Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137688.roa
File: AS137688.roa (raw, json)
Hash identifier: pwB8kP3+/f6AvVRtTTkR4q/5AjlDjh2YTobu33mtBk8=
Subject key identifier: 1D:9E:2F:62:9A:7A:EF:07:2E:55:29:F9:E5:22:2F:F2:66:40:0D:06
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 70F69F6558222F5B609EAF8A766E144F21D70CE0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137688.roa
Signing time: Thu 04 Jun 2026 16:15:31 +0000
ROA not before: Thu 04 Jun 2026 16:10:31 +0000
ROA not after: Thu 03 Jun 2027 16:15:31 +0000
asID: 137688
IP address blocks: 240e:1:a000::/37 maxlen: 37
240e:86:3000::/37 maxlen: 37
240e:30c:4a00::/39 maxlen: 39
240e:30c:4c00::/38 maxlen: 38
240e:30c:5000::/38 maxlen: 38
240e:30c:5400::/39 maxlen: 39
240e:30d:4a00::/39 maxlen: 39
240e:30d:4c00::/38 maxlen: 38
240e:30d:5000::/38 maxlen: 38
240e:30d:5400::/39 maxlen: 39
240e:30e:4a00::/39 maxlen: 39
240e:30e:4c00::/38 maxlen: 38
240e:30e:5000::/38 maxlen: 38
240e:30e:5400::/39 maxlen: 39
240e:30f:4a00::/39 maxlen: 39
240e:30f:4c00::/38 maxlen: 38
240e:30f:5000::/38 maxlen: 38
240e:30f:5400::/39 maxlen: 39
240e:60c:6000::/36 maxlen: 36
240e:60c:b000::/37 maxlen: 37
240e:60c:d800::/38 maxlen: 38
240e:60c:f800::/38 maxlen: 38
240e:90d:a000::/36 maxlen: 36
240e:90d:d000::/37 maxlen: 37
240e:90d:f000::/37 maxlen: 37
240e:90e:2000::/36 maxlen: 36
240e:981:240d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f6:9f:65:58:22:2f:5b:60:9e:af:8a:76:6e:14:4f:21:d7:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:10:31 2026 GMT
Not After : Jun 3 16:15:31 2027 GMT
Subject: CN=1D9E2F629A7AEF072E5529F9E5222FF266400D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:19:e0:be:a4:db:d3:8b:29:ad:68:66:8c:
e4:f5:18:db:23:70:b4:63:5e:bf:28:74:83:28:92:
76:c9:f8:2e:43:8b:92:6b:43:3b:d0:bb:6e:51:66:
54:ff:bc:9e:3d:f3:38:2f:72:d1:51:56:6d:b8:c1:
39:a3:13:29:82:77:07:a4:0f:32:85:19:9f:7d:28:
62:fe:47:e1:c0:b2:c3:b4:f3:0c:5a:94:2a:52:1c:
1d:92:3a:4b:91:af:80:77:e2:c7:63:c8:5d:e1:62:
db:9e:04:95:f2:b8:85:0c:1e:e2:23:5b:79:ed:f9:
79:03:52:54:fa:2a:55:7d:06:48:56:ba:2b:aa:dc:
21:8a:2d:e1:df:f1:25:94:65:22:1c:3f:2b:ae:80:
c3:5a:54:f1:02:84:cb:75:41:e2:10:3f:d9:ce:ee:
fb:82:5b:b5:42:52:a4:80:b4:7c:32:92:9a:3b:52:
ce:19:fe:c0:f7:5e:e4:fa:3b:8e:03:f0:b4:72:f9:
d2:62:6d:de:33:f0:1f:5e:e5:e5:07:a8:0f:97:c6:
36:07:37:27:b6:e5:ec:84:49:0f:3b:55:2d:08:e1:
72:b5:cf:0c:1a:2e:c0:ac:01:1c:9e:a3:b6:56:89:
d7:a2:6b:88:25:4d:c2:ca:b2:1b:e6:e4:02:43:84:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9E:2F:62:9A:7A:EF:07:2E:55:29:F9:E5:22:2F:F2:66:40:0D:06
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137688.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:1:a000::/37
240e:86:3000::/37
240e:30c:4a00::-240e:30c:55ff:ffff:ffff:ffff:ffff:ffff
240e:30d:4a00::-240e:30d:55ff:ffff:ffff:ffff:ffff:ffff
240e:30e:4a00::-240e:30e:55ff:ffff:ffff:ffff:ffff:ffff
240e:30f:4a00::-240e:30f:55ff:ffff:ffff:ffff:ffff:ffff
240e:60c:6000::/36
240e:60c:b000::/37
240e:60c:d800::/38
240e:60c:f800::/38
240e:90d:a000::/36
240e:90d:d000::/37
240e:90d:f000::/37
240e:90e:2000::/36
240e:981:240d::/48
Signature Algorithm: sha256WithRSAEncryption
80:6e:b4:02:32:59:69:ab:6e:41:6e:c4:79:8b:75:d7:e4:0f:
ca:b4:c4:cd:84:e4:a2:31:71:23:c2:0e:19:2d:2c:91:2e:c4:
80:cd:c3:03:97:4f:38:11:d5:0f:61:30:46:fe:8e:e6:c0:9d:
21:7a:96:5c:3a:48:00:7f:3e:a5:63:6c:67:08:4b:50:f6:53:
6e:b3:98:0d:bd:2a:38:af:07:99:69:dc:4c:76:c0:ac:6c:05:
10:79:28:9d:a6:14:8b:f8:c2:f9:f0:d5:71:52:33:1c:64:6e:
d4:09:c1:ef:3b:65:c2:a6:fc:5c:47:6c:fe:dd:26:47:83:8a:
d0:bb:70:2f:a8:f4:e9:18:eb:7a:46:5a:5f:fb:6d:70:46:25:
a7:56:4b:32:e0:1f:b1:3a:12:e5:49:10:b9:ca:5a:64:c1:3e:
6c:9e:5a:39:3c:c1:75:16:9b:69:73:b2:e3:d1:cb:79:46:59:
92:01:bd:b5:f4:60:10:92:ec:58:64:59:20:7c:fe:ee:f7:96:
56:43:90:7a:d0:70:5d:61:24:0f:bb:53:a5:f5:18:a9:c9:a2:
07:2a:c7:76:c7:89:86:45:01:49:08:c7:c8:66:f4:8f:ed:15:
84:78:3a:e4:ad:60:e1:9e:67:b6:c6:15:ba:3e:8e:33:15:31:
dd:a2:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:28 2026 by rpki-client