Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137698.roa
File: AS137698.roa (raw, json)
Hash identifier: l5jXTfKAyxZTg8/6uSIXuickXithuuqA0Ro4hx0H0U0=
Subject key identifier: 8A:77:36:45:ED:DC:56:6E:15:A8:83:FC:B7:60:C0:51:63:91:94:F3
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2D47B800A71B0F6638052657EF95D829595DA573
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137698.roa
Signing time: Thu 28 May 2026 16:01:05 +0000
ROA not before: Thu 28 May 2026 15:56:05 +0000
ROA not after: Thu 27 May 2027 16:01:05 +0000
asID: 137698
IP address blocks: 42.100.32.0/23 maxlen: 23
42.100.34.0/24 maxlen: 24
42.100.35.0/24 maxlen: 24
42.100.36.0/22 maxlen: 22
42.100.40.0/22 maxlen: 22
42.100.44.0/24 maxlen: 24
42.100.45.0/24 maxlen: 24
42.100.46.0/23 maxlen: 23
42.100.48.0/21 maxlen: 21
42.101.0.0/22 maxlen: 22
42.101.4.0/22 maxlen: 22
42.101.8.0/21 maxlen: 21
42.101.16.0/22 maxlen: 22
42.101.20.0/22 maxlen: 22
42.101.24.0/22 maxlen: 22
42.101.28.0/22 maxlen: 22
42.101.32.0/21 maxlen: 21
42.101.40.0/24 maxlen: 24
42.101.41.0/24 maxlen: 24
42.101.42.0/24 maxlen: 24
42.101.43.0/24 maxlen: 24
42.101.44.0/22 maxlen: 22
42.101.48.0/22 maxlen: 22
42.101.52.0/22 maxlen: 22
42.101.56.0/22 maxlen: 22
42.101.60.0/22 maxlen: 22
42.101.64.0/24 maxlen: 24
42.101.65.0/24 maxlen: 24
42.101.66.0/24 maxlen: 24
42.101.67.0/24 maxlen: 24
42.101.70.0/24 maxlen: 24
42.101.71.0/24 maxlen: 24
42.101.72.0/22 maxlen: 22
42.101.76.0/22 maxlen: 22
42.101.80.0/22 maxlen: 22
42.101.80.0/24 maxlen: 24
42.101.84.0/22 maxlen: 22
42.101.88.0/22 maxlen: 22
42.101.92.0/22 maxlen: 22
42.185.152.0/21 maxlen: 21
219.147.64.0/24 maxlen: 24
219.147.70.0/24 maxlen: 24
219.147.74.0/23 maxlen: 23
219.147.76.0/22 maxlen: 22
219.147.80.0/21 maxlen: 21
219.147.88.0/22 maxlen: 22
219.147.92.0/22 maxlen: 22
219.147.140.0/23 maxlen: 23
219.147.142.0/24 maxlen: 24
219.147.152.0/23 maxlen: 23
219.147.154.0/24 maxlen: 24
219.147.157.0/24 maxlen: 24
219.147.231.0/24 maxlen: 24
219.147.232.0/23 maxlen: 23
240e:1:7000::/47 maxlen: 47
240e:1:7002::/48 maxlen: 48
240e:1:7003::/48 maxlen: 48
240e:1:7100::/40 maxlen: 40
240e:85:e800::/37 maxlen: 37
240e:108:98::/48 maxlen: 48
240e:108:1010::/48 maxlen: 48
240e:908::/33 maxlen: 33
240e:908:100::/48 maxlen: 48
240e:908:101::/48 maxlen: 48
240e:908:102::/48 maxlen: 48
240e:908:103::/48 maxlen: 48
240e:908:104::/48 maxlen: 48
240e:908:105::/48 maxlen: 48
240e:908:106::/48 maxlen: 48
240e:908:107::/48 maxlen: 48
240e:908:108::/48 maxlen: 48
240e:908:109::/48 maxlen: 48
240e:908:10b::/48 maxlen: 48
240e:908:8000::/40 maxlen: 40
240e:908:8100::/40 maxlen: 40
240e:980:9800::/40 maxlen: 40
240e:981:1000::/40 maxlen: 40
240e:983:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:47:b8:00:a7:1b:0f:66:38:05:26:57:ef:95:d8:29:59:5d:a5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 15:56:05 2026 GMT
Not After : May 27 16:01:05 2027 GMT
Subject: CN=8A773645EDDC566E15A883FCB760C051639194F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:25:39:74:0f:4b:28:22:45:42:ad:43:c9:
20:53:6b:60:06:c1:9d:09:ee:9c:41:e7:84:69:f4:
07:eb:83:e1:e1:f7:f6:43:24:80:00:20:08:d4:ae:
ca:c0:66:d5:73:27:c5:38:81:28:2c:d1:ee:f3:de:
df:b0:39:20:4d:9b:0a:2a:fe:9f:65:06:78:0b:d1:
60:85:53:0b:ee:c2:cb:a4:47:b7:b3:c2:e1:ec:54:
78:56:7e:38:b3:29:43:5d:d6:9e:69:d2:cb:a0:30:
4d:a5:a1:9f:11:df:45:e3:a9:e2:e7:fc:7f:e0:a4:
c9:37:62:24:28:a8:44:87:88:87:6e:45:57:f8:0d:
b9:3f:05:69:c3:a6:d2:d0:e6:e4:f8:34:9d:7f:db:
96:db:31:2d:12:14:c7:65:3b:67:9e:fb:dc:58:d5:
c0:67:0d:e0:ac:ae:94:d9:9f:34:a1:02:6d:bc:c4:
0d:71:85:68:1d:21:1a:4d:39:d7:f8:bc:7f:f5:e1:
a0:c9:e4:f6:2f:de:c6:4a:98:29:f5:05:32:3b:87:
23:85:be:b7:67:fe:b7:a7:de:e5:3c:d5:8e:eb:ba:
cb:d4:dc:eb:99:01:bd:c7:a5:b6:22:f0:ad:7a:29:
ae:af:5d:be:39:3e:1f:b1:09:f9:4a:bb:2c:6c:be:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:36:45:ED:DC:56:6E:15:A8:83:FC:B7:60:C0:51:63:91:94:F3
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.100.32.0-42.100.55.255
42.101.0.0-42.101.67.255
42.101.70.0-42.101.95.255
42.185.152.0/21
219.147.64.0/24
219.147.70.0/24
219.147.74.0-219.147.95.255
219.147.140.0-219.147.142.255
219.147.152.0-219.147.154.255
219.147.157.0/24
219.147.231.0-219.147.233.255
IPv6:
240e:1:7000::/46
240e:1:7100::/40
240e:85:e800::/37
240e:108:98::/48
240e:108:1010::/48
240e:908::-240e:908:81ff:ffff:ffff:ffff:ffff:ffff
240e:980:9800::/40
240e:981:1000::/40
240e:983:100::/48
Signature Algorithm: sha256WithRSAEncryption
19:fc:40:0b:c5:55:f6:28:a8:ba:43:97:1f:07:a3:cd:0c:3a:
23:a2:89:02:68:79:40:60:ba:aa:c0:3a:f0:8d:63:09:4d:76:
60:60:35:6b:47:23:2f:17:1a:bc:b7:86:4c:ce:d4:ed:cb:c2:
60:0b:4f:5d:47:4d:e3:c9:a9:e5:f0:fb:9d:ab:97:dd:5a:75:
c0:2a:f6:7c:38:77:3c:3c:8f:39:88:6a:fe:5f:e5:5c:a8:98:
1b:43:99:7b:06:38:b7:4b:d2:2f:33:b5:8b:a4:f2:9d:3f:d2:
05:16:ea:12:eb:01:7b:25:bc:6b:1f:a4:1f:19:31:82:1d:3f:
8a:96:0d:b2:a3:f1:18:b9:f9:d1:da:b3:cd:b7:e3:66:64:b5:
21:95:1a:21:86:b8:be:df:26:de:ce:89:9c:5f:49:c9:6f:9b:
4d:cc:4b:62:36:9d:2c:00:ab:72:83:fc:fe:d1:59:79:a5:00:
c2:1d:67:8a:34:38:85:0d:a1:a7:01:c7:8f:e1:3d:4b:15:b1:
2d:7a:fe:eb:75:2f:18:dc:f0:55:56:d4:6b:c6:64:2c:ee:d9:
c5:0f:c4:9a:9f:51:6a:76:2b:91:9a:24:b6:5c:7b:62:91:39:
12:70:c5:6d:7c:36:f7:62:56:4a:91:24:84:db:a2:f2:4d:fd:
1e:dd:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:31 2026 by rpki-client