Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9394.roa
File: AS9394.roa (raw, json)
Hash identifier: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=
Subject key identifier: 4B:56:70:DC:48:48:A2:BD:4C:8A:49:32:C9:A1:37:73:32:6F:D2:15
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 07A5DA423BD2FEBFC645DFA70DD1EA039425669D
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9394.roa
Signing time: Mon 25 May 2026 07:54:55 +0000
ROA not before: Mon 25 May 2026 07:49:55 +0000
ROA not after: Mon 24 May 2027 07:54:55 +0000
asID: 9394
IP address blocks: 36.192.0.0/16 maxlen: 16
61.232.0.0/16 maxlen: 16
61.232.0.0/19 maxlen: 19
61.232.16.0/20 maxlen: 20
61.232.32.0/19 maxlen: 19
61.232.64.0/19 maxlen: 19
61.232.96.0/19 maxlen: 19
61.232.128.0/19 maxlen: 19
61.232.160.0/19 maxlen: 19
61.232.192.0/19 maxlen: 19
61.232.224.0/19 maxlen: 19
61.233.0.0/16 maxlen: 16
61.233.0.0/19 maxlen: 19
61.233.32.0/19 maxlen: 19
61.233.64.0/19 maxlen: 19
61.233.96.0/19 maxlen: 19
61.233.128.0/19 maxlen: 19
61.233.160.0/19 maxlen: 19
61.233.192.0/19 maxlen: 19
61.233.224.0/19 maxlen: 19
61.234.0.0/16 maxlen: 16
61.234.0.0/19 maxlen: 19
61.234.32.0/19 maxlen: 19
61.234.64.0/19 maxlen: 19
61.234.96.0/19 maxlen: 19
61.234.128.0/19 maxlen: 19
61.234.160.0/19 maxlen: 19
61.234.192.0/19 maxlen: 19
61.234.224.0/19 maxlen: 19
61.235.0.0/16 maxlen: 16
61.235.0.0/19 maxlen: 19
61.235.32.0/19 maxlen: 19
61.235.64.0/19 maxlen: 19
61.235.96.0/19 maxlen: 19
61.235.128.0/19 maxlen: 19
61.235.160.0/19 maxlen: 19
61.235.192.0/19 maxlen: 19
61.235.224.0/19 maxlen: 19
61.237.0.0/16 maxlen: 16
61.237.0.0/17 maxlen: 17
61.237.0.0/19 maxlen: 19
61.237.128.0/17 maxlen: 17
101.144.0.0/12 maxlen: 12
110.112.0.0/16 maxlen: 16
110.120.0.0/16 maxlen: 16
110.120.0.0/24 maxlen: 24
110.120.1.0/24 maxlen: 24
110.211.0.0/16 maxlen: 16
110.211.0.0/24 maxlen: 24
110.211.1.0/24 maxlen: 24
122.84.0.0/16 maxlen: 16
123.64.0.0/16 maxlen: 16
123.64.0.0/20 maxlen: 20
123.64.0.0/24 maxlen: 24
123.64.1.0/24 maxlen: 24
123.64.6.0/24 maxlen: 24
123.64.253.0/24 maxlen: 24
123.65.0.0/16 maxlen: 16
123.65.70.0/24 maxlen: 24
123.65.107.0/24 maxlen: 24
123.65.108.0/24 maxlen: 24
123.65.232.0/24 maxlen: 24
123.66.0.0/16 maxlen: 16
123.66.0.0/17 maxlen: 17
211.98.0.0/16 maxlen: 16
211.98.0.0/19 maxlen: 19
211.98.32.0/19 maxlen: 19
211.98.64.0/19 maxlen: 19
211.98.96.0/19 maxlen: 19
211.98.128.0/19 maxlen: 19
211.98.160.0/19 maxlen: 19
211.98.192.0/19 maxlen: 19
211.98.224.0/19 maxlen: 19
221.172.0.0/16 maxlen: 16
221.174.0.0/16 maxlen: 16
221.174.0.0/17 maxlen: 17
221.174.128.0/17 maxlen: 17
222.44.0.0/16 maxlen: 16
222.50.0.0/16 maxlen: 16
222.50.120.0/24 maxlen: 24
222.50.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a5:da:42:3b:d2:fe:bf:c6:45:df:a7:0d:d1:ea:03:94:25:66:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: May 25 07:49:55 2026 GMT
Not After : May 24 07:54:55 2027 GMT
Subject: CN=4B5670DC4848A2BD4C8A4932C9A13773326FD215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:c6:dd:75:a7:c6:63:9c:cc:48:98:99:b0:
cb:66:61:65:43:62:1d:f1:55:b5:d2:27:b0:79:f4:
66:16:81:bc:ff:35:87:02:50:86:5c:21:df:67:78:
88:1a:b8:17:8e:d5:76:e8:1e:fb:ca:65:22:5a:93:
33:b1:0f:9d:df:eb:8a:a0:11:58:79:58:4a:77:f1:
54:50:6d:dd:79:69:9d:49:80:f5:ee:37:3d:f5:3f:
66:0b:ca:db:8a:57:63:57:19:db:19:bb:3d:df:e3:
a9:2d:77:17:3d:84:bb:21:c7:6c:bc:9b:5a:ba:96:
2f:fc:39:06:ac:1e:93:4f:47:af:af:ec:e1:8b:eb:
c7:4f:e5:3b:27:dd:d0:e7:3b:5b:a7:7a:c7:0c:22:
99:b6:7b:a4:f6:64:b7:32:c1:4c:ff:c9:65:32:67:
b9:05:22:be:40:5e:34:4b:9d:4b:72:be:89:f7:c3:
ca:d3:e3:fe:91:4a:f4:46:59:51:e6:ba:63:00:ad:
e5:17:c9:e6:cd:5a:2a:de:01:4d:31:16:a5:43:f3:
81:96:0d:d6:1d:96:8e:c6:f6:14:f3:14:b2:29:d0:
cd:e4:87:1b:37:5d:5b:e0:69:d4:3f:22:57:2b:b3:
b3:60:72:e1:0d:ba:77:f0:08:47:30:6b:28:47:07:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:70:DC:48:48:A2:BD:4C:8A:49:32:C9:A1:37:73:32:6F:D2:15
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.192.0.0/16
61.232.0.0/14
61.237.0.0/16
101.144.0.0/12
110.112.0.0/16
110.120.0.0/16
110.211.0.0/16
122.84.0.0/16
123.64.0.0-123.66.255.255
211.98.0.0/16
221.172.0.0/16
221.174.0.0/16
222.44.0.0/16
222.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:e0:b2:ec:aa:e8:ad:9a:49:7c:f9:38:b8:b7:3d:78:57:b6:
6e:74:64:0e:de:b6:32:99:76:7f:74:d1:fc:93:63:1e:7f:33:
01:3e:7a:cb:3a:47:13:fd:73:b4:2c:85:64:de:74:c5:e7:9a:
79:39:76:fc:76:a4:d5:27:a0:51:a1:73:cd:0d:b8:13:f4:5a:
c1:3d:18:03:05:07:81:0f:df:dd:ed:88:ed:e1:ea:c4:03:ee:
5f:46:24:d8:f8:f6:96:40:d8:87:09:18:80:ef:bf:2b:a5:4b:
20:c2:63:bd:24:4b:f6:35:cb:13:2c:ea:c3:61:e7:aa:b2:f6:
18:f0:61:10:45:19:59:34:6d:f1:70:a4:bf:73:2b:ee:d9:7b:
45:4c:fb:3e:6e:45:2b:83:62:ba:52:15:d5:28:cd:ee:62:4d:
dc:4b:74:f5:57:38:dd:27:25:f6:1e:cd:e0:a5:54:2f:8f:8f:
55:6e:96:8d:63:25:8a:7a:7e:a4:33:69:17:77:54:94:36:66:
f8:a2:c4:0a:4e:5f:42:15:cc:9a:2b:f4:7e:15:c0:7a:d7:fc:
61:2d:1f:39:0c:db:4c:18:7e:69:0f:2a:10:cf:00:04:17:32:
8c:6a:3a:b0:17:42:36:ec:b5:39:cc:d1:08:9c:0d:eb:4b:7b:
fe:61:68:03
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUB6XaQjvS/r/GRd+nDdHqA5QlZp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2Rjkx
Q0U0RTk1RDAeFw0yNjA1MjUwNzQ5NTVaFw0yNzA1MjQwNzU0NTVaMDMxMTAvBgNV
BAMTKDRCNTY3MERDNDg0OEEyQkQ0QzhBNDkzMkM5QTEzNzczMzI2RkQyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmcbddafGY5zMSJiZsMtmYWVD
Yh3xVbXSJ7B59GYWgbz/NYcCUIZcId9neIgauBeO1XboHvvKZSJakzOxD53f64qg
EVh5WEp38VRQbd15aZ1JgPXuNz31P2YLytuKV2NXGdsZuz3f46ktdxc9hLshx2y8
m1q6li/8OQasHpNPR6+v7OGL68dP5Tsn3dDnO1unescMIpm2e6T2ZLcywUz/yWUy
Z7kFIr5AXjRLnUtyvon3w8rT4/6RSvRGWVHmumMAreUXyebNWireAU0xFqVD84GW
DdYdlo7G9hTzFLIp0M3khxs3XVvgadQ/Ilcrs7NgcuENunfwCEcwayhHBz1dAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUS1Zw3EhIor1MikkyyaE3czJv0hUwHwYDVR0j
BBgwFoAUfzNe5KM9B8QsOMRexkim+Rzk6V0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjIyMDQ0MTY5MDcwMTg0MS8wLzdGMzM1RUU0QTMzRDA3QzQyQzM4QzQ1RUM2NDhB
NkY5MUNFNEU5NUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2RjkxQ0U0RTk1RC5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDYyMjA0NDE2OTA3MDE4NDEvMC9BUzkzOTQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZgYIKwYBBQUHAQcBAf8EVzBVMFMEAgAB
ME0DAwAkwAMDAj3oAwMAPe0DAwRlkAMDAG5wAwMAbngDAwBu0wMDAHpUMAoDAwZ7
QAMDAHtCAwMA02IDAwDdrAMDAN2uAwMA3iwDAwDeMjANBgkqhkiG9w0BAQsFAAOC
AQEAAeCy7KrorZpJfPk4uLc9eFe2bnRkDt62Mpl2f3TR/JNjHn8zAT56yzpHE/1z
tCyFZN50xeeaeTl2/Hak1SegUaFzzQ24E/RawT0YAwUHgQ/f3e2I7eHqxAPuX0Yk
2Pj2lkDYhwkYgO+/K6VLIMJjvSRL9jXLEyzqw2HnqrL2GPBhEEUZWTRt8XCkv3Mr
7tl7RUz7Pm5FK4NiulIV1SjN7mJN3Et09Vc43Scl9h7N4KVUL4+PVW6WjWMlinp+
pDNpF3dUlDZm+KLECk5fQhXMmiv0fhXAetf8YS0fOQzbTBh+aQ8qEM8ABBcyjGo6
sBdCNuy1OczRCJwN60t7/mFoAw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:23:57 2026 by rpki-client