Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141771.roa
File: AS141771.roa (raw, json)
Hash identifier: t1lAE5DfLbrtQf/Tp8EIrCzZXZUOvjRhUDUo09o776c=
Subject key identifier: 45:A9:4F:A9:93:ED:AE:8A:8A:13:7E:0B:79:89:A7:41:5C:00:2F:97
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3872A94164F2634B083C357DA21314D63DFB80F6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141771.roa
Signing time: Tue 01 Sep 2026 16:01:48 +0000
ROA not before: Tue 01 Sep 2026 15:56:48 +0000
ROA not after: Tue 31 Aug 2027 16:01:48 +0000
asID: 141771
IP address blocks: 27.129.52.0/22 maxlen: 22
27.129.55.0/24 maxlen: 24
106.8.128.0/19 maxlen: 19
106.9.36.0/23 maxlen: 23
106.112.128.0/19 maxlen: 19
106.118.128.0/18 maxlen: 18
106.118.128.0/19 maxlen: 19
111.224.56.0/21 maxlen: 21
111.225.128.0/18 maxlen: 18
123.180.128.0/19 maxlen: 19
123.182.0.0/18 maxlen: 18
123.183.224.0/19 maxlen: 19
124.237.32.0/19 maxlen: 19
124.239.0.0/19 maxlen: 19
219.148.104.0/22 maxlen: 22
222.223.160.0/20 maxlen: 20
240e:c:6000::/37 maxlen: 37
240e:4c:6000::/37 maxlen: 37
240e:4c:6003::/48 maxlen: 48
240e:b1:e000::/37 maxlen: 37
240e:b2:a000::/35 maxlen: 35
240e:340:6b00::/40 maxlen: 40
240e:340:6c00::/38 maxlen: 38
240e:340:7000::/37 maxlen: 37
240e:340:7800::/38 maxlen: 38
240e:341:6b00::/40 maxlen: 40
240e:341:6c00::/38 maxlen: 38
240e:341:7000::/37 maxlen: 37
240e:341:7800::/38 maxlen: 38
240e:342:6b00::/40 maxlen: 40
240e:342:6c00::/38 maxlen: 38
240e:342:7000::/37 maxlen: 37
240e:342:7800::/38 maxlen: 38
240e:343:6b00::/40 maxlen: 40
240e:343:6c00::/38 maxlen: 38
240e:343:7000::/37 maxlen: 37
240e:343:7800::/38 maxlen: 38
240e:640:a00::/40 maxlen: 40
240e:640:8a00::/40 maxlen: 40
240e:640:ca00::/40 maxlen: 40
240e:640:ea00::/40 maxlen: 40
240e:940:a00::/40 maxlen: 40
240e:940:8a00::/40 maxlen: 40
240e:940:ca00::/40 maxlen: 40
240e:940:ea00::/40 maxlen: 40
240e:983:f06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:72:a9:41:64:f2:63:4b:08:3c:35:7d:a2:13:14:d6:3d:fb:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 1 15:56:48 2026 GMT
Not After : Aug 31 16:01:48 2027 GMT
Subject: CN=45A94FA993EDAE8A8A137E0B7989A7415C002F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:72:10:43:f4:4f:51:6f:ff:91:7e:68:ef:
c5:a4:91:57:b0:bd:97:84:58:fb:0c:37:39:48:f0:
b6:ae:a5:0a:a6:c4:f4:d0:2b:cc:8c:da:58:2e:eb:
51:25:0b:15:ec:2f:1e:d1:07:7d:d3:07:a5:59:32:
b4:a8:50:46:ba:44:66:d1:58:2b:4f:67:b7:37:7c:
a2:74:2b:f8:a4:4b:f9:5c:cb:8c:d8:da:59:f2:c3:
3f:ce:7b:4a:1c:db:f1:0d:9c:ae:6f:5b:2a:6f:f6:
7a:86:80:22:24:3d:50:7b:f7:bd:35:86:63:5d:88:
60:c2:d8:95:cd:91:48:5c:ad:d6:d7:23:84:ed:02:
36:bd:3a:4f:ae:5f:18:0d:88:ff:80:df:a1:91:45:
23:ea:ce:79:8f:20:1b:bd:34:24:e5:96:9d:de:13:
9d:c1:3a:f2:d3:f2:70:86:8b:ae:be:90:2c:fc:f1:
da:69:ad:91:5c:52:aa:ce:2a:30:0d:ee:bc:05:ed:
10:7c:7a:15:21:ed:27:79:71:22:a0:c5:06:90:9b:
38:45:60:57:f5:7d:7b:e9:fc:f1:b5:f2:8e:24:46:
a0:da:b8:56:fa:d5:a4:b3:64:81:2b:e6:44:cc:da:
2e:26:2a:ef:56:14:de:51:14:de:25:cf:59:3c:ce:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:4F:A9:93:ED:AE:8A:8A:13:7E:0B:79:89:A7:41:5C:00:2F:97
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.129.52.0/22
106.8.128.0/19
106.9.36.0/23
106.112.128.0/19
106.118.128.0/18
111.224.56.0/21
111.225.128.0/18
123.180.128.0/19
123.182.0.0/18
123.183.224.0/19
124.237.32.0/19
124.239.0.0/19
219.148.104.0/22
222.223.160.0/20
IPv6:
240e:c:6000::/37
240e:4c:6000::/37
240e:b1:e000::/37
240e:b2:a000::/35
240e:340:6b00::-240e:340:7bff:ffff:ffff:ffff:ffff:ffff
240e:341:6b00::-240e:341:7bff:ffff:ffff:ffff:ffff:ffff
240e:342:6b00::-240e:342:7bff:ffff:ffff:ffff:ffff:ffff
240e:343:6b00::-240e:343:7bff:ffff:ffff:ffff:ffff:ffff
240e:640:a00::/40
240e:640:8a00::/40
240e:640:ca00::/40
240e:640:ea00::/40
240e:940:a00::/40
240e:940:8a00::/40
240e:940:ca00::/40
240e:940:ea00::/40
240e:983:f06::/48
Signature Algorithm: sha256WithRSAEncryption
5b:5f:ac:13:81:e1:8f:8d:ee:8b:ce:f9:57:72:17:b5:47:2c:
b8:a8:2e:1f:e2:de:34:bd:5e:72:48:d6:c4:b0:dd:e5:42:b2:
8a:07:3f:b5:d7:10:1b:b4:89:5a:82:f5:3c:71:23:41:d1:37:
3a:c1:a4:89:ec:3f:cf:ea:d7:7b:9a:9c:44:08:ec:c1:c9:71:
b8:3a:23:4c:00:fc:27:13:6e:55:b6:a7:ec:de:57:a2:8e:46:
fe:20:68:fc:a1:c4:48:35:66:39:27:c2:96:06:ab:e8:48:7b:
38:c3:45:13:fe:57:75:57:68:13:e5:b5:51:e2:e8:8e:8f:c4:
56:81:19:49:29:e5:75:2d:0b:75:86:ea:df:c6:3b:33:fe:8c:
6a:a4:07:9c:00:ae:93:d3:e6:9f:46:88:e7:a3:a8:b5:98:9d:
e7:73:5b:02:97:7a:24:cc:d0:52:77:fd:a3:11:bb:cb:8d:30:
a5:7d:de:bb:41:98:8d:a5:a3:6e:01:62:02:e7:0c:cd:b4:fd:
b1:50:8d:d3:03:b8:0a:74:2a:73:0e:28:e0:01:c8:e0:a6:fb:
a2:a9:92:19:6e:1f:82:ee:4e:06:7f:88:80:27:65:d5:fb:ec:
af:88:06:35:a8:8d:34:00:13:7a:62:57:20:49:18:7a:26:da:
bb:23:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:27:29 2026 by rpki-client