Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS135089.roa
File: AS135089.roa (raw, json)
Hash identifier: rSEml1mQyIBoVeHYii4fkurbHjWs9iQ/OBn/Jk73h58=
Subject key identifier: 19:DC:BD:4B:4A:4F:25:42:AA:1F:4A:45:7B:46:C2:E0:4C:C6:98:EC
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 601272D8FF3F489965E9EE9E555F6732C3DCF269
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS135089.roa
Signing time: Tue 26 May 2026 18:09:33 +0000
ROA not before: Tue 26 May 2026 18:04:33 +0000
ROA not after: Tue 25 May 2027 18:09:33 +0000
asID: 135089
IP address blocks: 14.18.32.0/20 maxlen: 20
14.18.48.0/20 maxlen: 20
14.18.64.0/19 maxlen: 19
14.18.96.0/20 maxlen: 20
14.18.112.0/21 maxlen: 21
14.18.120.0/23 maxlen: 23
14.18.122.0/23 maxlen: 23
14.18.124.0/22 maxlen: 22
14.22.20.0/22 maxlen: 22
14.22.23.0/24 maxlen: 24
14.22.49.0/24 maxlen: 24
14.22.50.0/23 maxlen: 23
14.22.52.0/22 maxlen: 22
14.22.66.0/23 maxlen: 23
14.22.68.0/24 maxlen: 24
14.22.69.0/24 maxlen: 24
14.22.70.0/23 maxlen: 23
14.22.72.0/22 maxlen: 22
14.22.76.0/22 maxlen: 22
14.22.80.0/21 maxlen: 21
14.22.88.0/23 maxlen: 23
14.22.90.0/24 maxlen: 24
14.22.91.0/24 maxlen: 24
14.22.92.0/24 maxlen: 24
14.22.93.0/24 maxlen: 24
14.22.94.0/24 maxlen: 24
14.22.95.0/24 maxlen: 24
14.22.96.0/23 maxlen: 23
14.22.98.0/23 maxlen: 23
14.22.100.0/22 maxlen: 22
14.22.104.0/22 maxlen: 22
14.22.109.0/24 maxlen: 24
14.22.110.0/23 maxlen: 23
14.22.112.0/22 maxlen: 22
14.22.116.0/23 maxlen: 23
14.22.116.0/24 maxlen: 24
14.22.118.0/23 maxlen: 23
14.22.120.0/22 maxlen: 22
14.22.124.0/22 maxlen: 22
14.29.0.0/22 maxlen: 22
14.29.4.0/23 maxlen: 23
14.29.9.0/24 maxlen: 24
14.29.10.0/23 maxlen: 23
14.29.12.0/22 maxlen: 22
14.29.16.0/20 maxlen: 20
14.29.102.0/24 maxlen: 24
14.31.10.0/24 maxlen: 24
14.31.14.0/23 maxlen: 23
14.116.192.0/19 maxlen: 19
14.116.250.0/23 maxlen: 23
14.116.252.0/22 maxlen: 22
14.121.54.0/24 maxlen: 24
14.146.224.0/22 maxlen: 22
14.146.228.0/22 maxlen: 22
14.215.44.0/22 maxlen: 22
14.215.48.0/22 maxlen: 22
14.215.162.0/23 maxlen: 23
14.215.163.0/24 maxlen: 24
14.215.164.0/24 maxlen: 24
14.215.173.0/24 maxlen: 24
14.215.174.0/24 maxlen: 24
36.111.32.0/22 maxlen: 22
36.111.40.0/21 maxlen: 21
36.111.40.0/24 maxlen: 24
36.111.42.0/24 maxlen: 24
36.111.43.0/24 maxlen: 24
61.143.26.0/23 maxlen: 23
113.96.190.0/23 maxlen: 23
113.103.40.0/24 maxlen: 24
116.19.50.0/23 maxlen: 23
116.19.151.0/24 maxlen: 24
116.31.70.0/24 maxlen: 24
119.135.164.0/22 maxlen: 22
119.135.168.0/23 maxlen: 23
121.8.172.0/22 maxlen: 22
121.8.176.0/22 maxlen: 22
121.11.151.0/24 maxlen: 24
121.11.152.0/24 maxlen: 24
121.11.172.0/22 maxlen: 22
121.11.232.0/24 maxlen: 24
121.11.233.0/24 maxlen: 24
121.11.234.0/24 maxlen: 24
121.11.235.0/24 maxlen: 24
121.11.236.0/22 maxlen: 22
121.14.201.0/24 maxlen: 24
121.14.203.0/24 maxlen: 24
125.88.75.0/24 maxlen: 24
125.88.79.0/24 maxlen: 24
125.88.86.0/24 maxlen: 24
125.88.108.0/24 maxlen: 24
125.88.109.0/24 maxlen: 24
125.88.124.0/23 maxlen: 23
125.88.204.0/22 maxlen: 22
125.88.208.0/20 maxlen: 20
125.88.224.0/20 maxlen: 20
125.88.240.0/21 maxlen: 21
125.93.59.0/24 maxlen: 24
125.94.215.0/24 maxlen: 24
183.47.127.0/24 maxlen: 24
183.56.192.0/20 maxlen: 20
183.56.208.0/20 maxlen: 20
183.56.224.0/21 maxlen: 21
183.56.232.0/21 maxlen: 21
183.56.240.0/22 maxlen: 22
183.56.244.0/22 maxlen: 22
183.56.248.0/24 maxlen: 24
183.56.249.0/24 maxlen: 24
183.56.250.0/23 maxlen: 23
183.56.252.0/22 maxlen: 22
183.56.252.0/24 maxlen: 24
183.56.253.0/24 maxlen: 24
183.56.254.0/24 maxlen: 24
183.58.11.0/24 maxlen: 24
183.59.8.0/22 maxlen: 22
203.32.48.0/23 maxlen: 23
203.32.68.0/23 maxlen: 23
203.32.84.0/23 maxlen: 23
203.32.205.0/24 maxlen: 24
203.33.158.0/23 maxlen: 23
203.57.66.0/24 maxlen: 24
203.57.69.0/24 maxlen: 24
203.57.73.0/24 maxlen: 24
203.57.90.0/24 maxlen: 24
219.128.176.0/22 maxlen: 22
219.128.180.0/24 maxlen: 24
219.128.193.0/24 maxlen: 24
219.128.195.0/24 maxlen: 24
219.128.212.0/24 maxlen: 24
240e:108:11e6::/48 maxlen: 48
240e:982:e401::/48 maxlen: 48
240e:982:e402::/48 maxlen: 48
240e:982:e600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:12:72:d8:ff:3f:48:99:65:e9:ee:9e:55:5f:67:32:c3:dc:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 18:04:33 2026 GMT
Not After : May 25 18:09:33 2027 GMT
Subject: CN=19DCBD4B4A4F2542AA1F4A457B46C2E04CC698EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:39:f4:bf:df:33:97:2b:30:6a:b5:09:c4:
b7:7d:92:a4:62:a3:95:f6:40:11:a4:72:a9:9c:78:
f4:f2:87:a1:a5:51:93:cc:f1:c8:80:1c:1f:b7:b0:
56:37:94:ef:26:93:f7:79:3f:39:83:e7:22:e3:ea:
7f:46:96:84:8a:58:d3:74:73:70:d3:2a:dc:6a:4e:
41:5b:fc:7b:e2:ae:77:bd:3c:ad:80:86:be:8b:a4:
56:70:b7:6c:2a:f9:d0:6f:4b:25:20:fe:5e:6b:8b:
18:66:ee:5a:a1:1a:cd:63:18:60:2e:6e:39:69:55:
96:b0:c1:58:3e:c4:68:2b:59:c7:a9:42:54:b5:aa:
0d:1a:30:cb:96:c0:51:55:1d:db:f7:cc:b3:a8:2a:
75:8e:a1:59:75:ce:85:df:c3:98:a1:46:ac:e8:15:
2c:cc:f3:3a:12:9f:f8:21:b3:e5:99:41:29:b8:bb:
84:58:a8:cd:5e:10:11:be:96:31:3b:6f:45:3f:48:
90:0e:e6:0a:f4:92:77:fc:7c:46:87:00:8c:b8:1c:
9a:13:42:de:54:80:a4:29:ff:22:00:98:15:a4:66:
f5:83:8c:c5:80:5c:13:fb:5a:67:38:bb:93:ff:e0:
0b:9c:2d:f3:1f:e9:1a:49:e5:f2:26:99:f3:51:09:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:BD:4B:4A:4F:25:42:AA:1F:4A:45:7B:46:C2:E0:4C:C6:98:EC
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS135089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.18.32.0-14.18.127.255
14.22.20.0/22
14.22.49.0-14.22.55.255
14.22.66.0-14.22.107.255
14.22.109.0-14.22.127.255
14.29.0.0-14.29.5.255
14.29.9.0-14.29.31.255
14.29.102.0/24
14.31.10.0/24
14.31.14.0/23
14.116.192.0/19
14.116.250.0-14.116.255.255
14.121.54.0/24
14.146.224.0/21
14.215.44.0-14.215.51.255
14.215.162.0-14.215.164.255
14.215.173.0-14.215.174.255
36.111.32.0/22
36.111.40.0/21
61.143.26.0/23
113.96.190.0/23
113.103.40.0/24
116.19.50.0/23
116.19.151.0/24
116.31.70.0/24
119.135.164.0-119.135.169.255
121.8.172.0-121.8.179.255
121.11.151.0-121.11.152.255
121.11.172.0/22
121.11.232.0/21
121.14.201.0/24
121.14.203.0/24
125.88.75.0/24
125.88.79.0/24
125.88.86.0/24
125.88.108.0/23
125.88.124.0/23
125.88.204.0-125.88.247.255
125.93.59.0/24
125.94.215.0/24
183.47.127.0/24
183.56.192.0/18
183.58.11.0/24
183.59.8.0/22
203.32.48.0/23
203.32.68.0/23
203.32.84.0/23
203.32.205.0/24
203.33.158.0/23
203.57.66.0/24
203.57.69.0/24
203.57.73.0/24
203.57.90.0/24
219.128.176.0-219.128.180.255
219.128.193.0/24
219.128.195.0/24
219.128.212.0/24
IPv6:
240e:108:11e6::/48
240e:982:e401::-240e:982:e402:ffff:ffff:ffff:ffff:ffff
240e:982:e600::/48
Signature Algorithm: sha256WithRSAEncryption
a7:b6:eb:00:b3:3a:08:43:28:20:51:53:55:1e:72:38:87:ad:
3c:d4:ef:39:6c:c1:cc:47:d3:4c:3b:4c:d2:6d:f1:6c:cd:c6:
32:35:a5:b9:12:f1:80:a6:6a:d1:c5:73:7a:80:39:58:a1:ca:
ba:6b:75:c4:73:86:0f:82:61:be:90:cc:95:92:c9:cd:f2:23:
47:d8:66:35:45:74:39:58:64:61:64:e5:fb:f8:7f:ff:10:04:
e8:75:f7:1f:70:58:66:81:4f:6c:73:ae:4a:a9:70:ea:af:fe:
fc:59:2c:b4:1d:3f:92:1b:31:c1:19:23:94:f6:5f:94:2d:3e:
d3:9d:f0:53:4c:5c:02:85:1d:8f:69:6e:98:56:67:d5:c8:05:
4e:5d:3b:0e:a5:ab:c1:4e:59:c4:f1:fe:21:26:94:62:cc:de:
39:f1:8f:ac:0c:66:33:6a:1c:ff:bb:f2:39:1f:61:4f:34:35:
b7:3d:25:82:d5:3e:ed:04:ef:a0:12:f8:48:24:95:95:2c:ed:
db:62:88:55:34:ba:cc:8c:f6:0f:5e:8a:8d:97:70:ba:51:24:
1a:91:c2:9b:4f:08:fd:49:5d:aa:bb:73:ed:64:b0:18:12:ab:
41:2c:9c:8d:05:2f:0b:be:aa:e9:67:84:8b:59:6a:1b:49:aa:
ec:89:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:36 2026 by rpki-client