Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134767.roa
File: AS134767.roa (raw, json)
Hash identifier: cuFXPtgRZLgFKUf6dx9fWTtv4j+wk1X74GWGE7feVkE=
Subject key identifier: 6D:15:8A:46:55:EE:10:3E:40:BF:A8:D3:FB:45:68:0C:CE:AD:55:D6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 64949184BE877F9C491F264FFEE6477BAD7CA6F6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134767.roa
Signing time: Tue 26 May 2026 16:15:56 +0000
ROA not before: Tue 26 May 2026 16:10:56 +0000
ROA not after: Tue 25 May 2027 16:15:56 +0000
asID: 134767
IP address blocks: 106.56.52.0/22 maxlen: 22
106.56.56.0/21 maxlen: 21
106.60.48.0/21 maxlen: 21
220.164.253.0/24 maxlen: 24
240e:12:9800::/48 maxlen: 48
240e:12:9801::/48 maxlen: 48
240e:34c:510e::/48 maxlen: 48
240e:34c:510f::/48 maxlen: 48
240e:34c:51e0::/44 maxlen: 44
240e:34c:51f0::/44 maxlen: 44
240e:34c:520e::/48 maxlen: 48
240e:34c:520f::/48 maxlen: 48
240e:34c:52e0::/44 maxlen: 44
240e:34c:52f0::/44 maxlen: 44
240e:34c:530e::/48 maxlen: 48
240e:34c:530f::/48 maxlen: 48
240e:34c:53e0::/44 maxlen: 44
240e:34c:53f0::/44 maxlen: 44
240e:34c:540e::/48 maxlen: 48
240e:34c:540f::/48 maxlen: 48
240e:34c:54e0::/44 maxlen: 44
240e:34c:54f0::/44 maxlen: 44
240e:34c:550e::/48 maxlen: 48
240e:34c:550f::/48 maxlen: 48
240e:34c:55e0::/44 maxlen: 44
240e:34c:55f0::/44 maxlen: 44
240e:34c:560e::/48 maxlen: 48
240e:34c:560f::/48 maxlen: 48
240e:34c:56e0::/44 maxlen: 44
240e:34c:56f0::/44 maxlen: 44
240e:34c:650e::/48 maxlen: 48
240e:34c:650f::/48 maxlen: 48
240e:34c:65e0::/44 maxlen: 44
240e:34c:65f0::/44 maxlen: 44
240e:34c:660e::/48 maxlen: 48
240e:34c:660f::/48 maxlen: 48
240e:34c:66e0::/44 maxlen: 44
240e:34c:66f0::/44 maxlen: 44
240e:34c:680e::/48 maxlen: 48
240e:34c:680f::/48 maxlen: 48
240e:34c:68e0::/44 maxlen: 44
240e:34c:68f0::/44 maxlen: 44
240e:34c:690e::/48 maxlen: 48
240e:34c:690f::/48 maxlen: 48
240e:34c:69e0::/44 maxlen: 44
240e:34c:69f0::/44 maxlen: 44
240e:34c:6b0e::/48 maxlen: 48
240e:34c:6b0f::/48 maxlen: 48
240e:34c:6be0::/44 maxlen: 44
240e:34c:6bf0::/44 maxlen: 44
240e:34c:6c0e::/48 maxlen: 48
240e:34c:6c0f::/48 maxlen: 48
240e:34c:6ce0::/44 maxlen: 44
240e:34c:6cf0::/44 maxlen: 44
240e:34c:720e::/48 maxlen: 48
240e:34c:720f::/48 maxlen: 48
240e:34c:72e0::/44 maxlen: 44
240e:34c:72f0::/44 maxlen: 44
240e:34c:730e::/48 maxlen: 48
240e:34c:730f::/48 maxlen: 48
240e:34c:73e0::/44 maxlen: 44
240e:34c:73f0::/44 maxlen: 44
240e:34c:740e::/48 maxlen: 48
240e:34c:740f::/48 maxlen: 48
240e:34c:74e0::/44 maxlen: 44
240e:34c:74f0::/44 maxlen: 44
240e:34c:7d0e::/48 maxlen: 48
240e:34c:7d0f::/48 maxlen: 48
240e:34c:7de0::/44 maxlen: 44
240e:34c:7df0::/44 maxlen: 44
240e:34c:7f0e::/48 maxlen: 48
240e:34c:7f0f::/48 maxlen: 48
240e:34c:7fe0::/44 maxlen: 44
240e:34c:7ff0::/44 maxlen: 44
240e:34c:800e::/48 maxlen: 48
240e:34c:800f::/48 maxlen: 48
240e:34c:80e0::/44 maxlen: 44
240e:34c:80f0::/44 maxlen: 44
240e:34c:8101::/48 maxlen: 48
240e:34c:8102::/48 maxlen: 48
240e:34c:8103::/48 maxlen: 48
240e:34c:8110::/44 maxlen: 44
240e:34c:8120::/44 maxlen: 44
240e:34c:8130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:94:91:84:be:87:7f:9c:49:1f:26:4f:fe:e6:47:7b:ad:7c:a6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 16:10:56 2026 GMT
Not After : May 25 16:15:56 2027 GMT
Subject: CN=6D158A4655EE103E40BFA8D3FB45680CCEAD55D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:83:6e:5a:a9:a5:54:10:9c:1c:96:c8:75:
af:8e:40:50:97:f2:54:9f:1b:90:a4:49:e7:04:06:
f0:3e:b0:d1:9d:84:bf:eb:b8:53:67:e1:10:34:57:
aa:d3:bd:9a:a4:62:13:74:af:1f:44:08:ca:3f:eb:
e3:e1:01:d1:d8:ef:37:be:7e:cc:cf:b0:09:1b:0e:
66:23:75:7c:e7:a0:44:1a:62:bd:a4:f0:19:fe:0b:
a4:29:e2:64:da:ac:9b:6c:6d:16:27:99:24:d4:59:
63:3c:aa:46:34:ec:e0:3d:f4:a4:df:f8:f5:fe:7c:
6b:1e:20:f2:e3:f3:ca:97:57:81:ba:0e:c5:69:6e:
8e:ce:c4:ad:38:2b:6e:03:94:4e:0d:20:7a:bb:b5:
ff:a1:2c:cf:3c:60:99:64:f0:6d:b9:44:f0:a0:92:
0c:a0:a0:af:de:ef:a1:82:2d:5c:e9:c6:3f:f2:d4:
66:2f:de:e6:f2:22:fb:aa:33:3e:72:d0:9b:85:12:
53:7a:d3:6e:c7:fe:74:26:73:de:59:84:3e:95:8d:
6b:f3:5e:65:64:7c:ae:76:5c:e3:9f:3a:52:59:42:
5b:9e:cc:e5:28:cf:86:7b:30:32:d4:f2:16:ce:07:
0c:b7:48:19:de:39:ef:25:8c:09:15:bd:5f:29:68:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:8A:46:55:EE:10:3E:40:BF:A8:D3:FB:45:68:0C:CE:AD:55:D6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.56.52.0-106.56.63.255
106.60.48.0/21
220.164.253.0/24
IPv6:
240e:12:9800::/47
240e:34c:510e::/47
240e:34c:51e0::/43
240e:34c:520e::/47
240e:34c:52e0::/43
240e:34c:530e::/47
240e:34c:53e0::/43
240e:34c:540e::/47
240e:34c:54e0::/43
240e:34c:550e::/47
240e:34c:55e0::/43
240e:34c:560e::/47
240e:34c:56e0::/43
240e:34c:650e::/47
240e:34c:65e0::/43
240e:34c:660e::/47
240e:34c:66e0::/43
240e:34c:680e::/47
240e:34c:68e0::/43
240e:34c:690e::/47
240e:34c:69e0::/43
240e:34c:6b0e::/47
240e:34c:6be0::/43
240e:34c:6c0e::/47
240e:34c:6ce0::/43
240e:34c:720e::/47
240e:34c:72e0::/43
240e:34c:730e::/47
240e:34c:73e0::/43
240e:34c:740e::/47
240e:34c:74e0::/43
240e:34c:7d0e::/47
240e:34c:7de0::/43
240e:34c:7f0e::/47
240e:34c:7fe0::/43
240e:34c:800e::/47
240e:34c:80e0::/43
240e:34c:8101::-240e:34c:8103:ffff:ffff:ffff:ffff:ffff
240e:34c:8110::-240e:34c:813f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:34:30:f6:6d:a5:b6:38:a9:b6:ab:b2:b1:7b:8b:1f:70:6b:
16:49:33:9e:e6:84:49:75:0f:40:52:f5:a2:e6:8e:c9:35:6b:
15:dd:a5:1e:98:6b:7d:ed:bd:eb:96:f1:bb:8a:4f:b1:07:96:
36:37:9a:bc:70:50:63:dd:eb:46:70:3b:a9:6a:76:e3:5c:fd:
a1:a5:5e:2a:b1:65:8e:f6:84:5d:bc:33:1c:2f:4f:27:31:95:
f3:13:01:67:18:d9:12:b9:8f:43:9e:b3:30:fc:8c:e7:66:37:
d1:d1:37:d1:6b:79:69:91:e1:64:19:5f:6a:b3:26:ee:38:d8:
87:ae:ea:e6:14:95:1f:36:cf:66:e2:1b:a3:6e:65:89:f4:7b:
7a:fa:28:a4:df:88:80:c7:31:47:e6:29:30:1d:32:e0:0a:f1:
e9:d4:aa:80:71:37:89:6c:0f:99:2f:11:cc:e2:2d:18:8d:a7:
c9:2c:50:d4:dd:9c:91:48:7b:6b:6c:db:f3:3b:76:31:6a:e0:
f5:c3:b5:f2:5c:61:25:45:62:bd:70:ff:13:d8:8a:48:3c:11:
3c:dc:3d:9c:2e:72:08:49:29:11:08:70:09:7e:cc:08:51:93:
96:aa:d9:1a:31:b0:07:6f:ba:c9:d4:19:5a:fc:25:ab:f8:11:
90:04:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:43 2026 by rpki-client