Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
File: AS23764.roa (raw, json)
Hash identifier: LJ/SOEt+WsU6pIj2CFLPOvXjwwUwtY27pvuFXCIfGt8=
Subject key identifier: DD:FE:FD:6D:DD:CC:DE:63:B0:32:11:04:81:55:8A:07:A6:87:6E:23
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 48174BAF92C1A14967CF27CD74634337FA5AF6B0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
Signing time: Thu 27 Aug 2026 06:54:04 +0000
ROA not before: Thu 27 Aug 2026 06:49:04 +0000
ROA not after: Thu 26 Aug 2027 06:54:04 +0000
asID: 23764
IP address blocks: 121.59.38.0/24 maxlen: 24
121.59.100.0/24 maxlen: 24
121.59.106.0/24 maxlen: 24
121.59.109.0/24 maxlen: 24
121.59.120.0/24 maxlen: 24
121.59.122.0/24 maxlen: 24
121.59.124.0/24 maxlen: 24
121.59.140.0/24 maxlen: 24
203.8.30.0/24 maxlen: 24
203.12.200.0/24 maxlen: 24
203.12.201.0/24 maxlen: 24
203.12.202.0/24 maxlen: 24
203.12.203.0/24 maxlen: 24
203.12.204.0/24 maxlen: 24
203.12.205.0/24 maxlen: 24
203.14.188.0/24 maxlen: 24
203.14.189.0/24 maxlen: 24
203.14.190.0/24 maxlen: 24
203.14.191.0/24 maxlen: 24
203.15.113.0/24 maxlen: 24
203.15.116.0/24 maxlen: 24
203.15.117.0/24 maxlen: 24
203.15.118.0/24 maxlen: 24
203.19.32.0/22 maxlen: 22
203.19.37.0/24 maxlen: 24
203.19.38.0/24 maxlen: 24
203.20.136.0/24 maxlen: 24
203.20.137.0/24 maxlen: 24
203.20.138.0/24 maxlen: 24
203.20.139.0/24 maxlen: 24
203.20.140.0/24 maxlen: 24
203.20.141.0/24 maxlen: 24
203.20.142.0/24 maxlen: 24
203.20.143.0/24 maxlen: 24
203.33.8.0/24 maxlen: 24
203.33.9.0/24 maxlen: 24
203.33.10.0/24 maxlen: 24
203.34.194.0/24 maxlen: 24
203.34.196.0/24 maxlen: 24
203.34.197.0/24 maxlen: 24
203.34.199.0/24 maxlen: 24
203.56.55.0/24 maxlen: 24
203.80.136.0/24 maxlen: 24
203.80.137.0/24 maxlen: 24
203.80.138.0/24 maxlen: 24
203.80.139.0/24 maxlen: 24
203.80.141.0/24 maxlen: 24
203.81.0.0/24 maxlen: 24
203.81.3.0/24 maxlen: 24
203.81.4.0/24 maxlen: 24
203.81.6.0/23 maxlen: 23
203.81.6.0/24 maxlen: 24
203.82.17.0/24 maxlen: 24
203.82.18.0/24 maxlen: 24
203.82.19.0/24 maxlen: 24
203.82.23.0/24 maxlen: 24
203.86.103.0/24 maxlen: 24
203.86.106.0/24 maxlen: 24
203.86.109.0/24 maxlen: 24
203.86.111.0/24 maxlen: 24
203.86.113.0/24 maxlen: 24
203.86.115.0/24 maxlen: 24
203.86.126.0/24 maxlen: 24
203.86.127.0/24 maxlen: 24
203.89.10.0/24 maxlen: 24
203.89.11.0/24 maxlen: 24
203.89.12.0/24 maxlen: 24
203.99.10.0/24 maxlen: 24
203.99.11.0/24 maxlen: 24
203.99.13.0/24 maxlen: 24
203.100.52.0/24 maxlen: 24
203.100.54.0/24 maxlen: 24
203.119.120.0/24 maxlen: 24
203.119.124.0/24 maxlen: 24
203.119.125.0/24 maxlen: 24
203.128.224.0/24 maxlen: 24
203.128.229.0/24 maxlen: 24
203.128.230.0/24 maxlen: 24
203.129.9.0/24 maxlen: 24
203.144.101.0/24 maxlen: 24
203.144.103.0/24 maxlen: 24
203.144.104.0/24 maxlen: 24
203.144.105.0/24 maxlen: 24
203.195.115.0/24 maxlen: 24
203.196.8.0/24 maxlen: 24
203.196.9.0/24 maxlen: 24
203.196.10.0/24 maxlen: 24
203.196.11.0/24 maxlen: 24
203.196.12.0/24 maxlen: 24
203.196.13.0/24 maxlen: 24
203.196.14.0/24 maxlen: 24
203.196.15.0/24 maxlen: 24
210.48.136.0/22 maxlen: 22
210.48.140.0/22 maxlen: 22
210.48.143.0/24 maxlen: 24
218.30.39.0/24 maxlen: 24
218.30.62.0/23 maxlen: 23
218.185.241.0/24 maxlen: 24
218.185.243.0/24 maxlen: 24
218.185.245.0/24 maxlen: 24
220.247.140.0/24 maxlen: 24
220.247.141.0/24 maxlen: 24
220.247.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 14:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:17:4b:af:92:c1:a1:49:67:cf:27:cd:74:63:43:37:fa:5a:f6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Aug 27 06:49:04 2026 GMT
Not After : Aug 26 06:54:04 2027 GMT
Subject: CN=DDFEFD6DDDCCDE63B032110481558A07A6876E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:5e:ef:31:0d:1e:4c:aa:88:5c:83:5c:ed:
eb:d6:35:f0:f6:2e:75:36:17:62:cd:6a:6a:aa:39:
56:68:7b:08:e0:86:7c:04:d4:ad:74:f8:28:07:9f:
68:25:3a:71:09:c4:48:76:7e:fe:98:e2:90:1d:ce:
58:59:37:36:62:e5:2a:76:60:da:11:83:48:3b:41:
e0:b8:79:32:19:24:9d:50:e3:76:30:e8:c0:13:cb:
73:4c:0c:95:fd:39:bd:81:aa:22:ab:bb:83:25:a2:
32:19:29:7e:96:25:f7:cf:f3:61:c3:27:4d:71:44:
bb:99:1f:40:b5:26:a4:18:0d:d2:09:5c:aa:7f:4a:
dd:5e:d3:d8:83:1b:f3:5a:63:4d:18:7e:44:5b:c6:
53:ef:7b:31:95:4d:bb:64:9e:a8:93:00:e6:2e:d9:
c7:f1:2d:8f:1f:6e:f4:a7:c4:de:ce:59:41:c4:1c:
fc:97:71:d3:1b:7c:a7:03:29:83:63:83:cc:15:54:
19:6c:4c:a9:c0:85:78:3f:14:9c:a8:3e:7f:61:e2:
fa:a6:5b:bb:92:44:1e:13:67:c9:0b:3f:c7:c1:dd:
e3:90:ec:1a:d5:ef:0e:23:32:4c:76:3f:c1:33:55:
61:40:25:6b:a2:5b:6e:09:7d:9d:67:fa:32:26:1a:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FE:FD:6D:DD:CC:DE:63:B0:32:11:04:81:55:8A:07:A6:87:6E:23
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.59.38.0/24
121.59.100.0/24
121.59.106.0/24
121.59.109.0/24
121.59.120.0/24
121.59.122.0/24
121.59.124.0/24
121.59.140.0/24
203.8.30.0/24
203.12.200.0-203.12.205.255
203.14.188.0/22
203.15.113.0/24
203.15.116.0-203.15.118.255
203.19.32.0/22
203.19.37.0-203.19.38.255
203.20.136.0/21
203.33.8.0-203.33.10.255
203.34.194.0/24
203.34.196.0/23
203.34.199.0/24
203.56.55.0/24
203.80.136.0/22
203.80.141.0/24
203.81.0.0/24
203.81.3.0-203.81.4.255
203.81.6.0/23
203.82.17.0-203.82.19.255
203.82.23.0/24
203.86.103.0/24
203.86.106.0/24
203.86.109.0/24
203.86.111.0/24
203.86.113.0/24
203.86.115.0/24
203.86.126.0/23
203.89.10.0-203.89.12.255
203.99.10.0/23
203.99.13.0/24
203.100.52.0/24
203.100.54.0/24
203.119.120.0/24
203.119.124.0/23
203.128.224.0/24
203.128.229.0-203.128.230.255
203.129.9.0/24
203.144.101.0/24
203.144.103.0-203.144.105.255
203.195.115.0/24
203.196.8.0/21
210.48.136.0/21
218.30.39.0/24
218.30.62.0/23
218.185.241.0/24
218.185.243.0/24
218.185.245.0/24
220.247.140.0/23
220.247.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d5:b3:cc:08:fb:d2:af:9a:ba:10:18:c9:e4:8c:9f:3b:55:
7f:28:35:0b:b4:86:5e:3d:78:9b:65:ce:97:e9:96:46:cb:c7:
90:0f:cd:18:fb:31:71:88:ea:17:b7:82:88:43:73:e7:a7:8f:
82:e6:bf:e5:50:42:4f:29:c3:5d:31:eb:b4:8f:27:59:80:0f:
8a:ab:87:c7:45:a0:18:55:31:52:15:c6:fe:b6:de:aa:6b:9b:
a5:75:ee:c5:93:be:fd:74:fd:35:91:dc:7d:15:b3:0f:f3:a6:
8b:05:2a:4c:4d:c7:16:81:e1:c7:4d:59:ec:f1:91:f1:c9:a0:
ed:23:35:2c:6e:a5:4c:e3:9c:91:30:2a:7f:91:1d:31:cc:32:
42:7e:9f:16:5c:52:31:ad:c7:01:de:8b:45:d8:34:ba:b2:e1:
80:24:5b:fd:0f:f7:40:7c:e1:72:75:2f:2f:80:0e:18:a0:03:
51:b4:ab:a8:a8:7e:96:e3:03:4a:8e:de:a0:f0:d8:26:2c:9f:
c5:e9:21:80:5f:fb:7c:51:91:bd:bb:1c:1f:39:f8:43:dd:9b:
cf:15:0a:0b:9a:18:d8:f9:7e:ff:f4:be:00:9a:85:ef:27:b4:
14:6f:2c:a5:c0:ba:bf:54:b6:0e:de:03:8f:8a:3e:e6:7a:61:
59:b6:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:06:37 2026 by rpki-client