Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134761.roa
File: AS134761.roa (raw, json)
Hash identifier: 36I9lKb2s+fX8jCNqUVKFVKgrL2IX79MNb2MaVjo9eQ=
Subject key identifier: 08:EA:51:B0:E5:6A:88:E0:04:AF:7E:51:09:DC:69:5C:30:03:58:C3
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4E6E2C9DE25ADBE485F7C50B1DD1DE45B34A562E
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134761.roa
Signing time: Thu 04 Jun 2026 16:13:09 +0000
ROA not before: Thu 04 Jun 2026 16:08:09 +0000
ROA not after: Thu 03 Jun 2027 16:13:09 +0000
asID: 134761
IP address blocks: 36.103.120.0/21 maxlen: 21
36.103.128.0/19 maxlen: 19
36.103.157.0/24 maxlen: 24
36.103.158.0/24 maxlen: 24
36.103.159.0/24 maxlen: 24
36.103.160.0/20 maxlen: 20
36.103.160.0/24 maxlen: 24
36.103.161.0/24 maxlen: 24
36.103.162.0/24 maxlen: 24
36.103.163.0/24 maxlen: 24
36.103.166.0/24 maxlen: 24
36.103.167.0/24 maxlen: 24
36.103.168.0/23 maxlen: 23
36.103.176.0/20 maxlen: 20
36.103.178.0/23 maxlen: 23
36.103.180.0/24 maxlen: 24
36.103.182.0/24 maxlen: 24
36.103.183.0/24 maxlen: 24
36.103.184.0/22 maxlen: 22
36.103.192.0/20 maxlen: 20
36.103.192.0/24 maxlen: 24
36.103.193.0/24 maxlen: 24
36.103.197.0/24 maxlen: 24
36.103.198.0/24 maxlen: 24
36.103.199.0/24 maxlen: 24
36.103.200.0/24 maxlen: 24
36.103.204.0/23 maxlen: 23
36.103.206.0/23 maxlen: 23
36.103.208.0/21 maxlen: 21
36.103.208.0/24 maxlen: 24
36.103.209.0/24 maxlen: 24
36.103.211.0/24 maxlen: 24
36.103.212.0/24 maxlen: 24
36.103.214.0/23 maxlen: 23
36.103.216.0/22 maxlen: 22
36.103.216.0/23 maxlen: 23
36.103.219.0/24 maxlen: 24
36.103.220.0/22 maxlen: 22
36.103.220.0/23 maxlen: 23
36.103.222.0/23 maxlen: 23
36.103.224.0/22 maxlen: 22
36.103.228.0/22 maxlen: 22
36.103.232.0/22 maxlen: 22
36.103.233.0/24 maxlen: 24
36.103.236.0/22 maxlen: 22
36.103.239.0/24 maxlen: 24
36.103.240.0/22 maxlen: 22
36.103.244.0/22 maxlen: 22
36.103.244.0/23 maxlen: 23
36.103.248.0/22 maxlen: 22
36.103.252.0/22 maxlen: 22
203.33.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6e:2c:9d:e2:5a:db:e4:85:f7:c5:0b:1d:d1:de:45:b3:4a:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:08:09 2026 GMT
Not After : Jun 3 16:13:09 2027 GMT
Subject: CN=08EA51B0E56A88E004AF7E5109DC695C300358C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:f3:c6:16:da:b7:7e:48:c9:d2:8d:fa:81:
4a:13:32:6c:7d:11:50:f9:b5:ae:4c:91:0d:eb:06:
2c:78:09:73:55:25:96:7f:1b:0d:af:88:93:b9:99:
f6:73:8f:b8:66:ca:d6:67:18:04:81:42:1f:c3:90:
d1:00:b4:a9:9f:df:69:66:d0:cc:e8:27:c7:d1:98:
c2:78:fb:2c:c2:22:93:06:f0:34:ac:15:10:5f:c4:
29:14:b1:33:dd:7a:0a:31:78:e9:79:5a:20:f7:a9:
13:66:cb:fb:55:07:70:ca:a0:fb:c8:fa:e1:bb:e1:
fe:25:01:d9:d2:f8:07:56:45:fc:4e:39:23:24:b0:
d6:da:84:f7:05:b2:d6:40:1a:f6:c3:65:11:e4:f1:
4a:d7:0c:f7:3b:24:ed:bb:e0:87:04:80:b7:b9:81:
46:06:88:51:81:2c:75:09:5f:9b:32:fa:6f:a9:f6:
b9:02:d4:0a:47:34:30:65:f2:85:05:36:16:9f:f7:
ac:0a:a9:6d:9e:54:8a:3e:57:2c:9a:be:db:f1:5b:
6d:1e:73:99:cf:e8:25:b4:cf:1d:00:a0:97:08:68:
cf:77:a2:df:18:0a:d2:0b:d2:ff:bc:c5:c8:06:2d:
fb:78:7b:fb:93:14:e0:7b:6c:19:68:4f:ad:5d:80:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:51:B0:E5:6A:88:E0:04:AF:7E:51:09:DC:69:5C:30:03:58:C3
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.103.120.0-36.103.255.255
203.33.202.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:30:1b:4c:bf:91:a0:4b:ba:11:16:c2:ad:18:83:45:c8:81:
f7:db:59:c4:c0:7f:1c:f6:c7:55:2f:2c:79:12:0f:0b:e3:05:
28:5d:9c:61:5f:a9:c6:8e:d5:19:97:8e:6b:27:c8:1f:4d:3b:
04:0d:78:48:fe:b7:64:d4:5c:84:44:7f:4b:b8:38:32:d7:ad:
12:b3:9a:6d:5e:e7:37:b1:20:7e:cf:17:66:c7:a0:47:e2:fb:
ac:92:d0:fe:f7:f7:d5:66:22:f3:b0:c0:f5:e1:e8:b5:22:83:
75:b9:81:30:42:94:f6:ab:b2:65:59:88:03:82:7e:49:dc:41:
85:85:dc:df:ea:45:09:0f:81:76:38:43:de:e5:71:bd:3b:1c:
49:de:04:c9:ce:7e:dc:9f:77:f2:29:fd:ca:4e:78:97:f3:6e:
99:27:b2:90:ea:af:c2:7c:79:e9:42:dc:8e:8b:83:66:4d:7f:
0b:4c:9f:1e:7b:1f:36:82:5e:7f:bc:b4:c9:57:25:83:5f:5c:
8f:3e:76:d9:70:fd:3a:38:a8:f8:96:68:e7:dd:15:1d:e6:ec:
57:53:29:2a:91:49:bc:16:e8:7d:04:09:57:30:d8:48:c8:90:
3d:4b:94:9f:54:4a:13:2d:5e:1e:4c:63:aa:d7:4b:48:40:25:
7f:be:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:33 2026 by rpki-client