Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134769.roa
File: AS134769.roa (raw, json)
Hash identifier: ELC/xlnEbu/Kk3W4rPZ6LGzpiPGSnrn18tej+78UPfk=
Subject key identifier: E8:50:F6:A9:7D:54:95:3B:E8:1D:96:08:00:AB:C9:CB:B9:EF:A7:AC
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 386940243C349BDE958563DED6691583B3257CEC
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134769.roa
Signing time: Thu 28 May 2026 16:58:19 +0000
ROA not before: Thu 28 May 2026 16:53:19 +0000
ROA not after: Thu 27 May 2027 16:58:19 +0000
asID: 134769
IP address blocks: 58.216.0.0/24 maxlen: 24
58.216.4.0/24 maxlen: 24
58.216.20.0/24 maxlen: 24
58.216.26.0/24 maxlen: 24
58.216.34.0/24 maxlen: 24
58.216.35.0/24 maxlen: 24
58.216.36.0/24 maxlen: 24
58.216.37.0/24 maxlen: 24
58.216.47.0/24 maxlen: 24
58.216.56.0/24 maxlen: 24
58.216.67.0/24 maxlen: 24
58.216.68.0/24 maxlen: 24
58.216.69.0/24 maxlen: 24
58.216.87.0/24 maxlen: 24
58.216.88.0/24 maxlen: 24
58.216.89.0/24 maxlen: 24
58.216.90.0/24 maxlen: 24
58.216.91.0/24 maxlen: 24
58.216.92.0/24 maxlen: 24
58.216.93.0/24 maxlen: 24
58.216.102.0/24 maxlen: 24
58.216.105.0/24 maxlen: 24
58.216.106.0/24 maxlen: 24
58.216.116.0/24 maxlen: 24
58.216.119.0/24 maxlen: 24
61.160.208.0/24 maxlen: 24
61.160.217.0/24 maxlen: 24
61.160.218.0/24 maxlen: 24
61.177.95.0/24 maxlen: 24
180.101.150.0/24 maxlen: 24
180.101.151.0/24 maxlen: 24
180.101.152.0/24 maxlen: 24
180.101.153.0/24 maxlen: 24
180.101.154.0/24 maxlen: 24
180.103.66.0/24 maxlen: 24
180.103.67.0/24 maxlen: 24
240e:1a:110::/44 maxlen: 44
240e:e9:7000::/37 maxlen: 37
240e:108:48::/48 maxlen: 48
240e:108:11d5::/48 maxlen: 48
240e:108:11d8::/48 maxlen: 48
240e:109:8048::/48 maxlen: 48
240e:978:f00::/40 maxlen: 40
240e:980:4800::/40 maxlen: 40
240e:982:d500::/40 maxlen: 40
240e:982:d800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:69:40:24:3c:34:9b:de:95:85:63:de:d6:69:15:83:b3:25:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:53:19 2026 GMT
Not After : May 27 16:58:19 2027 GMT
Subject: CN=E850F6A97D54953BE81D960800ABC9CBB9EFA7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:40:53:32:af:b6:f5:0f:55:bd:f7:b3:cd:
7f:3c:35:c4:23:dc:05:91:84:0c:e7:be:b6:08:54:
93:ed:49:34:46:89:b8:49:d2:b0:6c:b9:4c:ab:d0:
b6:26:cc:8b:57:c8:a2:33:b0:f3:b3:9d:47:45:b2:
d3:0e:3c:eb:0f:29:51:34:09:61:48:bb:95:50:4f:
b3:3e:d0:f1:6f:30:6f:24:b7:59:12:09:43:4f:cc:
2f:35:e2:c7:06:4d:ad:54:88:8d:50:0c:62:10:33:
63:9d:a0:f6:35:28:27:93:b3:db:9d:4f:83:87:94:
3a:c3:e2:43:e2:3c:2d:9c:d2:f8:75:63:9f:0d:d8:
de:a7:52:58:98:9e:4e:11:a3:da:d0:9a:ef:20:d6:
4c:80:20:2a:8e:18:33:cc:52:aa:e9:e2:6d:23:9d:
4c:50:1d:26:4b:88:34:39:6b:09:a0:28:f6:f9:e3:
a8:1c:cf:7d:26:98:f4:af:b8:16:15:4f:9f:28:e7:
08:3f:83:e0:41:bc:80:25:5c:f2:3b:75:de:2d:42:
62:59:a3:4f:cd:cd:b8:c3:d5:10:fd:4e:83:14:1c:
5e:84:75:d2:d4:d7:4b:c0:49:81:c6:e5:32:d8:0d:
9d:7b:28:92:2a:f6:e1:76:db:98:af:e8:88:3f:ac:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:F6:A9:7D:54:95:3B:E8:1D:96:08:00:AB:C9:CB:B9:EF:A7:AC
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.216.0.0/24
58.216.4.0/24
58.216.20.0/24
58.216.26.0/24
58.216.34.0-58.216.37.255
58.216.47.0/24
58.216.56.0/24
58.216.67.0-58.216.69.255
58.216.87.0-58.216.93.255
58.216.102.0/24
58.216.105.0-58.216.106.255
58.216.116.0/24
58.216.119.0/24
61.160.208.0/24
61.160.217.0-61.160.218.255
61.177.95.0/24
180.101.150.0-180.101.154.255
180.103.66.0/23
IPv6:
240e:1a:110::/44
240e:e9:7000::/37
240e:108:48::/48
240e:108:11d5::/48
240e:108:11d8::/48
240e:109:8048::/48
240e:978:f00::/40
240e:980:4800::/40
240e:982:d500::/40
240e:982:d800::/40
Signature Algorithm: sha256WithRSAEncryption
80:06:17:ca:8c:87:82:ea:cd:b6:30:f4:a4:79:94:a9:e0:3a:
67:38:39:d0:af:cc:e5:0f:0f:5e:b2:dc:22:fd:e8:d8:4c:53:
d7:23:a9:fd:b9:29:b4:6d:24:83:27:c8:56:9c:aa:eb:9a:5d:
60:21:a8:c7:1c:d6:41:b6:33:01:c1:ef:36:85:92:27:7c:1e:
70:ab:2c:05:67:11:7e:44:8f:60:b2:4e:db:ad:24:f6:1a:bc:
b7:fc:6a:33:48:0b:44:6a:fa:98:9a:06:fb:c6:c2:ac:73:72:
da:96:d0:75:6e:c1:88:08:b5:f3:18:63:c4:24:54:63:32:32:
bb:8a:30:a4:c5:a8:f1:d9:ad:e3:d8:4e:0e:b7:ac:b4:ea:81:
27:82:76:57:b5:a2:91:ff:0b:49:b6:c5:d1:4d:d1:2a:e5:a5:
fc:90:c0:5b:76:8c:9c:3c:87:65:6f:44:e7:36:10:e0:56:82:
aa:09:b3:49:d3:5d:c2:98:59:c2:85:66:25:fa:87:5e:58:2c:
ce:3a:a1:d6:c2:5c:c2:bd:ef:85:00:09:90:c4:af:85:ec:98:
1b:e3:b5:75:2f:f5:d6:f2:3d:77:73:d8:14:47:54:33:71:18:
11:04:28:29:e6:5b:20:24:60:be:0c:7e:58:42:e4:d5:41:b1:
a1:f9:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:39 2026 by rpki-client