Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63838.roa
File: AS63838.roa (raw, json)
Hash identifier: 38lisWwpBiE9eCUpZVtEAt1hhYdT6y6Ej+ZnnjrJMxE=
Subject key identifier: A8:D0:0F:E2:93:DD:AE:22:E4:2E:06:83:2F:EA:44:FC:9C:45:F3:4C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 40C303D439F420EB9EA7825E0FC62ED7480615D2
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63838.roa
Signing time: Mon 01 Jun 2026 16:31:26 +0000
ROA not before: Mon 01 Jun 2026 16:26:26 +0000
ROA not after: Mon 31 May 2027 16:31:26 +0000
asID: 63838
IP address blocks: 113.219.128.0/18 maxlen: 18
113.219.166.0/23 maxlen: 23
113.219.170.0/23 maxlen: 23
113.219.172.0/23 maxlen: 23
113.219.174.0/23 maxlen: 23
113.219.176.0/23 maxlen: 23
175.4.0.0/18 maxlen: 18
175.4.24.0/22 maxlen: 22
175.6.192.0/20 maxlen: 20
175.6.208.0/21 maxlen: 21
175.6.216.0/22 maxlen: 22
175.6.216.0/23 maxlen: 23
175.6.220.0/24 maxlen: 24
175.6.224.0/19 maxlen: 19
203.56.216.0/24 maxlen: 24
218.77.32.0/22 maxlen: 22
220.170.112.0/24 maxlen: 24
222.243.55.0/24 maxlen: 24
222.243.56.0/24 maxlen: 24
222.245.77.0/24 maxlen: 24
240e:10:a000::/37 maxlen: 37
240e:c3:2800::/37 maxlen: 37
240e:108:1195::/48 maxlen: 48
240e:968:7000::/36 maxlen: 36
240e:982:9400::/40 maxlen: 40
240e:982:990d::/48 maxlen: 48
240e:983:1900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c3:03:d4:39:f4:20:eb:9e:a7:82:5e:0f:c6:2e:d7:48:06:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 1 16:26:26 2026 GMT
Not After : May 31 16:31:26 2027 GMT
Subject: CN=A8D00FE293DDAE22E42E06832FEA44FC9C45F34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:2d:0b:a3:67:92:73:38:cb:d5:f6:f3:f4:
55:f0:88:36:67:e5:71:f7:2f:d4:d8:53:30:62:28:
4b:e0:1f:00:1a:95:8b:12:b6:b3:61:6c:d5:89:f0:
8a:33:04:a4:94:15:7c:f7:e6:54:b4:bb:45:b4:99:
65:c5:6b:1f:e4:b8:e1:c8:84:a3:69:28:9e:6d:34:
d2:79:9f:1c:02:fa:10:a1:00:fe:2f:76:ed:0f:51:
84:f0:8e:6e:83:f7:c1:d8:f6:3d:48:39:f7:69:13:
b8:9e:7e:b7:74:1b:f9:b7:5e:52:4b:66:a2:af:fc:
53:5c:00:37:3e:ee:71:fc:f3:ad:23:c4:5e:c3:ad:
da:e1:f5:ef:fb:1a:24:cb:83:df:bc:b2:cd:73:37:
49:00:56:b2:a6:7e:7a:90:77:99:7e:4b:78:a6:7e:
18:47:d9:5f:8b:07:3b:6b:40:82:d1:f4:c3:a9:ce:
87:63:76:9d:cf:74:44:bc:65:4f:8c:77:f5:27:c7:
b5:b6:2c:2a:b1:79:8d:3d:83:8b:8f:41:4b:04:60:
0e:81:c2:5e:1d:81:ab:f2:6c:9e:2a:f1:f1:bc:3e:
a1:34:73:f9:67:c6:74:f6:f9:cf:e8:bd:2a:ce:c2:
8c:f6:50:31:53:d2:bb:29:58:16:c1:22:dd:19:4b:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:0F:E2:93:DD:AE:22:E4:2E:06:83:2F:EA:44:FC:9C:45:F3:4C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.219.128.0/18
175.4.0.0/18
175.6.192.0-175.6.220.255
175.6.224.0/19
203.56.216.0/24
218.77.32.0/22
220.170.112.0/24
222.243.55.0-222.243.56.255
222.245.77.0/24
IPv6:
240e:10:a000::/37
240e:c3:2800::/37
240e:108:1195::/48
240e:968:7000::/36
240e:982:9400::/40
240e:982:990d::/48
240e:983:1900::/48
Signature Algorithm: sha256WithRSAEncryption
73:40:4d:3e:0c:4e:7c:fc:43:0f:36:d1:92:b4:81:6e:2b:47:
e1:53:c4:c5:ae:49:5d:1f:e1:75:81:6c:e4:81:ea:e7:85:e7:
79:43:0a:1d:da:45:c9:5e:15:ef:0a:28:eb:20:db:a4:7d:c1:
7e:fb:26:b0:c6:61:f2:24:fd:ac:a9:5f:12:bf:44:e2:ee:03:
2d:e8:25:db:b8:da:c3:dc:90:24:be:74:b7:c0:e3:03:47:b6:
85:98:9c:46:d1:19:14:d1:b7:4b:91:53:e2:bf:91:bd:3e:2a:
dd:11:88:0d:b4:c5:84:c8:0f:88:06:89:3f:23:c9:02:55:4d:
75:a7:4d:37:4a:ab:06:83:0d:98:f0:72:a3:e3:ce:6a:03:21:
c4:43:c9:ed:f9:22:54:b3:59:5c:c9:96:21:6e:1a:66:b4:a9:
2c:1d:07:03:66:1c:3b:d3:4c:60:20:45:d2:f3:3e:99:c4:09:
3b:1d:62:be:d3:b2:59:22:a4:f0:b8:a3:16:b3:0a:da:d4:05:
3c:ae:b4:59:3a:36:e5:ad:68:3a:24:63:61:58:5a:1e:50:6d:
16:ba:81:58:e4:4f:df:51:31:46:a4:fe:ef:fa:5a:a3:d2:3a:
5d:6d:ec:97:09:52:3f:40:61:c0:25:b4:f1:01:8b:0d:ab:1d:
5f:c4:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:41 2026 by rpki-client