Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
File: AS131325.roa (raw, json)
Hash identifier: bqG734U+9v9WCUTweZG5Lyu9bYhLb7dm2Pv2QvnvHfA=
Subject key identifier: 4B:F3:A3:D2:1D:3B:21:39:71:C0:18:DA:D3:F2:84:9C:13:F4:8A:54
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3E878BF484DB3A852BC41E03E8C117EDD7B4118F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
Signing time: Thu 11 Jun 2026 16:06:55 +0000
ROA not before: Thu 11 Jun 2026 16:01:55 +0000
ROA not after: Thu 10 Jun 2027 16:06:55 +0000
asID: 131325
IP address blocks: 49.67.72.0/22 maxlen: 22
49.67.76.0/24 maxlen: 24
49.79.134.0/24 maxlen: 24
49.79.175.0/24 maxlen: 24
49.79.176.0/24 maxlen: 24
49.79.237.0/24 maxlen: 24
49.79.239.0/24 maxlen: 24
49.79.240.0/24 maxlen: 24
49.79.241.0/24 maxlen: 24
58.223.124.0/24 maxlen: 24
58.223.125.0/24 maxlen: 24
61.147.218.0/24 maxlen: 24
61.147.219.0/24 maxlen: 24
61.147.221.0/24 maxlen: 24
61.147.222.0/23 maxlen: 23
61.147.224.0/22 maxlen: 22
61.147.228.0/24 maxlen: 24
61.147.231.0/24 maxlen: 24
61.147.232.0/24 maxlen: 24
61.147.238.0/24 maxlen: 24
61.147.239.0/24 maxlen: 24
114.231.81.0/24 maxlen: 24
114.231.86.0/24 maxlen: 24
114.231.165.0/24 maxlen: 24
114.231.176.0/24 maxlen: 24
114.231.202.0/24 maxlen: 24
114.232.68.0/24 maxlen: 24
114.232.85.0/24 maxlen: 24
114.232.87.0/24 maxlen: 24
114.232.92.0/22 maxlen: 22
114.232.222.0/23 maxlen: 23
117.86.116.0/24 maxlen: 24
117.86.125.0/24 maxlen: 24
117.86.181.0/24 maxlen: 24
117.86.182.0/23 maxlen: 23
117.86.212.0/24 maxlen: 24
180.121.80.0/22 maxlen: 22
218.91.216.0/24 maxlen: 24
218.91.217.0/24 maxlen: 24
218.91.218.0/24 maxlen: 24
218.91.219.0/24 maxlen: 24
218.91.220.0/24 maxlen: 24
218.91.221.0/24 maxlen: 24
218.91.222.0/24 maxlen: 24
218.91.223.0/24 maxlen: 24
218.91.224.0/24 maxlen: 24
218.91.225.0/24 maxlen: 24
218.91.226.0/24 maxlen: 24
218.91.230.0/24 maxlen: 24
218.91.237.0/24 maxlen: 24
221.227.220.0/22 maxlen: 22
240e:1a:70::/44 maxlen: 44
240e:108:47::/48 maxlen: 48
240e:108:11d4::/48 maxlen: 48
240e:109:8047::/48 maxlen: 48
240e:979:8500::/40 maxlen: 40
240e:979:9500::/40 maxlen: 40
240e:979:9508::/48 maxlen: 48
240e:980:4700::/40 maxlen: 40
240e:982:d400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:87:8b:f4:84:db:3a:85:2b:c4:1e:03:e8:c1:17:ed:d7:b4:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:01:55 2026 GMT
Not After : Jun 10 16:06:55 2027 GMT
Subject: CN=4BF3A3D21D3B213971C018DAD3F2849C13F48A54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:90:ef:c5:ce:2f:bd:9d:91:a7:33:48:83:
31:df:1e:24:64:04:30:40:1e:0b:b3:e5:19:c8:3c:
f7:b8:48:f8:c1:e1:f8:c9:fd:36:b4:f6:e9:f9:69:
bc:61:43:11:b6:68:53:9d:e8:40:37:31:ca:43:d6:
f2:df:a8:5d:a0:6f:ee:f4:3f:45:68:d2:c5:35:3c:
6e:23:44:d1:b7:d7:b4:37:cb:5d:21:2d:22:d4:1f:
21:b2:e4:5b:91:21:45:05:a0:f8:df:14:ef:c2:3c:
a1:cf:e2:1e:4c:d2:ff:ac:94:51:f7:cf:71:1e:39:
7b:3c:7d:fb:35:b0:2a:92:01:1e:aa:0e:0b:e7:9d:
d4:8d:34:ab:86:22:73:dd:4f:3f:2b:99:22:c1:44:
f8:b6:08:b3:75:ad:81:36:bb:0a:88:c6:d8:48:97:
85:74:c7:44:f6:7d:16:ee:9e:86:c3:c3:11:89:7c:
b4:f4:5e:7b:29:ec:9a:fc:85:a0:32:1d:f3:ac:0e:
ba:ad:7a:01:27:04:80:3a:9e:fd:be:65:6b:db:d2:
a3:f6:69:8d:54:41:6b:c4:f2:3a:b5:42:5c:c5:14:
db:97:31:af:12:e9:72:db:14:4e:34:ec:54:5c:62:
34:75:3b:a7:2b:e7:0b:5f:be:cc:82:74:47:81:fd:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:A3:D2:1D:3B:21:39:71:C0:18:DA:D3:F2:84:9C:13:F4:8A:54
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.67.72.0-49.67.76.255
49.79.134.0/24
49.79.175.0-49.79.176.255
49.79.237.0/24
49.79.239.0-49.79.241.255
58.223.124.0/23
61.147.218.0/23
61.147.221.0-61.147.228.255
61.147.231.0-61.147.232.255
61.147.238.0/23
114.231.81.0/24
114.231.86.0/24
114.231.165.0/24
114.231.176.0/24
114.231.202.0/24
114.232.68.0/24
114.232.85.0/24
114.232.87.0/24
114.232.92.0/22
114.232.222.0/23
117.86.116.0/24
117.86.125.0/24
117.86.181.0-117.86.183.255
117.86.212.0/24
180.121.80.0/22
218.91.216.0-218.91.226.255
218.91.230.0/24
218.91.237.0/24
221.227.220.0/22
IPv6:
240e:1a:70::/44
240e:108:47::/48
240e:108:11d4::/48
240e:109:8047::/48
240e:979:8500::/40
240e:979:9500::/40
240e:980:4700::/40
240e:982:d400::/40
Signature Algorithm: sha256WithRSAEncryption
52:75:91:59:c1:0e:11:58:6a:e3:6c:cb:5c:2b:b6:34:52:8a:
1a:96:8c:9f:5a:cf:6e:65:2a:04:77:51:a1:3d:a0:56:06:bc:
0d:55:f6:8f:9e:ab:2b:47:2e:e1:b7:11:3f:37:61:08:50:90:
ea:a1:1b:d6:8d:72:61:7b:45:18:2d:60:e4:72:5d:73:9b:d7:
10:0a:0f:25:29:d8:47:98:47:fc:ab:ff:64:0e:d2:ad:c0:11:
3b:7f:36:2b:e3:94:43:f0:13:4e:aa:6e:cb:ea:4c:76:79:b9:
a5:5d:38:b3:64:b5:bd:a9:b1:d2:95:4b:8c:db:f3:c8:05:8d:
83:1d:d1:47:1f:2b:81:23:62:03:c4:a3:ea:02:cd:20:e0:2a:
2a:ae:6a:ca:58:20:3d:eb:9c:c6:17:aa:5c:f5:ad:a5:8a:fb:
b1:6d:ae:19:d4:a4:4f:3d:ea:d7:a4:b3:ba:61:71:96:d3:6e:
d2:50:b8:0b:8b:c3:10:8a:60:3b:7d:70:ad:27:73:06:39:6c:
64:e6:08:24:a6:91:3e:1e:f7:8d:04:11:f6:8b:2c:ea:ee:18:
9a:dd:3a:02:4c:b0:17:62:83:f4:c3:41:c3:73:87:ed:7c:2c:
16:fd:fc:07:fc:aa:8a:af:a2:dc:8d:8e:61:d5:8e:37:52:6c:
15:b9:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:34 2026 by rpki-client