Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
File: AS136959.roa (raw, json)
Hash identifier: HiwqnJKlER565h6gYqciA3q0kOYFRzZrKkYI2BIHtoU=
Subject key identifier: 80:8D:3B:0D:DC:74:9A:B1:42:BA:AC:F2:B6:33:1C:9E:35:24:12:9C
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 2CB54181D26E02720B9B005729C2B1BA5C084443
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
Signing time: Wed 08 Jul 2026 09:29:34 +0000
ROA not before: Wed 08 Jul 2026 09:24:34 +0000
ROA not after: Wed 07 Jul 2027 09:29:34 +0000
asID: 136959
IP address blocks: 27.36.113.0/24 maxlen: 24
27.36.118.0/23 maxlen: 23
27.36.118.0/24 maxlen: 24
27.36.119.0/24 maxlen: 24
27.36.120.0/22 maxlen: 22
27.36.120.0/24 maxlen: 24
27.36.121.0/24 maxlen: 24
27.36.123.0/24 maxlen: 24
27.36.124.0/22 maxlen: 22
27.36.124.0/24 maxlen: 24
27.36.125.0/24 maxlen: 24
27.36.126.0/24 maxlen: 24
27.36.127.0/24 maxlen: 24
27.36.224.0/22 maxlen: 22
27.45.150.0/24 maxlen: 24
27.45.151.0/24 maxlen: 24
27.45.160.0/24 maxlen: 24
27.45.161.0/24 maxlen: 24
27.45.164.0/24 maxlen: 24
27.45.165.0/24 maxlen: 24
27.45.166.0/24 maxlen: 24
27.45.167.0/24 maxlen: 24
58.255.172.0/22 maxlen: 22
58.255.175.0/24 maxlen: 24
112.90.152.0/22 maxlen: 22
112.90.152.0/24 maxlen: 24
112.90.153.0/24 maxlen: 24
112.90.154.0/24 maxlen: 24
112.90.155.0/24 maxlen: 24
112.90.156.0/22 maxlen: 22
112.90.156.0/24 maxlen: 24
112.90.157.0/24 maxlen: 24
112.93.112.0/22 maxlen: 22
112.93.112.0/24 maxlen: 24
112.93.114.0/24 maxlen: 24
112.93.115.0/24 maxlen: 24
112.96.82.0/24 maxlen: 24
112.96.83.0/24 maxlen: 24
120.80.84.0/24 maxlen: 24
120.80.85.0/24 maxlen: 24
120.83.13.0/24 maxlen: 24
120.83.144.0/23 maxlen: 23
120.83.144.0/24 maxlen: 24
120.83.146.0/23 maxlen: 23
120.83.146.0/24 maxlen: 24
120.83.180.0/23 maxlen: 23
120.83.182.0/23 maxlen: 23
120.83.182.0/24 maxlen: 24
120.83.183.0/24 maxlen: 24
122.13.168.0/21 maxlen: 21
122.13.168.0/24 maxlen: 24
122.13.170.0/24 maxlen: 24
122.13.171.0/24 maxlen: 24
122.13.172.0/24 maxlen: 24
122.13.173.0/24 maxlen: 24
122.13.175.0/24 maxlen: 24
122.13.254.0/24 maxlen: 24
163.142.152.0/21 maxlen: 21
163.142.152.0/24 maxlen: 24
163.142.153.0/24 maxlen: 24
163.142.154.0/24 maxlen: 24
163.142.155.0/24 maxlen: 24
163.142.156.0/24 maxlen: 24
163.142.157.0/24 maxlen: 24
163.142.158.0/24 maxlen: 24
163.142.159.0/24 maxlen: 24
163.177.152.0/21 maxlen: 21
163.177.152.0/23 maxlen: 23
163.177.153.0/24 maxlen: 24
163.177.154.0/24 maxlen: 24
163.177.155.0/24 maxlen: 24
163.177.156.0/24 maxlen: 24
163.177.157.0/24 maxlen: 24
163.177.158.0/24 maxlen: 24
163.177.159.0/24 maxlen: 24
221.4.146.0/24 maxlen: 24
221.4.154.0/24 maxlen: 24
221.4.159.0/24 maxlen: 24
221.5.35.0/24 maxlen: 24
221.5.96.0/23 maxlen: 23
221.5.96.0/24 maxlen: 24
221.5.97.0/24 maxlen: 24
221.5.102.0/24 maxlen: 24
221.5.103.0/24 maxlen: 24
221.5.107.0/24 maxlen: 24
2408:8459:4c80::/44 maxlen: 44
2408:8459:4c90::/44 maxlen: 44
2408:8459:4ca0::/44 maxlen: 44
2408:8459:4cb0::/44 maxlen: 44
2408:8459:4e80::/44 maxlen: 44
2408:8459:4e90::/44 maxlen: 44
2408:8459:4ea0::/44 maxlen: 44
2408:8459:4eb0::/44 maxlen: 44
2408:8459:5080::/44 maxlen: 44
2408:8459:5090::/44 maxlen: 44
2408:8459:50a0::/44 maxlen: 44
2408:8459:50b0::/44 maxlen: 44
2408:8459:5280::/44 maxlen: 44
2408:8459:5290::/44 maxlen: 44
2408:8459:52a0::/44 maxlen: 44
2408:8459:52b0::/44 maxlen: 44
2408:8459:5480::/44 maxlen: 44
2408:8459:5490::/44 maxlen: 44
2408:8459:54a0::/44 maxlen: 44
2408:8459:54b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b5:41:81:d2:6e:02:72:0b:9b:00:57:29:c2:b1:ba:5c:08:44:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Jul 8 09:24:34 2026 GMT
Not After : Jul 7 09:29:34 2027 GMT
Subject: CN=808D3B0DDC749AB142BAACF2B6331C9E3524129C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:78:48:a8:3a:17:99:75:1d:ba:7f:3a:18:2c:
94:40:51:27:90:19:9e:92:49:d2:1e:94:cb:06:3b:
3a:9e:1b:b8:85:e8:c9:18:9b:b6:c1:0f:ba:e2:dc:
b4:ca:77:de:8e:b3:77:63:18:97:5a:9d:4a:9f:89:
c6:90:15:85:2a:15:d7:fb:e8:a9:4d:7e:c1:9f:2b:
b0:1e:3d:4d:f7:8d:0b:bb:fe:e3:ff:e1:f2:95:40:
bd:8e:da:bb:8a:50:69:0a:4e:94:d9:86:da:1b:19:
90:51:de:84:e0:3f:ce:86:e8:f2:73:08:c1:db:ae:
b3:b2:70:f8:67:ba:02:f1:3d:b3:ec:cb:83:1c:ad:
8e:e0:f5:04:64:e4:b3:55:87:7f:e0:7c:61:c1:f2:
45:cb:dd:2c:16:33:97:56:ea:e5:f8:b5:ac:df:25:
a7:ec:0d:83:cf:fa:4a:89:fe:6d:6a:6b:36:e4:3a:
28:2a:3a:bd:14:34:52:56:06:d0:a6:8a:1d:b6:cf:
b2:90:70:84:b5:8d:93:1e:a8:e6:3a:bd:c8:fd:36:
a4:25:a7:40:d2:23:c1:6a:71:94:85:c4:ff:ed:49:
b0:9c:c1:5b:bd:8c:d6:ca:4e:3f:2f:7b:3c:b4:2b:
fb:39:f9:00:9e:66:10:0a:60:a5:fd:32:3e:7d:ab:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:3B:0D:DC:74:9A:B1:42:BA:AC:F2:B6:33:1C:9E:35:24:12:9C
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.36.113.0/24
27.36.118.0-27.36.127.255
27.36.224.0/22
27.45.150.0/23
27.45.160.0/23
27.45.164.0/22
58.255.172.0/22
112.90.152.0/21
112.93.112.0/22
112.96.82.0/23
120.80.84.0/23
120.83.13.0/24
120.83.144.0/22
120.83.180.0/22
122.13.168.0/21
122.13.254.0/24
163.142.152.0/21
163.177.152.0/21
221.4.146.0/24
221.4.154.0/24
221.4.159.0/24
221.5.35.0/24
221.5.96.0/23
221.5.102.0/23
221.5.107.0/24
IPv6:
2408:8459:4c80::/42
2408:8459:4e80::/42
2408:8459:5080::/42
2408:8459:5280::/42
2408:8459:5480::/42
Signature Algorithm: sha256WithRSAEncryption
06:dd:10:cb:ef:ae:d0:60:fe:d1:c7:f1:79:6b:fc:d3:69:d2:
d2:76:b6:b9:81:66:41:ca:a1:33:b3:ac:b2:cc:50:65:6a:f9:
45:b8:22:f9:48:03:d4:c0:5c:71:cf:22:b0:0b:3f:c7:91:1d:
57:b0:5a:16:30:4b:2b:c2:a4:d9:c1:34:e1:00:24:69:c2:92:
40:32:77:1d:17:3e:c5:04:0d:78:82:3c:a5:59:9d:ba:67:51:
41:f8:0e:63:53:07:8c:bd:9d:41:3d:15:01:dc:ba:43:24:83:
bf:9a:01:37:0d:92:1a:0a:c0:28:78:95:6b:5f:41:cd:86:31:
eb:24:2d:e7:e2:91:af:40:77:68:ec:af:e0:96:de:cb:bd:a4:
d1:3f:66:79:e1:da:b2:23:d7:b8:50:21:e2:13:60:bf:da:95:
cd:54:fa:00:d4:be:b1:09:be:9b:9e:5b:35:e4:7a:6a:11:d1:
63:b6:cf:63:85:e2:53:21:5f:f4:9b:99:0d:5c:c3:df:00:d1:
64:16:7c:17:6f:05:42:25:dd:78:7f:d7:76:ae:98:40:eb:d2:
04:28:43:cb:38:85:2e:77:41:44:c6:e8:54:31:0e:ff:2f:c4:
b0:e8:07:86:c0:7e:ea:fb:80:56:5f:e1:28:da:01:77:92:bf:
31:f0:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:11 2026 by rpki-client