Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
File: AS137697.roa (raw, json)
Hash identifier: 4f4rHZeUww8f39k2eKm1/jzpOELybwCehnf+jYtx56g=
Subject key identifier: 78:43:0B:97:41:E0:69:55:05:7F:E5:F1:E0:32:2C:86:46:DE:8B:BB
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7DD4666E2BA78B92089AAEF3ECA4CD616423D5E7
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
Signing time: Thu 11 Jun 2026 16:14:18 +0000
ROA not before: Thu 11 Jun 2026 16:09:18 +0000
ROA not after: Thu 10 Jun 2027 16:14:18 +0000
asID: 137697
IP address blocks: 49.71.36.0/24 maxlen: 24
49.71.37.0/24 maxlen: 24
49.71.38.0/24 maxlen: 24
49.71.39.0/24 maxlen: 24
49.71.72.0/21 maxlen: 21
49.86.44.0/22 maxlen: 22
58.220.0.0/24 maxlen: 24
58.220.1.0/24 maxlen: 24
58.220.2.0/24 maxlen: 24
58.220.3.0/24 maxlen: 24
58.220.4.0/24 maxlen: 24
58.220.6.0/24 maxlen: 24
58.220.7.0/24 maxlen: 24
58.220.8.0/24 maxlen: 24
58.220.9.0/24 maxlen: 24
58.220.10.0/24 maxlen: 24
58.220.11.0/24 maxlen: 24
58.220.12.0/24 maxlen: 24
58.220.14.0/24 maxlen: 24
58.220.16.0/24 maxlen: 24
58.220.17.0/24 maxlen: 24
58.220.18.0/24 maxlen: 24
58.220.19.0/24 maxlen: 24
58.220.20.0/24 maxlen: 24
58.220.21.0/24 maxlen: 24
58.220.22.0/24 maxlen: 24
58.220.23.0/24 maxlen: 24
58.220.24.0/24 maxlen: 24
58.220.25.0/24 maxlen: 24
58.220.26.0/24 maxlen: 24
58.220.27.0/24 maxlen: 24
58.220.28.0/24 maxlen: 24
58.220.29.0/24 maxlen: 24
58.220.30.0/24 maxlen: 24
58.220.31.0/24 maxlen: 24
58.220.32.0/24 maxlen: 24
58.220.33.0/24 maxlen: 24
58.220.34.0/24 maxlen: 24
58.220.35.0/24 maxlen: 24
58.220.36.0/24 maxlen: 24
58.220.37.0/24 maxlen: 24
58.220.39.0/24 maxlen: 24
58.220.40.0/24 maxlen: 24
58.220.41.0/24 maxlen: 24
58.220.42.0/24 maxlen: 24
58.220.43.0/24 maxlen: 24
58.220.44.0/24 maxlen: 24
58.220.45.0/24 maxlen: 24
58.220.46.0/24 maxlen: 24
58.220.47.0/24 maxlen: 24
58.220.48.0/24 maxlen: 24
58.220.49.0/24 maxlen: 24
58.220.50.0/24 maxlen: 24
58.220.51.0/24 maxlen: 24
58.220.52.0/24 maxlen: 24
58.220.54.0/24 maxlen: 24
58.220.56.0/24 maxlen: 24
58.220.57.0/24 maxlen: 24
58.220.58.0/24 maxlen: 24
58.220.61.0/24 maxlen: 24
58.220.62.0/24 maxlen: 24
58.220.63.0/24 maxlen: 24
58.220.64.0/24 maxlen: 24
58.220.65.0/24 maxlen: 24
58.220.66.0/24 maxlen: 24
58.220.67.0/24 maxlen: 24
58.220.68.0/24 maxlen: 24
58.220.69.0/24 maxlen: 24
58.220.70.0/24 maxlen: 24
58.220.71.0/24 maxlen: 24
58.220.72.0/24 maxlen: 24
58.220.73.0/24 maxlen: 24
58.220.74.0/24 maxlen: 24
58.220.75.0/24 maxlen: 24
58.220.76.0/24 maxlen: 24
58.220.77.0/24 maxlen: 24
58.220.78.0/24 maxlen: 24
58.220.79.0/24 maxlen: 24
58.220.80.0/24 maxlen: 24
58.220.81.0/24 maxlen: 24
58.220.82.0/23 maxlen: 23
58.220.92.0/24 maxlen: 24
58.220.93.0/24 maxlen: 24
58.220.94.0/24 maxlen: 24
58.220.95.0/24 maxlen: 24
58.220.175.0/24 maxlen: 24
58.220.176.0/24 maxlen: 24
58.220.220.0/24 maxlen: 24
61.147.67.0/24 maxlen: 24
61.147.68.0/24 maxlen: 24
61.147.69.0/24 maxlen: 24
61.147.70.0/24 maxlen: 24
61.147.72.0/24 maxlen: 24
61.147.73.0/24 maxlen: 24
61.147.74.0/24 maxlen: 24
61.147.75.0/24 maxlen: 24
61.147.77.0/24 maxlen: 24
61.147.78.0/24 maxlen: 24
61.147.80.0/24 maxlen: 24
61.147.81.0/24 maxlen: 24
61.147.82.0/24 maxlen: 24
61.147.83.0/24 maxlen: 24
61.147.84.0/24 maxlen: 24
61.147.85.0/24 maxlen: 24
61.147.88.0/24 maxlen: 24
61.147.89.0/24 maxlen: 24
61.147.90.0/24 maxlen: 24
61.147.91.0/24 maxlen: 24
61.147.92.0/24 maxlen: 24
61.147.93.0/24 maxlen: 24
61.147.94.0/24 maxlen: 24
61.147.95.0/24 maxlen: 24
61.147.96.0/22 maxlen: 22
61.147.96.0/24 maxlen: 24
61.147.97.0/24 maxlen: 24
61.147.98.0/24 maxlen: 24
61.147.99.0/24 maxlen: 24
61.147.100.0/24 maxlen: 24
61.147.102.0/24 maxlen: 24
61.147.103.0/24 maxlen: 24
61.147.104.0/22 maxlen: 22
61.147.104.0/24 maxlen: 24
61.147.105.0/24 maxlen: 24
61.147.106.0/24 maxlen: 24
61.147.107.0/24 maxlen: 24
61.147.108.0/23 maxlen: 23
61.147.110.0/24 maxlen: 24
61.147.111.0/24 maxlen: 24
61.147.112.0/23 maxlen: 23
61.147.114.0/24 maxlen: 24
61.147.115.0/24 maxlen: 24
61.147.116.0/22 maxlen: 22
61.147.116.0/24 maxlen: 24
61.147.117.0/24 maxlen: 24
61.147.118.0/24 maxlen: 24
61.147.119.0/24 maxlen: 24
61.147.120.0/24 maxlen: 24
61.147.121.0/24 maxlen: 24
61.147.122.0/24 maxlen: 24
61.147.123.0/24 maxlen: 24
61.147.124.0/24 maxlen: 24
61.147.125.0/24 maxlen: 24
61.147.126.0/24 maxlen: 24
61.147.127.0/24 maxlen: 24
114.230.92.0/22 maxlen: 22
114.230.136.0/22 maxlen: 22
114.230.152.0/22 maxlen: 22
114.230.196.0/22 maxlen: 22
114.230.204.0/22 maxlen: 22
114.230.212.0/22 maxlen: 22
114.230.220.0/22 maxlen: 22
117.91.176.0/20 maxlen: 20
117.91.192.0/24 maxlen: 24
117.91.193.0/24 maxlen: 24
117.91.194.0/24 maxlen: 24
117.91.195.0/24 maxlen: 24
117.91.196.0/24 maxlen: 24
117.91.197.0/24 maxlen: 24
117.91.198.0/24 maxlen: 24
117.91.199.0/24 maxlen: 24
121.233.192.0/22 maxlen: 22
180.97.178.0/24 maxlen: 24
180.97.179.0/24 maxlen: 24
180.97.180.0/24 maxlen: 24
180.97.181.0/24 maxlen: 24
180.97.182.0/24 maxlen: 24
180.97.183.0/24 maxlen: 24
180.97.184.0/24 maxlen: 24
180.97.185.0/24 maxlen: 24
180.97.186.0/24 maxlen: 24
180.97.187.0/24 maxlen: 24
180.97.188.0/24 maxlen: 24
180.97.189.0/24 maxlen: 24
180.97.190.0/24 maxlen: 24
180.119.118.0/23 maxlen: 23
180.119.120.0/22 maxlen: 22
180.119.136.0/22 maxlen: 22
180.119.144.0/22 maxlen: 22
180.119.168.0/22 maxlen: 22
180.119.232.0/22 maxlen: 22
221.229.36.0/23 maxlen: 23
221.229.77.0/24 maxlen: 24
222.189.228.0/24 maxlen: 24
222.189.237.0/24 maxlen: 24
222.189.238.0/23 maxlen: 23
240e:e9:b000::/37 maxlen: 37
240e:978:900::/40 maxlen: 40
240e:978:1900::/40 maxlen: 40
240e:982:dc0c::/48 maxlen: 48
240e:982:dc0d::/48 maxlen: 48
240e:982:dc0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d4:66:6e:2b:a7:8b:92:08:9a:ae:f3:ec:a4:cd:61:64:23:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:09:18 2026 GMT
Not After : Jun 10 16:14:18 2027 GMT
Subject: CN=78430B9741E06955057FE5F1E0322C8646DE8BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:c2:17:73:e2:08:51:50:73:55:48:d4:e1:
58:49:8b:f4:83:18:02:45:68:cf:77:31:33:fa:80:
23:44:47:d5:a6:a5:07:6e:d9:39:bc:a9:cc:9a:5d:
b1:6e:5f:42:b3:12:c2:3c:42:86:43:c2:cf:d4:c8:
8f:51:d3:ae:db:21:5e:7c:df:08:98:f9:48:75:40:
d4:11:34:95:23:88:f7:36:03:97:c4:c8:73:60:91:
bf:90:bc:95:51:59:0a:df:9f:6b:bf:99:e6:85:5d:
35:90:46:18:e6:de:90:15:39:09:f1:ee:48:79:df:
8b:ec:2b:f9:a7:51:41:81:34:e3:3a:02:b7:6c:77:
36:a3:ec:c2:48:98:66:ac:2c:31:9e:ba:43:8f:ff:
ae:6a:20:4f:54:d0:1f:40:0a:b1:8c:97:3c:32:cc:
5e:a1:27:7c:f3:c9:d8:2f:6a:fb:3c:a6:a3:0b:45:
bb:37:7e:4b:0c:31:91:23:4c:ab:e6:cf:e9:c3:22:
24:d9:ac:32:52:f5:6d:57:c4:84:2e:85:62:08:1d:
be:37:84:5c:3e:b0:68:48:e5:f4:05:7e:4e:ae:c4:
c7:da:98:44:14:d7:bd:4b:77:2c:61:e1:be:5e:db:
2f:2e:6e:a5:97:3a:99:96:0e:eb:3f:b7:3f:d9:0f:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:0B:97:41:E0:69:55:05:7F:E5:F1:E0:32:2C:86:46:DE:8B:BB
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.71.36.0/22
49.71.72.0/21
49.86.44.0/22
58.220.0.0-58.220.4.255
58.220.6.0-58.220.12.255
58.220.14.0/24
58.220.16.0-58.220.37.255
58.220.39.0-58.220.52.255
58.220.54.0/24
58.220.56.0-58.220.58.255
58.220.61.0-58.220.83.255
58.220.92.0/22
58.220.175.0-58.220.176.255
58.220.220.0/24
61.147.67.0-61.147.70.255
61.147.72.0/22
61.147.77.0-61.147.78.255
61.147.80.0-61.147.85.255
61.147.88.0-61.147.100.255
61.147.102.0-61.147.127.255
114.230.92.0/22
114.230.136.0/22
114.230.152.0/22
114.230.196.0/22
114.230.204.0/22
114.230.212.0/22
114.230.220.0/22
117.91.176.0-117.91.199.255
121.233.192.0/22
180.97.178.0-180.97.190.255
180.119.118.0-180.119.123.255
180.119.136.0/22
180.119.144.0/22
180.119.168.0/22
180.119.232.0/22
221.229.36.0/23
221.229.77.0/24
222.189.228.0/24
222.189.237.0-222.189.239.255
IPv6:
240e:e9:b000::/37
240e:978:900::/40
240e:978:1900::/40
240e:982:dc0c::-240e:982:dc0e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:e6:b9:1e:e9:e7:d2:19:d6:4f:96:08:83:2c:03:bf:1a:db:
29:7c:07:69:74:79:21:e0:cb:a8:cb:db:5d:7a:a1:e7:e4:e0:
c0:08:3c:fb:02:29:98:77:6b:6e:51:40:2d:bf:f7:0e:cc:ab:
05:d4:8e:5a:4c:d3:2e:a3:8c:94:19:5c:4d:ea:7c:a0:37:13:
6e:ad:6f:81:e7:8a:e4:94:da:20:f4:77:ea:95:4b:89:89:b1:
87:04:6d:86:96:cf:6e:1c:e7:71:94:19:15:22:53:c8:5d:aa:
9e:2f:53:99:9c:60:7c:5d:b4:0d:2c:93:bc:1d:92:3e:88:bd:
68:71:20:a7:9e:20:d9:4f:92:f0:57:63:b9:f0:f0:0e:86:93:
8f:28:36:ad:5d:c0:c8:69:fd:55:14:a9:cc:99:27:c3:e4:87:
d4:85:b6:8b:43:72:04:a4:0a:aa:2e:8e:5c:23:ff:25:ad:d8:
50:d9:58:46:df:1d:ad:21:fc:b1:ab:0d:c7:b7:e7:45:dd:39:
8c:ad:91:61:14:a9:27:18:d2:8c:bd:91:71:e8:5e:e9:11:10:
80:14:f4:a0:64:c2:ab:b8:d3:e9:11:7f:4e:a2:9b:16:82:f3:
70:f6:6e:38:6b:e2:55:00:38:c4:d2:e1:5d:fb:d0:72:8f:74:
df:c3:b3:67
-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgIUfdRmbiuni5IImq7z7KTNYWQj1ecwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE2MDkxOFoX
DTI3MDYxMDE2MTQxOFowMzExMC8GA1UEAxMoNzg0MzBCOTc0MUUwNjk1NTA1N0ZF
NUYxRTAzMjJDODY0NkRFOEJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALHzwhdz4ghRUHNVSNThWEmL9IMYAkVoz3cxM/qAI0RH1aalB27ZObypzJpd
sW5fQrMSwjxChkPCz9TIj1HTrtshXnzfCJj5SHVA1BE0lSOI9zYDl8TIc2CRv5C8
lVFZCt+fa7+Z5oVdNZBGGObekBU5CfHuSHnfi+wr+adRQYE04zoCt2x3NqPswkiY
ZqwsMZ66Q4//rmogT1TQH0AKsYyXPDLMXqEnfPPJ2C9q+zymowtFuzd+SwwxkSNM
q+bP6cMiJNmsMlL1bVfEhC6FYggdvjeEXD6waEjl9AV+Tq7Ex9qYRBTXvUt3LGHh
vl7bLy5upZc6mZYO6z+3P9kPIssCAwEAAaOCA4UwggOBMB0GA1UdDgQWBBR4QwuX
QeBpVQV/5fHgMiyGRt6LuzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM3Njk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBvgYIKwYBBQUHAQcBAf8EggGtMIIBqTCCAXEEAgABMIIBaQMEAjFHJAMEAzFH
SAMEAjFWLDALAwMCOtwDBAA63AQwDAMEATrcBgMEADrcDAMEADrcDjAMAwQEOtwQ
AwQBOtwkMAwDBAA63CcDBAA63DQDBAA63DYwDAMEAzrcOAMEADrcOjAMAwQAOtw9
AwQCOtxQAwQCOtxcMAwDBAA63K8DBAA63LADBAA63NwwDAMEAD2TQwMEAD2TRgME
Aj2TSDAMAwQAPZNNAwQAPZNOMAwDBAQ9k1ADBAE9k1QwDAMEAz2TWAMEAD2TZDAM
AwQBPZNmAwQHPZMAAwQCcuZcAwQCcuaIAwQCcuaYAwQCcubEAwQCcubMAwQCcubU
AwQCcubcMAwDBAR1W7ADBAN1W8ADBAJ56cAwDAMEAbRhsgMEALRhvjAMAwQBtHd2
AwQCtHd4AwQCtHeIAwQCtHeQAwQCtHeoAwQCtHfoAwQB3eUkAwQA3eVNAwQA3r3k
MAwDBADeve0DBATeveAwMgQCAAIwLAMGAyQOAOmwAwYAJA4JeAkDBgAkDgl4GTAS
AwcCJA4JgtwMAwcAJA4JgtwOMA0GCSqGSIb3DQEBCwUAA4IBAQCJ5rke6efSGdZP
lgiDLAO/GtspfAdpdHkh4Muoy9tdeqHn5ODACDz7AimYd2tuUUAtv/cOzKsF1I5a
TNMuo4yUGVxN6nygNxNurW+B54rklNog9HfqlUuJibGHBG2Gls9uHOdxlBkVIlPI
XaqeL1OZnGB8XbQNLJO8HZI+iL1ocSCnniDZT5LwV2O58PAOhpOPKDatXcDIaf1V
FKnMmSfD5IfUhbaLQ3IEpAqqLo5cI/8lrdhQ2VhG3x2tIfyxqw3Ht+dF3TmMrZFh
FKknGNKMvZFx6F7pERCAFPSgZMKruNPpEX9OopsWgvNw9m44a+JVADjE0uFd+9By
j3Tfw7Nn
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:41 2026 by rpki-client