Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137702.roa
File: AS137702.roa (raw, json)
Hash identifier: EwxxOOSbRlSMLC1VXH0udGze8DQVGxiQ3KIB9Dn9zZA=
Subject key identifier: EF:17:BA:B5:3D:8E:4E:BD:83:4E:D4:53:46:86:29:33:33:BB:AD:B7
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5ED0E99C3E7239CC2A26861D4D407BFEE8A6F247
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137702.roa
Signing time: Sun 14 Jun 2026 16:44:15 +0000
ROA not before: Sun 14 Jun 2026 16:39:15 +0000
ROA not after: Sun 13 Jun 2027 16:44:15 +0000
asID: 137702
IP address blocks: 58.212.8.0/23 maxlen: 23
58.212.84.0/23 maxlen: 23
58.212.130.0/23 maxlen: 23
58.217.156.0/22 maxlen: 22
58.217.192.0/21 maxlen: 21
58.217.193.0/24 maxlen: 24
58.217.208.0/20 maxlen: 20
58.217.244.0/24 maxlen: 24
58.217.245.0/24 maxlen: 24
58.223.21.0/24 maxlen: 24
58.223.24.0/24 maxlen: 24
58.223.81.0/24 maxlen: 24
61.132.51.0/24 maxlen: 24
61.132.74.0/24 maxlen: 24
61.132.75.0/24 maxlen: 24
61.147.136.0/21 maxlen: 21
61.147.165.0/24 maxlen: 24
61.147.166.0/23 maxlen: 23
61.147.168.0/21 maxlen: 21
61.147.176.0/22 maxlen: 22
61.147.180.0/24 maxlen: 24
61.155.5.0/24 maxlen: 24
61.155.7.0/24 maxlen: 24
61.155.8.0/24 maxlen: 24
61.155.9.0/24 maxlen: 24
61.155.106.0/24 maxlen: 24
61.155.107.0/24 maxlen: 24
61.155.236.0/24 maxlen: 24
61.155.238.0/24 maxlen: 24
121.237.32.0/23 maxlen: 23
180.96.0.0/21 maxlen: 21
180.96.4.0/24 maxlen: 24
180.96.8.0/21 maxlen: 21
180.96.8.0/24 maxlen: 24
180.96.9.0/24 maxlen: 24
180.96.16.0/20 maxlen: 20
180.96.32.0/19 maxlen: 19
180.96.64.0/21 maxlen: 21
180.96.70.0/24 maxlen: 24
180.96.72.0/21 maxlen: 21
180.96.80.0/21 maxlen: 21
180.97.0.0/18 maxlen: 18
180.97.104.0/21 maxlen: 21
180.97.112.0/21 maxlen: 21
180.97.123.0/24 maxlen: 24
180.97.128.0/21 maxlen: 21
180.100.19.0/24 maxlen: 24
180.100.20.0/24 maxlen: 24
202.102.52.0/22 maxlen: 22
202.102.56.0/21 maxlen: 21
202.102.61.0/24 maxlen: 24
202.102.64.0/22 maxlen: 22
202.102.68.0/24 maxlen: 24
202.102.69.0/24 maxlen: 24
202.102.70.0/24 maxlen: 24
202.102.72.0/21 maxlen: 21
202.102.72.0/24 maxlen: 24
202.102.76.0/24 maxlen: 24
202.102.80.0/20 maxlen: 20
202.102.85.0/24 maxlen: 24
202.102.96.0/22 maxlen: 22
202.102.114.0/23 maxlen: 23
202.111.126.0/23 maxlen: 23
202.111.248.0/24 maxlen: 24
221.231.128.0/21 maxlen: 21
221.231.136.0/21 maxlen: 21
240e:1a:10::/44 maxlen: 44
240e:1a:40::/44 maxlen: 44
240e:5a:6801::/48 maxlen: 48
240e:5a:6c00::/38 maxlen: 38
240e:e9:4000::/37 maxlen: 37
240e:e9:8000::/37 maxlen: 37
240e:978::/40 maxlen: 40
240e:978:1000::/40 maxlen: 40
240e:978:2000::/40 maxlen: 40
240e:978:3000::/40 maxlen: 40
240e:978:4000::/40 maxlen: 40
240e:978:5000::/40 maxlen: 40
240e:978:6000::/40 maxlen: 40
240e:978:7000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d0:e9:9c:3e:72:39:cc:2a:26:86:1d:4d:40:7b:fe:e8:a6:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 14 16:39:15 2026 GMT
Not After : Jun 13 16:44:15 2027 GMT
Subject: CN=EF17BAB53D8E4EBD834ED4534686293333BBADB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:f9:5e:39:43:6f:a6:ea:a2:19:c2:b5:55:
8e:2e:24:0d:72:62:18:74:c8:bc:f8:11:2b:07:78:
d9:b7:87:c7:0f:d4:4e:95:8f:78:50:fa:b9:ab:ec:
75:ca:86:54:12:f7:8a:05:aa:e7:87:e6:1c:49:21:
93:97:40:5c:fc:c1:89:c0:57:a2:dc:07:6f:e2:7a:
8b:16:93:78:2e:b0:42:9e:7c:77:6a:74:e3:ca:b7:
a4:60:47:1e:41:df:e6:9b:8e:2a:a7:62:f9:3a:19:
ad:52:fb:f7:84:d7:93:ae:78:85:ae:e5:62:9d:4d:
3e:24:33:e9:12:7d:e5:3a:60:b7:7c:5d:8b:31:d1:
e2:28:d4:c3:d3:8e:56:b4:40:a4:96:b4:95:d8:bc:
e3:75:54:bf:d8:81:20:6e:d4:33:df:a7:ad:91:2d:
9a:90:e2:a0:40:f5:17:c9:19:33:3a:b1:1c:4d:67:
cb:56:8b:a7:ae:be:67:2d:2d:6f:77:3e:74:5d:29:
1d:c5:c1:33:8a:f1:97:60:38:a9:85:74:74:01:8a:
7e:4f:bf:67:08:2d:5e:a0:fc:73:95:98:9e:0b:8f:
5c:72:bf:90:14:d5:05:a4:83:13:9d:dc:91:84:c3:
fc:54:71:89:d6:30:c0:e5:42:78:30:ad:65:a3:f2:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:17:BA:B5:3D:8E:4E:BD:83:4E:D4:53:46:86:29:33:33:BB:AD:B7
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.212.8.0/23
58.212.84.0/23
58.212.130.0/23
58.217.156.0/22
58.217.192.0/21
58.217.208.0/20
58.217.244.0/23
58.223.21.0/24
58.223.24.0/24
58.223.81.0/24
61.132.51.0/24
61.132.74.0/23
61.147.136.0/21
61.147.165.0-61.147.180.255
61.155.5.0/24
61.155.7.0-61.155.9.255
61.155.106.0/23
61.155.236.0/24
61.155.238.0/24
121.237.32.0/23
180.96.0.0-180.96.87.255
180.97.0.0/18
180.97.104.0-180.97.119.255
180.97.123.0/24
180.97.128.0/21
180.100.19.0-180.100.20.255
202.102.52.0-202.102.70.255
202.102.72.0-202.102.99.255
202.102.114.0/23
202.111.126.0/23
202.111.248.0/24
221.231.128.0/20
IPv6:
240e:1a:10::/44
240e:1a:40::/44
240e:5a:6801::/48
240e:5a:6c00::/38
240e:e9:4000::/37
240e:e9:8000::/37
240e:978::/40
240e:978:1000::/40
240e:978:2000::/40
240e:978:3000::/40
240e:978:4000::/40
240e:978:5000::/40
240e:978:6000::/40
240e:978:7000::/40
Signature Algorithm: sha256WithRSAEncryption
02:40:95:67:73:65:5f:b8:cb:f8:8a:68:e8:04:c9:bf:fd:e2:
58:90:57:2e:70:81:0a:e2:ad:67:3f:ce:94:ed:0a:41:76:ca:
ca:9e:e9:e6:db:eb:10:68:f0:02:78:c1:f9:77:c9:3f:bb:e1:
82:2a:27:cc:5c:25:b7:af:8b:1b:b4:5e:f6:b4:b9:31:1f:b8:
4f:f7:47:dd:39:68:15:fe:ed:04:f2:91:f8:a5:97:98:93:6e:
73:6d:cd:6e:bf:2c:2e:69:50:87:0a:01:82:9a:cd:0e:35:31:
8b:e4:c6:05:81:a6:e8:0e:fc:e8:0e:43:1e:b0:2b:86:d0:33:
7d:fd:e2:6a:1a:05:d5:ae:24:0b:18:bc:d5:c4:e6:9c:0c:b9:
f9:ed:d8:90:86:6b:e7:2f:40:37:03:0a:03:b0:b3:59:1e:7e:
cc:c6:9a:6c:18:eb:2a:ff:b2:f3:29:a6:eb:4d:2b:50:a7:ae:
d9:a9:69:a4:ca:b2:96:c8:ee:b0:d4:b0:18:fc:e0:55:85:7e:
f5:ce:e0:73:42:55:57:8c:f2:11:02:4f:73:8f:79:0a:6a:4e:
73:fb:e7:d3:aa:e3:c5:4f:d2:8f:62:e1:4d:a2:9e:d6:87:a9:
b5:e8:19:2c:52:b4:09:cc:b6:23:c5:fc:33:90:ad:49:76:a8:
ab:f0:e1:ae
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUXtDpnD5yOcwqJoYdTUB7/uim8kcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNDE2MzkxNVoX
DTI3MDYxMzE2NDQxNVowMzExMC8GA1UEAxMoRUYxN0JBQjUzRDhFNEVCRDgzNEVE
NDUzNDY4NjI5MzMzM0JCQURCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALx1+V45Q2+m6qIZwrVVji4kDXJiGHTIvPgRKwd42beHxw/UTpWPeFD6uavs
dcqGVBL3igWq54fmHEkhk5dAXPzBicBXotwHb+J6ixaTeC6wQp58d2p048q3pGBH
HkHf5puOKqdi+ToZrVL794TXk654ha7lYp1NPiQz6RJ95Tpgt3xdizHR4ijUw9OO
VrRApJa0ldi843VUv9iBIG7UM9+nrZEtmpDioED1F8kZMzqxHE1ny1aLp66+Zy0t
b3c+dF0pHcXBM4rxl2A4qYV0dAGKfk+/ZwgtXqD8c5WYnguPXHK/kBTVBaSDE53c
kYTD/FRxidYwwOVCeDCtZaPy+k8CAwEAAaOCA1gwggNUMB0GA1UdDgQWBBTvF7q1
PY5OvYNO1FNGhikzM7uttzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM3NzAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBkQYIKwYBBQUHAQcBAf8EggGAMIIBfDCB/gQCAAEwgfcDBAE61AgDBAE61FQD
BAE61IIDBAI62ZwDBAM62cADBAQ62dADBAE62fQDBAA63xUDBAA63xgDBAA631ED
BAA9hDMDBAE9hEoDBAM9k4gwDAMEAD2TpQMEAD2TtAMEAD2bBTAMAwQAPZsHAwQB
PZsIAwQBPZtqAwQAPZvsAwQAPZvuAwQBee0gMAsDAwW0YAMEA7RgUAMEBrRhADAM
AwQDtGFoAwQDtGFwAwQAtGF7AwQDtGGAMAwDBAC0ZBMDBAC0ZBQwDAMEAspmNAME
AMpmRjAMAwQDymZIAwQCymZgAwQBymZyAwQBym9+AwQAym/4AwQE3eeAMHkEAgAC
MHMDBwQkDgAaABADBwQkDgAaAEADBwAkDgBaaAEDBgIkDgBabAMGAyQOAOlAAwYD
JA4A6YADBgAkDgl4AAMGACQOCXgQAwYAJA4JeCADBgAkDgl4MAMGACQOCXhAAwYA
JA4JeFADBgAkDgl4YAMGACQOCXhwMA0GCSqGSIb3DQEBCwUAA4IBAQACQJVnc2Vf
uMv4imjoBMm//eJYkFcucIEK4q1nP86U7QpBdsrKnunm2+sQaPACeMH5d8k/u+GC
KifMXCW3r4sbtF72tLkxH7hP90fdOWgV/u0E8pH4pZeYk25zbc1uvywuaVCHCgGC
ms0ONTGL5MYFgaboDvzoDkMesCuG0DN9/eJqGgXVriQLGLzVxOacDLn57diQhmvn
L0A3AwoDsLNZHn7MxppsGOsq/7LzKabrTStQp67ZqWmkyrKWyO6w1LAY/OBVhX71
zuBzQlVXjPIRAk9zj3kKak5z++fTquPFT9KPYuFNop7Wh6m16BksUrQJzLYjxfwz
kK1Jdqir8OGu
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:14:27 2026 by rpki-client