Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134760.roa
File: AS134760.roa (raw, json)
Hash identifier: HZHUsYdennMqIyQcZohmMB3/WT/SSs6IQrlvkyKjI5o=
Subject key identifier: A6:35:CB:C3:E6:4A:7C:4C:C0:6D:27:0D:EC:E5:31:BC:60:B0:F1:39
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1278AB0B9AF00F9B15D7FDCAAD98A53ECD9FB14F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134760.roa
Signing time: Thu 11 Jun 2026 16:09:38 +0000
ROA not before: Thu 11 Jun 2026 16:04:38 +0000
ROA not after: Thu 10 Jun 2027 16:09:38 +0000
asID: 134760
IP address blocks: 27.185.4.0/22 maxlen: 22
27.185.192.0/18 maxlen: 18
106.119.160.0/21 maxlen: 21
106.119.168.0/21 maxlen: 21
106.119.176.0/21 maxlen: 21
124.236.0.0/17 maxlen: 17
124.239.158.0/23 maxlen: 23
124.239.161.0/24 maxlen: 24
124.239.162.0/23 maxlen: 23
203.55.30.0/24 maxlen: 24
203.55.93.0/24 maxlen: 24
203.55.101.0/24 maxlen: 24
203.55.109.0/24 maxlen: 24
203.55.110.0/24 maxlen: 24
203.55.119.0/24 maxlen: 24
203.55.146.0/23 maxlen: 23
203.55.192.0/24 maxlen: 24
203.55.218.0/23 maxlen: 23
203.56.172.0/23 maxlen: 23
203.56.208.0/23 maxlen: 23
203.57.61.0/24 maxlen: 24
219.148.34.0/24 maxlen: 24
240e:c:800::/37 maxlen: 37
240e:4c::/37 maxlen: 37
240e:b1:8800::/37 maxlen: 37
240e:108:2f::/48 maxlen: 48
240e:108:10f0::/48 maxlen: 48
240e:108:10f3::/48 maxlen: 48
240e:108:10f4::/48 maxlen: 48
240e:940::/40 maxlen: 40
240e:940:100::/40 maxlen: 40
240e:940:8000::/40 maxlen: 40
240e:940:8100::/40 maxlen: 40
240e:940:c000::/40 maxlen: 40
240e:940:c100::/40 maxlen: 40
240e:940:e000::/40 maxlen: 40
240e:940:e100::/40 maxlen: 40
240e:980:2f00::/40 maxlen: 40
240e:981:f000::/40 maxlen: 40
240e:981:f300::/40 maxlen: 40
240e:981:f400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:78:ab:0b:9a:f0:0f:9b:15:d7:fd:ca:ad:98:a5:3e:cd:9f:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:04:38 2026 GMT
Not After : Jun 10 16:09:38 2027 GMT
Subject: CN=A635CBC3E64A7C4CC06D270DECE531BC60B0F139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:b1:de:dd:61:47:c4:09:35:ad:e6:a5:5f:
88:e4:64:0d:b1:0a:18:b3:fa:45:bf:a5:ec:6f:50:
69:1b:8d:dc:f4:87:b2:b2:b5:1e:f4:db:74:1a:d9:
0a:70:e2:56:78:7c:b1:86:e1:52:29:b5:d9:06:b0:
f9:cb:ea:b0:d9:3f:86:3b:8e:79:f1:f1:79:4d:61:
49:fb:19:35:f6:a9:d2:1b:77:40:9e:86:48:b1:15:
cf:4f:c0:bf:a9:43:d5:db:46:df:79:f8:3c:c3:1f:
d6:50:ad:97:10:c1:86:d9:28:e3:45:7a:91:35:4a:
90:ce:21:71:14:b5:b3:6b:fd:ed:1b:e2:fd:be:c8:
07:fc:42:8a:ae:70:54:93:ce:8b:10:40:21:e6:8b:
54:00:79:c4:47:01:4c:1b:4d:a1:d3:51:49:c3:2b:
96:75:71:9c:94:c1:c1:3f:ff:91:61:3e:80:8c:c4:
3d:0e:b6:b9:7e:08:c0:91:41:f0:be:d8:e5:ea:19:
92:e2:2e:0d:f3:13:67:70:7e:22:c9:63:df:c2:13:
6a:1c:28:a5:23:d7:1d:5b:c4:cf:6d:c4:05:00:f6:
7a:2b:13:f0:2c:43:99:5c:d1:e4:34:b6:ac:d5:83:
30:b2:a4:15:45:7e:f6:e2:2e:5b:2c:2f:cb:8d:35:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:CB:C3:E6:4A:7C:4C:C0:6D:27:0D:EC:E5:31:BC:60:B0:F1:39
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.185.4.0/22
27.185.192.0/18
106.119.160.0-106.119.183.255
124.236.0.0/17
124.239.158.0/23
124.239.161.0-124.239.163.255
203.55.30.0/24
203.55.93.0/24
203.55.101.0/24
203.55.109.0-203.55.110.255
203.55.119.0/24
203.55.146.0/23
203.55.192.0/24
203.55.218.0/23
203.56.172.0/23
203.56.208.0/23
203.57.61.0/24
219.148.34.0/24
IPv6:
240e:c:800::/37
240e:4c::/37
240e:b1:8800::/37
240e:108:2f::/48
240e:108:10f0::/48
240e:108:10f3::-240e:108:10f4:ffff:ffff:ffff:ffff:ffff
240e:940::/39
240e:940:8000::/39
240e:940:c000::/39
240e:940:e000::/39
240e:980:2f00::/40
240e:981:f000::/40
240e:981:f300::-240e:981:f4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:4a:98:27:df:06:e0:da:78:4f:74:3b:67:2b:4a:38:42:a7:
7e:44:d9:04:a5:be:73:25:3a:c1:97:33:8d:35:a9:da:c8:f6:
5f:10:cc:9a:f6:b0:61:50:17:97:1a:37:bb:de:23:50:95:99:
a6:80:4a:0e:24:26:ec:ea:c2:cc:e3:b9:e4:62:9a:d5:bf:12:
34:61:46:78:fc:3f:3b:3d:0d:ab:f4:3c:2e:14:ef:5d:2d:f2:
b9:72:86:bd:48:49:8b:99:d9:1c:92:f2:58:d5:53:16:a5:e6:
2f:9e:7c:48:a7:fc:6b:4b:47:2d:60:86:a5:05:4f:39:1e:20:
7b:02:ce:f3:8a:9c:3a:48:5b:10:2e:51:81:33:8a:d4:2f:a6:
89:75:63:f5:6c:2e:2b:4d:59:35:a3:ac:59:03:1c:79:50:91:
04:6d:16:96:d5:9d:80:3e:70:ae:f4:17:72:be:4b:5a:68:c4:
a3:38:e8:d9:4e:4e:32:73:1f:27:e9:f6:e4:22:a5:05:2f:41:
1a:97:2c:83:21:7b:82:1d:47:31:97:62:52:f8:c0:27:9b:d1:
b3:85:e2:54:15:5a:12:78:d0:1d:a3:1f:5a:22:3c:e3:a3:a9:
0e:da:5c:5a:47:cc:55:71:b6:eb:a8:a0:a4:16:db:7b:00:6e:
d2:a7:71:a9
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIUEnirC5rwD5sV1/3KrZilPs2fsU8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE2MDQzOFoX
DTI3MDYxMDE2MDkzOFowMzExMC8GA1UEAxMoQTYzNUNCQzNFNjRBN0M0Q0MwNkQy
NzBERUNFNTMxQkM2MEIwRjEzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKaUsd7dYUfECTWt5qVfiORkDbEKGLP6Rb+l7G9QaRuN3PSHsrK1HvTbdBrZ
CnDiVnh8sYbhUim12Qaw+cvqsNk/hjuOefHxeU1hSfsZNfap0ht3QJ6GSLEVz0/A
v6lD1dtG33n4PMMf1lCtlxDBhtko40V6kTVKkM4hcRS1s2v97Rvi/b7IB/xCiq5w
VJPOixBAIeaLVAB5xEcBTBtNodNRScMrlnVxnJTBwT//kWE+gIzEPQ62uX4IwJFB
8L7Y5eoZkuIuDfMTZ3B+Islj38ITahwopSPXHVvEz23EBQD2eisT8CxDmVzR5DS2
rNWDMLKkFUV+9uIuWywvy401CnUCAwEAAaOCAvQwggLwMB0GA1UdDgQWBBSmNcvD
5kp8TMBtJw3s5TG8YLDxOTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM0NzYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCBiwQCAAEwgYQDBAIbuQQDBAYbucAw
DAMEBWp3oAMEA2p3sAMEB3zsAAMEAXzvnjAMAwQAfO+hAwQCfO+gAwQAyzceAwQA
yzddAwQAyzdlMAwDBADLN20DBADLN24DBADLN3cDBAHLN5IDBADLN8ADBAHLN9oD
BAHLOKwDBAHLONADBADLOT0DBADblCIwgYcEAgACMIGAAwYDJA4ADAgDBgMkDgBM
AAMGAyQOALGIAwcAJA4BCAAvAwcAJA4BCBDwMBIDBwAkDgEIEPMDBwAkDgEIEPQD
BgEkDglAAAMGASQOCUCAAwYBJA4JQMADBgEkDglA4AMGACQOCYAvAwYAJA4JgfAw
EAMGACQOCYHzAwYAJA4JgfQwDQYJKoZIhvcNAQELBQADggEBAHhKmCffBuDaeE90
O2crSjhCp35E2QSlvnMlOsGXM401qdrI9l8QzJr2sGFQF5caN7veI1CVmaaASg4k
JuzqwszjueRimtW/EjRhRnj8Pzs9Dav0PC4U710t8rlyhr1ISYuZ2RyS8ljVUxal
5i+efEin/GtLRy1ghqUFTzkeIHsCzvOKnDpIWxAuUYEzitQvpol1Y/VsLitNWTWj
rFkDHHlQkQRtFpbVnYA+cK70F3K+S1poxKM46NlOTjJzHyfp9uQipQUvQRqXLIMh
e4IdRzGXYlL4wCeb0bOF4lQVWhJ40B2jH1oiPOOjqQ7aXFpHzFVxtuuooKQW23sA
btKncak=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:36 2026 by rpki-client