Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS134810.roa
File: AS134810.roa (raw, json)
Hash identifier: rFJLhDKhZr/Y4BL3WhxWBEBt5Tnm5ncZKEeNdazP4Sg=
Subject key identifier: D1:AA:0F:D6:61:16:41:4A:06:C7:6B:F6:03:42:E0:C7:09:FD:12:15
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 5526176B27B21600074B2B5B6857265606C79714
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS134810.roa
Signing time: Tue 28 Apr 2026 08:37:15 +0000
ROA not before: Tue 28 Apr 2026 08:32:15 +0000
ROA not after: Tue 27 Apr 2027 08:37:15 +0000
asID: 134810
IP address blocks: 2409:8018:850::/48 maxlen: 48
2409:8018:890::/48 maxlen: 48
2409:8018:1050::/48 maxlen: 48
2409:8018:1060::/48 maxlen: 48
2409:8018:1070::/48 maxlen: 48
2409:8018:1090::/48 maxlen: 48
2409:8018:3000::/48 maxlen: 48
2409:8019::/34 maxlen: 34
2409:8087:1800::/40 maxlen: 40
2409:8087:1900::/40 maxlen: 40
2409:8718::/32 maxlen: 32
2409:8718::/39 maxlen: 39
2409:8718:300::/40 maxlen: 40
2409:8718:600::/40 maxlen: 40
2409:8718:900::/40 maxlen: 40
2409:8718:c00::/40 maxlen: 40
2409:8718:f00::/40 maxlen: 40
2409:8718:1200::/40 maxlen: 40
2409:8718:1500::/40 maxlen: 40
2409:8718:1800::/40 maxlen: 40
2409:8718:1b00::/40 maxlen: 40
2409:8718:3900::/40 maxlen: 40
2409:8718:3c00::/40 maxlen: 40
2409:8718:3f00::/40 maxlen: 40
2409:8718:4200::/40 maxlen: 40
2409:8718:4500::/40 maxlen: 40
2409:8718:4800::/40 maxlen: 40
2409:8718:4b00::/40 maxlen: 40
2409:8718:5100::/40 maxlen: 40
2409:8718:5400::/40 maxlen: 40
2409:8718:5700::/40 maxlen: 40
2409:8718:5a00::/40 maxlen: 40
2409:8718:5d00::/40 maxlen: 40
2409:8718:6000::/40 maxlen: 40
2409:8718:6300::/40 maxlen: 40
2409:8718:6600::/40 maxlen: 40
2409:8718:6900::/40 maxlen: 40
2409:8718:6c00::/40 maxlen: 40
2409:8718:6f00::/40 maxlen: 40
2409:8718:7200::/40 maxlen: 40
2409:8718:7500::/40 maxlen: 40
2409:8718:7800::/40 maxlen: 40
2409:8718:7b00::/40 maxlen: 40
2409:8718:7e00::/40 maxlen: 40
2409:8718:8100::/40 maxlen: 40
2409:8718:8400::/40 maxlen: 40
2409:8718:8700::/40 maxlen: 40
2409:8718:8a00::/40 maxlen: 40
2409:8718:9c00::/40 maxlen: 40
2409:8718:9f00::/40 maxlen: 40
2409:8718:a200::/40 maxlen: 40
2409:8718:a500::/40 maxlen: 40
2409:8718:a800::/40 maxlen: 40
2409:8718:ab00::/40 maxlen: 40
2409:8718:ae00::/40 maxlen: 40
2409:8718:b100::/40 maxlen: 40
2409:8719::/32 maxlen: 32
2409:8918::/32 maxlen: 32
2409:8918:c000::/45 maxlen: 45
2409:8919::/32 maxlen: 32
2409:8a18::/32 maxlen: 32
2409:8a18::/39 maxlen: 39
2409:8a18:300::/40 maxlen: 40
2409:8a18:600::/40 maxlen: 40
2409:8a18:900::/40 maxlen: 40
2409:8a18:c00::/40 maxlen: 40
2409:8a18:f00::/40 maxlen: 40
2409:8a18:1200::/40 maxlen: 40
2409:8a18:1500::/40 maxlen: 40
2409:8a18:1800::/40 maxlen: 40
2409:8a18:1b00::/40 maxlen: 40
2409:8a18:3900::/40 maxlen: 40
2409:8a18:3c00::/40 maxlen: 40
2409:8a18:3f00::/40 maxlen: 40
2409:8a18:4200::/40 maxlen: 40
2409:8a18:4500::/40 maxlen: 40
2409:8a18:4800::/40 maxlen: 40
2409:8a18:4b00::/40 maxlen: 40
2409:8a18:4e00::/40 maxlen: 40
2409:8a18:5100::/40 maxlen: 40
2409:8a18:5400::/40 maxlen: 40
2409:8a18:5700::/40 maxlen: 40
2409:8a18:5a00::/40 maxlen: 40
2409:8a18:5d00::/40 maxlen: 40
2409:8a18:6000::/40 maxlen: 40
2409:8a18:6300::/40 maxlen: 40
2409:8a18:6600::/40 maxlen: 40
2409:8a18:6900::/40 maxlen: 40
2409:8a18:6c00::/40 maxlen: 40
2409:8a18:6f00::/40 maxlen: 40
2409:8a18:7200::/40 maxlen: 40
2409:8a18:7500::/40 maxlen: 40
2409:8a18:7800::/40 maxlen: 40
2409:8a18:7b00::/40 maxlen: 40
2409:8a18:7e00::/40 maxlen: 40
2409:8a18:8100::/40 maxlen: 40
2409:8a18:8400::/40 maxlen: 40
2409:8a18:8700::/40 maxlen: 40
2409:8a18:8a00::/40 maxlen: 40
2409:8a18:9c00::/40 maxlen: 40
2409:8a18:9f00::/40 maxlen: 40
2409:8a18:a200::/40 maxlen: 40
2409:8a18:a500::/40 maxlen: 40
2409:8a18:a800::/40 maxlen: 40
2409:8a18:ab00::/40 maxlen: 40
2409:8a18:ae00::/40 maxlen: 40
2409:8a18:b100::/40 maxlen: 40
2409:8a19::/32 maxlen: 32
2409:8b18::/32 maxlen: 32
2409:8b19::/32 maxlen: 32
2409:8c18::/32 maxlen: 32
2409:8c19::/32 maxlen: 32
2409:8d18::/32 maxlen: 32
2409:8d19::/32 maxlen: 32
2409:8e18::/32 maxlen: 32
2409:8e19::/32 maxlen: 32
2409:8f18::/32 maxlen: 32
2409:8f19::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:26:17:6b:27:b2:16:00:07:4b:2b:5b:68:57:26:56:06:c7:97:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Apr 28 08:32:15 2026 GMT
Not After : Apr 27 08:37:15 2027 GMT
Subject: CN=D1AA0FD66116414A06C76BF60342E0C709FD1215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:d0:5d:c2:33:3e:7f:0a:0c:3f:16:ff:c8:
1e:8d:96:cc:75:f9:c0:80:07:a1:be:f5:d8:cf:82:
95:d6:26:ee:ec:21:c5:57:a2:81:43:3c:65:b9:f9:
24:f2:60:77:17:12:7e:8d:35:76:57:13:e3:0f:44:
96:b6:05:aa:7f:68:53:5b:a7:22:fd:a8:bf:a8:4a:
2f:44:11:3b:e5:13:25:e0:f6:8f:7b:50:87:e6:67:
91:80:8c:31:1b:e8:e1:e1:10:48:45:bb:02:7b:0e:
b2:53:11:70:2b:81:0f:f5:05:1e:d4:39:c4:9f:fc:
8e:ca:32:d6:fd:e3:87:fe:00:d7:00:07:95:68:09:
c1:30:aa:d8:80:60:56:72:a6:f6:14:e2:44:d1:aa:
e4:c4:c6:64:aa:65:f4:68:8f:2e:3c:25:78:35:af:
62:a9:91:d0:7c:23:9e:a9:a3:29:96:44:be:15:ad:
36:da:27:ca:94:99:cb:98:fc:11:92:8d:a1:bb:c1:
88:d4:77:b4:0c:57:2e:2e:a2:67:02:3a:23:c2:c3:
bb:4d:c5:86:5a:73:b3:97:d4:d3:5c:83:28:02:70:
c4:1c:61:13:6c:70:ff:f9:bf:38:08:89:a6:0e:71:
d7:7d:5f:d9:ab:2d:f0:a1:17:20:8e:2e:9c:8f:3c:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:0F:D6:61:16:41:4A:06:C7:6B:F6:03:42:E0:C7:09:FD:12:15
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS134810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2409:8018:850::/48
2409:8018:890::/48
2409:8018:1050::/48
2409:8018:1060::/48
2409:8018:1070::/48
2409:8018:1090::/48
2409:8018:3000::/48
2409:8019::/34
2409:8087:1800::/39
2409:8718::/31
2409:8918::/31
2409:8a18::/31
2409:8b18::/31
2409:8c18::/31
2409:8d18::/31
2409:8e18::/31
2409:8f18::/31
Signature Algorithm: sha256WithRSAEncryption
43:62:62:1b:1d:f9:06:89:89:be:7f:6a:40:e7:65:6f:91:04:
54:47:94:85:c0:5d:ca:57:ad:ac:30:0f:db:58:12:65:c8:ee:
cc:35:b7:84:56:f6:6c:c4:c0:5b:00:a4:36:79:f9:46:6b:0d:
29:b5:5e:bd:09:6c:a1:b7:2e:d5:db:3e:6e:f6:68:eb:10:9a:
3d:0f:df:49:d1:34:78:c0:ac:f2:d0:f8:6e:8f:de:b4:f8:17:
70:f8:f3:47:da:99:e8:2c:e5:5a:a7:27:e7:3c:e1:61:38:b0:
12:77:ef:1b:a5:e7:39:07:a3:42:45:27:e0:ea:94:11:ad:e4:
c2:9d:93:69:43:1e:d2:66:72:d4:45:01:d8:4b:e7:f1:cf:ad:
71:ac:5e:a3:9c:e9:55:04:81:fc:53:c7:c8:24:b9:31:eb:b3:
2d:7d:0b:c1:d1:5d:ec:4e:ea:d4:bf:89:02:68:63:00:b5:cf:
89:5b:62:00:db:7a:d5:ef:00:0c:be:48:ff:2a:19:32:59:87:
82:76:6a:5c:47:48:2c:f0:d6:17:6c:40:4c:36:1c:b7:fb:61:
29:9e:49:41:97:0a:1a:e0:44:6b:7e:bd:46:d6:88:f4:2b:4f:
b2:f5:2e:07:a7:c0:9b:fc:f1:44:4e:73:c5:b2:53:8d:cc:4e:
61:e2:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:45 2026 by rpki-client