Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136199.roa
File: AS136199.roa (raw, json)
Hash identifier: pI10urgmYk2iuI8C0mnkZdgTOyleXW7JPh8cNVdVITM=
Subject key identifier: 83:45:80:21:1A:AB:55:91:3F:6B:84:D9:33:0C:5F:C3:45:10:D7:94
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1070ADFDC33E5638C5928F8DDC9762BD8EF12BAD
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136199.roa
Signing time: Tue 02 Jun 2026 16:24:36 +0000
ROA not before: Tue 02 Jun 2026 16:19:36 +0000
ROA not after: Tue 01 Jun 2027 16:24:36 +0000
asID: 136199
IP address blocks: 14.21.80.0/22 maxlen: 22
14.21.104.0/24 maxlen: 24
14.117.0.0/18 maxlen: 18
14.117.64.0/18 maxlen: 18
14.117.128.0/18 maxlen: 18
14.117.192.0/18 maxlen: 18
14.118.136.0/21 maxlen: 21
14.120.160.0/19 maxlen: 19
14.121.10.0/24 maxlen: 24
14.148.32.0/20 maxlen: 20
14.217.0.0/17 maxlen: 17
59.36.240.0/20 maxlen: 20
59.36.242.0/23 maxlen: 23
59.37.24.0/23 maxlen: 23
59.37.160.0/21 maxlen: 21
59.37.168.0/22 maxlen: 22
61.143.0.0/20 maxlen: 20
61.143.16.0/21 maxlen: 21
61.143.24.0/23 maxlen: 23
61.145.0.0/19 maxlen: 19
61.145.32.0/20 maxlen: 20
61.145.48.0/23 maxlen: 23
113.64.208.0/22 maxlen: 22
113.93.0.0/16 maxlen: 16
113.101.128.0/19 maxlen: 19
113.103.232.0/21 maxlen: 21
113.103.240.0/20 maxlen: 20
113.107.128.0/20 maxlen: 20
116.19.20.0/23 maxlen: 23
116.19.136.0/24 maxlen: 24
116.27.96.0/19 maxlen: 19
116.27.128.0/17 maxlen: 17
119.133.0.0/16 maxlen: 16
119.140.144.0/20 maxlen: 20
119.146.100.0/23 maxlen: 23
119.146.172.0/22 maxlen: 22
121.12.93.0/24 maxlen: 24
121.12.94.0/24 maxlen: 24
121.12.100.0/22 maxlen: 22
125.88.2.0/23 maxlen: 23
125.92.0.0/17 maxlen: 17
125.93.8.0/21 maxlen: 21
183.2.64.0/18 maxlen: 18
183.3.176.0/20 maxlen: 20
183.4.64.0/19 maxlen: 19
183.45.192.0/18 maxlen: 18
183.52.64.0/19 maxlen: 19
183.52.96.0/20 maxlen: 20
183.57.178.0/24 maxlen: 24
183.58.18.0/23 maxlen: 23
183.58.112.0/21 maxlen: 21
183.58.124.0/22 maxlen: 22
183.59.64.0/22 maxlen: 22
183.59.244.0/22 maxlen: 22
202.96.138.0/23 maxlen: 23
202.103.170.0/24 maxlen: 24
202.104.200.0/21 maxlen: 21
202.105.168.0/22 maxlen: 22
218.14.128.0/18 maxlen: 18
219.130.128.0/19 maxlen: 19
219.130.160.0/20 maxlen: 20
240e:108:404d::/48 maxlen: 48
240e:108:484d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:70:ad:fd:c3:3e:56:38:c5:92:8f:8d:dc:97:62:bd:8e:f1:2b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 16:19:36 2026 GMT
Not After : Jun 1 16:24:36 2027 GMT
Subject: CN=834580211AAB55913F6B84D9330C5FC34510D794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:14:eb:b3:28:24:83:2f:b0:68:dc:78:e1:
43:fb:af:05:22:78:bc:51:e6:44:5d:81:d4:1b:9d:
ae:c2:c9:30:30:60:06:95:52:0e:f5:b3:1d:9a:51:
5e:70:06:23:ce:4a:2a:d4:0c:98:65:8a:b7:d9:2e:
c4:09:f0:48:73:ab:55:c5:8f:2a:a7:07:57:5c:f9:
af:82:25:4c:de:38:95:77:4f:db:66:73:18:e9:56:
49:7c:44:b4:d3:85:f7:8e:2b:ce:6a:e5:e5:3f:ec:
4c:54:a0:bb:8f:e5:05:4a:d5:ce:ae:9f:18:46:29:
9e:6f:82:50:e5:8c:c5:98:e5:9e:cb:ab:e8:84:6c:
a3:69:6f:bd:45:18:c0:dc:db:d4:9b:8c:a5:34:5c:
e7:c3:2d:41:22:c4:ea:bc:a1:3a:73:a5:80:06:7e:
08:fa:b3:bf:3a:eb:cc:bb:17:01:69:5d:63:df:bb:
9d:04:29:84:42:86:ac:b8:7e:bd:2c:33:20:7d:42:
d0:56:ac:b6:92:6b:8d:cd:2d:33:a0:13:cc:a7:ad:
0e:50:16:96:eb:5a:90:1d:a6:1a:f4:9b:c3:fa:dd:
50:3c:4f:26:b9:e6:13:d4:c7:76:f3:8b:59:3a:c4:
36:ff:82:2a:d2:9c:0e:a4:5b:09:a4:86:a6:e2:12:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:80:21:1A:AB:55:91:3F:6B:84:D9:33:0C:5F:C3:45:10:D7:94
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.80.0/22
14.21.104.0/24
14.117.0.0/16
14.118.136.0/21
14.120.160.0/19
14.121.10.0/24
14.148.32.0/20
14.217.0.0/17
59.36.240.0/20
59.37.24.0/23
59.37.160.0-59.37.171.255
61.143.0.0-61.143.25.255
61.145.0.0-61.145.49.255
113.64.208.0/22
113.93.0.0/16
113.101.128.0/19
113.103.232.0-113.103.255.255
113.107.128.0/20
116.19.20.0/23
116.19.136.0/24
116.27.96.0-116.27.255.255
119.133.0.0/16
119.140.144.0/20
119.146.100.0/23
119.146.172.0/22
121.12.93.0-121.12.94.255
121.12.100.0/22
125.88.2.0/23
125.92.0.0/17
125.93.8.0/21
183.2.64.0/18
183.3.176.0/20
183.4.64.0/19
183.45.192.0/18
183.52.64.0-183.52.111.255
183.57.178.0/24
183.58.18.0/23
183.58.112.0/21
183.58.124.0/22
183.59.64.0/22
183.59.244.0/22
202.96.138.0/23
202.103.170.0/24
202.104.200.0/21
202.105.168.0/22
218.14.128.0/18
219.130.128.0-219.130.175.255
IPv6:
240e:108:404d::/48
240e:108:484d::/48
Signature Algorithm: sha256WithRSAEncryption
34:68:75:cb:67:e6:73:01:e7:19:ba:3e:c0:22:e8:0f:80:08:
65:01:94:e3:78:d7:51:56:2f:29:f4:ed:9b:b6:e6:aa:2b:2f:
31:88:ab:c6:c3:f0:55:65:ec:6d:2f:c7:64:9f:fa:48:a7:a3:
c7:1a:b5:28:fb:09:dc:70:59:1c:f3:61:db:5e:8b:4b:34:63:
dc:6b:a9:21:93:43:f5:c1:94:96:d9:fa:02:32:5f:0b:9a:61:
c8:fc:d8:07:0d:9e:65:d3:48:01:e5:3f:d0:a5:04:1b:f9:c9:
04:8a:ce:58:e4:7d:fe:ac:26:cf:a5:f3:a3:6b:6d:f1:c3:36:
c7:38:37:10:49:22:cc:45:3e:c0:d6:1d:b0:37:2e:15:83:5f:
2c:3f:0a:91:35:65:83:67:27:ab:46:ae:62:72:cc:00:06:39:
15:f5:1d:e2:be:0c:c6:aa:95:f1:52:0d:15:63:87:57:42:93:
98:5f:fd:4c:ae:28:96:74:45:7a:0e:76:b4:9e:e7:83:26:5a:
73:09:4c:32:60:e8:e2:d4:e5:3a:4d:1b:40:cc:d9:c6:11:f6:
90:e4:d0:98:ad:87:df:1d:4d:3c:93:4f:f2:4d:74:46:b9:f0:
b7:5c:cf:f2:c6:68:b5:74:a7:a5:d2:f9:2f:1b:9c:34:e1:25:
9a:70:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:42 2026 by rpki-client