Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
File: AS147038.roa (raw, json)
Hash identifier: nUDmrZR9ZLycUVqBpG6lJgZextBXbZiO4+kJQ9skHqc=
Subject key identifier: A7:4F:89:1A:0E:D1:11:87:59:12:1D:D4:59:F2:1A:5E:6E:4C:C9:B6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1E183AEC1514021222839B0316FB85DFEFBC724D
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
Signing time: Tue 02 Jun 2026 17:46:04 +0000
ROA not before: Tue 02 Jun 2026 17:41:04 +0000
ROA not after: Tue 01 Jun 2027 17:46:04 +0000
asID: 147038
IP address blocks: 60.164.36.0/23 maxlen: 23
60.165.148.0/22 maxlen: 22
60.165.235.0/24 maxlen: 24
60.165.238.0/24 maxlen: 24
60.165.239.0/24 maxlen: 24
61.134.69.0/24 maxlen: 24
61.159.86.0/23 maxlen: 23
118.180.19.0/24 maxlen: 24
118.181.104.0/22 maxlen: 22
118.183.57.0/24 maxlen: 24
118.183.59.0/24 maxlen: 24
118.183.200.0/24 maxlen: 24
118.183.201.0/24 maxlen: 24
118.183.202.0/24 maxlen: 24
118.183.205.0/24 maxlen: 24
118.183.236.0/24 maxlen: 24
118.183.237.0/24 maxlen: 24
118.183.238.0/24 maxlen: 24
118.183.239.0/24 maxlen: 24
125.76.110.0/24 maxlen: 24
125.76.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:18:3a:ec:15:14:02:12:22:83:9b:03:16:fb:85:df:ef:bc:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 17:41:04 2026 GMT
Not After : Jun 1 17:46:04 2027 GMT
Subject: CN=A74F891A0ED1118759121DD459F21A5E6E4CC9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:72:db:01:8c:61:37:61:76:5d:cc:2a:5e:51:
04:24:ec:0d:80:7e:fe:6e:9e:e9:69:87:bf:69:a1:
71:aa:fa:8b:34:ac:b8:1b:04:dc:d1:ff:15:56:04:
20:f0:6b:47:55:57:1d:b3:f0:fc:2d:03:55:74:bb:
1c:a7:52:77:ef:d9:fe:78:6e:46:33:ba:83:4a:41:
1a:07:c8:ff:19:5f:3a:23:01:5c:56:0a:3b:c6:17:
49:2a:57:3a:1b:15:fe:4d:18:b1:1e:d3:e3:3d:b8:
b9:ce:79:25:09:47:38:62:3c:3c:1e:15:3f:3e:22:
59:07:ba:f4:a6:60:b0:fb:ec:dd:e3:71:cf:01:79:
fd:5f:ed:60:23:6e:38:06:5c:54:24:df:45:6c:3d:
49:aa:58:5d:c9:7d:21:b4:10:b3:dd:bc:c2:92:ca:
66:18:1c:7a:ce:af:8d:ff:55:0a:4a:af:1c:3f:e9:
46:75:d6:d9:62:ae:80:7f:a2:54:94:08:f8:42:1a:
6e:d9:ab:a1:17:c1:8f:88:cc:13:2c:8e:29:22:78:
07:27:3c:f0:2f:08:e1:87:8b:28:bc:80:50:9d:7f:
01:eb:14:e7:84:d3:a2:30:82:13:8e:92:7c:bb:27:
0e:39:ee:04:51:9f:c9:4e:9e:bd:7f:79:8c:d1:37:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4F:89:1A:0E:D1:11:87:59:12:1D:D4:59:F2:1A:5E:6E:4C:C9:B6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.36.0/23
60.165.148.0/22
60.165.235.0/24
60.165.238.0/23
61.134.69.0/24
61.159.86.0/23
118.180.19.0/24
118.181.104.0/22
118.183.57.0/24
118.183.59.0/24
118.183.200.0-118.183.202.255
118.183.205.0/24
118.183.236.0/22
125.76.110.0/24
125.76.120.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:fa:fd:06:03:f9:42:6f:18:0b:f6:e5:04:c7:61:97:c1:27:
d1:4e:86:cf:3f:a2:50:02:2d:4d:fe:a5:aa:7d:8c:93:97:be:
a0:46:fc:78:fa:90:9b:36:6a:cf:3e:e0:a5:3c:c9:82:71:6f:
86:5c:80:a5:aa:e3:88:0a:00:3f:f0:e0:09:e9:42:d8:38:99:
0b:3a:aa:37:62:d7:78:a8:c3:c4:1d:7d:42:9d:bf:52:29:95:
6e:17:25:a4:ea:d1:1b:60:08:3d:9d:1c:f3:66:20:ac:62:15:
04:62:08:a5:a9:8a:ab:8b:c5:eb:82:5f:e9:82:49:c9:54:ac:
b5:fc:74:ad:89:87:18:b5:78:4b:34:0e:b6:6a:30:e0:0b:2e:
12:cf:ce:e7:3d:1c:93:f6:3b:a9:90:1e:f9:2f:e2:9a:1e:05:
3c:ee:8e:69:00:08:0d:97:92:dc:68:f5:07:2c:3a:43:a6:28:
48:d5:8c:b4:d3:6e:8f:ce:06:df:5e:db:73:e4:c0:9e:73:94:
50:56:10:9d:1b:0b:67:ac:01:cb:54:30:39:fc:ed:8c:d5:ef:
df:55:eb:6e:01:69:7d:fb:03:aa:b2:0d:43:8b:2d:a0:a6:3f:
36:b5:5e:d8:0f:54:bb:e4:58:79:c3:c4:82:e1:c2:b0:3b:03:
fa:d5:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:36 2026 by rpki-client