Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS13444.roa
File: AS13444.roa (raw, json)
Hash identifier: xXEmaxoaDgi2TY/cB1FyR5TslIrceG8CX/D7XByxLXQ=
Subject key identifier: 4F:2E:F9:8E:86:F9:ED:89:4C:B8:94:E2:B0:22:1D:D4:2E:48:0F:39
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 784EB206C2063B12DCAAD5DDD997F93458387FAD
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS13444.roa
Signing time: Wed 25 Mar 2026 12:16:51 +0000
ROA not before: Wed 25 Mar 2026 12:11:51 +0000
ROA not after: Wed 24 Mar 2027 12:16:51 +0000
asID: 13444
IP address blocks: 45.252.84.0/22 maxlen: 24
45.252.84.0/24 maxlen: 24
45.252.100.0/24 maxlen: 24
45.252.102.0/24 maxlen: 24
45.252.103.0/24 maxlen: 24
45.252.144.0/24 maxlen: 24
45.252.145.0/24 maxlen: 24
103.6.108.0/24 maxlen: 24
103.6.109.0/24 maxlen: 24
103.6.110.0/24 maxlen: 24
103.6.111.0/24 maxlen: 24
103.6.228.0/24 maxlen: 24
103.220.248.0/24 maxlen: 24
103.220.249.0/24 maxlen: 24
103.220.250.0/24 maxlen: 24
103.220.251.0/24 maxlen: 24
103.220.252.0/24 maxlen: 24
103.220.253.0/24 maxlen: 24
103.220.254.0/24 maxlen: 24
103.220.255.0/24 maxlen: 24
103.221.0.0/24 maxlen: 24
103.221.1.0/24 maxlen: 24
103.221.2.0/24 maxlen: 24
103.221.3.0/24 maxlen: 24
103.221.4.0/24 maxlen: 24
103.221.5.0/24 maxlen: 24
103.221.6.0/24 maxlen: 24
103.221.7.0/24 maxlen: 24
103.221.8.0/24 maxlen: 24
103.221.9.0/24 maxlen: 24
103.221.10.0/24 maxlen: 24
103.221.11.0/24 maxlen: 24
103.221.12.0/24 maxlen: 24
103.221.13.0/24 maxlen: 24
103.221.14.0/24 maxlen: 24
103.221.15.0/24 maxlen: 24
103.221.16.0/24 maxlen: 24
103.221.17.0/24 maxlen: 24
103.221.18.0/24 maxlen: 24
103.221.19.0/24 maxlen: 24
103.221.20.0/24 maxlen: 24
103.221.21.0/24 maxlen: 24
103.221.22.0/24 maxlen: 24
103.221.23.0/24 maxlen: 24
103.221.24.0/24 maxlen: 24
103.221.25.0/24 maxlen: 24
103.221.26.0/24 maxlen: 24
103.221.27.0/24 maxlen: 24
103.221.28.0/24 maxlen: 24
103.221.29.0/24 maxlen: 24
103.221.30.0/24 maxlen: 24
103.221.31.0/24 maxlen: 24
103.221.32.0/24 maxlen: 24
103.221.33.0/24 maxlen: 24
103.221.34.0/24 maxlen: 24
103.221.35.0/24 maxlen: 24
103.221.36.0/24 maxlen: 24
103.221.37.0/24 maxlen: 24
103.221.38.0/24 maxlen: 24
103.221.39.0/24 maxlen: 24
103.221.40.0/24 maxlen: 24
103.221.41.0/24 maxlen: 24
103.221.42.0/24 maxlen: 24
103.221.43.0/24 maxlen: 24
103.221.44.0/24 maxlen: 24
103.221.45.0/24 maxlen: 24
103.221.46.0/24 maxlen: 24
103.221.47.0/24 maxlen: 24
103.221.48.0/24 maxlen: 24
103.221.50.0/24 maxlen: 24
103.221.51.0/24 maxlen: 24
103.221.92.0/22 maxlen: 24
103.221.92.0/24 maxlen: 24
103.221.93.0/24 maxlen: 24
103.221.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 14:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4e:b2:06:c2:06:3b:12:dc:aa:d5:dd:d9:97:f9:34:58:38:7f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: Mar 25 12:11:51 2026 GMT
Not After : Mar 24 12:16:51 2027 GMT
Subject: CN=4F2EF98E86F9ED894CB894E2B0221DD42E480F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:ce:35:07:88:c3:b8:90:c1:ee:1b:78:9c:
b9:b4:dd:47:2d:e0:77:8e:9f:49:f3:ee:49:09:55:
5a:08:92:d2:68:ee:b5:0b:67:2c:56:ca:11:c2:1e:
59:9a:5e:40:ae:fd:ed:c6:b6:4a:8e:a6:3b:9a:6d:
64:ec:a2:13:d1:4a:7f:ed:1e:d4:30:bc:cb:3b:05:
fc:f6:b7:50:3b:15:0d:d3:13:0b:76:95:a0:a3:bb:
0a:a9:97:24:89:ba:02:e0:1d:28:9a:65:e3:f3:47:
2f:e9:b0:43:36:ae:55:9e:ad:a7:2c:17:cb:9c:9e:
55:17:d2:58:9d:82:69:86:5f:7d:11:ac:47:7a:d1:
72:35:6f:64:2a:1c:41:68:56:19:5b:60:88:89:a3:
60:78:41:65:4f:dd:0b:6e:25:07:f8:e2:66:ec:54:
c0:29:f8:99:73:1f:d8:9e:47:b7:76:09:ae:03:a7:
33:70:ea:f4:aa:97:f1:63:64:4d:b2:92:24:04:f3:
8c:26:60:05:0f:99:c3:e8:fe:90:23:dd:de:d4:fc:
f6:44:ba:f7:f5:07:97:92:97:cf:2c:cb:32:66:06:
0f:62:75:d3:32:8c:88:ed:36:60:11:87:9e:10:f8:
df:8c:6b:d0:05:f6:9b:03:da:fc:07:92:73:b1:04:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:F9:8E:86:F9:ED:89:4C:B8:94:E2:B0:22:1D:D4:2E:48:0F:39
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS13444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.252.84.0/22
45.252.100.0/24
45.252.102.0/23
45.252.144.0/23
103.6.108.0/22
103.6.228.0/24
103.220.248.0-103.221.48.255
103.221.50.0/23
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:55:55:f2:ae:f2:2c:5a:0c:3c:e2:96:83:50:1e:e1:7d:01:
21:a0:b9:87:9e:8c:6a:00:bf:d3:28:5d:a6:a2:38:7c:27:fb:
7d:be:c0:fe:f7:43:97:65:91:12:4b:fa:7f:bf:cc:3b:a9:c4:
89:90:8c:a3:25:7e:2c:4a:2a:58:bc:3b:bc:3d:50:a9:b2:b4:
5c:41:6f:6b:a6:ca:28:11:c3:cc:6d:d4:21:a4:a7:66:09:9a:
6c:3b:08:6b:f4:69:1f:ae:68:66:36:6a:a8:94:ff:42:3d:6a:
e3:07:35:e9:e9:a4:d7:f8:7e:39:e5:54:fb:2e:e3:b8:1d:6d:
35:de:6a:d8:77:da:4a:0d:64:ee:6b:0c:6b:5d:a6:24:61:14:
c3:b2:bc:77:c4:76:0f:d7:a1:72:99:6e:24:b9:55:30:49:ca:
bb:97:7d:1b:29:61:47:b1:31:ca:c1:02:8c:93:b0:20:24:95:
25:6d:37:89:b2:99:e3:84:fb:78:2e:38:d4:92:de:87:ed:74:
fe:e4:f7:56:18:73:72:e1:da:03:de:4f:29:e6:b9:89:da:40:
13:81:bd:fd:c2:dc:0b:45:d0:84:6b:4e:c3:23:5c:00:38:d5:
73:28:ab:e1:6e:aa:44:03:fc:23:30:19:8c:b4:60:e9:99:a1:
2e:e7:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:01 2026 by rpki-client