Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137695.roa
File: AS137695.roa (raw, json)
Hash identifier: xIiPsxmcpPIGssTHlAXR9a/17fgmNe6ecfD3F34RxnU=
Subject key identifier: DC:A1:73:5D:51:4E:21:70:60:31:09:EF:72:AF:2D:7A:95:67:70:BD
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 45D33D5ECD9CF88DAF292ED1C5497FF774619243
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137695.roa
Signing time: Thu 11 Jun 2026 16:09:26 +0000
ROA not before: Thu 11 Jun 2026 16:04:26 +0000
ROA not after: Thu 10 Jun 2027 16:09:26 +0000
asID: 137695
IP address blocks: 36.105.160.0/21 maxlen: 21
36.105.160.0/23 maxlen: 23
36.105.163.0/24 maxlen: 24
36.105.164.0/22 maxlen: 22
36.105.208.0/21 maxlen: 21
36.107.120.0/21 maxlen: 21
36.107.224.0/21 maxlen: 21
36.108.164.0/23 maxlen: 23
36.108.168.0/22 maxlen: 22
36.108.172.0/23 maxlen: 23
36.108.174.0/23 maxlen: 23
49.116.88.0/22 maxlen: 22
61.128.76.0/23 maxlen: 23
61.128.100.0/23 maxlen: 23
61.128.108.0/22 maxlen: 22
61.128.112.0/24 maxlen: 24
61.128.116.0/24 maxlen: 24
61.128.120.0/22 maxlen: 22
61.138.233.0/24 maxlen: 24
106.123.128.0/20 maxlen: 20
106.124.126.0/23 maxlen: 23
106.124.128.0/20 maxlen: 20
106.124.144.0/23 maxlen: 23
106.124.146.0/24 maxlen: 24
110.156.170.0/24 maxlen: 24
110.156.176.0/20 maxlen: 20
110.157.240.0/21 maxlen: 21
110.157.248.0/22 maxlen: 22
120.69.16.0/24 maxlen: 24
120.70.96.0/21 maxlen: 21
120.70.226.0/23 maxlen: 23
120.71.0.0/18 maxlen: 18
120.71.0.0/21 maxlen: 21
120.71.8.0/21 maxlen: 21
120.71.16.0/21 maxlen: 21
120.71.24.0/21 maxlen: 21
120.71.32.0/21 maxlen: 21
120.71.40.0/22 maxlen: 22
120.71.44.0/23 maxlen: 23
120.71.59.0/24 maxlen: 24
120.71.60.0/23 maxlen: 23
120.71.62.0/24 maxlen: 24
120.71.63.0/24 maxlen: 24
120.71.144.0/20 maxlen: 20
120.71.144.0/22 maxlen: 22
120.71.148.0/23 maxlen: 23
120.71.156.0/22 maxlen: 22
120.71.176.0/21 maxlen: 21
120.71.180.0/23 maxlen: 23
120.71.182.0/23 maxlen: 23
202.100.160.0/24 maxlen: 24
202.100.166.0/24 maxlen: 24
202.100.177.0/24 maxlen: 24
202.100.178.0/23 maxlen: 23
202.100.181.0/24 maxlen: 24
202.100.182.0/23 maxlen: 23
202.100.184.0/22 maxlen: 22
202.100.188.0/24 maxlen: 24
218.31.227.0/24 maxlen: 24
218.84.244.0/24 maxlen: 24
222.80.218.0/24 maxlen: 24
222.81.120.0/21 maxlen: 21
222.81.123.0/24 maxlen: 24
222.83.0.0/22 maxlen: 22
240e:11:8800::/37 maxlen: 37
240e:51:5800::/37 maxlen: 37
240e:108:8b::/48 maxlen: 48
240e:108:1110::/48 maxlen: 48
240e:108:1111::/48 maxlen: 48
240e:948::/31 maxlen: 31
240e:980:8b00::/40 maxlen: 40
240e:982:1000::/40 maxlen: 40
240e:982:1100::/40 maxlen: 40
240e:982:120d::/48 maxlen: 48
240e:982:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d3:3d:5e:cd:9c:f8:8d:af:29:2e:d1:c5:49:7f:f7:74:61:92:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:04:26 2026 GMT
Not After : Jun 10 16:09:26 2027 GMT
Subject: CN=DCA1735D514E2170603109EF72AF2D7A956770BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:47:56:3b:01:3e:7e:93:5c:66:a0:c5:66:
d0:ff:50:24:f5:b7:85:23:73:dc:68:6a:98:08:03:
6d:59:35:0a:b7:02:4f:db:a1:6b:b5:58:b7:08:0b:
a2:0e:8e:5a:27:1b:f4:d7:10:02:98:44:07:f8:71:
3e:f6:15:1b:3f:5d:4d:a6:6e:fb:ad:d7:a6:c6:b6:
6e:0e:ff:fd:2d:75:46:50:8c:22:23:d7:18:49:cc:
18:40:3b:cf:27:59:f1:70:8b:93:4a:34:65:8a:e2:
67:af:a7:d9:d3:bf:8c:ad:7b:e6:92:a1:7d:cb:5c:
2b:87:bc:9a:3a:b4:af:65:22:f9:73:e1:60:dc:4f:
06:9c:ff:c2:1a:a1:5b:22:11:fb:d4:1f:c2:b6:4f:
6b:da:06:2b:dd:65:8b:3a:50:cc:6a:95:dd:fb:17:
24:2b:a1:ad:c7:e6:f2:ae:e2:36:13:04:a9:66:65:
ef:fb:b9:bd:86:f2:14:3b:03:50:69:52:8d:fc:b8:
03:e8:25:35:8a:0c:16:fe:0d:b2:8f:c1:89:24:7a:
7c:53:4c:54:6b:d2:8d:4f:17:b8:a5:c4:b7:05:a1:
60:40:ee:f1:0d:94:90:7c:dd:82:33:20:92:40:c1:
95:25:ee:78:da:f8:42:6c:64:90:cf:10:ea:8c:e1:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:73:5D:51:4E:21:70:60:31:09:EF:72:AF:2D:7A:95:67:70:BD
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.105.160.0/21
36.105.208.0/21
36.107.120.0/21
36.107.224.0/21
36.108.164.0/23
36.108.168.0/21
49.116.88.0/22
61.128.76.0/23
61.128.100.0/23
61.128.108.0-61.128.112.255
61.128.116.0/24
61.128.120.0/22
61.138.233.0/24
106.123.128.0/20
106.124.126.0-106.124.146.255
110.156.170.0/24
110.156.176.0/20
110.157.240.0-110.157.251.255
120.69.16.0/24
120.70.96.0/21
120.70.226.0/23
120.71.0.0/18
120.71.144.0/20
120.71.176.0/21
202.100.160.0/24
202.100.166.0/24
202.100.177.0-202.100.179.255
202.100.181.0-202.100.188.255
218.31.227.0/24
218.84.244.0/24
222.80.218.0/24
222.81.120.0/21
222.83.0.0/22
IPv6:
240e:11:8800::/37
240e:51:5800::/37
240e:108:8b::/48
240e:108:1110::/47
240e:948::/31
240e:980:8b00::/40
240e:982:1000::/39
240e:982:120d::/48
240e:982:1300::/40
Signature Algorithm: sha256WithRSAEncryption
3a:00:40:17:6d:e4:87:02:ce:65:48:8d:c3:c9:b0:df:d8:95:
f2:91:76:e4:0c:37:23:99:4e:c5:7c:c9:2d:c8:3c:3d:2d:45:
24:22:73:1c:84:3a:76:8c:57:e4:84:0c:67:fc:2d:1b:e7:50:
72:1b:14:fa:27:ac:04:db:bf:3c:80:f3:5f:12:6c:88:f9:6d:
77:ea:35:b5:54:4c:b3:25:e4:b6:bd:a4:05:0b:8a:cb:d5:e9:
64:12:48:c3:9a:2d:0c:3d:21:8f:0d:32:fe:d0:3f:23:b6:39:
c1:47:9f:e3:de:a3:6a:27:bf:f4:1b:51:c3:56:cb:39:ab:bd:
ce:cb:4b:81:2d:de:6d:8e:2d:ab:f1:bc:a2:ad:09:db:9f:f8:
ad:78:12:b0:2f:00:90:1b:60:91:29:5d:c7:c6:70:34:49:f6:
ad:49:df:e0:3f:5b:ec:24:de:f0:65:99:15:7f:8e:01:97:ca:
22:8f:e4:d2:e0:2d:0f:00:fc:16:c8:8b:66:a9:9c:2a:d7:f8:
72:97:5e:de:5b:7f:2e:7a:14:27:e2:e7:cc:45:eb:15:16:a8:
17:94:89:74:f4:cb:ce:5f:ff:0c:c8:20:99:f6:87:f0:c9:08:
31:db:22:96:95:75:4a:9f:de:65:8e:c0:0e:cf:08:de:3f:12:
82:28:60:a3
-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgIURdM9Xs2c+I2vKS7RxUl/93RhkkMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE2MDQyNloX
DTI3MDYxMDE2MDkyNlowMzExMC8GA1UEAxMoRENBMTczNUQ1MTRFMjE3MDYwMzEw
OUVGNzJBRjJEN0E5NTY3NzBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALztR1Y7AT5+k1xmoMVm0P9QJPW3hSNz3GhqmAgDbVk1CrcCT9uha7VYtwgL
og6OWicb9NcQAphEB/hxPvYVGz9dTaZu+63Xpsa2bg7//S11RlCMIiPXGEnMGEA7
zydZ8XCLk0o0ZYriZ6+n2dO/jK175pKhfctcK4e8mjq0r2Ui+XPhYNxPBpz/whqh
WyIR+9QfwrZPa9oGK91lizpQzGqV3fsXJCuhrcfm8q7iNhMEqWZl7/u5vYbyFDsD
UGlSjfy4A+glNYoMFv4Nso/BiSR6fFNMVGvSjU8XuKXEtwWhYEDu8Q2UkHzdgjMg
kkDBlSXueNr4QmxkkM8Q6ozhjF8CAwEAAaOCAyYwggMiMB0GA1UdDgQWBBTcoXNd
UU4hcGAxCe9yry16lWdwvTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM3Njk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCB9QQCAAEwge4DBAMkaaADBAMkadAD
BAMka3gDBAMka+ADBAEkbKQDBAMkbKgDBAIxdFgDBAE9gEwDBAE9gGQwDAMEAj2A
bAMEAD2AcAMEAD2AdAMEAj2AeAMEAD2K6QMEBGp7gDAMAwQBanx+AwQAanySAwQA
bpyqAwQEbpywMAwDBARunfADBAJunfgDBAB4RRADBAN4RmADBAF4RuIDBAZ4RwAD
BAR4R5ADBAN4R7ADBADKZKADBADKZKYwDAMEAMpksQMEAspksDAMAwQAymS1AwQA
ymS8AwQA2h/jAwQA2lT0AwQA3lDaAwQD3lF4AwQC3lMAMFAEAgACMEoDBgMkDgAR
iAMGAyQOAFFYAwcAJA4BCACLAwcBJA4BCBEQAwUBJA4JSAMGACQOCYCLAwYBJA4J
ghADBwAkDgmCEg0DBgAkDgmCEzANBgkqhkiG9w0BAQsFAAOCAQEAOgBAF23khwLO
ZUiNw8mw39iV8pF25Aw3I5lOxXzJLcg8PS1FJCJzHIQ6doxX5IQMZ/wtG+dQchsU
+iesBNu/PIDzXxJsiPltd+o1tVRMsyXktr2kBQuKy9XpZBJIw5otDD0hjw0y/tA/
I7Y5wUef496jaie/9BtRw1bLOau9zstLgS3ebY4tq/G8oq0J25/4rXgSsC8AkBtg
kSldx8ZwNEn2rUnf4D9b7CTe8GWZFX+OAZfKIo/k0uAtDwD8FsiLZqmcKtf4cpde
3lt/LnoUJ+LnzEXrFRaoF5SJdPTLzl//DMggmfaH8MkIMdsilpV1Sp/eZY7ADs8I
3j8Sgihgow==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:30 2026 by rpki-client