Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138982.roa
File: AS138982.roa (raw, json)
Hash identifier: lCBcX4N/s+rSwlnQurG49cv9XQtJ0mX9SxHkLpjyQig=
Subject key identifier: 50:A3:21:8B:1B:27:D1:03:3E:3C:43:D6:7E:D4:FB:5B:AC:41:A2:17
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 48C7D85E20915D456BC740094E56EE15D25041A9
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138982.roa
Signing time: Thu 04 Jun 2026 16:14:05 +0000
ROA not before: Thu 04 Jun 2026 16:09:05 +0000
ROA not after: Thu 03 Jun 2027 16:14:05 +0000
asID: 138982
IP address blocks: 111.172.192.0/22 maxlen: 22
111.172.195.0/24 maxlen: 24
111.172.196.0/22 maxlen: 22
111.172.204.0/24 maxlen: 24
111.172.216.0/22 maxlen: 22
111.172.224.0/21 maxlen: 21
111.172.232.0/22 maxlen: 22
111.172.236.0/22 maxlen: 22
111.172.240.0/20 maxlen: 20
119.97.164.0/22 maxlen: 22
119.97.168.0/21 maxlen: 21
119.97.176.0/20 maxlen: 20
240e:105:e600::/39 maxlen: 39
240e:108:1161::/48 maxlen: 48
240e:95c:5000::/36 maxlen: 36
240e:982:6100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c7:d8:5e:20:91:5d:45:6b:c7:40:09:4e:56:ee:15:d2:50:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:09:05 2026 GMT
Not After : Jun 3 16:14:05 2027 GMT
Subject: CN=50A3218B1B27D1033E3C43D67ED4FB5BAC41A217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:fe:8f:1c:fd:42:fa:25:1b:91:e3:c9:37:
8e:7a:cb:9a:a0:94:31:c1:fb:c0:3d:82:8f:c1:6f:
37:5e:2d:47:17:f4:9d:68:0c:2e:2d:2a:35:35:5e:
5c:65:43:22:a8:40:bd:f0:b1:94:4c:f7:d2:9b:dc:
08:8e:93:ef:53:36:02:ad:34:d3:b1:c8:9b:1f:18:
8b:a5:41:af:34:a9:29:ba:f8:18:bd:2d:12:f0:dd:
3f:1c:36:ee:52:c0:3d:ad:e5:72:ad:de:f5:1c:06:
2e:1f:3c:12:49:a3:58:58:a1:0e:f5:d8:08:7a:df:
19:df:c3:1b:60:61:6e:db:ed:95:a8:2f:12:f5:5c:
01:1b:e1:46:f0:9c:77:67:7e:61:1e:64:8f:89:3c:
e5:7c:80:6d:78:a0:db:9a:fb:b3:ea:0e:14:a6:64:
2c:c9:13:de:82:25:02:2e:77:75:d1:cd:a9:c0:1e:
15:8e:b6:e9:bd:26:a4:33:d4:b4:59:06:a4:94:7d:
78:ba:c8:7b:ab:6b:cf:16:51:c4:99:a6:8f:fa:ad:
11:20:5a:c9:2b:78:a3:0b:71:3e:ed:69:40:3b:38:
eb:ef:3f:e6:12:87:de:d9:f4:9e:7c:d7:d8:cd:82:
5c:05:56:b4:a8:4e:54:0c:2f:1a:45:49:14:7c:41:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:21:8B:1B:27:D1:03:3E:3C:43:D6:7E:D4:FB:5B:AC:41:A2:17
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.172.192.0/21
111.172.204.0/24
111.172.216.0/22
111.172.224.0/19
119.97.164.0-119.97.191.255
IPv6:
240e:105:e600::/39
240e:108:1161::/48
240e:95c:5000::/36
240e:982:6100::/40
Signature Algorithm: sha256WithRSAEncryption
76:4e:a5:ba:bc:d5:28:40:d3:c2:8b:23:ae:4e:4a:b5:df:e9:
1c:25:c6:52:3e:2c:ac:b9:89:2e:f2:ce:a2:f2:8c:c2:d6:f8:
f0:b1:d4:33:56:73:e0:03:da:b5:34:eb:d2:fa:6b:08:b4:4e:
52:7d:e4:b1:94:14:78:00:ac:9f:d2:0f:4e:f9:e6:21:43:bb:
b4:b4:82:e8:97:2d:e3:fb:23:1c:4d:95:e5:4c:ff:c9:be:49:
c1:3e:1f:99:60:9c:c9:8a:cc:5b:03:3a:b9:72:05:13:88:3b:
4c:86:8b:6c:15:0e:0b:c4:84:b4:b3:1f:8c:2a:15:0c:57:44:
27:f7:40:11:73:5b:be:3e:f8:f0:22:d9:96:cf:78:79:63:80:
32:e1:d1:bb:d5:3f:09:37:f1:e3:f7:5e:39:1a:93:54:fd:d2:
71:b0:29:1f:63:4e:75:4b:a0:22:1b:81:eb:ac:f2:80:80:09:
24:17:2a:da:0b:e8:1a:08:13:0f:57:86:75:8e:6c:e1:00:a8:
1c:a5:9d:91:ab:4d:59:f5:55:34:6a:cd:a7:ae:28:ad:7e:45:
f4:33:55:fc:d3:0f:64:f9:4b:af:30:b0:98:89:9e:ef:d4:2d:
88:79:47:76:f8:2c:42:14:20:b2:a9:68:42:16:dc:45:d7:f9:
18:95:44:8c
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUSMfYXiCRXUVrx0AJTlbuFdJQQakwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwNDE2MDkwNVoX
DTI3MDYwMzE2MTQwNVowMzExMC8GA1UEAxMoNTBBMzIxOEIxQjI3RDEwMzNFM0M0
M0Q2N0VENEZCNUJBQzQxQTIxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANu2/o8c/UL6JRuR48k3jnrLmqCUMcH7wD2Cj8FvN14tRxf0nWgMLi0qNTVe
XGVDIqhAvfCxlEz30pvcCI6T71M2Aq0007HImx8Yi6VBrzSpKbr4GL0tEvDdPxw2
7lLAPa3lcq3e9RwGLh88EkmjWFihDvXYCHrfGd/DG2BhbtvtlagvEvVcARvhRvCc
d2d+YR5kj4k85XyAbXig25r7s+oOFKZkLMkT3oIlAi53ddHNqcAeFY626b0mpDPU
tFkGpJR9eLrIe6trzxZRxJmmj/qtESBaySt4owtxPu1pQDs46+8/5hKH3tn0nnzX
2M2CXAVWtKhOVAwvGkVJFHxBxj8CAwEAAaOCAi0wggIpMB0GA1UdDgQWBBRQoyGL
GyfRAz48Q9Z+1PtbrEGiFzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM4OTgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MGgGCCsGAQUFBwEHAQH/BFkwVzAsBAIAATAmAwQDb6zAAwQAb6zMAwQCb6zYAwQF
b6zgMAwDBAJ3YaQDBAZ3YYAwJwQCAAIwIQMGASQOAQXmAwcAJA4BCBFhAwYEJA4J
XFADBgAkDgmCYTANBgkqhkiG9w0BAQsFAAOCAQEAdk6lurzVKEDTwosjrk5Ktd/p
HCXGUj4srLmJLvLOovKMwtb48LHUM1Zz4APatTTr0vprCLROUn3ksZQUeACsn9IP
TvnmIUO7tLSC6Jct4/sjHE2V5Uz/yb5JwT4fmWCcyYrMWwM6uXIFE4g7TIaLbBUO
C8SEtLMfjCoVDFdEJ/dAEXNbvj748CLZls94eWOAMuHRu9U/CTfx4/deORqTVP3S
cbApH2NOdUugIhuB66zygIAJJBcq2gvoGggTD1eGdY5s4QCoHKWdkatNWfVVNGrN
p64orX5F9DNV/NMPZPlLrzCwmIme79QtiHlHdvgsQhQgsqloQhbcRdf5GJVEjA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:44 2026 by rpki-client