Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS133119.roa
File: AS133119.roa (raw, json)
Hash identifier: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=
Subject key identifier: 8B:E4:D4:D2:19:C3:7C:56:9D:38:86:5A:22:EE:AB:92:EE:93:D5:01
Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Certificate serial: 447BF99B457A2D1933B30CA0BEF63E17C025F8FD
Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS133119.roa
Signing time: Fri 12 Jun 2026 08:59:27 +0000
ROA not before: Fri 12 Jun 2026 08:54:27 +0000
ROA not after: Fri 11 Jun 2027 08:59:27 +0000
asID: 133119
IP address blocks: 103.26.64.0/22 maxlen: 22
110.43.64.0/20 maxlen: 20
110.43.112.0/21 maxlen: 21
110.43.160.0/21 maxlen: 21
110.43.168.0/21 maxlen: 21
110.43.176.0/21 maxlen: 21
110.43.192.0/19 maxlen: 19
120.92.0.0/23 maxlen: 23
120.92.2.0/23 maxlen: 23
120.92.4.0/23 maxlen: 23
120.92.6.0/23 maxlen: 23
120.92.8.0/23 maxlen: 23
120.92.10.0/23 maxlen: 23
120.92.12.0/23 maxlen: 23
120.92.14.0/23 maxlen: 23
120.92.16.0/21 maxlen: 21
120.92.24.0/21 maxlen: 21
120.92.32.0/21 maxlen: 21
120.92.40.0/21 maxlen: 21
120.92.48.0/21 maxlen: 21
120.92.56.0/21 maxlen: 21
120.92.64.0/21 maxlen: 21
120.92.72.0/21 maxlen: 21
120.92.80.0/21 maxlen: 21
120.92.88.0/21 maxlen: 21
120.92.96.0/21 maxlen: 21
120.92.104.0/21 maxlen: 21
120.92.112.0/21 maxlen: 21
120.92.120.0/21 maxlen: 21
120.92.192.0/19 maxlen: 19
120.92.192.0/23 maxlen: 23
120.92.194.0/23 maxlen: 23
120.92.200.0/21 maxlen: 21
120.92.208.0/20 maxlen: 20
120.131.0.0/23 maxlen: 23
120.131.2.0/23 maxlen: 23
120.131.4.0/23 maxlen: 23
120.131.6.0/23 maxlen: 23
120.131.8.0/23 maxlen: 23
120.131.10.0/23 maxlen: 23
120.131.12.0/23 maxlen: 23
120.131.14.0/23 maxlen: 23
2401:1d40::/48 maxlen: 48
2401:1d40:100::/48 maxlen: 48
2401:1d40:f21::/48 maxlen: 48
2401:1d40:f22::/48 maxlen: 48
2401:1d40:f23::/48 maxlen: 48
2401:1d40:f24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7b:f9:9b:45:7a:2d:19:33:b3:0c:a0:be:f6:3e:17:c0:25:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Validity
Not Before: Jun 12 08:54:27 2026 GMT
Not After : Jun 11 08:59:27 2027 GMT
Subject: CN=8BE4D4D219C37C569D38865A22EEAB92EE93D501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:d1:bf:da:2c:85:d1:84:63:78:f6:d1:aa:
63:69:64:04:f9:3c:e3:5e:56:5f:f5:c9:3c:6d:85:
2e:24:b3:ed:2a:8f:df:12:5e:cc:c7:97:a4:eb:08:
e7:be:14:20:6f:1a:82:d8:2e:29:4b:7b:cb:64:80:
5f:cf:22:b2:45:b1:9a:71:8b:0d:2e:4e:e8:d0:82:
76:5c:ab:3c:89:94:fa:aa:de:bb:a5:4f:69:f7:9c:
03:11:53:a1:94:a5:92:7c:44:1c:d8:fd:21:53:be:
d0:c1:d0:a0:7b:05:ee:a3:eb:bd:2a:b1:78:d4:2b:
5e:73:a4:30:81:39:e9:68:a5:4e:d0:94:4c:f5:38:
f6:d8:1c:13:88:8b:f0:b7:c0:52:40:4a:fe:fd:c0:
ac:bc:95:21:58:ad:a0:e8:c3:90:77:d7:82:8e:0d:
dd:70:2f:c2:7a:31:08:ac:f1:22:ca:a6:62:5c:e4:
67:01:83:37:89:68:72:96:71:a1:84:b7:1c:8c:6f:
36:4d:b4:bb:cb:60:87:da:71:34:28:82:d6:fb:19:
4b:cd:6f:37:ba:02:06:0e:0d:96:2f:b0:97:aa:b2:
01:27:2e:7d:5f:bb:40:76:ae:82:07:59:39:17:14:
50:d8:98:c1:33:25:80:3b:83:0c:f3:28:b1:1a:6b:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E4:D4:D2:19:C3:7C:56:9D:38:86:5A:22:EE:AB:92:EE:93:D5:01
X509v3 Authority Key Identifier:
keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS133119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.64.0/22
110.43.64.0/20
110.43.112.0/21
110.43.160.0-110.43.183.255
110.43.192.0/19
120.92.0.0/17
120.92.192.0/19
120.131.0.0/20
IPv6:
2401:1d40::/48
2401:1d40:100::/48
2401:1d40:f21::-2401:1d40:f24:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:5f:fb:37:23:1c:fa:fc:8f:87:b7:a2:99:5d:43:d9:db:32:
bb:8a:a6:3e:77:a4:aa:14:86:89:f5:fb:a3:33:d5:5e:13:eb:
02:36:3e:e4:c7:b9:16:77:06:67:46:e5:b7:f7:ea:8a:58:fe:
5f:a0:89:c4:8b:df:56:e2:30:0b:ea:d3:ac:33:81:ed:48:57:
9d:a7:27:d3:3a:52:e4:76:ff:77:ca:8c:1d:3d:7b:a3:6b:5f:
9d:3a:3f:9d:e1:96:5f:bf:41:f7:e3:82:ca:4e:13:1a:ba:89:
35:02:5d:c4:f9:99:a9:ca:05:b9:8c:fe:d6:c0:18:d8:e6:93:
2f:9c:95:d3:59:ac:99:04:19:7f:67:48:c6:2c:e8:65:aa:e0:
22:59:76:3b:82:4a:61:76:64:2b:70:56:b4:4a:a9:84:ff:ff:
7d:29:19:2d:07:29:e3:3c:b7:43:c5:0f:6d:0d:16:12:d6:0f:
16:42:a8:77:8c:10:3f:cf:87:2a:dd:b0:ea:6a:3a:ff:54:24:
0e:2f:6f:ee:85:d7:4f:7a:69:b8:42:7a:98:bd:63:88:29:91:
a1:e1:2a:7d:fb:8e:4a:70:e9:ca:f0:56:b8:2b:9f:34:f4:54:
d2:b0:a2:d5:d9:6e:0a:2c:98:3c:5b:17:36:3e:38:f0:e5:28:
5b:cc:db:1b
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIURHv5m0V6LRkzswygvvY+F8Al+P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz
QkMwRDg4NjAeFw0yNjA2MTIwODU0MjdaFw0yNzA2MTEwODU5MjdaMDMxMTAvBgNV
BAMTKDhCRTRENEQyMTlDMzdDNTY5RDM4ODY1QTIyRUVBQjkyRUU5M0Q1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSndG/2iyF0YRjePbRqmNpZAT5
PONeVl/1yTxthS4ks+0qj98SXszHl6TrCOe+FCBvGoLYLilLe8tkgF/PIrJFsZpx
iw0uTujQgnZcqzyJlPqq3rulT2n3nAMRU6GUpZJ8RBzY/SFTvtDB0KB7Be6j670q
sXjUK15zpDCBOelopU7QlEz1OPbYHBOIi/C3wFJASv79wKy8lSFYraDow5B314KO
Dd1wL8J6MQis8SLKpmJc5GcBgzeJaHKWcaGEtxyMbzZNtLvLYIfacTQogtb7GUvN
bze6AgYODZYvsJeqsgEnLn1fu0B2roIHWTkXFFDYmMEzJYA7gwzzKLEaa5/bAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUi+TU0hnDfFadOIZaIu6rku6T1QEwHwYDVR0j
BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0
NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BUzEzMzExOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB/BggrBgEFBQcBBwEB/wRwMG4wPgQC
AAEwOAMEAmcaQAMEBG4rQAMEA24rcDAMAwQFbiugAwQDbiuwAwQFbivAAwQHeFwA
AwQFeFzAAwQEeIMAMCwEAgACMCYDBwAkAR1AAAADBwAkAR1AAQAwEgMHACQBHUAP
IQMHACQBHUAPJDANBgkqhkiG9w0BAQsFAAOCAQEAC1/7NyMc+vyPh7eimV1D2dsy
u4qmPnekqhSGifX7ozPVXhPrAjY+5Me5FncGZ0blt/fqilj+X6CJxIvfVuIwC+rT
rDOB7UhXnacn0zpS5Hb/d8qMHT17o2tfnTo/neGWX79B9+OCyk4TGrqJNQJdxPmZ
qcoFuYz+1sAY2OaTL5yV01msmQQZf2dIxizoZargIll2O4JKYXZkK3BWtEqphP//
fSkZLQcp4zy3Q8UPbQ0WEtYPFkKod4wQP8+HKt2w6mo6/1QkDi9v7oXXT3ppuEJ6
mL1jiCmRoeEqffuOSnDpyvBWuCufNPRU0rCi1dluCiyYPFsXNj448OUoW8zbGw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:11:02 2026 by rpki-client