Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137694.roa
File: AS137694.roa (raw, json)
Hash identifier: gg32Fm2EbrdvoVVdupkW8FDaB2Lpv+/pelrefisIhJI=
Subject key identifier: D4:68:D7:B3:28:B5:98:46:B4:BB:48:EF:D4:DC:01:0C:3F:15:97:30
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0A4456ABD4288127CD3A633DDD344E85745C46AD
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137694.roa
Signing time: Thu 11 Jun 2026 16:09:26 +0000
ROA not before: Thu 11 Jun 2026 16:04:26 +0000
ROA not after: Thu 10 Jun 2027 16:09:26 +0000
asID: 137694
IP address blocks: 36.96.6.0/24 maxlen: 24
36.96.7.0/24 maxlen: 24
36.96.36.0/23 maxlen: 23
36.96.216.0/22 maxlen: 22
36.96.220.0/22 maxlen: 22
36.105.64.0/23 maxlen: 23
36.105.66.0/24 maxlen: 24
36.105.68.0/22 maxlen: 22
36.105.72.0/23 maxlen: 23
36.105.78.0/24 maxlen: 24
36.105.88.0/23 maxlen: 23
36.105.90.0/23 maxlen: 23
36.105.100.0/22 maxlen: 22
36.105.128.0/22 maxlen: 22
36.105.136.0/22 maxlen: 22
36.105.140.0/22 maxlen: 22
36.105.170.0/23 maxlen: 23
36.105.176.0/21 maxlen: 21
36.105.184.0/22 maxlen: 22
36.105.188.0/22 maxlen: 22
36.105.224.0/21 maxlen: 21
36.105.244.0/23 maxlen: 23
36.105.246.0/23 maxlen: 23
36.107.12.0/22 maxlen: 22
36.107.24.0/24 maxlen: 24
36.107.25.0/24 maxlen: 24
36.107.40.0/23 maxlen: 23
36.107.42.0/23 maxlen: 23
36.107.92.0/23 maxlen: 23
36.107.94.0/23 maxlen: 23
36.108.182.0/23 maxlen: 23
36.109.14.0/23 maxlen: 23
36.109.96.0/21 maxlen: 21
36.109.112.0/22 maxlen: 22
36.109.116.0/22 maxlen: 22
36.109.120.0/22 maxlen: 22
36.109.240.0/22 maxlen: 22
49.112.120.0/22 maxlen: 22
49.112.124.0/22 maxlen: 22
49.112.160.0/22 maxlen: 22
49.112.232.0/24 maxlen: 24
49.112.240.0/21 maxlen: 21
49.112.254.0/24 maxlen: 24
49.112.255.0/24 maxlen: 24
49.114.80.0/21 maxlen: 21
49.114.96.0/20 maxlen: 20
49.114.112.0/23 maxlen: 23
49.114.114.0/23 maxlen: 23
49.114.116.0/22 maxlen: 22
49.114.128.0/22 maxlen: 22
49.114.134.0/23 maxlen: 23
49.114.180.0/22 maxlen: 22
49.114.192.0/21 maxlen: 21
49.115.144.0/21 maxlen: 21
49.115.232.0/21 maxlen: 21
49.115.252.0/22 maxlen: 22
49.116.64.0/21 maxlen: 21
49.117.4.0/22 maxlen: 22
49.117.16.0/20 maxlen: 20
49.119.32.0/22 maxlen: 22
49.119.36.0/22 maxlen: 22
49.119.208.0/23 maxlen: 23
49.119.210.0/23 maxlen: 23
61.128.16.0/22 maxlen: 22
61.128.20.0/22 maxlen: 22
61.128.64.0/22 maxlen: 22
61.128.68.0/22 maxlen: 22
61.128.80.0/21 maxlen: 21
61.128.88.0/23 maxlen: 23
61.128.90.0/23 maxlen: 23
61.128.115.0/24 maxlen: 24
106.124.40.0/24 maxlen: 24
106.124.41.0/24 maxlen: 24
106.124.42.0/24 maxlen: 24
106.124.43.0/24 maxlen: 24
106.124.160.0/21 maxlen: 21
106.124.252.0/24 maxlen: 24
106.124.253.0/24 maxlen: 24
110.154.144.0/21 maxlen: 21
110.156.84.0/23 maxlen: 23
110.156.86.0/23 maxlen: 23
110.157.28.0/22 maxlen: 22
110.157.44.0/23 maxlen: 23
110.157.46.0/23 maxlen: 23
120.68.36.0/23 maxlen: 23
120.68.192.0/21 maxlen: 21
120.70.144.0/22 maxlen: 22
120.71.68.0/22 maxlen: 22
120.71.128.0/23 maxlen: 23
120.71.130.0/23 maxlen: 23
124.118.112.0/21 maxlen: 21
202.107.130.0/24 maxlen: 24
202.107.131.0/24 maxlen: 24
202.107.138.0/24 maxlen: 24
202.107.139.0/24 maxlen: 24
202.107.140.0/23 maxlen: 23
202.107.142.0/23 maxlen: 23
218.31.116.0/23 maxlen: 23
218.31.118.0/24 maxlen: 24
218.31.148.0/24 maxlen: 24
218.31.230.0/24 maxlen: 24
218.31.248.0/24 maxlen: 24
218.84.52.0/23 maxlen: 23
218.84.240.0/23 maxlen: 23
222.80.48.0/20 maxlen: 20
240e:11:5000::/37 maxlen: 37
240e:348:5e00::/39 maxlen: 39
240e:348:6000::/38 maxlen: 38
240e:348:6400::/39 maxlen: 39
240e:349:5e00::/39 maxlen: 39
240e:349:6000::/38 maxlen: 38
240e:349:6400::/39 maxlen: 39
240e:34a:5e00::/39 maxlen: 39
240e:34a:6000::/38 maxlen: 38
240e:34a:6400::/39 maxlen: 39
240e:34b:5e00::/39 maxlen: 39
240e:34b:6000::/38 maxlen: 38
240e:34b:6400::/39 maxlen: 39
240e:648:6000::/36 maxlen: 36
240e:a48:5e00::/39 maxlen: 39
240e:a48:6000::/38 maxlen: 38
240e:a48:6400::/39 maxlen: 39
240e:a49:5e00::/39 maxlen: 39
240e:a49:6000::/38 maxlen: 38
240e:a49:6400::/39 maxlen: 39
240e:a4a:5e00::/39 maxlen: 39
240e:a4a:6000::/38 maxlen: 38
240e:a4a:6400::/39 maxlen: 39
240e:a4b:5e00::/39 maxlen: 39
240e:a4b:6000::/38 maxlen: 38
240e:a4b:6400::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:44:56:ab:d4:28:81:27:cd:3a:63:3d:dd:34:4e:85:74:5c:46:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:04:26 2026 GMT
Not After : Jun 10 16:09:26 2027 GMT
Subject: CN=D468D7B328B59846B4BB48EFD4DC010C3F159730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:65:9d:a3:e6:8f:3a:37:2d:9d:d7:03:49:
e6:3b:b9:47:16:42:32:60:cd:02:04:38:54:e6:e4:
56:4c:12:e1:ba:92:fa:14:d4:78:80:4e:67:72:54:
5a:12:0e:49:fb:30:d9:3d:77:d6:ef:63:24:5d:a0:
0a:9d:cd:c3:ae:57:c4:5b:c3:88:e5:3c:2b:0c:89:
f5:7e:33:46:8c:42:2f:7c:7e:63:68:25:d9:61:cd:
c3:15:5b:c0:87:e8:18:5f:b7:f7:eb:e8:ad:dd:cb:
c8:48:5b:8a:f2:4f:76:42:c6:6d:bf:85:5b:b9:3e:
c9:12:7a:a5:01:f4:04:4a:2c:9a:d6:2b:d6:f0:e7:
1e:58:77:75:f7:5a:68:29:ea:b6:26:fa:eb:82:66:
9a:8c:59:89:99:3b:5d:2b:fb:6f:2e:c8:b0:3b:d4:
af:7e:86:2f:0f:9e:c0:9a:82:71:d7:7a:8d:8b:f5:
e9:03:91:b4:39:89:ee:7c:73:80:2e:9b:d7:b7:6b:
bf:70:18:e9:82:d4:36:dc:65:25:f0:fa:96:5f:f7:
63:e4:31:b4:3d:a9:ae:33:97:d7:52:1a:82:23:85:
8c:7f:6f:cc:f2:23:1f:8a:e8:6d:93:7b:bc:ae:d9:
e2:0a:40:a3:93:d8:37:04:1b:2b:0a:ba:29:da:6b:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:D7:B3:28:B5:98:46:B4:BB:48:EF:D4:DC:01:0C:3F:15:97:30
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137694.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.96.6.0/23
36.96.36.0/23
36.96.216.0/21
36.105.64.0-36.105.66.255
36.105.68.0-36.105.73.255
36.105.78.0/24
36.105.88.0/22
36.105.100.0/22
36.105.128.0/22
36.105.136.0/21
36.105.170.0/23
36.105.176.0/20
36.105.224.0/21
36.105.244.0/22
36.107.12.0/22
36.107.24.0/23
36.107.40.0/22
36.107.92.0/22
36.108.182.0/23
36.109.14.0/23
36.109.96.0/21
36.109.112.0-36.109.123.255
36.109.240.0/22
49.112.120.0/21
49.112.160.0/22
49.112.232.0/24
49.112.240.0/21
49.112.254.0/23
49.114.80.0/21
49.114.96.0-49.114.119.255
49.114.128.0/22
49.114.134.0/23
49.114.180.0/22
49.114.192.0/21
49.115.144.0/21
49.115.232.0/21
49.115.252.0/22
49.116.64.0/21
49.117.4.0/22
49.117.16.0/20
49.119.32.0/21
49.119.208.0/22
61.128.16.0/21
61.128.64.0/21
61.128.80.0-61.128.91.255
61.128.115.0/24
106.124.40.0/22
106.124.160.0/21
106.124.252.0/23
110.154.144.0/21
110.156.84.0/22
110.157.28.0/22
110.157.44.0/22
120.68.36.0/23
120.68.192.0/21
120.70.144.0/22
120.71.68.0/22
120.71.128.0/22
124.118.112.0/21
202.107.130.0/23
202.107.138.0-202.107.143.255
218.31.116.0-218.31.118.255
218.31.148.0/24
218.31.230.0/24
218.31.248.0/24
218.84.52.0/23
218.84.240.0/23
222.80.48.0/20
IPv6:
240e:11:5000::/37
240e:348:5e00::-240e:348:65ff:ffff:ffff:ffff:ffff:ffff
240e:349:5e00::-240e:349:65ff:ffff:ffff:ffff:ffff:ffff
240e:34a:5e00::-240e:34a:65ff:ffff:ffff:ffff:ffff:ffff
240e:34b:5e00::-240e:34b:65ff:ffff:ffff:ffff:ffff:ffff
240e:648:6000::/36
240e:a48:5e00::-240e:a48:65ff:ffff:ffff:ffff:ffff:ffff
240e:a49:5e00::-240e:a49:65ff:ffff:ffff:ffff:ffff:ffff
240e:a4a:5e00::-240e:a4a:65ff:ffff:ffff:ffff:ffff:ffff
240e:a4b:5e00::-240e:a4b:65ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:78:9d:bc:05:f7:55:c2:8a:97:db:15:db:24:07:cb:e9:54:
f5:32:35:0c:9f:c2:b4:f8:d5:3d:f5:d6:93:fb:e8:1e:d3:b4:
d1:2f:0b:f0:5d:94:ca:02:7d:17:8c:10:9f:71:30:b6:39:b3:
39:5c:28:a2:e9:70:cd:2c:17:f1:af:af:26:cc:31:78:d6:e3:
a6:27:e2:f5:1a:2c:1d:7c:d1:49:5c:92:a8:97:b7:83:8d:89:
c6:5c:95:38:e0:2f:d2:1d:b1:12:81:bf:16:e1:1b:3d:21:6f:
51:d5:1e:11:87:b0:3f:dd:51:ca:56:9c:5a:42:30:b1:ce:83:
b4:57:4e:d7:85:1e:a2:69:d1:c9:38:2f:68:9c:f6:e8:00:c2:
e6:a2:f4:56:ca:af:a0:79:91:50:70:b4:78:7e:54:80:ea:2a:
f9:0c:9b:a9:0d:42:dc:62:e2:0f:5e:05:f4:88:74:87:4d:ef:
da:ed:d6:fb:fe:62:7d:b0:4b:68:d7:19:76:50:02:fc:20:27:
ea:79:8c:bd:3f:3f:8c:f8:0a:85:aa:99:5b:fb:95:72:51:46:
42:a6:46:ab:e5:2e:a7:c0:e7:4f:ce:e9:26:4f:b8:56:12:be:
ef:4c:bc:69:3f:cc:d0:13:4e:8c:57:26:0f:9b:25:85:1c:aa:
39:c7:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:31 2026 by rpki-client