Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149979.roa
File: AS149979.roa (raw, json)
Hash identifier: V+jx5fUFbkXzZRgwVK4QZeobnTRpjbGCbFNSsL2Twyg=
Subject key identifier: AD:76:1B:46:B9:8D:FD:7A:FF:FF:2C:E9:97:70:01:CC:E1:0C:AB:C1
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 171B8404A55257D0D4597C8A0E062470E0C1AE64
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149979.roa
Signing time: Mon 01 Jun 2026 16:09:49 +0000
ROA not before: Mon 01 Jun 2026 16:04:49 +0000
ROA not after: Mon 31 May 2027 16:09:49 +0000
asID: 149979
IP address blocks: 218.77.126.0/24 maxlen: 24
222.246.140.0/24 maxlen: 24
222.246.141.0/24 maxlen: 24
222.246.142.0/24 maxlen: 24
222.246.143.0/24 maxlen: 24
240e:106:a800::/39 maxlen: 39
240e:96a:3001::/48 maxlen: 48
240e:96a:3002::/48 maxlen: 48
240e:96a:3003::/48 maxlen: 48
240e:96a:3004::/48 maxlen: 48
240e:982:9900::/48 maxlen: 48
240e:982:9901::/48 maxlen: 48
240e:982:9902::/48 maxlen: 48
240e:982:9903::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1b:84:04:a5:52:57:d0:d4:59:7c:8a:0e:06:24:70:e0:c1:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 1 16:04:49 2026 GMT
Not After : May 31 16:09:49 2027 GMT
Subject: CN=AD761B46B98DFD7AFFFF2CE9977001CCE10CABC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:c5:5e:43:2f:f5:10:d5:86:bc:97:da:b4:
59:e8:6f:f0:eb:c1:5c:ac:f7:54:c2:f3:36:6f:ff:
f7:7e:95:aa:35:cd:63:01:fb:2e:b4:32:1b:fe:84:
10:4d:53:c6:47:a2:4f:55:0f:ac:60:00:e2:26:10:
a1:22:ca:07:54:57:71:c5:3c:3b:b6:e5:c0:e8:89:
e1:81:5b:70:77:b6:11:92:0b:ea:11:9b:a9:a7:ea:
67:c3:9e:a9:6e:23:94:0d:c5:7a:d3:f5:5b:05:d7:
34:c6:17:9d:df:c1:0f:80:71:f9:b0:e8:7b:3a:c4:
3e:e5:7b:8b:c2:2c:36:d4:f4:e4:e4:05:2f:b9:95:
c9:24:81:c0:63:d7:97:9c:e8:ad:ff:46:6b:c6:83:
ae:6c:bc:ee:e5:38:f9:89:fc:98:3c:96:07:af:b7:
5e:27:f0:77:93:1d:18:80:7b:95:6b:96:43:93:0e:
d3:f8:f9:79:74:77:e4:08:c2:85:ee:d0:16:79:21:
ee:2e:91:e6:e3:16:77:8e:88:b2:d9:cf:cc:ff:47:
ea:66:64:16:a4:81:55:87:39:ee:da:49:59:83:3f:
98:29:71:7b:ed:a4:ae:74:41:5d:dd:ed:22:21:ae:
48:b7:a8:c9:3c:9a:68:15:db:8d:03:b5:b9:cb:e5:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:1B:46:B9:8D:FD:7A:FF:FF:2C:E9:97:70:01:CC:E1:0C:AB:C1
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.77.126.0/24
222.246.140.0/22
IPv6:
240e:106:a800::/39
240e:96a:3001::-240e:96a:3004:ffff:ffff:ffff:ffff:ffff
240e:982:9900::/46
Signature Algorithm: sha256WithRSAEncryption
08:2f:9d:f4:4f:19:02:2f:35:ac:a8:e8:1d:7a:e9:e7:b6:9e:
1b:64:6e:7f:b3:85:e0:36:e1:b0:17:a4:76:9e:86:7b:a3:24:
60:b8:59:2f:85:a6:1d:c6:29:40:fa:6e:d0:e0:1a:4f:cc:a2:
f9:ba:39:8e:67:95:a6:69:7e:cc:49:cc:25:b2:9e:b1:66:1d:
50:12:09:95:58:cb:6e:95:4c:14:3b:a2:13:73:b0:59:1e:46:
fd:ea:79:4b:70:7f:ff:d0:ac:33:0c:c9:4f:60:c4:02:bf:6c:
03:04:23:67:70:45:3f:3d:73:89:d7:67:d8:8b:b7:45:12:fb:
fd:35:1d:47:5f:35:90:72:ee:c1:63:a5:42:05:34:71:a1:b4:
bc:ba:10:57:82:9a:b8:02:8d:8a:a2:99:3b:7c:ff:ae:1f:63:
14:20:60:a9:93:ca:2b:da:3a:28:ce:4d:7c:9f:ce:08:c4:53:
cf:24:4b:c1:39:2f:00:b6:4c:8b:68:ca:a6:6e:cc:a1:a4:bf:
45:ac:1d:d3:d7:21:91:3b:e5:20:c8:ee:69:02:31:65:98:72:
fd:1d:be:5c:dc:0a:15:69:1d:ac:2c:44:33:49:f8:25:21:d9:
51:f8:b0:74:86:30:ce:a1:c0:48:47:ff:14:81:10:d3:3d:0c:
e0:da:2a:98
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUFxuEBKVSV9DUWXyKDgYkcODBrmQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMTE2MDQ0OVoX
DTI3MDUzMTE2MDk0OVowMzExMC8GA1UEAxMoQUQ3NjFCNDZCOThERkQ3QUZGRkYy
Q0U5OTc3MDAxQ0NFMTBDQUJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOokxV5DL/UQ1Ya8l9q0Wehv8OvBXKz3VMLzNm//936VqjXNYwH7LrQyG/6E
EE1TxkeiT1UPrGAA4iYQoSLKB1RXccU8O7blwOiJ4YFbcHe2EZIL6hGbqafqZ8Oe
qW4jlA3FetP1WwXXNMYXnd/BD4Bx+bDoezrEPuV7i8IsNtT05OQFL7mVySSBwGPX
l5zorf9Ga8aDrmy87uU4+Yn8mDyWB6+3Xifwd5MdGIB7lWuWQ5MO0/j5eXR35AjC
he7QFnkh7i6R5uMWd46IstnPzP9H6mZkFqSBVYc57tpJWYM/mClxe+2krnRBXd3t
IiGuSLeoyTyaaBXbjQO1ucvllR8CAwEAAaOCAhcwggITMB0GA1UdDgQWBBStdhtG
uY39ev//LOmXcAHM4QyrwTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQ5OTc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MFIGCCsGAQUFBwEHAQH/BEMwQTASBAIAATAMAwQA2k1+AwQC3vaMMCsEAgACMCUD
BgEkDgEGqDASAwcAJA4JajABAwcAJA4JajAEAwcCJA4JgpkAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIL530TxkCLzWsqOgdeunntp4bZG5/s4XgNuGwF6R2noZ7oyRguFkv
haYdxilA+m7Q4BpPzKL5ujmOZ5WmaX7MScwlsp6xZh1QEgmVWMtulUwUO6ITc7BZ
Hkb96nlLcH//0KwzDMlPYMQCv2wDBCNncEU/PXOJ12fYi7dFEvv9NR1HXzWQcu7B
Y6VCBTRxobS8uhBXgpq4Ao2Kopk7fP+uH2MUIGCpk8or2joozk18n84IxFPPJEvB
OS8AtkyLaMqmbsyhpL9FrB3T1yGRO+UgyO5pAjFlmHL9Hb5c3AoVaR2sLEQzSfgl
IdlR+LB0hjDOocBIR/8UgRDTPQzg2iqY
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:47 2026 by rpki-client