Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138991.roa
File: AS138991.roa (raw, json)
Hash identifier: ROqbVhwok220ib+y+NKAvJATkkBElE57iO4iVFLNBm0=
Subject key identifier: B0:43:F6:B9:DA:FA:04:EB:6A:9F:A9:C9:31:4A:A2:B5:EC:3C:36:BF
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3DD25A38D4FDC5DA350448EFE70D2E1C535C0D9D
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138991.roa
Signing time: Thu 11 Jun 2026 16:06:34 +0000
ROA not before: Thu 11 Jun 2026 16:01:34 +0000
ROA not after: Thu 10 Jun 2027 16:06:34 +0000
asID: 138991
IP address blocks: 116.8.130.0/23 maxlen: 23
116.8.132.0/23 maxlen: 23
116.11.120.0/21 maxlen: 21
116.11.120.0/24 maxlen: 24
116.11.248.0/24 maxlen: 24
171.110.200.0/21 maxlen: 21
219.159.248.0/24 maxlen: 24
240e:108:1132::/48 maxlen: 48
240e:108:1133::/48 maxlen: 48
240e:250:2800::/40 maxlen: 40
240e:951:2400::/38 maxlen: 38
240e:982:3200::/48 maxlen: 48
240e:982:3300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d2:5a:38:d4:fd:c5:da:35:04:48:ef:e7:0d:2e:1c:53:5c:0d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:01:34 2026 GMT
Not After : Jun 10 16:06:34 2027 GMT
Subject: CN=B043F6B9DAFA04EB6A9FA9C9314AA2B5EC3C36BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:84:07:58:1d:cf:a8:ab:ff:f8:1c:e4:35:
1a:f1:65:eb:08:a5:e4:60:50:73:84:a8:98:86:53:
91:9a:f6:0d:ce:78:43:64:86:4d:61:44:96:dc:ee:
b8:7e:1e:be:c8:fe:80:55:66:cd:55:29:bb:26:a4:
16:5f:37:a0:17:47:a9:96:41:58:7c:0a:4d:e6:2b:
58:d9:01:df:df:eb:e2:b4:c9:04:21:2d:81:c5:c4:
56:ed:79:b3:3d:07:27:8c:fa:1a:a5:08:c2:aa:18:
0c:0b:2b:83:c6:d1:6e:34:de:10:5a:c9:d2:0a:a0:
2e:2c:1f:62:7e:26:65:b5:af:8d:b5:62:eb:68:b1:
fa:0a:92:df:9a:7d:0b:61:58:3d:57:6e:b3:97:ee:
80:27:a9:ef:45:70:38:48:d6:6f:e0:d2:db:17:a0:
e4:6f:2c:5b:c6:9f:0c:5d:e9:dd:69:19:95:c1:e1:
fc:03:3d:cd:bc:7c:4c:b2:36:1b:25:b2:1e:5e:63:
0a:f6:8b:81:9e:27:18:02:2a:ef:b5:49:30:b3:46:
dc:ed:68:88:62:c8:12:e7:f0:9d:75:a5:7c:83:7f:
8d:15:a9:c1:33:29:76:1d:36:10:ee:5e:d9:0c:60:
27:1e:9c:56:9a:f1:b0:d4:a9:70:6b:8c:03:8c:99:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:F6:B9:DA:FA:04:EB:6A:9F:A9:C9:31:4A:A2:B5:EC:3C:36:BF
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.8.130.0-116.8.133.255
116.11.120.0/21
116.11.248.0/24
171.110.200.0/21
219.159.248.0/24
IPv6:
240e:108:1132::/47
240e:250:2800::/40
240e:951:2400::/38
240e:982:3200::/48
240e:982:3300::/40
Signature Algorithm: sha256WithRSAEncryption
8e:74:46:67:61:8c:01:9d:47:54:95:9f:62:52:42:99:6f:40:
8c:df:3e:42:24:5f:b6:79:f4:0f:87:e8:9c:22:9b:52:03:06:
09:78:99:e6:de:a9:3d:c7:ad:43:30:cf:7a:39:ca:62:95:99:
3b:0d:bf:ea:82:31:cd:2e:5f:13:88:ef:84:2d:9c:83:38:41:
af:60:ee:92:1c:d1:b7:7c:72:2a:32:ed:57:fc:10:4d:ee:7f:
aa:f2:b0:8a:bd:11:f5:20:da:29:64:26:7b:80:d8:af:33:a2:
6c:c2:ce:9b:8b:df:6c:d4:d4:a4:07:b7:0e:17:95:e2:ff:61:
21:46:65:c0:16:b6:06:48:bd:7c:9f:cd:ec:18:1b:92:15:7d:
82:80:48:b8:02:e1:70:fd:69:59:5e:29:ac:68:04:16:0a:97:
64:3f:c3:1a:f6:85:e9:01:ae:6e:a1:00:d1:6c:fc:e2:a4:5a:
58:c3:d2:49:48:6d:67:89:62:de:15:e3:44:d4:77:2d:e0:45:
38:f4:69:67:46:6b:f3:c2:a9:63:47:ae:b2:82:5f:f4:7e:67:
7f:ff:cb:f6:9e:cd:19:75:08:c5:ba:80:2f:f6:02:36:08:38:
32:47:81:d6:f0:f5:43:d1:47:af:90:b7:d1:4b:95:bc:be:2e:
54:d2:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:36 2026 by rpki-client