23 maxlen: 23
210.51.36.0/22 maxlen: 22
210.51.36.0/24 maxlen: 24
210.51.40.0/24 maxlen: 24
210.51.41.0/24 maxlen: 24
210.51.45.0/24 maxlen: 24
210.51.46.0/24 maxlen: 24
210.51.47.0/24 maxlen: 24
210.51.48.0/22 maxlen: 22
210.51.52.0/24 maxlen: 24
210.51.53.0/24 maxlen: 24
210.51.54.0/23 maxlen: 23
210.51.56.0/23 maxlen: 23
210.51.59.0/24 maxlen: 24
210.51.61.0/24 maxlen: 24
210.51.62.0/23 maxlen: 23
210.52.212.0/24 maxlen: 24
223.167.85.0/24 maxlen: 24
223.167.106.0/24 maxlen: 24
223.167.107.0/24 maxlen: 24
223.167.108.0/24 maxlen: 24
223.167.109.0/24 maxlen: 24
223.167.110.0/24 maxlen: 24
223.167.111.0/24 maxlen: 24
2408:8000:9fff::/48 maxlen: 48
2408:80f1::/44 maxlen: 44
2408:80f1:40::/44 maxlen: 44
2408:80f1:70::/44 maxlen: 44
2408:80f1:110::/44 maxlen: 44
2408:80f1:120::/44 maxlen: 44
2408:80f1:160::/44 maxlen: 44
2408:80f1:170::/44 maxlen: 44
2408:80f1:1c0::/44 maxlen: 44
2408:80f1:1d0::/44 maxlen: 44
2408:80f1:1e0::/44 maxlen: 44
2408:80f1:220::/44 maxlen: 44
2408:80f1:240::/44 maxlen: 44
2408:870c::/44 maxlen: 44
2408:870c:20::/44 maxlen: 44
2408:870c:d0::/44 maxlen: 44
2408:870c:e0::/44 maxlen: 44
2408:870c:f0::/44 maxlen: 44
2408:870c:150::/44 maxlen: 44
2408:870c:2020::/44 maxlen: 44
2408:870c:2030::/44 maxlen: 44
2408:870c:2040::/44 maxlen: 44
2408:870c:2050::/44 maxlen: 44
2408:870c:2070::/44 maxlen: 44
2408:870c:2080::/44 maxlen: 44
2408:870c:2090::/44 maxlen: 44
2408:870c:20a0::/44 maxlen: 44
2408:870c:20b0::/44 maxlen: 44
2408:870c:20c0::/44 maxlen: 44
2408:870c:20d0::/44 maxlen: 44
2408:870c:3000::/44 maxlen: 44
2408:870c:3010::/44 maxlen: 44
2408:870c:3020::/44 maxlen: 44
2408:870c:3030::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f6:43:8f:c0:a6:ae:6c:a1:05:8d:8f:e2:c9:5c:9a:0c:dc:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Jun 12 07:46:47 2026 GMT
Not After : Jun 11 07:51:47 2027 GMT
Subject: CN=459984B3B3D1F47D6ADE8F0A716FCAF5A5CEBB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:8a:a4:5b:bd:9b:30:c4:6a:e5:19:c9:d2:
c2:a9:5b:d6:66:98:31:58:a5:86:92:e9:51:81:b4:
18:a8:c4:00:17:c4:2e:89:d8:8f:7e:d6:ba:ee:ae:
70:14:fa:1a:2b:10:13:09:e3:b2:d9:5a:26:e8:7f:
60:7c:73:99:70:9c:0a:39:97:11:1c:76:ac:e6:d1:
69:e3:29:ec:52:9c:65:b2:6e:61:16:5e:cd:57:a5:
e4:2c:eb:cb:b0:ed:84:a8:f2:aa:7c:e9:de:23:e5:
86:6f:d3:44:67:67:3e:d2:49:90:2c:c7:01:b3:99:
2c:76:76:4c:3e:f3:f5:c7:02:e1:0f:b4:d8:be:cb:
d0:b0:0a:41:8e:3b:17:80:44:67:bb:88:2d:18:41:
4e:14:1b:c7:d7:c9:d0:b6:59:34:c8:39:b3:48:79:
ab:9b:6e:d5:c6:43:bd:be:aa:e6:5d:79:e4:c8:96:
c6:55:25:65:e8:70:3e:ab:40:63:dd:45:ed:3b:82:
95:e1:5e:91:67:93:7e:f3:9b:9e:99:30:06:dc:75:
2a:5c:86:99:98:00:35:9a:59:c1:7d:83:9b:63:1f:
5c:7e:99:eb:bd:d3:3c:bf:50:fa:ca:bf:d9:d5:35:
a8:ac:4d:ef:f8:c3:91:15:93:84:b5:1c:1a:92:0a:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:84:B3:B3:D1:F4:7D:6A:DE:8F:0A:71:6F:CA:F5:A5:CE:BB:39
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.246.165.0/24
58.246.207.0/24
58.247.254.0/23
112.64.32.0/22
112.64.45.0/24
112.64.64.0/24
112.64.112.0/22
112.64.212.0/22
112.65.64.0/24
112.65.66.0/24
112.65.72.0/22
112.65.94.0/24
112.65.112.0/24
112.65.116.0/23
112.65.216.0/23
112.65.219.0-112.65.220.255
112.65.222.0-112.65.233.255
112.65.235.0/24
112.65.237.0-112.65.238.255
112.65.240.0/20
210.51.20.0/22
210.51.25.0-210.51.27.255
210.51.29.0/24
210.51.32.0/24
210.51.34.0-210.51.41.255
210.51.45.0-210.51.57.255
210.51.59.0/24
210.51.61.0-210.51.63.255
210.52.212.0/24
223.167.85.0/24
223.167.106.0-223.167.111.255
IPv6:
2408:8000:9fff::/48
2408:80f1::/44
2408:80f1:40::/44
2408:80f1:70::/44
2408:80f1:110::-2408:80f1:12f:ffff:ffff:ffff:ffff:ffff
2408:80f1:160::/43
2408:80f1:1c0::-2408:80f1:1ef:ffff:ffff:ffff:ffff:ffff
2408:80f1:220::/44
2408:80f1:240::/44
2408:870c::/44
2408:870c:20::/44
2408:870c:d0::-2408:870c:ff:ffff:ffff:ffff:ffff:ffff
2408:870c:150::/44
2408:870c:2020::-2408:870c:205f:ffff:ffff:ffff:ffff:ffff
2408:870c:2070::-2408:870c:20df:ffff:ffff:ffff:ffff:ffff
2408:870c:3000::/42
Signature Algorithm: sha256WithRSAEncryption
15:88:cf:0f:e5:b3:50:29:af:0c:44:b4:a0:3f:d2:cc:a0:85:
a6:6c:39:bb:94:f6:98:63:b5:d0:bc:5e:58:5c:a8:a2:ca:f7:
d1:5f:7f:35:97:22:ee:a5:b4:d8:bd:89:20:c7:74:5e:aa:90:
a3:4b:96:8c:62:74:72:85:42:89:89:8e:ee:80:87:0c:58:84:
d0:49:01:82:1a:f3:86:9e:3d:10:58:1a:1e:c9:d5:7d:45:a7:
2c:8c:2b:fd:06:c0:c1:50:5f:82:1d:21:1f:22:f3:1d:11:22:
dc:f3:4a:16:ed:51:5d:dc:22:b9:e9:9d:c6:07:10:37:5f:5a:
96:ae:bf:44:37:cf:ec:22:83:59:d5:1e:e0:33:9e:42:ed:cf:
d9:0b:f7:2c:c0:d7:22:4d:e0:0e:cc:2e:c1:79:d4:42:66:2d:
db:61:31:d9:f4:2e:76:00:c5:d0:27:63:d1:c9:05:25:97:79:
34:d4:48:43:bb:39:5f:fb:32:96:a7:48:f4:f7:31:d0:9a:70:
8c:1f:4e:51:3f:a0:67:51:d3:2c:44:57:11:b8:f9:21:78:11:
84:bc:89:fc:1b:9a:97:07:42:6e:00:87:75:36:1e:2c:ec:3c:
4e:7d:f3:dc:67:1b:20:47:a7:f2:bf:97:35:24:7e:8f:a3:64:
e3:12:1e:a0
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIUBPZDj8CmrmyhBY2P4slcmgzcnogwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz
Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDYxMjA3NDY0N1oX
DTI3MDYxMTA3NTE0N1owMzExMC8GA1UEAxMoNDU5OTg0QjNCM0QxRjQ3RDZBREU4
RjBBNzE2RkNBRjVBNUNFQkIzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKMviqRbvZswxGrlGcnSwqlb1maYMVilhpLpUYG0GKjEABfELonYj37Wuu6u
cBT6GisQEwnjstlaJuh/YHxzmXCcCjmXERx2rObRaeMp7FKcZbJuYRZezVel5Czr
y7DthKjyqnzp3iPlhm/TRGdnPtJJkCzHAbOZLHZ2TD7z9ccC4Q+02L7L0LAKQY47
F4BEZ7uILRhBThQbx9fJ0LZZNMg5s0h5q5tu1cZDvb6q5l155MiWxlUlZehwPqtA
Y91F7TuCleFekWeTfvObnpkwBtx1KlyGmZgANZpZwX2Dm2MfXH6Z673TPL9Q+sq/
2dU1qKxN7/jDkRWThLUcGpIKgrsCAwEAAaOCA7EwggOtMB0GA1UdDgQWBBRFmYSz
s9H0fWrejwpxb8r1pc67OTAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z
JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF
NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY
eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8xL0FTMTM4NDIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIB6gYIKwYBBQUHAQcBAf8EggHZMIIB1TCCAQEEAgABMIH6AwQAOvalAwQAOvbP
AwQBOvf+AwQCcEAgAwQAcEAtAwQAcEBAAwQCcEBwAwQCcEDUAwQAcEFAAwQAcEFC
AwQCcEFIAwQAcEFeAwQAcEFwAwQBcEF0AwQBcEHYMAwDBABwQdsDBABwQdwwDAME
AXBB3gMEAXBB6AMEAHBB6zAMAwQAcEHtAwQAcEHuAwQEcEHwAwQC0jMUMAwDBADS
MxkDBALSMxgDBADSMx0DBADSMyAwDAMEAdIzIgMEAdIzKDAMAwQA0jMtAwQB0jM4
AwQA0jM7MAwDBADSMz0DBAbSMwADBADSNNQDBADfp1UwDAMEAd+nagMEBN+nYDCB
zQQCAAIwgcYDBwAkCIAAn/8DBwQkCIDxAAADBwQkCIDxAEADBwQkCIDxAHAwEgMH
BCQIgPEBEAMHBCQIgPEBIAMHBSQIgPEBYDASAwcGJAiA8QHAAwcEJAiA8QHgAwcE
JAiA8QIgAwcEJAiA8QJAAwcEJAiHDAAAAwcEJAiHDAAgMBEDBwQkCIcMANADBgAk
CIcMAAMHBCQIhwwBUDASAwcFJAiHDCAgAwcFJAiHDCBAMBIDBwQkCIcMIHADBwUk
CIcMIMADBwYkCIcMMAAwDQYJKoZIhvcNAQELBQADggEBABWIzw/ls1AprwxEtKA/
0syghaZsObuU9phjtdC8XlhcqKLK99FffzWXIu6ltNi9iSDHdF6qkKNLloxidHKF
QomJju6AhwxYhNBJAYIa84aePRBYGh7J1X1FpyyMK/0GwMFQX4IdIR8i8x0RItzz
ShbtUV3cIrnpncYHEDdfWpauv0Q3z+wig1nVHuAznkLtz9kL9yzA1yJN4A7MLsF5
1EJmLdthMdn0LnYAxdAnY9HJBSWXeTTUSEO7OV/7MpanSPT3MdCacIwfTlE/oGdR
0yxEVxG4+SF4EYS8ifwbmpcHQm4Ah3U2HizsPE5989xnGyBHp/K/lzUkfo+jZOMS
HqA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:13 2026 by rpki-client