Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134238.roa
File: AS134238.roa (raw, json)
Hash identifier: MzVguH6HKPMkZyXp9fZ+qG3NXqIIdlE+OIEK2DREUyM=
Subject key identifier: 25:68:BC:8F:66:50:C2:21:C1:87:AA:F4:44:ED:AC:9F:36:85:75:03
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5D7B002642BE82F84D8BCF48DCC48238E35A50C9
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134238.roa
Signing time: Thu 11 Jun 2026 16:00:24 +0000
ROA not before: Thu 11 Jun 2026 15:55:24 +0000
ROA not after: Thu 10 Jun 2027 16:00:24 +0000
asID: 134238
IP address blocks: 59.53.48.0/23 maxlen: 23
59.53.49.0/24 maxlen: 24
59.53.51.0/24 maxlen: 24
59.53.52.0/22 maxlen: 22
59.53.56.0/21 maxlen: 21
59.53.60.0/24 maxlen: 24
59.53.64.0/20 maxlen: 20
59.53.64.0/24 maxlen: 24
59.53.67.0/24 maxlen: 24
59.53.69.0/24 maxlen: 24
59.53.70.0/23 maxlen: 23
59.53.72.0/24 maxlen: 24
59.53.73.0/24 maxlen: 24
59.53.84.0/24 maxlen: 24
59.53.85.0/24 maxlen: 24
59.53.90.0/23 maxlen: 23
59.53.92.0/22 maxlen: 22
59.53.95.0/24 maxlen: 24
59.63.156.0/22 maxlen: 22
59.63.159.0/24 maxlen: 24
59.63.160.0/19 maxlen: 19
59.63.160.0/23 maxlen: 23
59.63.164.0/24 maxlen: 24
59.63.167.0/24 maxlen: 24
59.63.177.0/24 maxlen: 24
59.63.178.0/24 maxlen: 24
59.63.189.0/24 maxlen: 24
59.63.196.0/22 maxlen: 22
59.63.208.0/20 maxlen: 20
59.63.208.0/24 maxlen: 24
59.63.209.0/24 maxlen: 24
59.63.210.0/23 maxlen: 23
59.63.212.0/24 maxlen: 24
59.63.213.0/24 maxlen: 24
59.63.214.0/24 maxlen: 24
59.63.215.0/24 maxlen: 24
59.63.224.0/19 maxlen: 19
59.63.224.0/21 maxlen: 21
59.63.232.0/21 maxlen: 21
59.63.235.0/24 maxlen: 24
59.63.252.0/24 maxlen: 24
59.63.254.0/23 maxlen: 23
106.225.128.0/19 maxlen: 19
106.225.128.0/22 maxlen: 22
106.225.128.0/24 maxlen: 24
106.225.129.0/24 maxlen: 24
106.225.132.0/22 maxlen: 22
106.225.134.0/24 maxlen: 24
106.225.136.0/21 maxlen: 21
106.225.144.0/24 maxlen: 24
106.225.145.0/24 maxlen: 24
106.225.146.0/23 maxlen: 23
106.225.147.0/24 maxlen: 24
106.225.148.0/22 maxlen: 22
106.225.152.0/21 maxlen: 21
106.225.157.0/24 maxlen: 24
106.225.192.0/18 maxlen: 18
106.225.192.0/23 maxlen: 23
106.225.193.0/24 maxlen: 24
106.225.196.0/23 maxlen: 23
106.225.197.0/24 maxlen: 24
106.225.198.0/23 maxlen: 23
106.225.198.0/24 maxlen: 24
106.225.204.0/24 maxlen: 24
106.225.208.0/21 maxlen: 21
106.225.212.0/24 maxlen: 24
106.225.215.0/24 maxlen: 24
106.227.0.0/21 maxlen: 21
106.227.5.0/24 maxlen: 24
106.227.8.0/22 maxlen: 22
106.227.32.0/21 maxlen: 21
106.227.32.0/24 maxlen: 24
106.227.33.0/24 maxlen: 24
106.227.35.0/24 maxlen: 24
117.21.238.0/23 maxlen: 23
117.21.243.0/24 maxlen: 24
117.21.246.0/23 maxlen: 23
117.21.248.0/22 maxlen: 22
117.21.252.0/23 maxlen: 23
117.41.160.0/19 maxlen: 19
117.41.160.0/21 maxlen: 21
117.41.163.0/24 maxlen: 24
117.41.166.0/24 maxlen: 24
117.41.168.0/24 maxlen: 24
117.41.181.0/24 maxlen: 24
117.41.182.0/23 maxlen: 23
117.41.224.0/19 maxlen: 19
117.41.225.0/24 maxlen: 24
117.41.226.0/23 maxlen: 23
117.41.228.0/23 maxlen: 23
117.41.229.0/24 maxlen: 24
117.41.231.0/24 maxlen: 24
117.41.232.0/22 maxlen: 22
117.41.235.0/24 maxlen: 24
117.41.236.0/23 maxlen: 23
117.41.237.0/24 maxlen: 24
117.41.238.0/24 maxlen: 24
117.41.240.0/24 maxlen: 24
117.41.241.0/24 maxlen: 24
117.41.243.0/24 maxlen: 24
117.41.244.0/24 maxlen: 24
117.41.254.0/24 maxlen: 24
182.106.184.0/21 maxlen: 21
182.106.186.0/24 maxlen: 24
182.106.189.0/24 maxlen: 24
182.106.191.0/24 maxlen: 24
240e:13:800::/37 maxlen: 37
240e:cf:8000::/36 maxlen: 36
240e:cf:8000::/48 maxlen: 48
240e:cf:8800::/37 maxlen: 37
240e:108:8a::/48 maxlen: 48
240e:108:1170::/48 maxlen: 48
240e:980:8a00::/41 maxlen: 41
240e:980:8a80::/41 maxlen: 41
240e:982:7000::/40 maxlen: 40
240e:983:1701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7b:00:26:42:be:82:f8:4d:8b:cf:48:dc:c4:82:38:e3:5a:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 15:55:24 2026 GMT
Not After : Jun 10 16:00:24 2027 GMT
Subject: CN=2568BC8F6650C221C187AAF444EDAC9F36857503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:f1:9a:55:32:7a:94:f4:37:fe:19:e2:7e:
32:bb:2f:61:0d:3e:4c:65:ba:d3:aa:a6:e1:3e:11:
29:65:d0:75:87:06:de:d3:ff:58:b7:20:fb:c3:90:
28:60:03:82:77:0c:f9:1d:1d:e8:9f:44:90:a0:22:
94:82:9d:01:8e:25:a2:da:c5:7a:55:69:04:31:a9:
06:80:86:34:79:d5:c8:6c:0c:fb:4f:7f:df:8b:ba:
22:d3:e0:33:0c:a3:e2:79:76:25:b3:4f:24:af:8b:
cf:e1:6d:fe:2c:60:59:53:01:56:1b:18:01:61:b9:
63:dc:0f:ce:da:fe:2d:a6:d8:36:d5:26:c1:ad:0c:
0a:fb:ff:1b:a2:c1:a1:6c:57:30:0e:f1:5a:27:5e:
ee:2d:39:ff:0e:3d:e3:21:22:0c:ab:b9:14:1a:a6:
8e:24:e2:20:d4:0b:c1:ec:55:5c:7e:d7:fb:08:b3:
eb:44:3a:03:c9:93:bb:7e:4e:e5:c4:b0:d7:ef:ae:
85:da:45:6a:79:e4:7b:5d:ac:64:32:09:3a:50:6d:
63:7a:e9:a0:6d:3d:b7:56:27:54:13:3d:6d:e6:a5:
bf:c0:78:5a:a9:4e:78:9e:41:fb:1d:41:ed:73:30:
0c:f3:d0:89:92:5b:f2:63:87:81:3d:93:a7:00:7e:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:BC:8F:66:50:C2:21:C1:87:AA:F4:44:ED:AC:9F:36:85:75:03
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.53.48.0/23
59.53.51.0-59.53.79.255
59.53.84.0/23
59.53.90.0-59.53.95.255
59.63.156.0-59.63.191.255
59.63.196.0/22
59.63.208.0-59.63.255.255
106.225.128.0/19
106.225.192.0/18
106.227.0.0-106.227.11.255
106.227.32.0/21
117.21.238.0/23
117.21.243.0/24
117.21.246.0-117.21.253.255
117.41.160.0/19
117.41.224.0/19
182.106.184.0/21
IPv6:
240e:13:800::/37
240e:cf:8000::/36
240e:108:8a::/48
240e:108:1170::/48
240e:980:8a00::/40
240e:982:7000::/40
240e:983:1701::/48
Signature Algorithm: sha256WithRSAEncryption
57:24:ae:cc:ee:63:b0:8e:b4:c3:4f:e0:62:60:91:89:39:49:
eb:20:15:06:c7:1e:15:55:ae:f5:0b:1d:31:c1:4d:46:d8:1f:
04:04:92:25:8c:18:6c:25:50:55:55:c9:6e:7a:07:d7:d3:39:
5c:6d:e8:c1:f5:bb:c0:36:da:e5:cf:ff:27:f0:01:61:6a:97:
b2:3c:45:f6:09:bb:e1:6e:a6:79:84:bc:2b:78:5a:5e:24:7c:
69:5f:d8:5a:6e:df:2b:e6:0c:b0:a6:d0:3d:93:61:3c:78:7e:
cd:20:02:ad:59:25:8a:7d:99:5b:db:d2:e3:23:db:e4:9d:6a:
12:fb:d6:b7:67:cd:2d:7a:74:78:31:68:7f:79:13:cf:3c:76:
eb:98:0e:a3:65:29:9e:6e:75:00:93:83:af:f9:41:30:e8:e2:
05:7a:43:fc:ac:39:bb:ff:c7:72:97:fc:33:bb:40:a0:32:14:
21:aa:3a:fc:ba:ac:ab:e5:37:46:de:e2:fb:08:88:23:08:4c:
7e:6b:d7:be:25:db:e2:f1:d1:c8:c7:d5:9f:f8:16:a2:b6:be:
74:d6:ef:4d:26:76:6c:a1:7f:1c:e6:71:01:5d:fa:e5:6e:5e:
71:3f:50:74:03:bb:16:2e:34:ac:12:f4:e8:0c:a5:b4:bb:5f:
91:69:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:43 2026 by rpki-client