Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
File: AS146966.roa (raw, json)
Hash identifier: WBOM2MycJjO93Lz6VwmSZhy1IDDsk6Oa03AHw7YjmO8=
Subject key identifier: CB:AF:C9:D5:81:8C:FA:E6:05:C1:1B:9E:8C:FB:8C:68:57:65:80:E1
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4DB90E8EAD0877889E7E73527841519BAEF7C2AF
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
Signing time: Thu 11 Jun 2026 15:51:13 +0000
ROA not before: Thu 11 Jun 2026 15:46:13 +0000
ROA not after: Thu 10 Jun 2027 15:51:13 +0000
asID: 146966
IP address blocks: 49.71.79.0/24 maxlen: 24
49.71.126.0/23 maxlen: 23
49.86.40.0/22 maxlen: 22
58.220.38.0/24 maxlen: 24
58.220.85.0/24 maxlen: 24
58.220.163.0/24 maxlen: 24
58.220.164.0/24 maxlen: 24
58.220.177.0/24 maxlen: 24
58.220.178.0/23 maxlen: 23
58.220.178.0/24 maxlen: 24
58.220.179.0/24 maxlen: 24
58.220.180.0/24 maxlen: 24
58.220.188.0/24 maxlen: 24
61.132.32.0/24 maxlen: 24
114.230.85.0/24 maxlen: 24
114.230.172.0/22 maxlen: 22
114.230.228.0/22 maxlen: 22
114.230.232.0/21 maxlen: 21
117.91.16.0/21 maxlen: 21
117.91.40.0/22 maxlen: 22
121.229.160.0/24 maxlen: 24
121.229.168.0/24 maxlen: 24
121.229.172.0/24 maxlen: 24
121.229.175.0/24 maxlen: 24
121.229.177.0/24 maxlen: 24
121.229.204.0/24 maxlen: 24
121.229.205.0/24 maxlen: 24
121.233.208.0/23 maxlen: 23
121.233.230.0/24 maxlen: 24
121.233.238.0/23 maxlen: 23
121.237.180.0/24 maxlen: 24
121.237.181.0/24 maxlen: 24
121.237.182.0/24 maxlen: 24
121.237.183.0/24 maxlen: 24
180.97.176.0/23 maxlen: 23
180.97.176.0/24 maxlen: 24
180.97.177.0/24 maxlen: 24
180.97.191.0/24 maxlen: 24
180.119.35.0/24 maxlen: 24
180.119.140.0/23 maxlen: 23
180.119.152.0/22 maxlen: 22
202.111.123.0/24 maxlen: 24
203.170.58.0/24 maxlen: 24
203.170.59.0/24 maxlen: 24
218.91.113.0/24 maxlen: 24
218.91.114.0/24 maxlen: 24
221.229.0.0/24 maxlen: 24
221.229.4.0/24 maxlen: 24
221.229.21.0/24 maxlen: 24
221.229.38.0/24 maxlen: 24
221.229.52.0/23 maxlen: 23
221.229.68.0/24 maxlen: 24
221.229.92.0/24 maxlen: 24
221.229.99.0/24 maxlen: 24
221.229.101.0/24 maxlen: 24
221.229.103.0/24 maxlen: 24
221.229.106.0/24 maxlen: 24
221.229.107.0/24 maxlen: 24
222.189.172.0/23 maxlen: 23
222.191.77.0/24 maxlen: 24
222.191.78.0/24 maxlen: 24
240e:1a:160::/44 maxlen: 44
240e:978:2900::/40 maxlen: 40
240e:978:3900::/40 maxlen: 40
240e:978:4900::/40 maxlen: 40
240e:978:4929::/48 maxlen: 48
240e:978:492e::/48 maxlen: 48
240e:978:493a::/48 maxlen: 48
240e:978:4946::/48 maxlen: 48
240e:978:494a::/48 maxlen: 48
240e:978:495c::/48 maxlen: 48
240e:978:4963::/48 maxlen: 48
240e:978:4971::/48 maxlen: 48
240e:978:499d::/48 maxlen: 48
240e:978:49ff::/48 maxlen: 48
240e:982:d902::/48 maxlen: 48
240e:982:d947::/48 maxlen: 48
240e:982:d948::/48 maxlen: 48
240e:982:d96c::/48 maxlen: 48
240e:982:d98d::/48 maxlen: 48
240e:982:d996::/48 maxlen: 48
240e:982:d9af::/48 maxlen: 48
240e:982:d9b4::/48 maxlen: 48
240e:982:d9cf::/48 maxlen: 48
240e:982:d9d4::/48 maxlen: 48
240e:982:da26::/48 maxlen: 48
240e:982:da55::/48 maxlen: 48
240e:982:db29::/48 maxlen: 48
240e:982:db2c::/48 maxlen: 48
240e:982:db51::/48 maxlen: 48
240e:982:db61::/48 maxlen: 48
240e:982:db66::/48 maxlen: 48
240e:982:dc18::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b9:0e:8e:ad:08:77:88:9e:7e:73:52:78:41:51:9b:ae:f7:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 15:46:13 2026 GMT
Not After : Jun 10 15:51:13 2027 GMT
Subject: CN=CBAFC9D5818CFAE605C11B9E8CFB8C68576580E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:a3:f3:23:e0:f5:7c:3f:b4:f3:1b:f1:e8:
5d:9b:83:52:03:ec:01:21:c4:27:63:fa:5c:ca:0f:
5e:37:e5:44:f9:85:ad:73:32:a6:b9:cd:66:ba:e6:
44:21:45:52:26:d3:60:34:21:25:9d:71:49:12:a4:
ab:98:11:23:78:74:c9:1f:45:09:25:10:c1:6d:7a:
bf:60:c3:10:bd:97:9c:63:1f:19:80:de:b9:22:e9:
59:cc:89:c9:a8:5e:be:2e:3c:23:64:70:e2:a5:4e:
c3:e3:ce:19:24:f8:56:92:33:0d:bb:44:13:0a:9e:
32:bf:e5:15:f7:56:a9:ec:b4:b7:dc:12:08:2f:da:
b4:d5:a5:f6:38:9c:83:44:60:b3:01:50:3c:83:d8:
16:e5:0d:59:9d:6b:8d:72:1e:34:69:c5:58:68:d7:
96:8b:26:41:f8:84:20:7c:b4:c4:5e:c9:e9:a9:b3:
67:01:2c:ba:6c:91:19:46:0a:61:63:23:d6:6d:62:
7f:d2:e2:97:1b:71:33:67:94:84:64:8c:fc:50:bc:
1e:50:7c:d8:ed:da:24:f2:03:64:c5:73:2e:f3:9c:
53:b3:aa:b7:d0:44:6c:f8:a6:66:34:0f:4a:5d:05:
9d:73:69:0c:59:01:cf:83:ab:5f:0d:23:cd:70:43:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:C9:D5:81:8C:FA:E6:05:C1:1B:9E:8C:FB:8C:68:57:65:80:E1
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.71.79.0/24
49.71.126.0/23
49.86.40.0/22
58.220.38.0/24
58.220.85.0/24
58.220.163.0-58.220.164.255
58.220.177.0-58.220.180.255
58.220.188.0/24
61.132.32.0/24
114.230.85.0/24
114.230.172.0/22
114.230.228.0-114.230.239.255
117.91.16.0/21
117.91.40.0/22
121.229.160.0/24
121.229.168.0/24
121.229.172.0/24
121.229.175.0/24
121.229.177.0/24
121.229.204.0/23
121.233.208.0/23
121.233.230.0/24
121.233.238.0/23
121.237.180.0/22
180.97.176.0/23
180.97.191.0/24
180.119.35.0/24
180.119.140.0/23
180.119.152.0/22
202.111.123.0/24
203.170.58.0/23
218.91.113.0-218.91.114.255
221.229.0.0/24
221.229.4.0/24
221.229.21.0/24
221.229.38.0/24
221.229.52.0/23
221.229.68.0/24
221.229.92.0/24
221.229.99.0/24
221.229.101.0/24
221.229.103.0/24
221.229.106.0/23
222.189.172.0/23
222.191.77.0-222.191.78.255
IPv6:
240e:1a:160::/44
240e:978:2900::/40
240e:978:3900::/40
240e:978:4900::/40
240e:982:d902::/48
240e:982:d947::-240e:982:d948:ffff:ffff:ffff:ffff:ffff
240e:982:d96c::/48
240e:982:d98d::/48
240e:982:d996::/48
240e:982:d9af::/48
240e:982:d9b4::/48
240e:982:d9cf::/48
240e:982:d9d4::/48
240e:982:da26::/48
240e:982:da55::/48
240e:982:db29::/48
240e:982:db2c::/48
240e:982:db51::/48
240e:982:db61::/48
240e:982:db66::/48
240e:982:dc18::/46
Signature Algorithm: sha256WithRSAEncryption
81:80:93:ab:fa:a1:0a:14:a6:7e:2d:a7:6a:02:a9:5c:0b:cf:
8b:bf:de:83:1d:09:31:90:8f:1b:8b:77:ac:20:a5:43:e4:42:
a5:a8:46:34:ce:a6:c4:5a:80:72:93:73:33:14:62:d2:4f:58:
95:6a:7e:3b:7c:50:cd:41:64:14:b4:d1:1c:f5:29:7e:9d:7a:
50:11:c9:09:75:af:a6:f8:75:9a:f7:45:a1:1e:7e:09:5b:e6:
6c:8e:5a:bf:ad:18:6c:43:3c:9a:9d:1c:be:ac:a5:10:0b:61:
8b:f2:8b:c5:08:42:6a:9f:78:3b:41:13:83:b1:6a:e7:9c:f5:
50:88:32:8b:44:6e:35:49:58:8d:d2:53:cf:93:58:26:95:30:
bb:00:18:c5:56:e5:75:89:0a:43:f5:ef:b0:e6:51:0c:c0:0a:
2a:c1:65:95:c7:0c:e7:82:cc:4b:2b:47:ef:fa:16:2b:80:b3:
d9:97:0e:a8:1c:ea:62:8d:da:eb:14:42:cb:4d:90:59:d0:ef:
63:d5:fd:4c:f4:da:4f:94:44:66:90:ca:a8:92:b2:9a:bf:08:
f8:d0:3b:0b:25:32:29:98:e2:6c:47:86:dc:59:e1:b6:78:59:
03:6c:1b:d1:a3:5c:7e:03:53:49:fe:13:2b:66:5c:2b:9b:36:
63:43:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:37 2026 by rpki-client