Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134425.roa
File: AS134425.roa (raw, json)
Hash identifier: vVYMNgYitDVT7RMK6N5usViuwk3h1p0xh6qRa6Z4oWc=
Subject key identifier: 54:B2:0A:B6:A3:0B:0E:6F:C8:7A:AC:20:08:BD:A4:01:0C:AF:52:38
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 6737879BBD8A4B05EA234663D692181C3210F519
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134425.roa
Signing time: Wed 10 Jun 2026 16:03:53 +0000
ROA not before: Wed 10 Jun 2026 15:58:53 +0000
ROA not after: Wed 09 Jun 2027 16:03:53 +0000
asID: 134425
IP address blocks: 61.133.149.0/24 maxlen: 24
61.133.152.0/24 maxlen: 24
114.106.64.0/20 maxlen: 20
114.106.80.0/22 maxlen: 22
117.66.32.0/20 maxlen: 20
117.66.48.0/21 maxlen: 21
117.66.56.0/23 maxlen: 23
117.68.32.0/22 maxlen: 22
117.68.36.0/22 maxlen: 22
117.68.44.0/22 maxlen: 22
117.68.48.0/22 maxlen: 22
117.68.52.0/22 maxlen: 22
117.68.56.0/22 maxlen: 22
183.162.226.0/23 maxlen: 23
223.247.96.0/24 maxlen: 24
223.247.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:37:87:9b:bd:8a:4b:05:ea:23:46:63:d6:92:18:1c:32:10:f5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 10 15:58:53 2026 GMT
Not After : Jun 9 16:03:53 2027 GMT
Subject: CN=54B20AB6A30B0E6FC87AAC2008BDA4010CAF5238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:01:04:47:c4:45:31:33:57:e5:8c:67:2d:
95:f2:1d:24:da:a1:e2:79:fd:f8:a5:b0:d1:6c:3c:
6c:03:55:3f:e2:b6:b2:43:59:3d:b5:be:32:44:2e:
94:67:68:03:c1:36:b6:65:ed:88:9a:71:48:f5:4d:
3d:b0:6a:66:c4:dd:0d:6d:a5:33:19:f2:65:5c:ff:
27:2d:44:0a:eb:b3:cf:7f:54:b3:f9:b5:0b:b8:ad:
63:ac:5d:f3:0d:f7:9d:b7:26:9d:3b:f4:bb:d1:b8:
0e:1c:18:34:e5:b4:57:a7:6a:b8:a5:23:e4:85:95:
fe:30:7f:65:5f:60:72:d7:ca:f8:7c:05:41:81:52:
1d:28:3f:c6:2c:87:6f:ff:1c:af:b4:51:f9:5a:44:
17:71:2d:23:7d:b6:27:61:f7:22:69:bb:7c:3b:bc:
77:52:19:35:9a:3c:a9:0a:4e:b9:43:c6:15:dc:4e:
6f:99:c5:5f:c6:4e:de:92:78:e8:6d:ef:18:e5:c1:
0e:6e:2f:aa:76:75:c5:c1:b8:6f:4f:b3:ed:39:dc:
84:4e:a0:d4:cc:bd:58:a7:39:9f:d7:87:36:37:69:
37:7a:6c:86:09:1b:4a:cd:c6:32:58:59:b0:e8:86:
fd:a1:28:21:01:be:97:3b:57:25:e5:b4:65:29:10:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:0A:B6:A3:0B:0E:6F:C8:7A:AC:20:08:BD:A4:01:0C:AF:52:38
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.133.149.0/24
61.133.152.0/24
114.106.64.0-114.106.83.255
117.66.32.0-117.66.57.255
117.68.32.0/21
117.68.44.0-117.68.59.255
183.162.226.0/23
223.247.96.0/24
223.247.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:00:e1:69:86:c3:2b:0b:05:45:5c:4e:74:8c:2a:74:27:bc:
db:52:8f:36:db:4e:44:71:cb:a2:af:2c:93:f5:4b:cb:35:75:
cf:b1:97:38:7e:58:80:4a:de:34:27:b7:7b:96:c6:97:c2:d2:
1c:d9:92:0a:c2:97:d0:07:26:76:bd:b3:b8:f7:e3:f6:43:02:
89:66:e6:1a:74:5e:35:f1:05:9e:0f:a7:57:0e:0e:1b:b4:7a:
1c:8f:83:b7:b2:8c:99:13:d9:ab:97:43:f5:ab:c5:15:5e:fb:
82:6f:6a:87:28:87:4b:dc:3e:e6:da:b6:9a:35:63:d6:6a:aa:
cd:e0:82:05:fe:ac:9d:12:95:05:4c:07:40:a5:7d:ff:d3:b6:
c6:63:a4:36:d3:04:01:6f:d0:4e:cf:36:97:1d:18:b7:3e:99:
12:e3:8b:eb:a4:65:d2:02:4e:36:7c:c3:f6:af:88:d7:7e:83:
7c:7f:7d:37:27:c6:f2:ec:56:5d:c0:0c:48:7e:78:ab:76:f8:
41:c3:7f:c7:8c:c3:d1:18:a6:38:7b:b4:fe:e4:39:17:2c:3a:
bf:ed:62:61:53:69:b4:8b:b1:d4:35:8b:46:d3:32:15:95:76:
ed:01:1c:39:a0:01:5a:63:3f:27:07:72:91:73:6f:8a:77:1a:
70:f9:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:38 2026 by rpki-client