Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134419.roa
File: AS134419.roa (raw, json)
Hash identifier: pe2piBJ2DPzVeq0kHFIwH+XGm4KBMemG0GNuaMT+Hfw=
Subject key identifier: B7:7A:98:8B:07:CE:BB:EC:37:DA:C3:10:34:A1:2C:FE:46:65:C2:7C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 62843243B5438AA3F2F9F7BE6901BC9893E7B741
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134419.roa
Signing time: Thu 11 Jun 2026 16:06:34 +0000
ROA not before: Thu 11 Jun 2026 16:01:34 +0000
ROA not after: Thu 10 Jun 2027 16:06:34 +0000
asID: 134419
IP address blocks: 106.127.184.0/21 maxlen: 21
113.14.100.0/22 maxlen: 22
113.14.104.0/21 maxlen: 21
113.14.112.0/20 maxlen: 20
113.14.208.0/21 maxlen: 21
113.15.160.0/19 maxlen: 19
113.15.163.0/24 maxlen: 24
113.17.0.0/19 maxlen: 19
116.8.5.0/24 maxlen: 24
116.10.48.0/20 maxlen: 20
116.10.64.0/20 maxlen: 20
116.11.0.0/19 maxlen: 19
116.11.32.0/22 maxlen: 22
116.11.32.0/24 maxlen: 24
116.253.176.0/21 maxlen: 21
171.108.160.0/20 maxlen: 20
171.109.144.0/20 maxlen: 20
171.110.24.0/21 maxlen: 21
171.110.32.0/21 maxlen: 21
180.137.96.0/19 maxlen: 19
180.142.64.0/21 maxlen: 21
180.142.128.0/21 maxlen: 21
180.142.129.0/24 maxlen: 24
180.142.131.0/24 maxlen: 24
180.143.152.0/21 maxlen: 21
180.143.153.0/24 maxlen: 24
180.143.168.0/21 maxlen: 21
202.103.214.0/23 maxlen: 23
202.103.247.0/24 maxlen: 24
218.21.104.0/21 maxlen: 21
218.21.112.0/21 maxlen: 21
218.65.132.0/24 maxlen: 24
218.65.152.0/24 maxlen: 24
218.65.168.0/24 maxlen: 24
218.65.192.0/21 maxlen: 21
218.65.224.0/21 maxlen: 21
218.65.224.0/24 maxlen: 24
218.65.230.0/24 maxlen: 24
219.159.192.0/20 maxlen: 20
219.159.251.0/24 maxlen: 24
220.173.216.0/21 maxlen: 21
220.173.224.0/21 maxlen: 21
222.83.188.0/22 maxlen: 22
222.83.192.0/20 maxlen: 20
222.83.244.0/22 maxlen: 22
222.216.219.0/24 maxlen: 24
222.217.104.0/21 maxlen: 21
222.217.182.0/24 maxlen: 24
222.218.146.0/23 maxlen: 23
222.218.148.0/22 maxlen: 22
222.218.152.0/21 maxlen: 21
222.218.157.0/24 maxlen: 24
222.218.160.0/20 maxlen: 20
222.218.176.0/21 maxlen: 21
240e:9:6000::/36 maxlen: 36
240e:49:9000::/38 maxlen: 38
240e:a6::/35 maxlen: 35
240e:a7:8800::/37 maxlen: 37
240e:108:42a4::/48 maxlen: 48
240e:108:4aa4::/48 maxlen: 48
240e:250:1400::/40 maxlen: 40
240e:250:1500::/40 maxlen: 40
240e:250:1600::/40 maxlen: 40
240e:250:2906::/48 maxlen: 48
240e:250:3005::/48 maxlen: 48
240e:350:5c00::/38 maxlen: 38
240e:350:5c03::/48 maxlen: 48
240e:350:6000::/38 maxlen: 38
240e:351:5c00::/38 maxlen: 38
240e:351:6000::/38 maxlen: 38
240e:352:5c00::/38 maxlen: 38
240e:352:5c00::/40 maxlen: 40
240e:352:6000::/38 maxlen: 38
240e:353:5c00::/38 maxlen: 38
240e:353:6000::/38 maxlen: 38
240e:354:5c00::/38 maxlen: 38
240e:354:6000::/38 maxlen: 38
240e:355:5c00::/38 maxlen: 38
240e:355:6000::/38 maxlen: 38
240e:356:5c00::/38 maxlen: 38
240e:356:6000::/38 maxlen: 38
240e:357:5c00::/38 maxlen: 38
240e:357:6000::/38 maxlen: 38
240e:650:8404::/48 maxlen: 48
240e:651:3000::/36 maxlen: 36
240e:950:5000::/38 maxlen: 38
240e:950:5400::/38 maxlen: 38
240e:950:5800::/38 maxlen: 38
240e:982:3203::/48 maxlen: 48
240e:983:1300::/48 maxlen: 48
240e:a50:5c00::/38 maxlen: 38
240e:a50:6000::/38 maxlen: 38
240e:a51:5c00::/38 maxlen: 38
240e:a51:6000::/38 maxlen: 38
240e:a52:5c00::/38 maxlen: 38
240e:a52:6000::/38 maxlen: 38
240e:a53:5c00::/38 maxlen: 38
240e:a53:6000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:84:32:43:b5:43:8a:a3:f2:f9:f7:be:69:01:bc:98:93:e7:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:01:34 2026 GMT
Not After : Jun 10 16:06:34 2027 GMT
Subject: CN=B77A988B07CEBBEC37DAC31034A12CFE4665C27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:90:c5:cc:95:8e:0b:70:7d:7b:d2:ce:15:
3c:4f:bb:5c:a6:76:ad:a7:74:53:00:c2:fd:be:ae:
6c:78:c6:b1:fa:82:2a:18:55:5c:93:db:3a:3f:8c:
da:39:40:90:d8:0d:e8:4c:c4:17:9b:2a:08:60:1c:
3b:ac:58:01:0d:f9:c1:ed:02:fd:64:ba:d2:64:90:
5e:31:a7:aa:6a:a7:8b:42:bc:66:26:2f:77:c5:e3:
41:d8:6a:25:3b:5d:26:eb:3d:a6:61:ff:bf:29:0c:
f7:cc:96:a5:ff:3f:04:bb:3b:ee:a7:79:d1:7f:97:
f4:4e:ac:75:3d:c9:c6:cc:9d:ee:ed:1e:6a:13:bb:
22:69:ea:61:2f:18:4c:63:80:d4:63:ba:5f:b6:b6:
25:01:50:d4:ee:34:5f:85:d4:81:1e:64:e7:96:32:
55:75:f5:ff:ce:e6:54:2e:36:ee:17:9c:70:92:bf:
e0:df:7c:27:ab:60:4b:61:71:28:b6:3d:0c:f1:2e:
94:e1:fb:30:af:8f:81:dc:de:26:2e:23:e6:38:23:
e2:97:84:d7:5b:eb:52:af:eb:dc:1c:ff:36:f0:d5:
48:ee:81:22:36:2f:9c:29:34:28:c8:99:6c:03:cd:
d1:39:ea:6c:59:f8:77:9f:b4:c1:9c:a6:21:ea:69:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:98:8B:07:CE:BB:EC:37:DA:C3:10:34:A1:2C:FE:46:65:C2:7C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.127.184.0/21
113.14.100.0-113.14.127.255
113.14.208.0/21
113.15.160.0/19
113.17.0.0/19
116.8.5.0/24
116.10.48.0-116.10.79.255
116.11.0.0-116.11.35.255
116.253.176.0/21
171.108.160.0/20
171.109.144.0/20
171.110.24.0-171.110.39.255
180.137.96.0/19
180.142.64.0/21
180.142.128.0/21
180.143.152.0/21
180.143.168.0/21
202.103.214.0/23
202.103.247.0/24
218.21.104.0-218.21.119.255
218.65.132.0/24
218.65.152.0/24
218.65.168.0/24
218.65.192.0/21
218.65.224.0/21
219.159.192.0/20
219.159.251.0/24
220.173.216.0-220.173.231.255
222.83.188.0-222.83.207.255
222.83.244.0/22
222.216.219.0/24
222.217.104.0/21
222.217.182.0/24
222.218.146.0-222.218.183.255
IPv6:
240e:9:6000::/36
240e:49:9000::/38
240e:a6::/35
240e:a7:8800::/37
240e:108:42a4::/48
240e:108:4aa4::/48
240e:250:1400::-240e:250:16ff:ffff:ffff:ffff:ffff:ffff
240e:250:2906::/48
240e:250:3005::/48
240e:350:5c00::-240e:350:63ff:ffff:ffff:ffff:ffff:ffff
240e:351:5c00::-240e:351:63ff:ffff:ffff:ffff:ffff:ffff
240e:352:5c00::-240e:352:63ff:ffff:ffff:ffff:ffff:ffff
240e:353:5c00::-240e:353:63ff:ffff:ffff:ffff:ffff:ffff
240e:354:5c00::-240e:354:63ff:ffff:ffff:ffff:ffff:ffff
240e:355:5c00::-240e:355:63ff:ffff:ffff:ffff:ffff:ffff
240e:356:5c00::-240e:356:63ff:ffff:ffff:ffff:ffff:ffff
240e:357:5c00::-240e:357:63ff:ffff:ffff:ffff:ffff:ffff
240e:650:8404::/48
240e:651:3000::/36
240e:950:5000::-240e:950:5bff:ffff:ffff:ffff:ffff:ffff
240e:982:3203::/48
240e:983:1300::/48
240e:a50:5c00::-240e:a50:63ff:ffff:ffff:ffff:ffff:ffff
240e:a51:5c00::-240e:a51:63ff:ffff:ffff:ffff:ffff:ffff
240e:a52:5c00::-240e:a52:63ff:ffff:ffff:ffff:ffff:ffff
240e:a53:5c00::-240e:a53:63ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:3a:fd:aa:9c:3b:ef:76:4b:21:e3:67:1f:79:16:a2:9a:5e:
61:af:71:14:de:4f:b7:48:71:5a:4a:fb:67:17:16:de:50:43:
47:10:11:97:31:b7:42:1e:40:b1:47:db:e8:e2:26:97:a7:93:
86:8d:f1:5c:22:48:29:da:5f:40:f0:b0:3f:f3:11:c9:6e:b2:
fa:3d:a0:f1:1d:4c:31:77:2e:58:63:f6:cb:24:f9:73:5b:94:
4f:c5:79:05:a9:03:36:75:f6:59:a5:30:b9:7d:87:c6:cc:3e:
28:0d:d8:b0:6d:c8:67:4a:a8:30:e1:95:86:c6:88:23:72:46:
a7:74:2c:48:be:5d:cc:1f:0b:a8:7c:b2:50:3f:f5:0c:8d:88:
12:60:d9:d8:ef:39:df:37:8e:cf:82:2d:dc:cc:7a:81:6f:3c:
6d:fd:c5:b8:37:31:b5:f4:4c:93:d7:dd:e8:3f:c4:de:cf:c4:
57:d8:03:97:af:a5:1d:1b:f6:96:16:7f:92:88:6e:ec:5b:80:
9b:b6:45:30:32:4c:38:b8:aa:59:42:62:a4:5e:1a:47:2b:67:
f1:df:96:2d:5f:78:ac:9c:e2:e3:7e:38:9a:50:41:c8:91:f2:
06:6a:fe:17:e8:47:cd:53:1a:32:80:53:f2:7f:34:4f:4d:7e:
a3:f5:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:02 2026 by rpki-client