Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
File: AS134543.roa (raw, json)
Hash identifier: y/CkjvSTOyhgGdKQNlVWV3rhOplAmt7J/WN2KrAorRs=
Subject key identifier: 1F:AA:17:46:4B:6C:6D:80:62:F2:16:6B:DE:3E:E1:61:7B:3D:1B:E6
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 05D954DA26740C0F9B90D2BBF2A0B8ED0575558A
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
Signing time: Wed 08 Jul 2026 09:28:53 +0000
ROA not before: Wed 08 Jul 2026 09:23:53 +0000
ROA not after: Wed 07 Jul 2027 09:28:53 +0000
asID: 134543
IP address blocks: 157.122.216.0/21 maxlen: 21
157.122.220.0/24 maxlen: 24
157.122.221.0/24 maxlen: 24
157.122.222.0/24 maxlen: 24
157.148.128.0/21 maxlen: 21
157.148.128.0/24 maxlen: 24
157.148.130.0/24 maxlen: 24
157.148.131.0/24 maxlen: 24
157.148.132.0/24 maxlen: 24
157.148.133.0/24 maxlen: 24
157.255.120.0/24 maxlen: 24
157.255.121.0/24 maxlen: 24
157.255.122.0/24 maxlen: 24
157.255.123.0/24 maxlen: 24
157.255.124.0/22 maxlen: 22
157.255.124.0/23 maxlen: 23
157.255.126.0/23 maxlen: 23
157.255.128.0/24 maxlen: 24
157.255.129.0/24 maxlen: 24
157.255.130.0/24 maxlen: 24
157.255.131.0/24 maxlen: 24
157.255.132.0/24 maxlen: 24
157.255.133.0/24 maxlen: 24
157.255.134.0/24 maxlen: 24
157.255.136.0/24 maxlen: 24
157.255.137.0/24 maxlen: 24
157.255.138.0/24 maxlen: 24
157.255.142.0/24 maxlen: 24
157.255.143.0/24 maxlen: 24
157.255.144.0/23 maxlen: 23
157.255.145.0/24 maxlen: 24
157.255.148.0/24 maxlen: 24
157.255.150.0/24 maxlen: 24
157.255.151.0/24 maxlen: 24
157.255.154.0/24 maxlen: 24
157.255.156.0/24 maxlen: 24
157.255.157.0/24 maxlen: 24
157.255.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d9:54:da:26:74:0c:0f:9b:90:d2:bb:f2:a0:b8:ed:05:75:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jul 8 09:23:53 2026 GMT
Not After : Jul 7 09:28:53 2027 GMT
Subject: CN=1FAA17464B6C6D8062F2166BDE3EE1617B3D1BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:a9:e7:03:69:a8:f4:2a:a2:19:fd:83:41:
03:0d:e1:50:4d:c7:c2:fb:39:2f:cf:a5:0d:46:19:
b2:7e:07:48:e6:d1:01:68:69:c0:eb:76:17:36:29:
2e:9b:11:d5:cc:70:26:56:68:50:f0:25:1b:e2:2f:
43:d9:ed:74:41:77:f0:ca:22:0f:f0:3c:45:23:fa:
bd:60:ac:b0:2b:87:ca:35:45:07:1c:fe:b7:41:18:
60:ed:00:da:3f:2b:d7:be:36:c0:71:33:5a:c9:7c:
11:9b:3a:b1:a3:8a:18:30:e4:11:fb:24:2e:8a:28:
20:57:a7:23:f9:f3:ac:3f:98:f0:8b:cd:fb:60:d1:
41:03:39:32:85:49:ef:95:7c:76:9b:80:41:f1:67:
ef:ad:32:1e:33:6a:93:eb:5f:63:22:b5:71:1d:0b:
62:39:6d:1c:6d:e6:82:2d:1f:2d:73:df:08:33:80:
2a:9e:b9:63:80:b2:5c:09:b8:73:fd:76:39:97:f4:
0f:4d:21:09:dd:6e:88:fc:d7:1d:f8:12:a6:e9:6a:
69:bf:9f:e8:0b:d3:ff:56:2a:d3:c4:5a:36:48:2c:
ad:e4:f9:32:e4:8f:fc:f7:12:03:43:90:58:90:be:
5c:18:5d:30:18:97:d3:4d:ab:64:e5:8b:dc:7d:a9:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:17:46:4B:6C:6D:80:62:F2:16:6B:DE:3E:E1:61:7B:3D:1B:E6
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.216.0/21
157.148.128.0/21
157.255.120.0-157.255.134.255
157.255.136.0-157.255.138.255
157.255.142.0-157.255.145.255
157.255.148.0/24
157.255.150.0/23
157.255.154.0/24
157.255.156.0-157.255.158.255
Signature Algorithm: sha256WithRSAEncryption
90:b2:f2:33:f9:a4:fc:7b:ce:6f:16:d0:2c:8a:65:09:c2:3e:
6c:0b:cc:dc:e2:6d:08:1b:e7:05:70:c2:6d:1d:94:f4:5d:b8:
c4:d9:51:10:08:2e:63:6e:d9:1d:9f:dd:60:b3:ea:4a:cf:51:
0e:be:82:dc:4c:ab:a0:15:dc:82:3f:3a:9d:89:32:6d:65:3f:
91:42:98:e7:18:4b:ec:25:52:6c:0a:a5:07:52:89:b8:99:15:
b6:42:7f:9f:a7:8a:8e:58:ef:f6:b0:3c:f8:3a:63:fc:d8:03:
17:c9:0c:b9:7b:c2:5e:cb:19:e5:16:9e:ba:dd:b6:89:6c:23:
24:ff:ef:b7:41:59:93:d1:22:36:04:36:e3:30:a3:c3:25:69:
36:37:d7:89:73:cb:7b:fe:f9:5e:16:29:bf:a4:dd:7a:2a:bd:
52:d0:18:ea:60:e0:14:fe:52:4f:c0:46:e1:59:a5:05:26:3f:
5f:0d:3b:ad:a3:05:f8:13:61:fe:02:5e:62:9a:22:f0:5d:58:
5f:bb:34:64:da:0d:7a:cb:94:f1:85:61:62:8d:d8:4a:f2:53:
11:00:a5:e9:a5:ae:58:2e:16:8f:00:99:65:8b:cd:f2:a6:95:
d9:e3:1e:cf:e3:12:38:b4:2c:e6:09:66:ca:4e:17:34:3b:c2:
3c:45:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:38 2026 by rpki-client