Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
File: AS23764.roa (raw, json)
Hash identifier: K+AIHHprzThy1tp7h4EFgHGbsnmoVFZWTD7nsm8TBBQ=
Subject key identifier: F9:0D:78:EC:6E:0A:4C:63:BF:CE:C4:8F:7C:B7:97:4B:C4:AC:71:4D
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1909F51ABDBA6890D48B53BBD4095B1258107676
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
Signing time: Fri 12 Jun 2026 16:09:08 +0000
ROA not before: Fri 12 Jun 2026 16:04:08 +0000
ROA not after: Fri 11 Jun 2027 16:09:08 +0000
asID: 23764
IP address blocks: 121.59.38.0/24 maxlen: 24
121.59.100.0/24 maxlen: 24
121.59.106.0/24 maxlen: 24
121.59.109.0/24 maxlen: 24
121.59.120.0/24 maxlen: 24
121.59.122.0/24 maxlen: 24
121.59.124.0/24 maxlen: 24
121.59.140.0/24 maxlen: 24
203.12.200.0/24 maxlen: 24
203.12.201.0/24 maxlen: 24
203.12.202.0/24 maxlen: 24
203.12.203.0/24 maxlen: 24
203.12.204.0/24 maxlen: 24
203.12.205.0/24 maxlen: 24
203.14.188.0/24 maxlen: 24
203.14.189.0/24 maxlen: 24
203.14.190.0/24 maxlen: 24
203.14.191.0/24 maxlen: 24
203.15.113.0/24 maxlen: 24
203.15.116.0/24 maxlen: 24
203.15.117.0/24 maxlen: 24
203.15.118.0/24 maxlen: 24
203.19.32.0/22 maxlen: 22
203.19.37.0/24 maxlen: 24
203.19.38.0/24 maxlen: 24
203.20.136.0/24 maxlen: 24
203.20.137.0/24 maxlen: 24
203.20.138.0/24 maxlen: 24
203.20.139.0/24 maxlen: 24
203.20.140.0/24 maxlen: 24
203.20.141.0/24 maxlen: 24
203.20.142.0/24 maxlen: 24
203.20.143.0/24 maxlen: 24
203.33.8.0/24 maxlen: 24
203.33.9.0/24 maxlen: 24
203.33.10.0/24 maxlen: 24
203.34.194.0/24 maxlen: 24
203.34.196.0/24 maxlen: 24
203.34.197.0/24 maxlen: 24
203.34.199.0/24 maxlen: 24
203.56.55.0/24 maxlen: 24
203.80.136.0/24 maxlen: 24
203.80.137.0/24 maxlen: 24
203.80.138.0/24 maxlen: 24
203.80.139.0/24 maxlen: 24
203.80.141.0/24 maxlen: 24
203.81.0.0/24 maxlen: 24
203.81.3.0/24 maxlen: 24
203.81.4.0/24 maxlen: 24
203.81.6.0/23 maxlen: 23
203.81.6.0/24 maxlen: 24
203.82.17.0/24 maxlen: 24
203.82.18.0/24 maxlen: 24
203.82.19.0/24 maxlen: 24
203.82.23.0/24 maxlen: 24
203.86.103.0/24 maxlen: 24
203.86.106.0/24 maxlen: 24
203.86.109.0/24 maxlen: 24
203.86.111.0/24 maxlen: 24
203.86.113.0/24 maxlen: 24
203.86.115.0/24 maxlen: 24
203.86.126.0/24 maxlen: 24
203.86.127.0/24 maxlen: 24
203.89.10.0/24 maxlen: 24
203.89.11.0/24 maxlen: 24
203.89.12.0/24 maxlen: 24
203.99.10.0/24 maxlen: 24
203.99.11.0/24 maxlen: 24
203.99.13.0/24 maxlen: 24
203.100.52.0/24 maxlen: 24
203.100.54.0/24 maxlen: 24
203.119.120.0/24 maxlen: 24
203.119.124.0/24 maxlen: 24
203.119.125.0/24 maxlen: 24
203.128.224.0/24 maxlen: 24
203.128.229.0/24 maxlen: 24
203.128.230.0/24 maxlen: 24
203.129.9.0/24 maxlen: 24
203.144.101.0/24 maxlen: 24
203.144.103.0/24 maxlen: 24
203.144.104.0/24 maxlen: 24
203.144.105.0/24 maxlen: 24
203.195.115.0/24 maxlen: 24
203.196.8.0/24 maxlen: 24
203.196.9.0/24 maxlen: 24
203.196.10.0/24 maxlen: 24
203.196.11.0/24 maxlen: 24
203.196.12.0/24 maxlen: 24
203.196.13.0/24 maxlen: 24
203.196.14.0/24 maxlen: 24
203.196.15.0/24 maxlen: 24
210.48.136.0/22 maxlen: 22
210.48.143.0/24 maxlen: 24
218.30.62.0/23 maxlen: 23
218.185.241.0/24 maxlen: 24
218.185.243.0/24 maxlen: 24
218.185.245.0/24 maxlen: 24
220.247.140.0/24 maxlen: 24
220.247.141.0/24 maxlen: 24
220.247.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:09:f5:1a:bd:ba:68:90:d4:8b:53:bb:d4:09:5b:12:58:10:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 12 16:04:08 2026 GMT
Not After : Jun 11 16:09:08 2027 GMT
Subject: CN=F90D78EC6E0A4C63BFCEC48F7CB7974BC4AC714D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:89:0a:f4:5d:9d:ba:69:26:16:b6:5e:2b:
7b:bf:c6:0c:fd:f6:6d:25:f7:b6:d3:ea:0d:a8:fd:
77:6e:75:9c:65:be:2c:44:82:92:32:da:02:b2:3b:
8a:06:e5:fc:71:07:23:0c:46:f2:f6:ef:e8:fb:62:
b5:4f:6b:93:f4:f4:e8:d8:d4:9a:f9:ba:50:88:d5:
6c:fe:72:66:8e:91:f3:d6:27:8a:38:b5:a7:7e:97:
b3:d0:f0:5e:9d:8b:65:75:c0:ba:ff:0e:2a:e7:c6:
9b:f7:2a:5f:4a:3b:34:4c:ae:11:74:e9:af:f1:e6:
78:8e:19:c9:29:d6:d2:48:eb:5f:29:6a:56:03:bd:
ce:cd:f3:2b:91:23:da:c4:0b:26:66:b1:b7:14:68:
14:87:9e:2a:4b:e0:94:73:86:6b:cf:87:cb:68:b3:
eb:8f:bf:06:2d:eb:f7:70:85:c7:15:22:56:e3:f5:
62:06:19:7d:26:49:27:64:68:a5:11:73:91:4c:16:
91:93:bd:3e:19:fd:9c:01:7f:b1:56:db:d1:6c:ad:
d8:6e:e9:94:19:25:d7:58:96:71:c1:6c:59:da:d3:
9d:0f:f3:3d:18:7d:9f:63:f7:48:27:b8:37:49:e5:
7c:60:e2:da:61:c5:de:d6:67:c1:25:30:39:f8:43:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:78:EC:6E:0A:4C:63:BF:CE:C4:8F:7C:B7:97:4B:C4:AC:71:4D
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.59.38.0/24
121.59.100.0/24
121.59.106.0/24
121.59.109.0/24
121.59.120.0/24
121.59.122.0/24
121.59.124.0/24
121.59.140.0/24
203.12.200.0-203.12.205.255
203.14.188.0/22
203.15.113.0/24
203.15.116.0-203.15.118.255
203.19.32.0/22
203.19.37.0-203.19.38.255
203.20.136.0/21
203.33.8.0-203.33.10.255
203.34.194.0/24
203.34.196.0/23
203.34.199.0/24
203.56.55.0/24
203.80.136.0/22
203.80.141.0/24
203.81.0.0/24
203.81.3.0-203.81.4.255
203.81.6.0/23
203.82.17.0-203.82.19.255
203.82.23.0/24
203.86.103.0/24
203.86.106.0/24
203.86.109.0/24
203.86.111.0/24
203.86.113.0/24
203.86.115.0/24
203.86.126.0/23
203.89.10.0-203.89.12.255
203.99.10.0/23
203.99.13.0/24
203.100.52.0/24
203.100.54.0/24
203.119.120.0/24
203.119.124.0/23
203.128.224.0/24
203.128.229.0-203.128.230.255
203.129.9.0/24
203.144.101.0/24
203.144.103.0-203.144.105.255
203.195.115.0/24
203.196.8.0/21
210.48.136.0/22
210.48.143.0/24
218.30.62.0/23
218.185.241.0/24
218.185.243.0/24
218.185.245.0/24
220.247.140.0/23
220.247.143.0/24
Signature Algorithm: sha256WithRSAEncryption
69:45:17:e0:d9:b1:88:39:38:5d:f0:a0:e8:5d:b1:62:d9:c8:
bc:c6:92:46:fc:72:91:18:06:b4:ed:e3:0f:f2:b0:ba:13:4e:
35:bf:e6:63:fc:c3:96:d3:90:1f:7f:34:f6:62:ab:fb:8c:c6:
0e:d2:e9:8e:e0:e1:68:52:ea:3c:6b:b8:3c:1a:f2:e6:d8:5e:
e8:c0:fa:37:35:c1:d1:f8:73:20:8d:a5:26:fb:71:14:5c:e5:
55:b5:1a:b1:3a:b1:8b:b2:7d:c6:8c:3e:81:57:22:26:6d:5f:
f5:4f:d0:e2:2b:e6:96:e8:82:5c:25:93:76:18:d5:dc:11:df:
ad:46:d1:50:0b:1c:a7:92:f7:1b:da:8b:1b:9f:da:5a:72:9d:
fe:6d:fa:3c:c9:e1:63:d8:87:85:76:ac:6a:e7:0f:ea:ab:fa:
51:f0:3a:48:6f:2b:bb:bb:8f:be:35:7a:cd:c0:8b:5e:71:c9:
60:9d:f6:85:f3:0f:1d:d6:82:9e:6a:fd:02:82:38:1f:79:6e:
63:cf:52:41:4c:86:cb:41:9f:38:f6:b8:e4:0b:2f:e5:3e:ed:
e5:9b:2a:a4:25:02:a5:37:c0:69:6e:c8:8d:b3:aa:d1:3e:ac:
5a:0f:c4:d8:f7:cd:48:f3:cb:a7:8f:86:44:19:d7:30:f5:83:
6e:09:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:52 2026 by rpki-client