Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134768.roa
File: AS134768.roa (raw, json)
Hash identifier: 8iDrgftGT2jSf44DFAsdDHV+6OuNXVUOuO3lFRZW59w=
Subject key identifier: 0F:3D:04:D4:5F:6F:27:7E:A9:0B:8C:18:2D:86:C8:C5:8B:52:8E:9C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2FA0A50E72CCB6E423EB75C56E78D9B3D5E18477
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134768.roa
Signing time: Mon 15 Jun 2026 16:01:07 +0000
ROA not before: Mon 15 Jun 2026 15:56:07 +0000
ROA not after: Mon 14 Jun 2027 16:01:07 +0000
asID: 134768
IP address blocks: 1.81.0.0/21 maxlen: 21
1.82.208.0/20 maxlen: 20
1.82.212.0/24 maxlen: 24
1.82.217.0/24 maxlen: 24
1.82.219.0/24 maxlen: 24
1.82.232.0/21 maxlen: 21
1.82.239.0/24 maxlen: 24
1.82.240.0/20 maxlen: 20
1.82.244.0/24 maxlen: 24
1.82.251.0/24 maxlen: 24
36.40.64.0/19 maxlen: 19
36.40.64.0/21 maxlen: 21
36.40.72.0/21 maxlen: 21
36.40.80.0/21 maxlen: 21
36.40.88.0/21 maxlen: 21
36.41.64.0/20 maxlen: 20
36.41.77.0/24 maxlen: 24
36.41.168.0/21 maxlen: 21
36.41.184.0/21 maxlen: 21
36.41.187.0/24 maxlen: 24
36.42.72.0/21 maxlen: 21
36.43.32.0/24 maxlen: 24
36.43.33.0/24 maxlen: 24
36.43.34.0/24 maxlen: 24
36.46.128.0/19 maxlen: 19
36.111.156.0/24 maxlen: 24
36.111.157.0/24 maxlen: 24
36.111.158.0/24 maxlen: 24
36.111.159.0/24 maxlen: 24
113.133.160.0/19 maxlen: 19
113.133.170.0/24 maxlen: 24
113.134.208.0/21 maxlen: 21
113.137.32.0/19 maxlen: 19
113.141.64.0/19 maxlen: 19
113.141.71.0/24 maxlen: 24
113.141.160.0/19 maxlen: 19
113.142.54.0/23 maxlen: 23
113.142.56.0/21 maxlen: 21
113.142.64.0/20 maxlen: 20
113.142.80.0/20 maxlen: 20
113.142.80.0/24 maxlen: 24
113.142.128.0/17 maxlen: 17
117.23.0.0/21 maxlen: 21
117.23.2.0/24 maxlen: 24
117.23.48.0/20 maxlen: 20
117.23.56.0/24 maxlen: 24
117.23.58.0/24 maxlen: 24
117.33.128.0/18 maxlen: 18
117.33.224.0/19 maxlen: 19
117.33.224.0/21 maxlen: 21
117.33.232.0/21 maxlen: 21
117.33.240.0/21 maxlen: 21
117.33.248.0/21 maxlen: 21
117.34.82.0/23 maxlen: 23
117.34.84.0/23 maxlen: 23
117.34.98.0/23 maxlen: 23
117.34.100.0/22 maxlen: 22
117.34.106.0/23 maxlen: 23
117.34.120.0/22 maxlen: 22
117.34.124.0/23 maxlen: 23
117.34.208.0/21 maxlen: 21
124.116.128.0/23 maxlen: 23
125.76.156.0/22 maxlen: 22
203.0.108.0/23 maxlen: 23
203.0.110.0/24 maxlen: 24
203.2.68.0/23 maxlen: 23
203.2.160.0/21 maxlen: 21
203.2.160.0/22 maxlen: 22
203.3.80.0/21 maxlen: 21
203.82.0.0/23 maxlen: 23
203.83.224.0/22 maxlen: 22
203.83.228.0/22 maxlen: 22
219.144.64.0/19 maxlen: 19
240e:f:b000::/37 maxlen: 37
240e:f:b800::/37 maxlen: 37
240e:bf:b000::/37 maxlen: 37
240e:bf:b800::/37 maxlen: 37
240e:108:24::/48 maxlen: 48
240e:108:44::/48 maxlen: 48
240e:108:93::/48 maxlen: 48
240e:108:1140::/48 maxlen: 48
240e:108:1141::/48 maxlen: 48
240e:108:1142::/48 maxlen: 48
240e:108:1144::/48 maxlen: 48
240e:109:8024::/48 maxlen: 48
240e:109:8044::/48 maxlen: 48
240e:698:2400::/40 maxlen: 40
240e:698:4400::/40 maxlen: 40
240e:954::/40 maxlen: 40
240e:954:100::/40 maxlen: 40
240e:954:400::/40 maxlen: 40
240e:954:600::/40 maxlen: 40
240e:954:800::/40 maxlen: 40
240e:954:a00::/40 maxlen: 40
240e:954:1000::/40 maxlen: 40
240e:980:2400::/40 maxlen: 40
240e:980:4400::/40 maxlen: 40
240e:980:9300::/40 maxlen: 40
240e:980:9300::/41 maxlen: 41
240e:980:9380::/41 maxlen: 41
240e:982:4000::/40 maxlen: 40
240e:982:4100::/40 maxlen: 40
240e:982:4200::/40 maxlen: 40
240e:982:4301::/48 maxlen: 48
240e:982:4310::/45 maxlen: 45
240e:982:4318::/45 maxlen: 45
240e:982:4400::/40 maxlen: 40
240e:982:4500::/40 maxlen: 40
240e:983:1400::/48 maxlen: 48
240e:983:1401::/48 maxlen: 48
240e:983:140a::/48 maxlen: 48
240e:983:140b::/48 maxlen: 48
240e:983:1411::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a0:a5:0e:72:cc:b6:e4:23:eb:75:c5:6e:78:d9:b3:d5:e1:84:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 15 15:56:07 2026 GMT
Not After : Jun 14 16:01:07 2027 GMT
Subject: CN=0F3D04D45F6F277EA90B8C182D86C8C58B528E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:2d:a2:47:b5:3c:59:fc:55:81:57:c9:f4:
73:9c:c5:74:b2:72:6f:18:6d:25:b9:53:ac:d8:13:
f8:c0:63:d6:4b:1b:38:29:59:fe:b0:b1:99:a9:92:
9a:ab:67:8a:23:81:fa:30:74:39:d3:66:99:c0:f4:
aa:63:dd:6a:37:94:19:be:ca:2e:50:cb:71:ef:4a:
c2:40:a0:1d:31:d4:0a:b2:82:85:a1:34:93:2b:03:
97:23:cc:1d:6c:09:db:b2:f1:cb:b8:2a:bb:c4:0e:
07:40:a4:fd:d8:d0:56:47:a4:8f:7b:bc:24:73:f0:
11:16:a7:6d:25:cc:65:cf:8f:02:63:e0:28:b2:8b:
37:d2:d4:98:c7:f5:b6:44:a0:eb:3d:b3:e9:01:f9:
9d:55:99:a8:14:17:73:af:ac:e0:47:30:2a:42:83:
b5:5a:d4:90:f3:0a:3a:88:1c:77:30:1f:f1:12:ff:
0f:67:9c:15:60:81:25:d8:d2:99:43:1a:5f:8e:99:
70:28:09:2d:04:8b:46:93:d7:8d:a4:bd:01:6c:2b:
fc:c4:0c:57:d4:50:64:ee:95:13:dc:82:4c:41:ff:
33:c9:80:65:05:20:68:53:8d:22:da:bf:87:83:cb:
b6:d7:ab:da:9b:b7:3e:1d:ad:a4:cd:17:af:03:44:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3D:04:D4:5F:6F:27:7E:A9:0B:8C:18:2D:86:C8:C5:8B:52:8E:9C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.81.0.0/21
1.82.208.0/20
1.82.232.0-1.82.255.255
36.40.64.0/19
36.41.64.0/20
36.41.168.0/21
36.41.184.0/21
36.42.72.0/21
36.43.32.0-36.43.34.255
36.46.128.0/19
36.111.156.0/22
113.133.160.0/19
113.134.208.0/21
113.137.32.0/19
113.141.64.0/19
113.141.160.0/19
113.142.54.0-113.142.95.255
113.142.128.0/17
117.23.0.0/21
117.23.48.0/20
117.33.128.0/18
117.33.224.0/19
117.34.82.0-117.34.85.255
117.34.98.0-117.34.103.255
117.34.106.0/23
117.34.120.0-117.34.125.255
117.34.208.0/21
124.116.128.0/23
125.76.156.0/22
203.0.108.0-203.0.110.255
203.2.68.0/23
203.2.160.0/21
203.3.80.0/21
203.82.0.0/23
203.83.224.0/21
219.144.64.0/19
IPv6:
240e:f:b000::/36
240e:bf:b000::/36
240e:108:24::/48
240e:108:44::/48
240e:108:93::/48
240e:108:1140::-240e:108:1142:ffff:ffff:ffff:ffff:ffff
240e:108:1144::/48
240e:109:8024::/48
240e:109:8044::/48
240e:698:2400::/40
240e:698:4400::/40
240e:954::/39
240e:954:400::/40
240e:954:600::/40
240e:954:800::/40
240e:954:a00::/40
240e:954:1000::/40
240e:980:2400::/40
240e:980:4400::/40
240e:980:9300::/40
240e:982:4000::-240e:982:42ff:ffff:ffff:ffff:ffff:ffff
240e:982:4301::/48
240e:982:4310::/44
240e:982:4400::/39
240e:983:1400::/47
240e:983:140a::/47
240e:983:1411::/48
Signature Algorithm: sha256WithRSAEncryption
17:6f:b4:a8:89:a4:7b:42:67:8b:87:fd:6f:89:25:92:cb:ae:
83:08:d9:22:55:c8:79:68:07:39:5c:ad:ee:3a:1e:37:72:76:
d7:d4:69:dd:97:bb:0e:38:08:a8:a2:36:8d:8c:5a:c1:0f:e8:
88:0d:2a:4e:05:d8:c0:5d:ee:d5:7e:de:04:d9:e1:c3:89:ae:
42:98:1a:3e:97:27:a6:3e:72:33:f9:5a:3b:c5:0b:7b:c0:47:
09:d2:2e:1c:ca:70:89:9f:75:1d:eb:99:0b:d0:49:39:b5:77:
96:3a:05:12:84:7c:5b:ba:e3:54:c4:56:ce:73:2f:f9:de:c2:
cc:d3:07:67:26:05:72:f7:c3:b7:60:6b:9e:22:0a:aa:62:41:
99:6a:fe:68:15:ac:9b:b2:e5:9c:c0:b0:15:99:9d:3c:01:8b:
69:d5:f5:28:0d:45:c9:fa:14:02:d5:b7:70:a0:a9:0e:0b:44:
3c:66:b7:0c:92:a0:75:42:a0:64:be:75:94:6e:90:27:0f:61:
36:9b:96:c6:c9:70:57:bf:c5:05:49:83:86:65:26:78:e4:ac:
50:24:e8:73:2b:0f:3e:80:42:6b:84:58:e9:31:45:5f:d4:ef:
d6:ed:6b:2a:ec:3b:60:89:e6:5a:63:b1:86:ad:b1:a3:2d:b5:
0f:27:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:07:26 2026 by rpki-client