Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa
File: AS137687.roa (raw, json)
Hash identifier: HeEn+GWNHQ13s6OTFwEpf+1OmmnZNp+4F/5eYk46tSI=
Subject key identifier: A1:2D:75:4C:80:17:00:65:4E:BC:2D:E4:D8:1B:F5:F9:A8:8C:95:2D
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3CEBB98555F80DF3AB7459C7A05F7ADE831CD851
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa
Signing time: Tue 26 May 2026 16:30:32 +0000
ROA not before: Tue 26 May 2026 16:25:32 +0000
ROA not after: Tue 25 May 2027 16:30:32 +0000
asID: 137687
IP address blocks: 1.192.136.0/23 maxlen: 23
1.192.188.0/22 maxlen: 22
1.192.192.0/22 maxlen: 22
1.192.200.0/22 maxlen: 22
1.194.224.0/20 maxlen: 20
36.99.32.0/20 maxlen: 20
36.99.48.0/22 maxlen: 22
36.99.50.0/23 maxlen: 23
36.99.60.0/23 maxlen: 23
36.99.64.0/21 maxlen: 21
36.99.72.0/22 maxlen: 22
36.99.80.0/21 maxlen: 21
36.99.96.0/22 maxlen: 22
36.99.97.0/24 maxlen: 24
36.99.98.0/23 maxlen: 23
36.99.116.0/22 maxlen: 22
36.99.116.0/24 maxlen: 24
36.99.120.0/22 maxlen: 22
36.99.136.0/21 maxlen: 21
36.99.152.0/23 maxlen: 23
36.99.160.0/20 maxlen: 20
36.99.176.0/21 maxlen: 21
36.99.184.0/21 maxlen: 21
36.99.192.0/20 maxlen: 20
36.99.192.0/23 maxlen: 23
36.99.194.0/23 maxlen: 23
36.99.194.0/24 maxlen: 24
36.99.197.0/24 maxlen: 24
36.99.200.0/23 maxlen: 23
36.99.203.0/24 maxlen: 24
36.99.224.0/21 maxlen: 21
36.99.225.0/24 maxlen: 24
36.99.227.0/24 maxlen: 24
36.99.248.0/21 maxlen: 21
36.99.248.0/23 maxlen: 23
36.99.248.0/24 maxlen: 24
36.99.249.0/24 maxlen: 24
36.99.250.0/24 maxlen: 24
36.99.251.0/24 maxlen: 24
36.99.252.0/24 maxlen: 24
106.42.28.0/22 maxlen: 22
106.42.192.0/21 maxlen: 21
106.42.212.0/22 maxlen: 22
106.42.232.0/22 maxlen: 22
106.42.244.0/22 maxlen: 22
123.52.0.0/21 maxlen: 21
123.52.60.0/22 maxlen: 22
123.52.64.0/22 maxlen: 22
123.53.44.0/22 maxlen: 22
123.53.52.0/22 maxlen: 22
123.53.56.0/22 maxlen: 22
123.160.220.0/22 maxlen: 22
123.161.56.0/21 maxlen: 21
123.161.60.0/24 maxlen: 24
123.161.61.0/24 maxlen: 24
123.161.63.0/24 maxlen: 24
171.8.167.0/24 maxlen: 24
171.15.32.0/21 maxlen: 21
171.15.96.0/21 maxlen: 21
171.15.108.0/22 maxlen: 22
171.15.112.0/22 maxlen: 22
171.15.128.0/22 maxlen: 22
171.15.136.0/22 maxlen: 22
240e:b:f000::/37 maxlen: 37
240e:4b:4000::/37 maxlen: 37
240e:4b:4000::/48 maxlen: 48
240e:108:4d::/48 maxlen: 48
240e:108:8f::/48 maxlen: 48
240e:108:10e0::/48 maxlen: 48
240e:108:4203::/48 maxlen: 48
240e:108:4a03::/48 maxlen: 48
240e:93c::/36 maxlen: 36
240e:93c::/40 maxlen: 40
240e:93c:f::/48 maxlen: 48
240e:93c:100::/40 maxlen: 40
240e:93c:10b::/48 maxlen: 48
240e:93c:200::/40 maxlen: 40
240e:93c:201::/48 maxlen: 48
240e:980:4d00::/40 maxlen: 40
240e:980:8f00::/40 maxlen: 40
240e:980:8f00::/41 maxlen: 41
240e:980:8f80::/41 maxlen: 41
240e:981:e000::/40 maxlen: 40
240e:981:e100::/40 maxlen: 40
240e:981:e200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:eb:b9:85:55:f8:0d:f3:ab:74:59:c7:a0:5f:7a:de:83:1c:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 16:25:32 2026 GMT
Not After : May 25 16:30:32 2027 GMT
Subject: CN=A12D754C801700654EBC2DE4D81BF5F9A88C952D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:e6:0d:a6:6b:f4:01:7c:56:b5:fc:78:78:
47:b7:b3:c7:66:06:c7:61:ba:63:19:44:7b:35:cb:
c6:97:22:00:4d:76:b2:85:59:a7:46:a3:be:4b:38:
73:01:17:0a:2b:1b:bd:a1:bc:bf:47:f9:25:1c:b8:
de:e6:37:7b:d0:09:40:30:7b:24:89:df:98:9e:bb:
23:5d:ea:6c:4b:25:d9:70:cc:1a:8c:cb:4e:9e:3e:
0f:d1:43:2f:5a:6e:3d:7b:50:1d:4e:d7:56:44:3a:
eb:69:9b:ab:f0:43:db:86:fe:96:51:8b:d3:71:55:
59:03:0c:a7:b6:8f:40:1b:14:51:c5:80:1d:ed:5f:
fc:0d:7a:1d:3a:8e:ff:da:ea:bf:40:f2:ad:88:a0:
35:10:a7:c9:17:de:23:e3:94:d1:27:71:4c:04:48:
5e:a8:32:a3:ce:8a:c5:9e:b3:f0:f9:d5:f7:c9:75:
54:2a:08:db:f4:00:2f:07:79:a7:f4:e6:89:45:03:
82:7a:36:5b:3c:08:84:d5:3d:4c:aa:eb:e4:9b:59:
24:6e:75:51:4e:c0:66:c6:b2:d5:01:6c:96:f0:65:
93:c2:b7:55:3f:b9:0e:6b:e0:c6:ae:08:a4:be:a2:
d4:0c:db:e6:ed:7b:90:03:00:75:b1:17:c8:31:50:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:75:4C:80:17:00:65:4E:BC:2D:E4:D8:1B:F5:F9:A8:8C:95:2D
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.192.136.0/23
1.192.188.0-1.192.195.255
1.192.200.0/22
1.194.224.0/20
36.99.32.0-36.99.51.255
36.99.60.0/23
36.99.64.0-36.99.75.255
36.99.80.0/21
36.99.96.0/22
36.99.116.0-36.99.123.255
36.99.136.0/21
36.99.152.0/23
36.99.160.0-36.99.207.255
36.99.224.0/21
36.99.248.0/21
106.42.28.0/22
106.42.192.0/21
106.42.212.0/22
106.42.232.0/22
106.42.244.0/22
123.52.0.0/21
123.52.60.0-123.52.67.255
123.53.44.0/22
123.53.52.0-123.53.59.255
123.160.220.0/22
123.161.56.0/21
171.8.167.0/24
171.15.32.0/21
171.15.96.0/21
171.15.108.0-171.15.115.255
171.15.128.0/22
171.15.136.0/22
IPv6:
240e:b:f000::/37
240e:4b:4000::/37
240e:108:4d::/48
240e:108:8f::/48
240e:108:10e0::/48
240e:108:4203::/48
240e:108:4a03::/48
240e:93c::/36
240e:980:4d00::/40
240e:980:8f00::/40
240e:981:e000::-240e:981:e2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:1f:e8:7e:b3:74:b2:76:44:37:ad:93:8c:22:1e:d0:70:df:
11:63:b8:7d:62:58:36:ea:41:63:b7:b1:5b:7b:6c:c7:e0:dc:
99:27:a6:c9:b0:60:7c:5f:7f:60:e9:82:d8:7e:82:7c:f5:46:
a9:06:87:be:5f:26:4f:e5:f0:c7:37:8c:59:26:8e:ff:2b:8d:
87:73:da:9a:c2:37:b1:06:5c:b9:5e:7f:e3:09:42:1e:ea:36:
91:fa:d6:42:90:82:f8:1f:7a:a9:6a:03:69:22:54:7b:b0:b3:
e9:48:62:d1:d0:00:f8:3f:df:c0:2c:dc:89:e3:a0:9b:2c:6f:
66:8b:05:e1:ce:ca:a0:66:7d:1b:05:16:46:8e:10:b2:1f:86:
95:3b:65:e0:71:74:30:11:c4:18:b6:ef:82:5b:6b:e6:4f:1f:
56:5d:c2:b9:49:6f:b7:1e:be:8a:67:cd:88:a1:49:f0:f9:4f:
a2:a6:ea:36:d2:33:54:99:24:fd:25:17:09:69:90:65:76:b4:
44:57:63:36:d0:05:e0:5c:c4:84:a7:bc:2e:42:09:a4:8e:d8:
de:68:a1:bf:69:cf:e7:b6:4d:a1:01:6e:b6:cc:5f:51:3a:d5:
e3:0f:de:19:74:e8:27:bc:36:a1:f2:9b:c1:28:71:83:98:fa:
ad:66:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:38 2026 by rpki-client