Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136195.roa
File: AS136195.roa (raw, json)
Hash identifier: jXz990lDUUNoAEVai4IeAIfa6lPyzM5Hn4saEobZzck=
Subject key identifier: 8E:C2:4F:77:93:13:D5:F6:49:CE:CA:7A:C2:42:EF:62:78:F5:E0:7E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4E876DF6D9825098E97C696810423CCCC265052E
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136195.roa
Signing time: Wed 16 Sep 2026 19:08:09 +0000
ROA not before: Wed 16 Sep 2026 19:03:09 +0000
ROA not after: Wed 15 Sep 2027 19:08:09 +0000
asID: 136195
IP address blocks: 150.138.99.0/24 maxlen: 24
150.138.112.0/21 maxlen: 21
150.138.126.0/23 maxlen: 23
150.138.135.0/24 maxlen: 24
150.139.128.0/19 maxlen: 19
150.139.192.0/19 maxlen: 19
182.40.32.0/20 maxlen: 20
182.40.39.0/24 maxlen: 24
182.40.96.0/20 maxlen: 20
182.40.96.0/24 maxlen: 24
182.40.97.0/24 maxlen: 24
182.40.98.0/24 maxlen: 24
182.40.99.0/24 maxlen: 24
182.40.102.0/24 maxlen: 24
182.40.103.0/24 maxlen: 24
182.40.104.0/24 maxlen: 24
182.40.105.0/24 maxlen: 24
182.40.106.0/24 maxlen: 24
182.40.107.0/24 maxlen: 24
182.40.108.0/24 maxlen: 24
182.40.109.0/24 maxlen: 24
182.40.160.0/21 maxlen: 21
182.40.192.0/19 maxlen: 19
182.40.192.0/24 maxlen: 24
182.40.201.0/24 maxlen: 24
182.40.240.0/20 maxlen: 20
240e:e:b800::/37 maxlen: 37
240e:108:4e::/48 maxlen: 48
240e:108:86::/48 maxlen: 48
240e:108:1100::/48 maxlen: 48
240e:108:1101::/48 maxlen: 48
240e:244:200::/40 maxlen: 40
240e:244:300::/40 maxlen: 40
240e:945::/36 maxlen: 36
240e:945:4400::/40 maxlen: 40
240e:980:4e00::/40 maxlen: 40
240e:980:8600::/40 maxlen: 40
240e:982::/40 maxlen: 40
240e:982:100::/40 maxlen: 40
240e:982:200::/40 maxlen: 40
240e:982:300::/40 maxlen: 40
240e:983:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 22:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:87:6d:f6:d9:82:50:98:e9:7c:69:68:10:42:3c:cc:c2:65:05:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 16 19:03:09 2026 GMT
Not After : Sep 15 19:08:09 2027 GMT
Subject: CN=8EC24F779313D5F649CECA7AC242EF6278F5E07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:94:96:a3:e0:6d:e0:8f:75:bf:ce:54:3a:
f8:51:e9:0c:6f:24:b7:70:f5:0d:8d:70:a3:cc:6e:
14:5b:b7:b8:e2:f1:89:2b:ff:a0:e9:b9:41:49:b0:
e0:cc:dd:15:98:28:be:c6:43:8f:ce:2d:a5:15:27:
8d:73:38:3d:82:e0:41:cc:21:3c:c7:73:f5:2c:2e:
fe:2d:b7:5b:a4:17:bd:8e:39:ec:81:a6:7a:1b:c3:
b6:6d:44:1b:3d:1c:14:06:fc:f0:d9:b8:93:f0:18:
0e:19:a7:a0:16:26:b6:06:37:61:69:ce:06:e9:67:
3d:f7:ee:11:17:a6:79:54:6c:3b:88:8f:0d:5e:97:
01:97:b3:a5:07:35:0f:da:c4:d1:f4:4b:94:4d:29:
9b:d7:25:df:37:ec:53:5a:b8:86:78:d7:9d:96:45:
4a:bd:dd:44:5e:fe:d7:12:eb:e4:49:bc:14:fe:d1:
2d:66:03:28:ee:ee:4e:df:da:89:b5:87:6c:d4:e6:
f7:c1:83:21:b5:62:bc:62:1f:a8:77:ea:5d:a0:37:
31:e7:e7:57:8a:50:ea:a8:b8:48:47:38:48:e8:8a:
2d:e2:c5:39:04:af:0f:00:d3:f3:4c:18:33:94:dc:
33:c0:9c:f4:4f:00:ce:52:35:fc:41:c4:7c:80:c6:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:4F:77:93:13:D5:F6:49:CE:CA:7A:C2:42:EF:62:78:F5:E0:7E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.138.99.0/24
150.138.112.0/21
150.138.126.0/23
150.138.135.0/24
150.139.128.0/19
150.139.192.0/19
182.40.32.0/20
182.40.96.0/20
182.40.160.0/21
182.40.192.0/19
182.40.240.0/20
IPv6:
240e:e:b800::/37
240e:108:4e::/48
240e:108:86::/48
240e:108:1100::/47
240e:244:200::/39
240e:945::/36
240e:945:4400::/40
240e:980:4e00::/40
240e:980:8600::/40
240e:982::/38
240e:983:1000::/48
Signature Algorithm: sha256WithRSAEncryption
83:76:32:22:e7:36:b8:6b:95:0d:05:02:1e:f1:4c:74:0d:c3:
9b:99:0f:c1:82:90:b1:4b:7c:0a:85:30:99:e9:27:9c:dc:2d:
c4:cf:c0:4b:a1:d7:fb:0a:41:ed:c7:eb:df:bd:d8:f5:bb:0b:
e1:c2:0c:17:f0:b6:ec:cd:56:e9:44:b5:5d:04:57:83:df:ee:
6b:56:ed:50:c2:36:61:85:b6:3c:58:7b:b4:15:93:dc:84:84:
07:82:33:34:c8:5b:00:7b:e2:bf:07:9c:78:dd:dc:76:c9:fc:
1a:4b:a8:bc:10:0b:17:84:d0:ec:7a:b6:31:bc:95:6a:4a:8d:
f4:26:68:93:76:70:f6:30:8c:94:c1:fd:da:05:38:75:4a:dc:
b5:18:5a:f1:40:df:80:5c:a4:57:e9:94:7b:62:53:53:e5:4b:
5e:1e:85:8d:d7:0e:30:4f:8a:71:fc:31:05:03:44:82:8d:68:
80:22:68:47:a5:1f:22:e5:36:26:d4:f7:1d:ff:9e:65:de:45:
9c:67:0f:aa:11:8a:f0:34:33:f7:26:8b:d2:c1:0d:20:f5:77:
29:4e:5e:42:db:1f:2c:a7:cc:27:12:0c:5c:f4:02:2a:a6:61:
44:c7:93:46:41:a4:bd:09:5a:5d:3b:56:9e:fd:6a:1f:f4:16:
38:9d:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:05:08 2026 by rpki-client