Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS132536.roa
File: AS132536.roa (raw, json)
Hash identifier: dr4bZoRsdyFRVRwvq66kJv82RXgttdh6RorqQKjk3fk=
Subject key identifier: CC:C7:0B:D8:86:EA:62:74:86:17:E2:14:B0:F8:36:F5:C0:7D:BA:43
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3D1BA01CD0EC2ADF32F4D7A30C323ED08EA3966A
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS132536.roa
Signing time: Thu 11 Jun 2026 16:38:22 +0000
ROA not before: Thu 11 Jun 2026 16:33:22 +0000
ROA not after: Thu 10 Jun 2027 16:38:22 +0000
asID: 132536
IP address blocks: 42.122.16.0/22 maxlen: 22
42.122.20.0/23 maxlen: 23
42.122.22.0/24 maxlen: 24
42.122.23.0/24 maxlen: 24
123.150.228.0/23 maxlen: 23
123.151.20.0/24 maxlen: 24
123.151.124.0/24 maxlen: 24
123.151.165.0/24 maxlen: 24
180.213.24.0/24 maxlen: 24
180.213.25.0/24 maxlen: 24
180.213.31.0/24 maxlen: 24
180.213.33.0/24 maxlen: 24
180.213.34.0/24 maxlen: 24
180.213.35.0/24 maxlen: 24
180.213.43.0/24 maxlen: 24
180.213.77.0/24 maxlen: 24
240e:981:9203::/48 maxlen: 48
240e:981:9204::/48 maxlen: 48
240e:981:9205::/48 maxlen: 48
240e:983:904::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1b:a0:1c:d0:ec:2a:df:32:f4:d7:a3:0c:32:3e:d0:8e:a3:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:33:22 2026 GMT
Not After : Jun 10 16:38:22 2027 GMT
Subject: CN=CCC70BD886EA62748617E214B0F836F5C07DBA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:e7:34:50:62:bd:87:2e:85:c7:54:0d:1f:
76:52:86:1a:88:68:79:17:7c:b2:9c:cb:39:d4:b6:
90:bb:31:dc:92:83:cf:1f:b6:49:c9:2a:12:69:9c:
74:2f:92:18:eb:3f:39:ab:fc:e2:71:34:e0:f5:21:
61:c1:ad:43:11:7a:35:7a:85:ed:4d:af:6f:cd:f4:
e4:c1:ae:3c:4e:dd:dd:40:c5:e6:a7:01:00:28:dc:
5c:8d:37:ff:86:20:dd:ec:28:b4:7f:4c:b9:f3:0b:
1c:71:94:d5:e7:3d:ac:73:76:f0:46:eb:ab:5f:2f:
a9:46:bc:94:fb:ef:17:af:d1:56:a4:19:5f:16:1b:
bb:c5:d4:af:3b:12:b0:39:5e:b4:a0:8e:14:2f:f7:
a6:60:14:f6:4b:0b:f3:d9:a3:da:63:1b:fc:16:d5:
0f:6b:70:e4:6a:a5:80:4c:3b:90:15:2f:8f:18:45:
a0:fb:90:70:80:b3:9d:04:11:3f:1b:ad:99:27:97:
80:e6:52:8a:05:12:08:80:64:64:17:eb:a5:cb:48:
15:f3:35:17:40:3b:d5:9d:ca:31:be:6c:28:42:d8:
cd:2b:55:67:17:29:a2:ab:b8:83:3d:b1:75:b4:97:
a1:16:20:aa:8e:30:f7:1d:54:2b:5a:fe:52:ad:dd:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:0B:D8:86:EA:62:74:86:17:E2:14:B0:F8:36:F5:C0:7D:BA:43
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS132536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.122.16.0/21
123.150.228.0/23
123.151.20.0/24
123.151.124.0/24
123.151.165.0/24
180.213.24.0/23
180.213.31.0/24
180.213.33.0-180.213.35.255
180.213.43.0/24
180.213.77.0/24
IPv6:
240e:981:9203::-240e:981:9205:ffff:ffff:ffff:ffff:ffff
240e:983:904::/48
Signature Algorithm: sha256WithRSAEncryption
51:ae:fb:48:1e:9e:9e:03:eb:12:66:06:8b:70:e9:ae:c2:ac:
32:a1:64:d4:46:59:17:05:4b:97:d2:be:d2:ed:e8:1b:4d:ec:
4a:8d:ae:ef:01:7d:e1:9e:9b:0d:18:9c:2b:d8:c7:77:79:d0:
c2:40:1d:12:9a:6f:48:44:54:10:ed:56:33:1a:c5:ad:88:1f:
37:76:f4:7d:8c:69:cc:27:85:90:19:88:e6:dc:78:eb:e5:7e:
c2:65:e0:2b:93:14:7c:35:e3:5a:40:20:62:e5:a9:ed:f9:0f:
e8:32:49:84:77:87:0e:30:f9:85:cc:0b:18:4e:c0:a6:f4:ec:
19:be:75:8b:34:42:af:c8:3a:d5:dd:4a:96:53:f4:24:6c:c3:
8d:ec:70:d2:05:9e:e4:a8:ca:c5:b4:85:de:25:96:7b:7f:da:
c7:36:e7:25:3e:1d:e8:6c:2b:54:9b:ac:6b:cb:71:ac:b7:b7:
e9:04:66:f1:b0:fc:f7:cc:3e:46:18:41:e1:cc:28:e8:7d:98:
cf:b9:eb:a2:5e:37:47:26:9d:ac:13:7e:4b:87:75:dd:17:35:
4f:8a:0a:9d:ec:0a:de:18:82:4d:f6:67:94:84:bf:a2:86:c4:
e5:34:25:a2:df:b6:c5:29:b8:01:d0:6f:4f:8c:6e:52:cc:5d:
30:15:4e:15
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUPRugHNDsKt8y9NejDDI+0I6jlmowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE2MzMyMloX
DTI3MDYxMDE2MzgyMlowMzExMC8GA1UEAxMoQ0NDNzBCRDg4NkVBNjI3NDg2MTdF
MjE0QjBGODM2RjVDMDdEQkE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMsy5zRQYr2HLoXHVA0fdlKGGohoeRd8spzLOdS2kLsx3JKDzx+2SckqEmmc
dC+SGOs/Oav84nE04PUhYcGtQxF6NXqF7U2vb8305MGuPE7d3UDF5qcBACjcXI03
/4Yg3ewotH9MufMLHHGU1ec9rHN28Ebrq18vqUa8lPvvF6/RVqQZXxYbu8XUrzsS
sDletKCOFC/3pmAU9ksL89mj2mMb/BbVD2tw5GqlgEw7kBUvjxhFoPuQcICznQQR
PxutmSeXgOZSigUSCIBkZBfrpctIFfM1F0A71Z3KMb5sKELYzStVZxcpoqu4gz2x
dbSXoRYgqo4w9x1UK1r+Uq3dirkCAwEAAaOCAkgwggJEMB0GA1UdDgQWBBTMxwvY
hupidIYX4hSw+Db1wH26QzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTMyNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIGCBggrBgEFBQcBBwEB/wRzMHEwSgQCAAEwRAMEAyp6EAMEAXuW5AMEAHuXFAME
AHuXfAMEAHuXpQMEAbTVGAMEALTVHzAMAwQAtNUhAwQCtNUgAwQAtNUrAwQAtNVN
MCMEAgACMB0wEgMHACQOCYGSAwMHASQOCYGSBAMHACQOCYMJBDANBgkqhkiG9w0B
AQsFAAOCAQEAUa77SB6engPrEmYGi3DprsKsMqFk1EZZFwVLl9K+0u3oG03sSo2u
7wF94Z6bDRicK9jHd3nQwkAdEppvSERUEO1WMxrFrYgfN3b0fYxpzCeFkBmI5tx4
6+V+wmXgK5MUfDXjWkAgYuWp7fkP6DJJhHeHDjD5hcwLGE7ApvTsGb51izRCr8g6
1d1KllP0JGzDjexw0gWe5KjKxbSF3iWWe3/axzbnJT4d6GwrVJusa8txrLe36QRm
8bD898w+RhhB4cwo6H2Yz7nrol43RyadrBN+S4d13Rc1T4oKnewK3hiCTfZnlIS/
oobE5TQlot+2xSm4AdBvT4xuUsxdMBVOFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:43 2026 by rpki-client