Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
File: AS135061.roa (raw, json)
Hash identifier: FDRjLCqENtR/mQAfcKs3aa7MVNn77Zfu7GzJPk/mxG0=
Subject key identifier: 3F:73:57:7E:9C:8F:B4:57:4B:26:DD:39:44:A9:C8:0E:4B:C3:9E:02
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 1108475873731D328B11E04B062992299C68B7DB
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
Signing time: Thu 09 Jul 2026 07:16:03 +0000
ROA not before: Thu 09 Jul 2026 07:11:03 +0000
ROA not after: Thu 08 Jul 2027 07:16:03 +0000
asID: 135061
IP address blocks: 157.255.168.0/21 maxlen: 21
157.255.168.0/24 maxlen: 24
157.255.169.0/24 maxlen: 24
157.255.172.0/22 maxlen: 22
157.255.176.0/20 maxlen: 20
157.255.176.0/22 maxlen: 22
157.255.180.0/24 maxlen: 24
157.255.181.0/24 maxlen: 24
157.255.182.0/24 maxlen: 24
157.255.183.0/24 maxlen: 24
157.255.184.0/24 maxlen: 24
157.255.187.0/24 maxlen: 24
157.255.188.0/22 maxlen: 22
157.255.192.0/24 maxlen: 24
157.255.193.0/24 maxlen: 24
157.255.194.0/24 maxlen: 24
157.255.195.0/24 maxlen: 24
157.255.196.0/22 maxlen: 22
157.255.200.0/23 maxlen: 23
157.255.202.0/23 maxlen: 23
157.255.204.0/24 maxlen: 24
157.255.205.0/24 maxlen: 24
157.255.206.0/23 maxlen: 23
157.255.208.0/22 maxlen: 22
157.255.212.0/22 maxlen: 22
157.255.216.0/22 maxlen: 22
157.255.220.0/23 maxlen: 23
157.255.222.0/24 maxlen: 24
157.255.223.0/24 maxlen: 24
157.255.224.0/20 maxlen: 20
157.255.225.0/24 maxlen: 24
157.255.226.0/24 maxlen: 24
157.255.227.0/24 maxlen: 24
157.255.228.0/24 maxlen: 24
157.255.230.0/24 maxlen: 24
157.255.232.0/24 maxlen: 24
157.255.233.0/24 maxlen: 24
157.255.234.0/24 maxlen: 24
157.255.235.0/24 maxlen: 24
157.255.239.0/24 maxlen: 24
157.255.240.0/21 maxlen: 21
157.255.240.0/24 maxlen: 24
157.255.241.0/24 maxlen: 24
157.255.242.0/24 maxlen: 24
157.255.243.0/24 maxlen: 24
157.255.244.0/24 maxlen: 24
157.255.245.0/24 maxlen: 24
157.255.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:08:47:58:73:73:1d:32:8b:11:e0:4b:06:29:92:29:9c:68:b7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jul 9 07:11:03 2026 GMT
Not After : Jul 8 07:16:03 2027 GMT
Subject: CN=3F73577E9C8FB4574B26DD3944A9C80E4BC39E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:dc:d7:18:50:64:b5:21:06:85:b7:f5:57:
86:77:30:a1:fd:ca:97:99:6f:cb:0b:56:db:90:57:
44:b0:ed:9b:01:c4:7c:7f:e4:d6:f6:cb:e2:44:fc:
61:ac:44:8e:4a:65:61:89:23:f0:47:0d:f5:bf:50:
08:3b:3f:be:95:a5:a2:ac:da:8c:d0:76:a2:d5:76:
a3:13:5e:a1:82:75:8f:bc:20:7b:ae:c0:ba:fd:b1:
21:b9:b8:23:7c:27:bc:a0:57:07:1f:8b:74:7f:df:
c7:a2:e0:af:cf:8d:34:cb:48:6b:74:be:94:6f:6a:
87:c1:6a:4a:a0:4d:05:1f:dc:89:31:ac:4a:aa:69:
77:b7:e4:9b:4e:f9:fa:2e:c1:32:9c:a8:52:65:b0:
d9:7f:3e:db:a1:80:0f:9d:f5:ea:fe:00:56:12:75:
6d:bb:8d:6a:60:2c:52:5e:6c:1b:d1:de:54:07:d0:
63:d2:c9:8e:cd:1b:39:f1:d8:9d:25:b6:b5:db:c9:
07:0e:92:62:b8:87:03:cd:32:ae:88:d4:3e:65:c3:
ed:53:3e:22:40:94:91:f6:d9:ad:4b:ab:9e:19:5c:
fb:24:ae:e3:ff:2b:67:d5:0d:b9:ac:6b:02:00:e1:
4f:0f:11:60:3a:25:84:2c:33:5a:f1:9f:a9:63:48:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:57:7E:9C:8F:B4:57:4B:26:DD:39:44:A9:C8:0E:4B:C3:9E:02
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.255.168.0-157.255.247.255
Signature Algorithm: sha256WithRSAEncryption
16:41:bd:f9:60:b0:01:d5:db:97:33:c1:aa:95:0c:91:68:02:
a2:6f:ad:78:02:a5:b6:eb:34:a9:dc:4a:1b:14:a4:fc:ab:da:
e9:27:04:d7:f6:da:d7:91:ec:6c:16:63:37:e8:a4:54:b1:08:
6a:6e:17:bb:55:b2:8a:43:21:de:6a:8a:a6:f1:d2:2b:f7:c2:
d4:b9:3e:0b:c5:ad:ff:19:91:22:72:5c:03:7d:b2:2d:a5:56:
d2:76:98:36:3f:bc:17:66:54:b3:63:84:79:40:6a:8d:0b:41:
b7:1e:e2:55:0c:7a:17:5b:e8:03:6b:85:b4:96:a0:57:28:3a:
b2:d2:05:d0:7e:1e:70:24:e5:2a:a9:2d:9c:ec:35:45:dd:3d:
f2:f3:bf:a3:3d:24:01:fd:81:a2:5f:15:fe:e6:f0:f2:13:f3:
ec:f8:3a:9f:e0:5a:7f:56:1b:e7:04:ca:ce:e0:45:f7:22:0e:
4c:8f:e5:38:d6:03:25:38:0a:37:83:b1:55:08:d0:06:9a:3f:
98:99:ef:26:95:d8:c8:cf:75:9d:78:1b:ac:57:09:f1:20:57:
5c:06:b7:19:cc:3b:71:24:1b:8d:dc:54:52:25:3a:cf:07:1e:
c6:d4:9b:b4:f6:da:3b:35:c6:05:78:00:6b:d9:83:f0:10:05:
c4:0a:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:32 2026 by rpki-client