Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS138421.roa
File: AS138421.roa (raw, json)
Hash identifier: wpbp9KzbaxHDVbkun+VSbeeCm2SAY+PofVljCtXzlwM=
Subject key identifier: 34:DA:8A:08:5A:BA:60:44:49:D1:B1:A0:C2:F3:67:70:0D:99:58:67
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 6BE13ACAFBD065D3D721197C1341A9793EA4F543
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS138421.roa
Signing time: Fri 30 Oct 2026 07:11:20 +0000
ROA not before: Fri 30 Oct 2026 07:06:20 +0000
ROA not after: Fri 29 Oct 2027 07:11:20 +0000
asID: 138421
IP address blocks: 139.227.231.0/24 maxlen: 24
140.206.167.0/24 maxlen: 24
140.206.200.0/22 maxlen: 22
140.206.200.0/24 maxlen: 24
140.206.201.0/24 maxlen: 24
140.206.202.0/24 maxlen: 24
140.206.203.0/24 maxlen: 24
140.206.204.0/24 maxlen: 24
140.206.208.0/23 maxlen: 23
140.206.211.0/24 maxlen: 24
140.206.212.0/22 maxlen: 22
140.206.212.0/24 maxlen: 24
140.206.213.0/24 maxlen: 24
140.206.216.0/22 maxlen: 22
140.206.219.0/24 maxlen: 24
140.206.228.0/24 maxlen: 24
140.206.229.0/24 maxlen: 24
140.206.230.0/24 maxlen: 24
140.206.231.0/24 maxlen: 24
140.206.232.0/24 maxlen: 24
140.206.234.0/24 maxlen: 24
140.206.238.0/24 maxlen: 24
140.206.240.0/22 maxlen: 22
140.206.244.0/24 maxlen: 24
140.206.247.0/24 maxlen: 24
140.207.69.0/24 maxlen: 24
140.207.70.0/24 maxlen: 24
140.207.72.0/24 maxlen: 24
140.207.73.0/24 maxlen: 24
140.207.130.0/24 maxlen: 24
140.207.131.0/24 maxlen: 24
140.207.134.0/24 maxlen: 24
140.207.135.0/24 maxlen: 24
140.207.138.0/23 maxlen: 23
140.207.140.0/23 maxlen: 23
140.207.197.0/24 maxlen: 24
140.207.199.0/24 maxlen: 24
140.207.208.0/21 maxlen: 21
140.207.208.0/24 maxlen: 24
140.207.209.0/24 maxlen: 24
140.207.210.0/24 maxlen: 24
140.207.211.0/24 maxlen: 24
140.207.212.0/24 maxlen: 24
140.207.213.0/24 maxlen: 24
140.207.214.0/24 maxlen: 24
140.207.215.0/24 maxlen: 24
140.207.216.0/21 maxlen: 21
140.207.216.0/22 maxlen: 22
140.207.216.0/24 maxlen: 24
140.207.217.0/24 maxlen: 24
140.207.218.0/24 maxlen: 24
140.207.219.0/24 maxlen: 24
140.207.220.0/22 maxlen: 22
140.207.220.0/24 maxlen: 24
140.207.224.0/21 maxlen: 21
140.207.233.0/24 maxlen: 24
140.207.235.0/24 maxlen: 24
140.207.237.0/24 maxlen: 24
140.207.238.0/23 maxlen: 23
140.207.240.0/23 maxlen: 23
140.207.241.0/24 maxlen: 24
140.207.244.0/23 maxlen: 23
140.207.245.0/24 maxlen: 24
140.207.246.0/24 maxlen: 24
140.207.248.0/23 maxlen: 23
140.207.249.0/24 maxlen: 24
140.207.251.0/24 maxlen: 24
140.207.252.0/22 maxlen: 22
140.207.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e1:3a:ca:fb:d0:65:d3:d7:21:19:7c:13:41:a9:79:3e:a4:f5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Oct 30 07:06:20 2026 GMT
Not After : Oct 29 07:11:20 2027 GMT
Subject: CN=34DA8A085ABA604449D1B1A0C2F367700D995867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:6f:59:1d:68:b6:78:b0:28:de:ad:19:f8:
0c:9d:59:65:58:c9:c6:f8:5b:fe:5f:20:9e:e4:ea:
69:b3:9e:36:3b:a2:ad:1f:e6:b6:bc:92:32:41:41:
a5:2d:ea:d9:e8:ef:9d:24:fc:42:6a:e2:89:a0:02:
40:5e:7a:a0:00:db:89:84:b3:e4:aa:d2:ed:09:8c:
ea:c5:f7:40:d7:a1:c6:b6:fd:7e:7c:4f:76:e0:e6:
f7:13:75:99:64:f0:c9:e6:34:3e:50:ba:e2:3b:f5:
89:9f:27:3b:1d:bf:cb:97:b4:3c:5d:23:1f:98:aa:
66:e4:e1:28:7f:ba:5c:a3:94:12:bf:90:25:e6:be:
9f:c4:f6:d3:9f:d6:3c:34:2c:23:1b:61:f4:fc:30:
b0:f2:48:02:0a:c9:fe:a6:5c:18:a0:3d:23:c0:c4:
38:f4:98:34:9e:0e:ff:b8:a9:ce:51:49:c5:81:c4:
68:25:15:81:0d:65:13:84:12:3c:23:f8:71:3e:11:
0e:46:30:0e:20:bd:30:b0:c5:c9:a8:e2:a2:e8:8f:
ec:1e:6e:87:3b:a6:4c:75:35:c6:b3:48:83:b2:8b:
ab:37:1a:bf:cf:4f:cc:4e:73:1f:8a:f5:8f:f4:7e:
24:29:93:85:2c:f5:54:2e:a7:da:8d:87:ee:fa:b6:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:8A:08:5A:BA:60:44:49:D1:B1:A0:C2:F3:67:70:0D:99:58:67
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS138421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.227.231.0/24
140.206.167.0/24
140.206.200.0-140.206.204.255
140.206.208.0/23
140.206.211.0-140.206.219.255
140.206.228.0-140.206.232.255
140.206.234.0/24
140.206.238.0/24
140.206.240.0-140.206.244.255
140.206.247.0/24
140.207.69.0-140.207.70.255
140.207.72.0/23
140.207.130.0/23
140.207.134.0/23
140.207.138.0-140.207.141.255
140.207.197.0/24
140.207.199.0/24
140.207.208.0-140.207.231.255
140.207.233.0/24
140.207.235.0/24
140.207.237.0-140.207.241.255
140.207.244.0-140.207.246.255
140.207.248.0/23
140.207.251.0-140.207.255.255
Signature Algorithm: sha256WithRSAEncryption
06:00:d2:23:1c:93:2d:f2:25:d6:60:8f:67:67:6d:a4:3f:b5:
ab:84:70:0f:88:77:03:63:be:0c:9a:2b:78:0d:fd:0d:27:ea:
7e:00:1b:c4:14:92:11:8e:bc:7b:c4:4b:f8:80:c6:df:c3:82:
fa:96:62:89:59:06:86:fa:c6:25:3a:96:6c:70:62:58:4c:33:
04:a6:1a:2a:4b:dd:4a:8f:66:fe:62:b5:04:8c:39:e3:cb:7f:
b1:36:04:62:a1:52:2b:b5:db:16:0e:d2:18:f4:bb:98:5a:af:
ea:75:5e:0a:8f:e0:dd:63:a0:e7:59:0b:d7:18:76:43:87:52:
97:e8:4b:25:c9:50:96:6e:68:78:5f:7e:c8:a7:06:91:92:b0:
db:39:0d:6f:fd:34:fe:3a:97:b0:3a:94:8a:5a:da:37:fb:ff:
d6:b2:ba:77:55:8f:1a:0b:44:16:70:84:79:d2:64:24:fd:1b:
87:94:be:51:89:39:24:49:85:76:66:e7:13:cf:b2:fb:26:57:
f1:39:e1:52:3b:72:b9:69:82:8c:00:52:a9:f7:e8:3f:8f:4e:
3a:d2:56:a1:7c:1a:9e:58:f0:32:51:c7:12:c8:09:d2:e8:4c:
d7:52:89:bc:93:53:ee:c2:d6:18:ba:31:95:7a:a1:4f:59:73:
d8:d5:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:32:33 2026 by rpki-client