Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134770.roa
File: AS134770.roa (raw, json)
Hash identifier: oWW/WmrNj8zccV1wMUmcN0eboxZX0fg1xsHXWYCMHU8=
Subject key identifier: 5A:65:21:05:F9:D7:37:FD:29:0B:3F:80:A0:F3:CD:9A:88:5C:C2:17
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2A530BA4013C3BFEF40D1C9AD6FAD8BA1B22A35A
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134770.roa
Signing time: Mon 20 Jul 2026 02:11:56 +0000
ROA not before: Mon 20 Jul 2026 02:06:56 +0000
ROA not after: Mon 19 Jul 2027 02:11:56 +0000
asID: 134770
IP address blocks: 58.211.215.0/24 maxlen: 24
61.155.134.0/24 maxlen: 24
61.155.135.0/24 maxlen: 24
61.155.139.0/24 maxlen: 24
61.155.171.0/24 maxlen: 24
61.160.174.0/24 maxlen: 24
61.160.175.0/24 maxlen: 24
61.160.179.0/24 maxlen: 24
114.219.141.0/24 maxlen: 24
117.81.78.0/24 maxlen: 24
117.81.94.0/24 maxlen: 24
117.81.175.0/24 maxlen: 24
121.228.171.0/24 maxlen: 24
121.228.173.0/24 maxlen: 24
121.228.174.0/24 maxlen: 24
121.228.176.0/24 maxlen: 24
121.228.177.0/24 maxlen: 24
121.228.178.0/24 maxlen: 24
121.228.179.0/24 maxlen: 24
121.228.180.0/24 maxlen: 24
121.228.181.0/24 maxlen: 24
121.228.182.0/24 maxlen: 24
121.228.183.0/24 maxlen: 24
121.228.184.0/24 maxlen: 24
121.239.11.0/24 maxlen: 24
180.97.79.0/24 maxlen: 24
180.97.93.0/24 maxlen: 24
180.97.94.0/24 maxlen: 24
180.97.95.0/24 maxlen: 24
180.97.166.0/24 maxlen: 24
180.101.80.0/22 maxlen: 22
180.101.84.0/23 maxlen: 23
180.101.86.0/24 maxlen: 24
180.101.210.0/24 maxlen: 24
180.101.211.0/24 maxlen: 24
180.101.212.0/22 maxlen: 22
180.101.216.0/24 maxlen: 24
180.101.223.0/24 maxlen: 24
218.94.231.0/24 maxlen: 24
218.94.232.0/24 maxlen: 24
221.224.84.0/24 maxlen: 24
221.224.105.0/24 maxlen: 24
221.224.139.0/24 maxlen: 24
221.224.220.0/24 maxlen: 24
240e:1a:150::/44 maxlen: 44
240e:e9:6800::/37 maxlen: 37
240e:979:e00::/40 maxlen: 40
240e:979:1e00::/40 maxlen: 40
240e:979:2e00::/40 maxlen: 40
240e:979:3e00::/40 maxlen: 40
240e:979:4e00::/40 maxlen: 40
240e:979:5e00::/40 maxlen: 40
240e:979:6e00::/40 maxlen: 40
240e:979:7e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:53:0b:a4:01:3c:3b:fe:f4:0d:1c:9a:d6:fa:d8:ba:1b:22:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 20 02:06:56 2026 GMT
Not After : Jul 19 02:11:56 2027 GMT
Subject: CN=5A652105F9D737FD290B3F80A0F3CD9A885CC217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:18:ae:f6:7d:f4:2a:93:d4:6f:a5:c9:8d:
8d:fc:6e:a3:fc:03:6e:5c:45:ae:a8:5c:7c:ce:07:
4c:d3:a7:f3:8e:2b:13:c0:e5:54:e2:5b:de:7d:b5:
cc:53:f6:31:b2:2e:f7:0d:74:e4:22:90:2f:c1:7c:
71:2c:df:25:7d:9e:45:cd:fb:a4:ce:16:51:f5:53:
8e:f1:30:ba:b8:7a:3c:f2:bd:c1:c0:cf:4e:fa:e1:
b0:e8:10:e7:2b:c3:51:73:d5:3e:af:0d:e1:d1:7e:
49:99:c9:26:ed:47:fd:e6:a3:a2:12:4f:c8:f9:51:
52:84:0b:cd:91:c2:cd:63:2c:36:68:ad:36:06:5b:
e6:de:7f:18:a9:d9:57:99:ce:4f:fd:07:6a:e4:b7:
45:2d:bc:2a:1f:cd:c3:85:8e:6d:47:6b:ec:f7:c4:
fc:ee:ba:62:f8:05:e4:89:85:a3:86:7b:d5:ef:5c:
95:7b:63:30:7a:a1:20:54:a8:83:52:b8:55:b5:fc:
aa:6c:b5:ba:b8:45:99:2f:a6:51:3a:f0:8e:83:a8:
e6:cc:e5:aa:c4:00:97:2e:35:d9:52:e2:f1:9a:0d:
94:1f:1c:12:3b:16:0e:b6:ce:8b:a9:62:aa:e3:1b:
d9:e0:2a:b9:c4:b5:8b:e0:5d:0a:06:86:04:11:96:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:21:05:F9:D7:37:FD:29:0B:3F:80:A0:F3:CD:9A:88:5C:C2:17
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.211.215.0/24
61.155.134.0/23
61.155.139.0/24
61.155.171.0/24
61.160.174.0/23
61.160.179.0/24
114.219.141.0/24
117.81.78.0/24
117.81.94.0/24
117.81.175.0/24
121.228.171.0/24
121.228.173.0-121.228.174.255
121.228.176.0-121.228.184.255
121.239.11.0/24
180.97.79.0/24
180.97.93.0-180.97.95.255
180.97.166.0/24
180.101.80.0-180.101.86.255
180.101.210.0-180.101.216.255
180.101.223.0/24
218.94.231.0-218.94.232.255
221.224.84.0/24
221.224.105.0/24
221.224.139.0/24
221.224.220.0/24
IPv6:
240e:1a:150::/44
240e:e9:6800::/37
240e:979:e00::/40
240e:979:1e00::/40
240e:979:2e00::/40
240e:979:3e00::/40
240e:979:4e00::/40
240e:979:5e00::/40
240e:979:6e00::/40
240e:979:7e00::/40
Signature Algorithm: sha256WithRSAEncryption
4b:e6:70:76:49:83:cc:a4:0b:30:4a:86:43:29:7f:5c:bc:79:
d1:89:75:98:46:ad:fb:67:42:5b:60:0c:0f:b2:1c:fd:9d:02:
f8:79:16:14:85:a4:47:00:ab:e9:1b:89:3f:ad:6a:a2:f7:7e:
47:2e:70:b7:c7:2d:f0:bc:03:e4:4a:71:fb:5e:ea:0b:53:02:
b3:cf:d1:d6:e5:78:fe:99:83:37:46:7d:82:35:7c:77:e3:cd:
9b:6d:a2:13:9c:52:c9:49:c1:da:00:a9:37:01:ac:b0:25:78:
52:32:2a:1e:22:b9:41:e3:25:9a:cb:fc:54:14:0e:68:18:5e:
4e:c5:9b:94:18:0c:82:d9:93:cb:99:6c:e9:c6:a9:18:97:cc:
b2:7e:e1:97:3f:c9:a7:36:36:b8:6f:0d:c0:ea:d2:9b:31:35:
d2:cc:43:5c:c9:b1:c4:85:7b:65:4e:b3:30:6f:02:e9:08:b3:
b1:e0:b9:3a:d6:85:1a:f4:71:fd:02:50:4c:ff:a9:ce:c7:d1:
93:4e:09:54:c5:66:eb:71:bb:25:7d:fa:6c:0c:5c:aa:6d:c1:
9e:7d:20:b2:c8:5a:4f:aa:3a:73:38:28:28:81:e8:45:61:8d:
6a:1f:9f:e7:a5:97:60:aa:01:a9:cb:f5:21:76:0b:ec:d8:94:
fc:cd:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:17 2026 by rpki-client