Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS37965.roa
File: AS37965.roa (raw, json)
Hash identifier: WqUXnyg1uf3ZmALi5qBQD27vR+G2kGWGNdeH3Rrxw/s=
Subject key identifier: 74:11:58:14:65:AD:1C:3A:BE:0F:1D:E8:6C:07:4E:F0:75:84:84:78
Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Certificate serial: 2386E3F6ADC21BA59D17F3CBDA21EA6669F97976
Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS37965.roa
Signing time: Fri 17 Jul 2026 06:02:43 +0000
ROA not before: Fri 17 Jul 2026 05:57:43 +0000
ROA not after: Fri 16 Jul 2027 06:02:43 +0000
asID: 37965
IP address blocks: 222.126.128.0/17 maxlen: 24
222.126.128.0/23 maxlen: 23
222.126.130.0/23 maxlen: 23
222.126.132.0/23 maxlen: 23
222.126.134.0/24 maxlen: 24
222.126.138.0/24 maxlen: 24
222.126.139.0/24 maxlen: 24
222.126.140.0/23 maxlen: 23
222.126.141.0/24 maxlen: 24
222.126.142.0/23 maxlen: 23
222.126.144.0/24 maxlen: 24
222.126.146.0/23 maxlen: 23
222.126.147.0/24 maxlen: 24
222.126.148.0/23 maxlen: 23
222.126.150.0/23 maxlen: 23
222.126.150.0/24 maxlen: 24
222.126.152.0/23 maxlen: 23
222.126.154.0/23 maxlen: 23
222.126.156.0/23 maxlen: 23
222.126.158.0/23 maxlen: 23
222.126.160.0/23 maxlen: 23
222.126.162.0/23 maxlen: 23
222.126.164.0/23 maxlen: 23
222.126.164.0/24 maxlen: 24
222.126.166.0/23 maxlen: 23
222.126.168.0/23 maxlen: 23
222.126.170.0/23 maxlen: 23
222.126.170.0/24 maxlen: 24
222.126.171.0/24 maxlen: 24
222.126.172.0/23 maxlen: 23
222.126.173.0/24 maxlen: 24
222.126.174.0/23 maxlen: 23
222.126.174.0/24 maxlen: 24
222.126.176.0/23 maxlen: 23
222.126.178.0/23 maxlen: 23
222.126.179.0/24 maxlen: 24
222.126.180.0/23 maxlen: 23
222.126.180.0/24 maxlen: 24
222.126.181.0/24 maxlen: 24
222.126.182.0/23 maxlen: 23
222.126.182.0/24 maxlen: 24
222.126.183.0/24 maxlen: 24
222.126.184.0/23 maxlen: 23
222.126.186.0/23 maxlen: 23
222.126.188.0/23 maxlen: 24
222.126.192.0/23 maxlen: 23
222.126.194.0/23 maxlen: 23
222.126.196.0/23 maxlen: 23
222.126.200.0/23 maxlen: 23
222.126.202.0/23 maxlen: 23
222.126.208.0/23 maxlen: 23
222.126.212.0/23 maxlen: 23
222.126.214.0/23 maxlen: 23
222.126.216.0/23 maxlen: 23
222.126.216.0/24 maxlen: 24
222.126.228.0/23 maxlen: 23
222.126.234.0/23 maxlen: 23
222.126.236.0/23 maxlen: 23
222.126.236.0/24 maxlen: 24
222.126.238.0/23 maxlen: 23
222.126.239.0/24 maxlen: 24
222.126.240.0/20 maxlen: 20
222.126.240.0/23 maxlen: 23
222.126.241.0/24 maxlen: 24
222.126.242.0/23 maxlen: 23
222.126.243.0/24 maxlen: 24
222.126.244.0/22 maxlen: 22
222.126.244.0/23 maxlen: 23
222.126.244.0/24 maxlen: 24
222.126.246.0/23 maxlen: 23
222.126.248.0/23 maxlen: 23
222.126.248.0/24 maxlen: 24
222.126.249.0/24 maxlen: 24
222.126.250.0/23 maxlen: 23
222.126.254.0/23 maxlen: 23
222.126.255.0/24 maxlen: 24
2401:2a00:f000::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:86:e3:f6:ad:c2:1b:a5:9d:17:f3:cb:da:21:ea:66:69:f9:79:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Validity
Not Before: Jul 17 05:57:43 2026 GMT
Not After : Jul 16 06:02:43 2027 GMT
Subject: CN=7411581465AD1C3ABE0F1DE86C074EF075848478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:3c:8e:b7:9c:08:98:c7:25:bd:d7:9e:c2:
d9:c8:2d:0d:e3:36:85:b6:92:32:24:42:3b:e5:68:
14:ae:cb:bb:a6:61:31:d9:aa:f6:eb:bf:d3:08:73:
93:5f:2a:63:6f:e7:80:d2:3b:68:19:f7:98:3e:ff:
3e:e9:23:4d:3d:9e:53:c8:b5:35:07:43:81:cc:a0:
65:f9:e6:73:bb:9d:83:c2:81:b7:7c:68:0b:b9:06:
3a:5d:80:83:0e:b6:50:66:7b:3d:63:aa:3a:af:45:
82:c0:90:89:a0:55:0d:06:61:cd:01:d5:bb:dd:12:
15:f7:91:79:fd:a3:3a:b8:7d:9f:69:42:14:bc:60:
1e:5e:0d:cc:bc:54:d1:c4:cb:4a:d4:05:97:b5:56:
62:9f:04:4a:23:5d:4d:6e:c4:80:da:5a:14:82:78:
04:a3:20:35:00:ef:51:46:32:01:c1:8b:69:b4:5a:
9b:a3:ea:96:bd:f8:c2:91:2a:2d:6c:4f:f6:d0:16:
86:6d:77:13:02:bc:88:96:40:bb:49:2f:81:4e:5c:
7b:f4:38:92:2b:62:72:67:d2:75:bd:85:e4:40:b8:
50:26:d5:61:83:ce:43:5b:7b:08:ad:e6:eb:77:b8:
ca:39:be:92:66:e7:8e:9f:3e:66:d8:97:c8:6c:40:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:58:14:65:AD:1C:3A:BE:0F:1D:E8:6C:07:4E:F0:75:84:84:78
X509v3 Authority Key Identifier:
keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS37965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.126.128.0/17
IPv6:
2401:2a00:f000::/43
Signature Algorithm: sha256WithRSAEncryption
49:de:2d:af:e5:72:8a:64:01:ad:45:22:06:4f:50:96:d5:07:
63:b5:0b:75:da:c7:f5:de:58:43:37:4c:36:a1:70:64:5e:96:
35:58:52:27:36:8f:fc:40:f5:6f:2b:4e:02:90:4c:d5:a5:d5:
68:b9:a8:7b:19:6b:7d:d4:33:9f:04:38:43:09:63:96:4c:70:
6f:93:2b:96:f5:8b:74:ba:4c:a5:1c:b8:c8:cd:bf:9f:16:ba:
6e:32:fc:3b:11:ff:5d:52:11:f0:b5:fd:8a:f6:a3:67:8b:e6:
c6:8b:61:64:09:48:69:ef:9d:6f:8e:e3:c9:8f:03:fb:bc:3d:
34:98:ab:d0:71:03:49:2c:84:bd:a7:df:0a:67:f2:68:8d:72:
71:89:b4:8a:12:23:02:d8:56:a4:62:37:34:e4:bf:9f:01:b5:
34:42:7a:7f:d1:b7:aa:32:49:49:07:6c:51:a7:d5:df:e7:ac:
2d:1c:a0:13:22:6c:5f:bc:37:20:b9:06:9a:1c:17:0e:70:ce:
b7:84:01:21:d9:fa:40:4a:c0:31:7b:d1:50:de:a9:b2:73:7f:
b3:71:d4:93:9c:64:16:83:45:86:3a:1f:b6:c8:d8:00:98:4b:
2b:8f:fa:12:9b:04:19:45:40:0a:9f:0f:21:fa:b0:53:33:7b:
8c:82:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:05 2026 by rpki-client