Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137691.roa
File: AS137691.roa (raw, json)
Hash identifier: XnMTtRJyyReqj8ymPrTsR7hv3Q4ulnamFLTTAiIbhEw=
Subject key identifier: AC:16:8E:73:A9:7A:90:42:EC:9E:DA:2B:FB:4B:85:75:F9:CE:00:38
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7D33F08B2B3EB9AC162F70626B8D318A03ED3BDE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137691.roa
Signing time: Fri 29 May 2026 16:21:45 +0000
ROA not before: Fri 29 May 2026 16:16:45 +0000
ROA not after: Fri 28 May 2027 16:21:45 +0000
asID: 137691
IP address blocks: 42.100.0.0/18 maxlen: 18
42.101.208.0/20 maxlen: 20
42.103.32.0/19 maxlen: 19
42.184.0.0/18 maxlen: 18
42.185.0.0/18 maxlen: 18
42.185.64.0/20 maxlen: 20
42.185.112.0/20 maxlen: 20
42.185.144.0/20 maxlen: 20
112.99.112.0/20 maxlen: 20
112.99.116.0/24 maxlen: 24
112.99.240.0/20 maxlen: 20
112.100.4.0/22 maxlen: 22
112.100.102.0/24 maxlen: 24
112.100.103.0/24 maxlen: 24
112.100.116.0/24 maxlen: 24
112.102.0.0/16 maxlen: 16
112.103.0.0/16 maxlen: 16
123.165.0.0/16 maxlen: 16
123.166.0.0/16 maxlen: 16
123.166.123.0/24 maxlen: 24
123.166.124.0/24 maxlen: 24
123.167.128.0/21 maxlen: 21
123.167.136.0/21 maxlen: 21
123.167.188.0/24 maxlen: 24
219.147.160.0/19 maxlen: 19
222.171.0.0/19 maxlen: 19
222.171.32.0/19 maxlen: 19
222.171.64.0/19 maxlen: 19
222.171.96.0/19 maxlen: 19
222.171.128.0/19 maxlen: 19
222.171.160.0/19 maxlen: 19
222.171.192.0/20 maxlen: 20
222.171.208.0/20 maxlen: 20
222.171.224.0/20 maxlen: 20
222.171.240.0/20 maxlen: 20
222.171.248.0/24 maxlen: 24
240e:1:800::/37 maxlen: 37
240e:85:8000::/37 maxlen: 37
240e:85:8010::/48 maxlen: 48
240e:108:4061::/48 maxlen: 48
240e:108:4861::/48 maxlen: 48
240e:308::/36 maxlen: 36
240e:308:1000::/39 maxlen: 39
240e:309::/36 maxlen: 36
240e:309:1000::/39 maxlen: 39
240e:30a::/36 maxlen: 36
240e:30a:1000::/39 maxlen: 39
240e:30b::/36 maxlen: 36
240e:30b:1000::/39 maxlen: 39
240e:608::/36 maxlen: 36
240e:608:d04::/48 maxlen: 48
240e:608:d05::/48 maxlen: 48
240e:608:d07::/48 maxlen: 48
240e:608:1000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:33:f0:8b:2b:3e:b9:ac:16:2f:70:62:6b:8d:31:8a:03:ed:3b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 29 16:16:45 2026 GMT
Not After : May 28 16:21:45 2027 GMT
Subject: CN=AC168E73A97A9042EC9EDA2BFB4B8575F9CE0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:1c:31:4e:13:cc:84:27:98:94:3d:df:83:
d7:ce:a8:99:12:75:f8:a1:d1:7f:25:78:51:7c:a6:
36:d2:3d:c9:8a:7c:9b:93:e2:32:5f:4c:26:58:db:
90:52:bd:48:8e:86:db:18:e9:b1:b0:b8:b8:02:e5:
a1:06:4a:35:df:8b:3b:0e:97:18:ac:63:48:b2:9c:
81:c4:dd:bb:b2:b6:47:09:c5:e8:4b:80:d5:f5:1b:
01:a1:eb:c4:d5:fd:2a:90:e5:2b:37:6c:01:7e:66:
f4:b2:37:92:bd:2b:63:dc:18:3c:01:a9:bb:c1:16:
72:7f:4e:04:22:7c:5f:6a:36:3d:69:3c:45:06:9b:
ba:e9:08:27:c9:54:c0:72:4f:70:3c:89:4c:82:a5:
08:d1:e5:78:46:00:7e:62:2a:8b:56:71:d9:67:f3:
63:28:0f:89:ca:5b:75:46:c8:95:7e:50:c6:54:09:
c9:4d:a3:61:99:ba:9b:62:c0:5e:f2:d9:99:a5:12:
ee:68:97:4b:f7:f8:aa:e6:44:21:b8:f0:d0:95:66:
d9:15:f4:27:f6:d8:76:9c:98:47:f8:6c:f6:1d:62:
98:4a:15:00:a7:11:ac:6e:e1:8a:0c:8e:c3:6b:b8:
6a:05:aa:ff:dc:ee:7f:7b:71:5d:46:03:f1:5b:4c:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:8E:73:A9:7A:90:42:EC:9E:DA:2B:FB:4B:85:75:F9:CE:00:38
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.100.0.0/18
42.101.208.0/20
42.103.32.0/19
42.184.0.0/18
42.185.0.0-42.185.79.255
42.185.112.0/20
42.185.144.0/20
112.99.112.0/20
112.99.240.0/20
112.100.4.0/22
112.100.102.0/23
112.100.116.0/24
112.102.0.0/15
123.165.0.0-123.166.255.255
123.167.128.0/20
123.167.188.0/24
219.147.160.0/19
222.171.0.0/16
IPv6:
240e:1:800::/37
240e:85:8000::/37
240e:108:4061::/48
240e:108:4861::/48
240e:308::-240e:308:11ff:ffff:ffff:ffff:ffff:ffff
240e:309::-240e:309:11ff:ffff:ffff:ffff:ffff:ffff
240e:30a::-240e:30a:11ff:ffff:ffff:ffff:ffff:ffff
240e:30b::-240e:30b:11ff:ffff:ffff:ffff:ffff:ffff
240e:608::-240e:608:11ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:47:6f:4c:2c:a5:84:39:11:68:df:39:bc:36:1d:39:d3:66:
0d:56:37:bc:ee:a2:0b:d2:c7:05:e8:22:e2:28:b3:73:fd:61:
eb:a3:0c:38:b8:67:ae:4d:96:5c:67:25:73:07:00:02:f5:ca:
05:26:c7:2d:be:f1:af:04:3c:b1:90:c8:0e:db:fb:30:f5:06:
6a:67:5d:fd:22:5e:58:0b:77:2a:63:ef:9d:99:99:77:98:a4:
ad:06:31:b1:1d:da:31:64:e6:88:3c:69:22:d3:99:3d:ce:e0:
76:62:3d:2d:a8:06:05:1a:a0:ed:aa:44:12:df:ba:d0:f3:6a:
cd:2b:85:cc:8d:67:4d:17:47:22:e4:a7:a7:b3:a7:95:b5:02:
54:e8:4b:ac:39:36:9e:e6:26:87:74:a8:8d:50:65:e4:d3:69:
86:b8:60:80:75:82:cd:22:f2:be:e7:d6:27:24:9e:3c:01:ef:
77:b4:e1:09:00:ef:50:48:c3:0c:60:94:15:70:12:1e:98:21:
76:c0:a8:3a:91:99:cb:fe:9a:5f:04:cd:5b:96:c9:da:75:19:
24:c0:82:74:cd:c7:e3:2d:53:a9:57:c4:18:3e:a8:8e:5c:df:
4b:52:20:fd:01:4a:00:66:af:8b:b4:e3:c1:06:f5:40:85:d9:
30:38:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:27 2026 by rpki-client