Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151185.roa
File: AS151185.roa (raw, json)
Hash identifier: D3Y/bLq53MHVeiFtDdzrSYuLvas5oTi0e1z6DhEQZyI=
Subject key identifier: 64:95:4B:D3:79:6B:F9:FD:8E:51:A4:78:C3:27:C1:0E:50:A5:23:F5
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0974242C8FF8DE34B0BACABD23279DA6366CF12B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151185.roa
Signing time: Thu 04 Jun 2026 16:14:05 +0000
ROA not before: Thu 04 Jun 2026 16:09:05 +0000
ROA not after: Thu 03 Jun 2027 16:14:05 +0000
asID: 151185
IP address blocks: 61.184.0.0/21 maxlen: 21
61.184.8.0/21 maxlen: 21
61.184.16.0/22 maxlen: 22
61.184.20.0/22 maxlen: 22
111.170.0.0/18 maxlen: 18
111.170.0.0/20 maxlen: 20
111.170.16.0/20 maxlen: 20
111.170.32.0/20 maxlen: 20
111.170.48.0/20 maxlen: 20
111.170.128.0/20 maxlen: 20
111.170.129.0/24 maxlen: 24
111.170.144.0/20 maxlen: 20
111.170.160.0/20 maxlen: 20
111.170.232.0/23 maxlen: 23
171.80.0.0/18 maxlen: 18
171.80.64.0/19 maxlen: 19
171.80.96.0/20 maxlen: 20
171.80.112.0/20 maxlen: 20
240e:105:f100::/40 maxlen: 40
240e:108:1162::/48 maxlen: 48
240e:108:1166::/48 maxlen: 48
240e:108:4306::/48 maxlen: 48
240e:108:4b06::/48 maxlen: 48
240e:95d:c00::/38 maxlen: 38
240e:982:6200::/40 maxlen: 40
240e:982:6600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:74:24:2c:8f:f8:de:34:b0:ba:ca:bd:23:27:9d:a6:36:6c:f1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:09:05 2026 GMT
Not After : Jun 3 16:14:05 2027 GMT
Subject: CN=64954BD3796BF9FD8E51A478C327C10E50A523F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:f7:5f:89:14:63:a3:09:89:63:97:07:ea:
11:b7:22:fa:f8:df:ca:be:21:d7:b1:73:fd:72:f7:
28:28:bd:c3:2d:20:e3:0f:1c:ef:ad:84:76:15:40:
f2:ec:9e:a3:19:56:46:16:00:c4:b7:d7:e9:5e:f6:
5c:3f:cb:3d:b4:41:de:57:64:f6:c7:e7:79:ca:16:
01:be:74:92:f6:3e:5a:bb:12:06:86:c0:26:84:05:
31:24:7f:2d:58:a9:b4:ee:30:4a:b2:ae:27:23:04:
34:6c:61:6a:08:e8:f6:4c:59:e6:da:95:96:99:f4:
16:93:7c:07:53:f9:36:b5:18:21:14:7c:d9:13:66:
fd:14:a8:bd:5a:14:9b:55:bb:26:f4:3f:a3:8a:eb:
20:30:fb:4d:85:6c:9b:89:37:99:a3:bc:ef:86:d3:
58:64:31:08:33:c0:2d:d3:2c:6e:8d:ce:f4:78:37:
4d:9c:56:51:9d:b3:c8:d1:40:af:43:be:40:c7:a4:
d9:89:5a:b1:95:a4:fe:d5:2a:6f:31:d8:f2:93:e5:
c2:bd:99:28:be:6b:d9:da:5b:40:97:39:38:47:03:
11:8d:28:3e:50:36:0a:48:de:e6:9f:04:17:29:be:
b4:4b:9b:c4:7e:a4:00:7a:26:74:48:86:ae:65:b4:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:4B:D3:79:6B:F9:FD:8E:51:A4:78:C3:27:C1:0E:50:A5:23:F5
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151185.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.184.0.0-61.184.23.255
111.170.0.0/18
111.170.128.0-111.170.175.255
111.170.232.0/23
171.80.0.0/17
IPv6:
240e:105:f100::/40
240e:108:1162::/48
240e:108:1166::/48
240e:108:4306::/48
240e:108:4b06::/48
240e:95d:c00::/38
240e:982:6200::/40
240e:982:6600::/40
Signature Algorithm: sha256WithRSAEncryption
5c:80:69:7b:9f:61:3d:45:f1:53:fe:3d:a7:29:f1:b2:cb:1e:
7d:32:16:d3:de:74:b9:21:26:a5:f1:0c:be:52:60:48:21:5b:
4e:bc:0a:7c:58:cd:89:6b:f1:e1:26:5f:ca:fe:13:35:5e:6d:
e8:f5:12:eb:25:81:06:10:b2:7c:ce:51:40:87:ac:32:f8:24:
78:83:d7:43:39:62:6d:57:3b:ba:ee:3c:29:31:4b:63:bb:b4:
cd:c9:a2:1f:61:d0:7f:72:a6:8e:25:4d:9b:9e:a3:6d:a4:bb:
8f:b7:4c:fc:7f:91:b3:69:1b:ce:a7:e9:de:b8:d5:2b:e0:80:
5d:2b:be:41:35:35:7c:27:c0:64:b3:9b:76:66:82:e6:12:cf:
a2:b8:e2:67:6b:c0:db:b3:6b:c1:75:92:fc:68:ff:9f:bb:a5:
f5:49:78:75:62:39:29:27:7d:56:20:74:23:e0:16:58:e1:d2:
f5:18:ac:a6:65:1c:67:dc:c1:be:da:8a:e1:f4:09:a8:31:98:
bb:86:d6:08:9d:5e:f0:78:74:57:ea:a7:db:58:d1:6d:3b:5c:
cf:f5:e8:00:e1:23:c5:29:4b:0b:85:1a:c1:c4:93:1d:4c:7d:
2b:07:79:74:60:21:ec:da:ac:41:d8:4a:ee:ab:83:7a:59:9b:
55:f3:e0:be
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUCXQkLI/43jSwusq9IyedpjZs8SswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwNDE2MDkwNVoX
DTI3MDYwMzE2MTQwNVowMzExMC8GA1UEAxMoNjQ5NTRCRDM3OTZCRjlGRDhFNTFB
NDc4QzMyN0MxMEU1MEE1MjNGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9D91+JFGOjCYljlwfqEbci+vjfyr4h17Fz/XL3KCi9wy0g4w8c762EdhVA
8uyeoxlWRhYAxLfX6V72XD/LPbRB3ldk9sfnecoWAb50kvY+WrsSBobAJoQFMSR/
LViptO4wSrKuJyMENGxhagjo9kxZ5tqVlpn0FpN8B1P5NrUYIRR82RNm/RSovVoU
m1W7JvQ/o4rrIDD7TYVsm4k3maO874bTWGQxCDPALdMsbo3O9Hg3TZxWUZ2zyNFA
r0O+QMek2YlasZWk/tUqbzHY8pPlwr2ZKL5r2dpbQJc5OEcDEY0oPlA2Ckje5p8E
Fym+tEubxH6kAHomdEiGrmW02+8CAwEAAaOCAlowggJWMB0GA1UdDgQWBBRklUvT
eWv5/Y5RpHjDJ8EOUKUj9TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTUxMTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIGUBggrBgEFBQcBBwEB/wSBhDCBgTAzBAIAATAtMAsDAwM9uAMEAz24EAMEBm+q
ADAMAwQHb6qAAwQEb6qgAwQBb6roAwQHq1AAMEoEAgACMEQDBgAkDgEF8QMHACQO
AQgRYgMHACQOAQgRZgMHACQOAQhDBgMHACQOAQhLBgMGAiQOCV0MAwYAJA4JgmID
BgAkDgmCZjANBgkqhkiG9w0BAQsFAAOCAQEAXIBpe59hPUXxU/49pynxsssefTIW
0950uSEmpfEMvlJgSCFbTrwKfFjNiWvx4SZfyv4TNV5t6PUS6yWBBhCyfM5RQIes
MvgkeIPXQzlibVc7uu48KTFLY7u0zcmiH2HQf3KmjiVNm56jbaS7j7dM/H+Rs2kb
zqfp3rjVK+CAXSu+QTU1fCfAZLObdmaC5hLPorjiZ2vA27NrwXWS/Gj/n7ul9Ul4
dWI5KSd9ViB0I+AWWOHS9RispmUcZ9zBvtqK4fQJqDGYu4bWCJ1e8Hh0V+qn21jR
bTtcz/XoAOEjxSlLC4UawcSTHUx9Kwd5dGAh7NqsQdhK7quDelmbVfPgvg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:30:58 2026 by rpki-client