Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
File: AS136959.roa (raw, json)
Hash identifier: 8u0yw08Ck93HB1x+p/mWts8L/XlnUT3qQumFeLt8MOw=
Subject key identifier: 22:67:43:B0:2B:3F:4A:9D:29:49:A6:9E:96:79:21:74:A9:E6:FE:14
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 715B66B1677B10FB9E94428244DB81D60176B399
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
Signing time: Fri 11 Sep 2026 01:51:12 +0000
ROA not before: Fri 11 Sep 2026 01:46:12 +0000
ROA not after: Fri 10 Sep 2027 01:51:12 +0000
asID: 136959
IP address blocks: 27.36.113.0/24 maxlen: 24
27.36.118.0/23 maxlen: 23
27.36.118.0/24 maxlen: 24
27.36.119.0/24 maxlen: 24
27.36.120.0/22 maxlen: 22
27.36.120.0/24 maxlen: 24
27.36.121.0/24 maxlen: 24
27.36.123.0/24 maxlen: 24
27.36.124.0/22 maxlen: 22
27.36.124.0/24 maxlen: 24
27.36.125.0/24 maxlen: 24
27.36.126.0/24 maxlen: 24
27.36.127.0/24 maxlen: 24
27.36.224.0/22 maxlen: 22
27.45.150.0/24 maxlen: 24
27.45.151.0/24 maxlen: 24
27.45.160.0/24 maxlen: 24
27.45.161.0/24 maxlen: 24
27.45.164.0/24 maxlen: 24
27.45.165.0/24 maxlen: 24
27.45.166.0/24 maxlen: 24
27.45.167.0/24 maxlen: 24
58.255.172.0/22 maxlen: 22
58.255.175.0/24 maxlen: 24
112.90.152.0/22 maxlen: 22
112.90.152.0/24 maxlen: 24
112.90.153.0/24 maxlen: 24
112.90.154.0/24 maxlen: 24
112.90.155.0/24 maxlen: 24
112.90.156.0/22 maxlen: 22
112.90.156.0/24 maxlen: 24
112.90.157.0/24 maxlen: 24
112.93.104.0/21 maxlen: 21
112.93.104.0/24 maxlen: 24
112.93.105.0/24 maxlen: 24
112.93.106.0/24 maxlen: 24
112.93.107.0/24 maxlen: 24
112.93.108.0/24 maxlen: 24
112.93.109.0/24 maxlen: 24
112.93.110.0/24 maxlen: 24
112.93.111.0/24 maxlen: 24
112.93.112.0/22 maxlen: 22
112.93.112.0/24 maxlen: 24
112.93.114.0/24 maxlen: 24
112.93.115.0/24 maxlen: 24
112.96.82.0/24 maxlen: 24
112.96.83.0/24 maxlen: 24
120.80.84.0/24 maxlen: 24
120.80.85.0/24 maxlen: 24
120.83.13.0/24 maxlen: 24
120.83.144.0/23 maxlen: 23
120.83.144.0/24 maxlen: 24
120.83.146.0/23 maxlen: 23
120.83.146.0/24 maxlen: 24
120.83.180.0/23 maxlen: 23
120.83.182.0/23 maxlen: 23
120.83.182.0/24 maxlen: 24
120.83.183.0/24 maxlen: 24
122.13.168.0/21 maxlen: 21
122.13.168.0/24 maxlen: 24
122.13.170.0/24 maxlen: 24
122.13.171.0/24 maxlen: 24
122.13.172.0/24 maxlen: 24
122.13.173.0/24 maxlen: 24
122.13.175.0/24 maxlen: 24
122.13.254.0/24 maxlen: 24
163.142.152.0/21 maxlen: 21
163.142.152.0/24 maxlen: 24
163.142.153.0/24 maxlen: 24
163.142.154.0/24 maxlen: 24
163.142.155.0/24 maxlen: 24
163.142.156.0/24 maxlen: 24
163.142.157.0/24 maxlen: 24
163.142.158.0/24 maxlen: 24
163.142.159.0/24 maxlen: 24
163.177.152.0/21 maxlen: 21
163.177.152.0/23 maxlen: 23
163.177.153.0/24 maxlen: 24
163.177.154.0/24 maxlen: 24
163.177.155.0/24 maxlen: 24
163.177.156.0/24 maxlen: 24
163.177.157.0/24 maxlen: 24
163.177.158.0/24 maxlen: 24
163.177.159.0/24 maxlen: 24
221.4.146.0/24 maxlen: 24
221.4.154.0/24 maxlen: 24
221.4.159.0/24 maxlen: 24
221.5.35.0/24 maxlen: 24
221.5.96.0/23 maxlen: 23
221.5.96.0/24 maxlen: 24
221.5.97.0/24 maxlen: 24
221.5.102.0/24 maxlen: 24
221.5.103.0/24 maxlen: 24
221.5.107.0/24 maxlen: 24
2408:8459:4c80::/44 maxlen: 44
2408:8459:4c90::/44 maxlen: 44
2408:8459:4ca0::/44 maxlen: 44
2408:8459:4cb0::/44 maxlen: 44
2408:8459:4e80::/44 maxlen: 44
2408:8459:4e90::/44 maxlen: 44
2408:8459:4ea0::/44 maxlen: 44
2408:8459:4eb0::/44 maxlen: 44
2408:8459:5080::/44 maxlen: 44
2408:8459:5090::/44 maxlen: 44
2408:8459:50a0::/44 maxlen: 44
2408:8459:50b0::/44 maxlen: 44
2408:8459:5280::/44 maxlen: 44
2408:8459:5290::/44 maxlen: 44
2408:8459:52a0::/44 maxlen: 44
2408:8459:52b0::/44 maxlen: 44
2408:8459:5480::/44 maxlen: 44
2408:8459:5490::/44 maxlen: 44
2408:8459:54a0::/44 maxlen: 44
2408:8459:54b0::/44 maxlen: 44
2408:8756:4c00::/40 maxlen: 40
2408:8756:4d01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 23:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5b:66:b1:67:7b:10:fb:9e:94:42:82:44:db:81:d6:01:76:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Sep 11 01:46:12 2026 GMT
Not After : Sep 10 01:51:12 2027 GMT
Subject: CN=226743B02B3F4A9D2949A69E96792174A9E6FE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:f9:74:01:40:7d:db:34:bd:9c:2a:69:9f:
71:39:92:42:37:c0:39:a0:bd:22:34:09:4c:5e:16:
62:9a:25:db:56:7d:22:e8:6f:da:1c:f0:6d:bb:84:
de:fa:a6:92:fa:ca:5c:48:ad:e3:7f:7b:1b:0c:22:
06:d8:d9:c9:17:58:2a:05:09:00:5b:c1:58:b2:c7:
77:53:65:18:db:ea:ee:9c:7a:98:fe:1a:d9:50:e8:
60:8d:bb:da:07:43:b9:f3:e0:45:f8:a2:47:6b:b1:
74:0e:c4:64:bc:6b:ec:12:46:4b:ac:38:c6:1f:8a:
45:94:74:3e:17:8e:d3:18:3b:8d:9d:c2:70:1f:fb:
6b:7d:40:1f:6a:64:65:6a:89:69:db:b3:61:b5:08:
85:40:54:a7:d8:91:a3:f8:a9:98:74:4e:a1:91:b6:
08:a7:44:41:fc:bc:0f:f4:f3:6e:61:60:54:48:60:
33:5f:6e:92:51:5b:7d:19:5c:33:0e:71:c4:b4:44:
08:df:81:66:82:7c:12:2e:48:86:89:e2:5b:ee:84:
8a:5b:cc:62:59:71:ff:04:11:5f:39:2d:04:41:b8:
ed:d5:f4:d7:52:d1:e5:1c:4b:f2:d1:53:a1:15:b0:
d0:ab:2f:fd:dd:ff:da:7f:2c:6e:3f:76:42:6a:08:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:67:43:B0:2B:3F:4A:9D:29:49:A6:9E:96:79:21:74:A9:E6:FE:14
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.36.113.0/24
27.36.118.0-27.36.127.255
27.36.224.0/22
27.45.150.0/23
27.45.160.0/23
27.45.164.0/22
58.255.172.0/22
112.90.152.0/21
112.93.104.0-112.93.115.255
112.96.82.0/23
120.80.84.0/23
120.83.13.0/24
120.83.144.0/22
120.83.180.0/22
122.13.168.0/21
122.13.254.0/24
163.142.152.0/21
163.177.152.0/21
221.4.146.0/24
221.4.154.0/24
221.4.159.0/24
221.5.35.0/24
221.5.96.0/23
221.5.102.0/23
221.5.107.0/24
IPv6:
2408:8459:4c80::/42
2408:8459:4e80::/42
2408:8459:5080::/42
2408:8459:5280::/42
2408:8459:5480::/42
2408:8756:4c00::/40
2408:8756:4d01::/48
Signature Algorithm: sha256WithRSAEncryption
10:c2:18:88:c6:b9:c4:fd:47:6e:22:e5:49:94:84:83:38:8d:
40:14:5f:5e:84:04:01:ac:bc:6c:72:17:01:2b:72:17:d9:de:
fa:b5:7b:86:24:3a:7d:1d:34:f0:94:c9:e7:73:66:18:4c:74:
35:15:a6:fe:7d:57:b8:d9:e8:64:bd:8b:c8:64:ae:63:fe:6e:
bc:2c:3f:ec:78:6b:32:7e:6e:1b:0b:d5:54:33:11:0b:9b:10:
89:1b:2b:d6:26:6f:b6:3d:7c:f9:29:97:f4:37:ed:45:1e:04:
e3:ba:f8:81:8a:e4:ac:6c:86:5b:a8:e1:50:e4:74:28:2a:08:
99:0e:37:25:24:d2:e5:e9:0b:05:39:34:29:06:36:1e:6f:e8:
00:bc:ec:d4:a6:17:e8:0b:b0:dc:3d:90:99:9f:bb:b6:c3:75:
70:9f:1d:d9:03:d0:2f:e8:ca:f8:fb:bd:59:b7:25:33:ed:27:
73:83:d0:7c:66:e6:24:86:55:dc:14:bc:d6:f5:d6:66:ca:73:
74:d4:c1:c7:92:9a:15:fc:14:02:c7:74:a7:5d:a0:62:ea:fb:
40:bc:83:6b:ce:22:67:03:52:31:d9:0e:05:6b:e0:13:6a:13:
28:41:97:63:65:ca:8b:ec:32:95:ab:ff:58:56:ee:03:59:7c:
e2:90:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:28:59 2026 by rpki-client