Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
File: AS147038.roa (raw, json)
Hash identifier: Jit0A1hDamyNVjrveSxI+xQ0hwQE+Dtq38aBXUUSga8=
Subject key identifier: D8:A4:EA:A9:67:8D:3C:FE:C4:E0:31:D4:90:28:9F:7E:B4:F6:07:B1
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0381531D36CAABF69448667C83953AA77B90819A
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
Signing time: Thu 08 Oct 2026 02:28:30 +0000
ROA not before: Thu 08 Oct 2026 02:23:30 +0000
ROA not after: Thu 07 Oct 2027 02:28:30 +0000
asID: 147038
IP address blocks: 60.164.36.0/23 maxlen: 23
60.165.148.0/22 maxlen: 22
60.165.235.0/24 maxlen: 24
60.165.238.0/24 maxlen: 24
60.165.239.0/24 maxlen: 24
61.134.69.0/24 maxlen: 24
61.159.86.0/23 maxlen: 23
118.180.19.0/24 maxlen: 24
118.181.104.0/22 maxlen: 22
118.183.57.0/24 maxlen: 24
118.183.59.0/24 maxlen: 24
118.183.200.0/24 maxlen: 24
118.183.201.0/24 maxlen: 24
118.183.202.0/24 maxlen: 24
118.183.205.0/24 maxlen: 24
118.183.236.0/24 maxlen: 24
118.183.237.0/24 maxlen: 24
118.183.238.0/24 maxlen: 24
118.183.239.0/24 maxlen: 24
125.74.160.0/23 maxlen: 23
125.74.161.0/24 maxlen: 24
125.74.162.0/24 maxlen: 24
125.74.163.0/24 maxlen: 24
125.76.110.0/24 maxlen: 24
125.76.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:81:53:1d:36:ca:ab:f6:94:48:66:7c:83:95:3a:a7:7b:90:81:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Oct 8 02:23:30 2026 GMT
Not After : Oct 7 02:28:30 2027 GMT
Subject: CN=D8A4EAA9678D3CFEC4E031D490289F7EB4F607B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:b6:08:9d:c0:0c:c0:33:9f:6e:e9:92:cb:
1a:15:03:6a:8d:11:29:67:e9:70:02:15:b4:de:dc:
8a:71:f6:49:66:3b:5a:f5:c1:76:2f:c8:6a:9a:ad:
9b:f1:37:0e:25:85:0c:af:09:da:e2:d5:e2:b8:df:
c2:f0:e7:f7:bd:40:08:d1:0c:d8:53:1d:5f:d8:63:
71:e2:da:12:ba:ad:15:64:0d:d3:f8:0d:74:87:79:
5b:fb:09:f6:aa:51:13:45:08:83:09:46:56:ef:b3:
8f:39:ce:ad:a7:96:47:74:ae:f2:31:7d:48:d2:54:
3c:34:73:7e:1b:00:02:fc:57:85:b0:2c:65:84:8d:
82:58:d0:2d:83:41:76:2e:01:2b:dd:c7:d1:06:11:
a9:85:72:96:16:7c:da:8c:81:ec:9e:5f:10:43:e6:
b3:6c:07:de:2f:cf:ba:7f:7d:b7:b8:cc:ca:37:16:
d5:bf:a3:2d:f1:4f:e7:b2:c3:24:5d:3b:0e:e6:c1:
65:4a:3c:64:be:15:ea:10:0d:56:a8:7a:d8:ba:a8:
f8:bb:06:3b:32:68:8b:42:d8:65:85:05:dd:05:13:
98:41:5e:d8:19:e3:2d:0a:fd:6a:3a:d8:b8:3b:3c:
d3:12:16:0a:ea:63:2d:06:96:b1:9b:3b:17:79:da:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:EA:A9:67:8D:3C:FE:C4:E0:31:D4:90:28:9F:7E:B4:F6:07:B1
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.36.0/23
60.165.148.0/22
60.165.235.0/24
60.165.238.0/23
61.134.69.0/24
61.159.86.0/23
118.180.19.0/24
118.181.104.0/22
118.183.57.0/24
118.183.59.0/24
118.183.200.0-118.183.202.255
118.183.205.0/24
118.183.236.0/22
125.74.160.0/22
125.76.110.0/24
125.76.120.0/21
Signature Algorithm: sha256WithRSAEncryption
80:f6:bc:62:2c:ee:2f:9e:28:3c:a9:05:fb:1f:7a:d8:53:4a:
df:fc:8e:39:0b:f4:ff:c4:51:e6:f4:59:d5:95:ac:83:a2:42:
7a:a8:ba:8b:28:22:ad:25:1c:2a:6a:9e:c1:ee:b1:b3:07:b8:
14:89:cc:72:c3:78:3d:61:2f:be:e6:8d:f1:60:98:2e:00:eb:
2e:3d:62:f1:fe:96:f7:07:cf:4b:cb:6f:bd:a2:66:6c:10:d7:
34:63:db:65:8e:28:d2:a1:e3:dc:d7:b6:fd:1f:8d:31:8b:40:
30:46:5b:95:54:68:60:97:28:27:64:ee:28:5a:10:0d:2e:21:
01:ff:f5:2b:cd:68:71:f6:b9:2e:d7:b0:cd:34:80:51:49:9b:
d4:2e:ea:08:55:ce:a7:57:15:e3:b5:e5:d1:3c:7a:f4:6e:70:
ec:30:de:7b:d8:50:ed:ca:7f:c3:82:fc:98:2e:37:24:db:18:
7c:c7:64:f5:3f:ce:29:dc:07:c9:cc:3b:1b:af:42:1a:92:63:
87:27:f2:53:04:04:c7:60:80:4b:9c:77:ad:8c:91:43:ca:5a:
9e:77:df:46:5a:4d:bb:43:b7:57:c9:b9:c1:34:4a:3f:9a:d4:
28:84:87:e4:47:63:4d:ea:13:03:07:be:7a:06:f2:12:0c:9a:
4e:9a:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:26:55 2026 by rpki-client