Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS38019.roa
File: AS38019.roa (raw, json)
Hash identifier: FdVBqrSZCNMzyIGNZfKptOmc0gPpcrb/61h7Ab+ovps=
Subject key identifier: F5:B9:22:20:4B:3F:F1:26:36:54:2C:9E:6C:10:58:C0:94:90:DD:50
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 2F6508A23B14D1F068A27755818E20F94F276EDB
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS38019.roa
Signing time: Fri 08 May 2026 02:22:16 +0000
ROA not before: Fri 08 May 2026 02:17:16 +0000
ROA not after: Fri 07 May 2027 02:22:16 +0000
asID: 38019
IP address blocks: 2409:8002::/40 maxlen: 40
2409:8002:800::/40 maxlen: 40
2409:8002:1000::/40 maxlen: 40
2409:8002:1800::/40 maxlen: 40
2409:8002:2000::/40 maxlen: 40
2409:8002:2800::/40 maxlen: 40
2409:8002:2900::/40 maxlen: 40
2409:8002:2b00::/40 maxlen: 40
2409:8003:2900::/40 maxlen: 40
2409:8003:2b00::/40 maxlen: 40
2409:8702::/32 maxlen: 32
2409:8702:110::/48 maxlen: 48
2409:8702:c1c::/48 maxlen: 48
2409:8702:c2c::/48 maxlen: 48
2409:8702:d30::/48 maxlen: 48
2409:8702:d50::/48 maxlen: 48
2409:8702:181c::/48 maxlen: 48
2409:8702:182c::/48 maxlen: 48
2409:8702:1950::/48 maxlen: 48
2409:8702:242f::/48 maxlen: 48
2409:8702:246c::/48 maxlen: 48
2409:8702:2570::/48 maxlen: 48
2409:8702:3d10::/48 maxlen: 48
2409:8702:4858::/48 maxlen: 48
2409:8702:485c::/48 maxlen: 48
2409:8702:4888::/48 maxlen: 48
2409:8702:48ac::/48 maxlen: 48
2409:8702:4930::/48 maxlen: 48
2409:8702:541c::/48 maxlen: 48
2409:8702:5428::/48 maxlen: 48
2409:8702:543c::/48 maxlen: 48
2409:8702:5550::/48 maxlen: 48
2409:8702:6170::/48 maxlen: 48
2409:8702:6c18::/48 maxlen: 48
2409:8702:6c1c::/48 maxlen: 48
2409:8702:6d40::/48 maxlen: 48
2409:8702:7930::/48 maxlen: 48
2409:8702:841c::/48 maxlen: 48
2409:8702:8530::/48 maxlen: 48
2409:8702:9038::/48 maxlen: 48
2409:8702:903c::/48 maxlen: 48
2409:8702:91a0::/48 maxlen: 48
2409:8702:91b0::/48 maxlen: 48
2409:8702:9c2c::/48 maxlen: 48
2409:8702:9c3c::/48 maxlen: 48
2409:8702:9d20::/48 maxlen: 48
2409:8702:a930::/48 maxlen: 48
2409:8702:b530::/48 maxlen: 48
2409:8802::/40 maxlen: 40
2409:8902::/32 maxlen: 32
2409:8902:fffd::/48 maxlen: 48
2409:8902:fffe::/48 maxlen: 48
2409:8903::/32 maxlen: 32
2409:8a02::/32 maxlen: 32
2409:8b02::/32 maxlen: 32
2409:8d02::/32 maxlen: 32
2409:8e02::/36 maxlen: 36
2409:8e02:f000::/40 maxlen: 40
2409:8e02:f100::/40 maxlen: 40
2409:8e02:f200::/40 maxlen: 40
2409:8e02:f300::/40 maxlen: 40
2409:8e02:f400::/40 maxlen: 40
2409:8e02:f500::/40 maxlen: 40
2409:8e02:f600::/40 maxlen: 40
2409:8e02:f700::/40 maxlen: 40
2409:8e02:f800::/40 maxlen: 40
2409:8e02:f900::/40 maxlen: 40
2409:8e02:fa00::/40 maxlen: 40
2409:8e02:fb00::/40 maxlen: 40
2409:8e02:fc00::/40 maxlen: 40
2409:8e02:fd00::/40 maxlen: 40
2409:8e02:fe00::/40 maxlen: 40
2409:8e02:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:65:08:a2:3b:14:d1:f0:68:a2:77:55:81:8e:20:f9:4f:27:6e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: May 8 02:17:16 2026 GMT
Not After : May 7 02:22:16 2027 GMT
Subject: CN=F5B922204B3FF12636542C9E6C1058C09490DD50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:18:dd:ec:09:9b:4f:55:18:9c:27:fb:09:
86:30:43:50:b2:a2:e4:b6:f4:4b:fa:8c:0e:96:63:
98:28:b8:9e:69:d2:f5:dc:4b:d1:49:54:46:b5:f9:
eb:33:42:97:5c:c0:8a:a0:02:b4:c5:72:c2:a2:9e:
14:40:a5:9b:70:77:33:5b:ec:6c:eb:7c:3f:60:e9:
22:fb:2b:78:e2:5e:e6:ee:95:88:52:c0:2c:85:08:
2f:40:9b:f1:11:a4:78:71:d0:72:9a:9b:37:41:42:
10:ab:ef:b4:ba:11:73:7a:38:f9:5c:6f:9c:f3:e9:
e5:55:91:ec:bf:66:a8:a2:5d:64:2b:01:5d:2b:61:
d9:8c:cc:f8:59:2a:e9:02:c0:f2:73:bb:05:c3:38:
27:86:cc:89:83:f9:21:6e:47:8f:bd:7b:cf:e5:d0:
76:8e:16:85:29:fa:95:46:6d:07:db:23:af:e6:c8:
16:35:76:21:24:d8:d9:3b:a8:9d:97:3a:dd:11:09:
10:16:48:47:ab:a4:65:9f:a8:c9:ac:fc:9b:37:8a:
ef:89:2e:4f:fa:18:b4:3f:47:2b:fb:7c:bc:0c:64:
29:20:dc:49:0f:2c:ad:c6:45:92:93:db:f3:f1:ca:
05:ae:e6:a3:fd:35:bc:b0:83:f4:6e:0b:02:ea:49:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:22:20:4B:3F:F1:26:36:54:2C:9E:6C:10:58:C0:94:90:DD:50
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS38019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2409:8002::/40
2409:8002:800::/40
2409:8002:1000::/40
2409:8002:1800::/40
2409:8002:2000::/40
2409:8002:2800::/39
2409:8002:2b00::/40
2409:8003:2900::/40
2409:8003:2b00::/40
2409:8702::/32
2409:8802::/40
2409:8902::/31
2409:8a02::/32
2409:8b02::/32
2409:8d02::/32
2409:8e02::/36
2409:8e02:f000::/36
Signature Algorithm: sha256WithRSAEncryption
98:40:7a:07:96:54:f6:07:1a:22:07:e2:75:dc:92:35:8c:b8:
11:f8:3c:92:70:5a:14:88:6d:0c:2b:ca:a9:30:57:9c:b4:35:
fb:f5:bc:09:ee:24:2b:31:65:57:8f:b4:b4:2e:82:33:d9:05:
49:e5:05:18:2a:76:15:cd:0c:76:00:36:b7:be:24:7f:c7:7b:
4b:4a:46:0c:e2:fd:21:93:8d:38:77:4a:32:26:81:85:a4:6a:
c0:d1:3c:ba:66:53:9e:ce:71:41:be:dc:31:bb:c5:a8:7f:7b:
8c:0b:13:68:20:b5:cc:d8:31:74:e2:e7:ea:27:ef:ae:3d:5b:
6d:70:94:81:00:ce:7a:bd:aa:56:5b:28:c5:7f:02:7e:eb:2b:
08:f5:04:d8:d0:5d:91:92:50:4c:ee:3d:c7:af:70:d4:ca:93:
46:3c:35:6b:8b:f1:ec:7e:c6:df:31:7e:2b:65:e4:9d:2f:d5:
d9:1d:d0:26:ef:73:3b:ce:db:b5:28:5b:2d:93:7b:b0:ce:49:
de:a0:3d:00:e2:ca:3d:08:93:cf:f3:18:c4:d3:d2:ef:8c:a1:
88:8d:82:2d:25:69:58:02:d0:81:8f:95:fa:da:61:ce:dd:e9:
5b:70:61:79:6b:59:e1:f4:57:f1:f5:b5:fa:76:6f:d9:eb:c4:
9f:d9:e8:20
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIUL2UIojsU0fBoondVgY4g+U8nbtswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0
OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDUwODAyMTcxNloX
DTI3MDUwNzAyMjIxNlowMzExMC8GA1UEAxMoRjVCOTIyMjA0QjNGRjEyNjM2NTQy
QzlFNkMxMDU4QzA5NDkwREQ1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANcuGN3sCZtPVRicJ/sJhjBDULKi5Lb0S/qMDpZjmCi4nmnS9dxL0UlURrX5
6zNCl1zAiqACtMVywqKeFEClm3B3M1vsbOt8P2DpIvsreOJe5u6ViFLALIUIL0Cb
8RGkeHHQcpqbN0FCEKvvtLoRc3o4+VxvnPPp5VWR7L9mqKJdZCsBXSth2YzM+Fkq
6QLA8nO7BcM4J4bMiYP5IW5Hj717z+XQdo4WhSn6lUZtB9sjr+bIFjV2ISTY2Tuo
nZc63REJEBZIR6ukZZ+oyaz8mzeK74kuT/oYtD9HK/t8vAxkKSDcSQ8srcZFkpPb
8/HKBa7mo/01vLCD9G4LAupJuDMCAwEAAaOCAmUwggJhMB0GA1UdDgQWBBT1uSIg
Sz/xJjZULJ5sEFjAlJDdUDAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs
1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND
N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ
UzZvV0xlT0hHYV9JcGpsck5RLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5
NTc3NTc0Ny8wL0FTMzgwMTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
gaAGCCsGAQUFBwEHAQH/BIGQMIGNMIGKBAIAAjCBgwMGACQJgAIAAwYAJAmAAggD
BgAkCYACEAMGACQJgAIYAwYAJAmAAiADBgEkCYACKAMGACQJgAIrAwYAJAmAAykD
BgAkCYADKwMFACQJhwIDBgAkCYgCAAMFASQJiQIDBQAkCYoCAwUAJAmLAgMFACQJ
jQIDBgQkCY4CAAMGBCQJjgLwMA0GCSqGSIb3DQEBCwUAA4IBAQCYQHoHllT2Bxoi
B+J13JI1jLgR+DyScFoUiG0MK8qpMFectDX79bwJ7iQrMWVXj7S0LoIz2QVJ5QUY
KnYVzQx2ADa3viR/x3tLSkYM4v0hk404d0oyJoGFpGrA0Ty6ZlOeznFBvtwxu8Wo
f3uMCxNoILXM2DF04ufqJ++uPVttcJSBAM56vapWWyjFfwJ+6ysI9QTY0F2RklBM
7j3Hr3DUypNGPDVri/HsfsbfMX4rZeSdL9XZHdAm73M7ztu1KFstk3uwzkneoD0A
4so9CJPP8xjE09LvjKGIjYItJWlYAtCBj5X62mHO3elbcGF5a1nh9Ffx9bX6dm/Z
68Sf2egg
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:46 2026 by rpki-client