Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS24138.roa
File: AS24138.roa (raw, json)
Hash identifier: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=
Subject key identifier: 7E:2C:84:F5:A6:0C:FB:6E:33:21:D4:A6:E5:5B:36:45:C1:BA:BB:4F
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 2FEB441794CEDC91CA12D0196AE1DC0436E853EA
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS24138.roa
Signing time: Mon 01 Jun 2026 07:12:04 +0000
ROA not before: Mon 01 Jun 2026 07:07:04 +0000
ROA not after: Mon 31 May 2027 07:12:04 +0000
asID: 24138
IP address blocks: 36.192.0.0/21 maxlen: 21
61.232.0.0/20 maxlen: 20
61.232.0.0/21 maxlen: 21
61.232.0.0/24 maxlen: 24
61.232.4.0/24 maxlen: 24
61.232.8.0/21 maxlen: 21
61.232.8.0/22 maxlen: 22
61.232.10.0/24 maxlen: 24
61.233.0.0/20 maxlen: 20
61.233.0.0/21 maxlen: 21
61.233.8.0/21 maxlen: 21
61.233.9.0/24 maxlen: 24
61.233.11.0/24 maxlen: 24
61.233.16.0/20 maxlen: 20
61.233.16.0/21 maxlen: 21
61.233.19.0/24 maxlen: 24
61.233.22.0/24 maxlen: 24
61.233.24.0/21 maxlen: 21
61.237.224.0/20 maxlen: 20
61.237.224.0/21 maxlen: 21
61.237.225.0/24 maxlen: 24
61.237.228.0/23 maxlen: 23
61.237.232.0/21 maxlen: 21
61.237.232.0/24 maxlen: 24
61.237.252.0/24 maxlen: 24
61.237.253.0/24 maxlen: 24
61.237.254.0/24 maxlen: 24
110.96.0.0/16 maxlen: 16
110.96.0.0/17 maxlen: 17
110.96.0.0/19 maxlen: 19
110.96.0.0/20 maxlen: 20
110.96.16.0/20 maxlen: 20
110.96.28.0/22 maxlen: 22
110.96.32.0/19 maxlen: 19
110.96.32.0/20 maxlen: 20
110.96.36.0/24 maxlen: 24
110.96.39.0/24 maxlen: 24
110.96.43.0/24 maxlen: 24
110.96.48.0/20 maxlen: 20
110.96.64.0/19 maxlen: 19
110.96.64.0/20 maxlen: 20
110.96.80.0/20 maxlen: 20
110.96.88.0/21 maxlen: 21
110.96.96.0/19 maxlen: 19
110.96.96.0/20 maxlen: 20
110.96.112.0/20 maxlen: 20
110.96.128.0/17 maxlen: 17
110.96.128.0/19 maxlen: 19
110.96.160.0/19 maxlen: 19
110.96.160.0/20 maxlen: 20
110.96.176.0/20 maxlen: 20
110.96.192.0/19 maxlen: 19
110.96.192.0/20 maxlen: 20
110.96.224.0/19 maxlen: 19
110.113.0.0/16 maxlen: 16
110.113.0.0/17 maxlen: 17
110.113.128.0/17 maxlen: 17
110.114.0.0/16 maxlen: 16
110.114.0.0/17 maxlen: 17
110.114.128.0/17 maxlen: 17
122.70.0.0/16 maxlen: 16
122.70.0.0/17 maxlen: 17
122.70.0.0/18 maxlen: 18
122.70.0.0/19 maxlen: 19
122.70.0.0/20 maxlen: 20
122.70.0.0/21 maxlen: 21
122.70.8.0/21 maxlen: 21
122.70.12.0/22 maxlen: 22
122.70.16.0/20 maxlen: 20
122.70.16.0/21 maxlen: 21
122.70.24.0/21 maxlen: 21
122.70.32.0/20 maxlen: 20
122.70.32.0/21 maxlen: 21
122.70.40.0/21 maxlen: 21
122.70.48.0/20 maxlen: 20
122.70.48.0/21 maxlen: 21
122.70.64.0/18 maxlen: 18
122.70.64.0/20 maxlen: 20
122.70.64.0/21 maxlen: 21
122.70.64.0/24 maxlen: 24
122.70.80.0/20 maxlen: 20
122.70.88.0/21 maxlen: 21
122.70.96.0/22 maxlen: 22
122.70.104.0/21 maxlen: 21
122.70.112.0/21 maxlen: 21
122.70.128.0/17 maxlen: 17
122.70.128.0/18 maxlen: 18
122.70.128.0/21 maxlen: 21
122.70.129.0/24 maxlen: 24
122.70.136.0/21 maxlen: 21
122.70.136.0/22 maxlen: 22
122.70.139.0/24 maxlen: 24
122.70.140.0/22 maxlen: 22
122.70.142.0/24 maxlen: 24
122.70.144.0/21 maxlen: 21
122.70.144.0/24 maxlen: 24
122.70.148.0/22 maxlen: 22
122.70.152.0/21 maxlen: 21
122.70.160.0/21 maxlen: 21
122.70.168.0/21 maxlen: 21
122.70.192.0/18 maxlen: 18
122.70.192.0/21 maxlen: 21
122.70.192.0/24 maxlen: 24
122.70.216.0/21 maxlen: 21
122.70.216.0/22 maxlen: 22
122.70.224.0/19 maxlen: 19
122.71.0.0/16 maxlen: 16
122.71.0.0/17 maxlen: 17
122.71.0.0/18 maxlen: 18
122.71.0.0/19 maxlen: 19
122.71.32.0/19 maxlen: 19
122.71.64.0/18 maxlen: 18
122.71.64.0/19 maxlen: 19
122.71.96.0/19 maxlen: 19
122.71.112.0/21 maxlen: 21
122.71.128.0/17 maxlen: 17
122.71.128.0/18 maxlen: 18
122.71.128.0/19 maxlen: 19
122.71.160.0/19 maxlen: 19
122.71.160.0/20 maxlen: 20
122.71.188.0/24 maxlen: 24
122.71.192.0/18 maxlen: 18
122.71.192.0/19 maxlen: 19
122.71.224.0/19 maxlen: 19
122.72.3.0/24 maxlen: 24
122.72.16.0/24 maxlen: 24
122.72.38.0/24 maxlen: 24
122.72.112.0/24 maxlen: 24
123.66.0.0/16 maxlen: 16
123.66.0.0/17 maxlen: 17
123.66.128.0/17 maxlen: 17
123.66.128.0/18 maxlen: 18
123.66.144.0/20 maxlen: 20
123.66.160.0/19 maxlen: 19
123.66.160.0/20 maxlen: 20
123.66.176.0/20 maxlen: 20
123.66.192.0/18 maxlen: 18
123.66.192.0/19 maxlen: 19
123.66.224.0/19 maxlen: 19
211.98.24.0/24 maxlen: 24
211.98.64.0/24 maxlen: 24
211.98.140.0/24 maxlen: 24
221.174.16.0/21 maxlen: 21
221.174.24.0/23 maxlen: 23
222.35.0.0/16 maxlen: 16
222.35.0.0/17 maxlen: 17
222.35.0.0/18 maxlen: 18
222.35.0.0/19 maxlen: 19
222.35.0.0/20 maxlen: 20
222.35.0.0/21 maxlen: 21
222.35.12.0/24 maxlen: 24
222.35.13.0/24 maxlen: 24
222.35.16.0/20 maxlen: 20
222.35.18.0/24 maxlen: 24
222.35.20.0/24 maxlen: 24
222.35.28.0/24 maxlen: 24
222.35.32.0/19 maxlen: 19
222.35.32.0/21 maxlen: 21
222.35.37.0/24 maxlen: 24
222.35.40.0/21 maxlen: 21
222.35.46.0/24 maxlen: 24
222.35.47.0/24 maxlen: 24
222.35.48.0/22 maxlen: 22
222.35.52.0/22 maxlen: 22
222.35.56.0/21 maxlen: 21
222.35.57.0/24 maxlen: 24
222.35.58.0/24 maxlen: 24
222.35.59.0/24 maxlen: 24
222.35.60.0/24 maxlen: 24
222.35.64.0/18 maxlen: 18
222.35.64.0/19 maxlen: 19
222.35.64.0/20 maxlen: 20
222.35.64.0/21 maxlen: 21
222.35.64.0/24 maxlen: 24
222.35.68.0/22 maxlen: 22
222.35.72.0/21 maxlen: 21
222.35.76.0/22 maxlen: 22
222.35.80.0/20 maxlen: 20
222.35.80.0/21 maxlen: 21
222.35.90.0/23 maxlen: 23
222.35.96.0/19 maxlen: 19
222.35.96.0/20 maxlen: 20
222.35.96.0/21 maxlen: 21
222.35.96.0/22 maxlen: 22
222.35.104.0/21 maxlen: 21
222.35.104.0/22 maxlen: 22
222.35.108.0/22 maxlen: 22
222.35.112.0/20 maxlen: 20
222.35.112.0/22 maxlen: 22
222.35.116.0/22 maxlen: 22
222.35.120.0/21 maxlen: 21
222.35.124.0/23 maxlen: 23
222.35.128.0/17 maxlen: 17
222.35.128.0/18 maxlen: 18
222.35.128.0/19 maxlen: 19
222.35.136.0/21 maxlen: 21
222.35.136.0/22 maxlen: 22
222.35.140.0/22 maxlen: 22
222.35.144.0/22 maxlen: 22
222.35.148.0/22 maxlen: 22
222.35.160.0/19 maxlen: 19
222.35.168.0/21 maxlen: 21
222.35.192.0/19 maxlen: 19
222.35.200.0/21 maxlen: 21
222.35.200.0/22 maxlen: 22
222.35.204.0/22 maxlen: 22
222.35.208.0/21 maxlen: 21
222.35.212.0/22 maxlen: 22
222.35.228.0/22 maxlen: 22
222.35.240.0/21 maxlen: 21
222.35.240.0/22 maxlen: 22
222.35.244.0/22 maxlen: 22
222.35.248.0/21 maxlen: 21
222.35.248.0/22 maxlen: 22
222.35.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:44:17:94:ce:dc:91:ca:12:d0:19:6a:e1:dc:04:36:e8:53:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: Jun 1 07:07:04 2026 GMT
Not After : May 31 07:12:04 2027 GMT
Subject: CN=7E2C84F5A60CFB6E3321D4A6E55B3645C1BABB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:5e:19:ac:2d:7f:96:21:5d:bb:6b:47:dd:
63:c1:d0:e4:e0:80:65:8b:c0:39:54:5d:fa:b2:6b:
11:76:1a:f2:56:24:3f:6c:85:24:ce:6d:e9:c6:46:
27:49:3b:3d:96:21:b2:2d:8e:9d:29:f6:5a:5c:c3:
bb:3a:e4:7f:ca:e5:78:d4:ad:51:56:15:69:ab:75:
ea:3c:52:ac:3d:f7:53:de:13:e6:81:f3:58:62:bb:
77:95:46:8b:19:67:25:9e:dc:98:dc:71:f4:e6:85:
a7:7a:fa:73:ca:52:1b:09:dd:df:95:e4:ea:a4:54:
b9:f1:81:98:cc:cb:c3:9f:40:11:2d:12:9a:52:6a:
fe:cd:04:d7:59:39:88:c7:8e:2d:5f:1a:da:c1:4c:
8b:08:7a:cc:df:77:d1:aa:9e:ba:8b:76:6d:7b:a5:
f8:a4:5b:d3:06:6c:3a:57:bf:09:f6:1c:bf:e2:79:
a6:41:c0:4f:4d:86:9d:da:a5:39:74:10:c2:6e:44:
f6:bb:ff:a4:a7:26:f7:7c:f2:ff:81:7a:88:96:c8:
09:4c:cd:0d:ee:5a:13:0e:af:e9:3b:d7:0c:d4:0a:
4c:87:bc:b7:69:a6:60:6e:cd:e0:55:84:62:04:79:
fe:17:62:69:94:39:05:43:e6:af:91:cc:d3:39:ef:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:84:F5:A6:0C:FB:6E:33:21:D4:A6:E5:5B:36:45:C1:BA:BB:4F
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS24138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.192.0.0/21
61.232.0.0/20
61.233.0.0/19
61.237.224.0/20
61.237.252.0-61.237.254.255
110.96.0.0/16
110.113.0.0-110.114.255.255
122.70.0.0/15
122.72.3.0/24
122.72.16.0/24
122.72.38.0/24
122.72.112.0/24
123.66.0.0/16
211.98.24.0/24
211.98.64.0/24
211.98.140.0/24
221.174.16.0-221.174.25.255
222.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:03:db:ba:71:19:2a:60:17:95:28:eb:6f:49:9f:12:19:dd:
19:fd:3c:e0:95:d2:5b:04:3c:1b:72:db:08:ac:3b:3f:1e:72:
85:53:8c:05:ba:6d:9a:68:7f:bc:59:64:39:5f:da:d5:a8:2c:
d7:e1:35:7a:4d:d0:f6:01:15:2a:71:77:c7:7f:49:c0:75:84:
22:f9:32:3b:96:58:6b:7f:57:51:ac:fc:63:76:50:85:84:31:
4c:9c:69:84:70:e6:49:d6:0a:14:94:41:e4:45:48:1e:53:fc:
c9:49:8b:ac:c3:7d:96:c8:99:c8:62:bc:bc:1f:21:2a:02:40:
c8:9f:87:23:9f:09:dd:e6:f9:4a:47:b3:c8:fa:6d:8b:78:d5:
96:54:92:af:5b:e3:1e:5a:52:b9:2a:2d:43:a8:c5:2d:13:8b:
b2:c1:e4:29:fe:83:76:d3:d5:55:53:10:0c:c5:a7:2d:44:df:
1b:67:4d:a8:67:46:15:ae:08:b6:f2:ce:47:3f:57:2c:e6:66:
17:a0:f6:09:55:4a:ba:9c:47:8f:d0:bb:d9:20:87:bd:e6:0b:
18:ed:74:2c:3c:04:5e:31:9f:76:54:b2:e0:8b:28:75:5e:3f:
2a:a6:5e:2d:9a:87:ce:d1:98:25:9a:33:7f:43:e8:d5:0b:f7:
95:e1:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:23:57 2026 by rpki-client