Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134762.roa
File: AS134762.roa (raw, json)
Hash identifier: h88xs8C7a9nzWZEpVaNFBEWHi31OPqqavvx72fudX1s=
Subject key identifier: 6A:EB:C4:E5:B4:AF:B2:1D:F3:7B:E2:76:99:8F:5B:F6:DC:CF:F7:8D
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 63AF956D1EEFBC2704B324356404A260D6420609
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134762.roa
Signing time: Thu 28 May 2026 16:12:40 +0000
ROA not before: Thu 28 May 2026 16:07:40 +0000
ROA not after: Thu 27 May 2027 16:12:40 +0000
asID: 134762
IP address blocks: 42.202.128.0/19 maxlen: 19
42.202.160.0/20 maxlen: 20
42.202.208.0/20 maxlen: 20
59.44.64.0/19 maxlen: 19
59.44.96.0/19 maxlen: 19
59.46.128.0/18 maxlen: 18
59.46.192.0/18 maxlen: 18
123.177.60.0/22 maxlen: 22
123.184.192.0/20 maxlen: 20
123.185.0.0/18 maxlen: 18
123.185.0.0/20 maxlen: 20
123.185.16.0/20 maxlen: 20
123.185.32.0/20 maxlen: 20
123.185.48.0/20 maxlen: 20
123.185.64.0/18 maxlen: 18
123.185.64.0/20 maxlen: 20
123.185.80.0/20 maxlen: 20
123.185.96.0/20 maxlen: 20
123.185.112.0/20 maxlen: 20
123.185.128.0/18 maxlen: 18
123.185.192.0/18 maxlen: 18
123.246.80.0/20 maxlen: 20
182.201.0.0/18 maxlen: 18
182.201.240.0/21 maxlen: 21
219.149.0.0/21 maxlen: 21
219.149.8.0/21 maxlen: 21
240e:1:8800::/37 maxlen: 37
240e:41:c900::/40 maxlen: 40
240e:86:1000::/36 maxlen: 36
240e:108:4082::/48 maxlen: 48
240e:108:4882::/48 maxlen: 48
240e:30c:1a00::/39 maxlen: 39
240e:30c:1c00::/38 maxlen: 38
240e:30c:2000::/37 maxlen: 37
240e:30c:2800::/38 maxlen: 38
240e:30c:2c00::/39 maxlen: 39
240e:30d:1a00::/39 maxlen: 39
240e:30d:1c00::/38 maxlen: 38
240e:30d:2000::/37 maxlen: 37
240e:30d:2800::/38 maxlen: 38
240e:30d:2c00::/39 maxlen: 39
240e:30e:1a00::/39 maxlen: 39
240e:30e:1c00::/38 maxlen: 38
240e:30e:2000::/37 maxlen: 37
240e:30e:2800::/38 maxlen: 38
240e:30e:2c00::/39 maxlen: 39
240e:30f:1a00::/39 maxlen: 39
240e:30f:1c00::/38 maxlen: 38
240e:30f:2000::/37 maxlen: 37
240e:30f:2800::/38 maxlen: 38
240e:30f:2c00::/39 maxlen: 39
240e:60c:2000::/36 maxlen: 36
240e:60c:3000::/36 maxlen: 36
240e:90c:a000::/35 maxlen: 35
240e:90c:d000::/36 maxlen: 36
240e:90c:f000::/36 maxlen: 36
240e:90d::/33 maxlen: 33
240e:983:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:af:95:6d:1e:ef:bc:27:04:b3:24:35:64:04:a2:60:d6:42:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:07:40 2026 GMT
Not After : May 27 16:12:40 2027 GMT
Subject: CN=6AEBC4E5B4AFB21DF37BE276998F5BF6DCCFF78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:9c:28:be:42:12:1f:9e:75:d6:6d:47:3a:
8a:a5:00:75:c1:5e:fa:ee:2c:11:88:73:ef:84:a0:
b2:0d:f1:60:e5:55:15:29:33:ca:ea:b8:d6:8d:52:
2c:2f:90:27:e4:53:c4:e6:72:8e:27:12:0b:ae:1f:
ae:54:95:45:e4:4d:7b:8b:ab:e9:32:03:d7:20:1a:
a6:ce:21:e6:2b:9e:ba:eb:1e:e7:61:4d:98:21:f0:
45:96:46:be:2d:12:7a:4f:d1:95:53:38:72:c3:65:
fa:f3:f3:1e:ed:08:ad:33:4f:52:2f:fd:03:ec:fc:
43:57:1b:4f:1b:ad:e2:ec:11:60:0f:e1:32:dd:20:
cd:84:72:48:81:2d:7d:19:68:a3:02:49:fd:0d:60:
ed:95:0c:74:7b:4f:eb:35:bf:4c:db:44:e9:ee:b2:
6c:2b:79:2d:a8:43:c6:e3:02:05:1f:e1:88:94:36:
bb:5b:fa:76:44:3a:ab:5a:5e:c1:66:b2:75:fc:fe:
2e:4f:10:6e:c1:b3:20:3e:23:5a:a0:49:47:ed:e2:
39:0b:cd:46:89:5a:42:ca:de:1d:b9:01:e8:67:ed:
90:b6:6c:1b:b7:ec:b5:41:aa:c0:5b:a1:32:fd:6f:
d8:21:2e:00:2f:10:e4:69:9b:ef:f6:41:9e:e9:e4:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:C4:E5:B4:AF:B2:1D:F3:7B:E2:76:99:8F:5B:F6:DC:CF:F7:8D
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.202.128.0-42.202.175.255
42.202.208.0/20
59.44.64.0/18
59.46.128.0/17
123.177.60.0/22
123.184.192.0/20
123.185.0.0/16
123.246.80.0/20
182.201.0.0/18
182.201.240.0/21
219.149.0.0/20
IPv6:
240e:1:8800::/37
240e:41:c900::/40
240e:86:1000::/36
240e:108:4082::/48
240e:108:4882::/48
240e:30c:1a00::-240e:30c:2dff:ffff:ffff:ffff:ffff:ffff
240e:30d:1a00::-240e:30d:2dff:ffff:ffff:ffff:ffff:ffff
240e:30e:1a00::-240e:30e:2dff:ffff:ffff:ffff:ffff:ffff
240e:30f:1a00::-240e:30f:2dff:ffff:ffff:ffff:ffff:ffff
240e:60c:2000::/35
240e:90c:a000::/35
240e:90c:d000::/36
240e:90c:f000::-240e:90d:7fff:ffff:ffff:ffff:ffff:ffff
240e:983:200::/48
Signature Algorithm: sha256WithRSAEncryption
b3:59:40:da:13:52:a8:3b:27:4f:c9:11:32:e2:ad:af:bf:9b:
6c:2b:9b:8c:fd:a9:d9:ee:f6:6e:45:32:fb:5c:5b:97:d2:d2:
33:2a:ed:ce:65:9c:8c:71:36:fa:e6:6f:b2:23:53:dd:5b:e2:
71:5b:6f:73:54:b5:20:2e:4f:8b:e1:99:c3:08:82:ea:93:4e:
dd:5f:9b:80:d4:48:7a:03:0e:d1:1e:73:49:6e:da:77:6d:30:
f4:1e:ec:6f:12:db:de:f1:b0:27:7e:dd:18:42:b8:6a:9c:88:
4c:ed:c1:e3:76:b1:4f:a6:57:ea:28:96:9e:6f:b7:dd:f6:b8:
a0:85:56:c6:62:90:c6:d3:9e:47:42:09:8f:4e:e4:4f:1c:cd:
ed:7b:c6:e5:37:ea:86:dd:b5:88:bb:31:ea:58:63:2b:23:06:
2f:8c:ff:81:17:d0:a3:a8:e2:be:b2:0c:71:3b:10:db:b6:09:
2b:74:3b:3f:07:d1:0f:14:42:3c:75:b2:a2:18:08:42:47:ae:
fd:4e:48:4d:58:b1:8a:7a:3b:f5:d4:a8:66:42:8b:00:19:8d:
2c:c2:d8:13:9d:b2:8b:95:39:e1:51:7d:35:17:b1:ed:5a:05:
af:f9:0f:7d:53:83:65:8f:22:a8:4a:f9:54:e0:45:86:28:18:
5c:aa:7c:a2
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgIUY6+VbR7vvCcEsyQ1ZASiYNZCBgkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDc0MFoX
DTI3MDUyNzE2MTI0MFowMzExMC8GA1UEAxMoNkFFQkM0RTVCNEFGQjIxREYzN0JF
Mjc2OTk4RjVCRjZEQ0NGRjc4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKa8nCi+QhIfnnXWbUc6iqUAdcFe+u4sEYhz74Sgsg3xYOVVFSkzyuq41o1S
LC+QJ+RTxOZyjicSC64frlSVReRNe4ur6TID1yAaps4h5iueuuse52FNmCHwRZZG
vi0Sek/RlVM4csNl+vPzHu0IrTNPUi/9A+z8Q1cbTxut4uwRYA/hMt0gzYRySIEt
fRloowJJ/Q1g7ZUMdHtP6zW/TNtE6e6ybCt5LahDxuMCBR/hiJQ2u1v6dkQ6q1pe
wWaydfz+Lk8QbsGzID4jWqBJR+3iOQvNRolaQsreHbkB6GftkLZsG7fstUGqwFuh
Mv1v2CEuAC8Q5Gmb7/ZBnunkPwUCAwEAAaOCAtwwggLYMB0GA1UdDgQWBBRq68Tl
tK+yHfN74naZj1v23M/3jTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM0NzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADBPBAIAATBJMAwDBAcqyoADBAQqyqAD
BAQqytADBAY7LEADBAc7LoADBAJ7sTwDBAR7uMADAwB7uQMEBHv2UAMEBrbJAAME
A7bJ8AMEBNuVADCBrAQCAAIwgaUDBgMkDgABiAMGACQOAEHJAwYEJA4AhhADBwAk
DgEIQIIDBwAkDgEISIIwEAMGASQOAwwaAwYBJA4DDCwwEAMGASQOAw0aAwYBJA4D
DSwwEAMGASQOAw4aAwYBJA4DDiwwEAMGASQOAw8aAwYBJA4DDywDBgUkDgYMIAMG
BSQOCQygAwYEJA4JDNAwEAMGBCQOCQzwAwYHJA4JDQADBwAkDgmDAgAwDQYJKoZI
hvcNAQELBQADggEBALNZQNoTUqg7J0/JETLira+/m2wrm4z9qdnu9m5FMvtcW5fS
0jMq7c5lnIxxNvrmb7IjU91b4nFbb3NUtSAuT4vhmcMIguqTTt1fm4DUSHoDDtEe
c0lu2ndtMPQe7G8S297xsCd+3RhCuGqciEztweN2sU+mV+oolp5vt932uKCFVsZi
kMbTnkdCCY9O5E8cze17xuU36obdtYi7MepYYysjBi+M/4EX0KOo4r6yDHE7ENu2
CSt0Oz8H0Q8UQjx1sqIYCEJHrv1OSE1YsYp6O/XUqGZCiwAZjSzC2BOdsouVOeFR
fTUXse1aBa/5D31Tg2WPIqhK+VTgRYYoGFyqfKI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:39 2026 by rpki-client