Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134772.roa
File: AS134772.roa (raw, json)
Hash identifier: 6HjorXbxK9+FQSBkA6wxiVMhPSF65Gvk6oL9HPsL+jQ=
Subject key identifier: 26:BB:B4:85:98:EE:FD:FD:DA:0E:03:16:A3:C7:B8:C0:9A:88:8F:C1
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 01C19A86AFB612C1862398C846B039CAC97013B5
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134772.roa
Signing time: Thu 16 Jul 2026 16:02:11 +0000
ROA not before: Thu 16 Jul 2026 15:57:11 +0000
ROA not after: Thu 15 Jul 2027 16:02:11 +0000
asID: 134772
IP address blocks: 240e:fc:7000::/36 maxlen: 36
240e:fc:8000::/36 maxlen: 36
240e:fc:9000::/36 maxlen: 36
240e:fc:a000::/36 maxlen: 36
240e:fc:b000::/36 maxlen: 36
240e:fc:c000::/36 maxlen: 36
240e:fc:d000::/36 maxlen: 36
240e:fc:e000::/36 maxlen: 36
240e:ff:c004::/48 maxlen: 48
240e:ff:c00c::/48 maxlen: 48
240e:108:4046::/48 maxlen: 48
240e:108:4846::/48 maxlen: 48
240e:3b0:d000::/37 maxlen: 37
240e:3b0:d800::/38 maxlen: 38
240e:3b1:d000::/37 maxlen: 37
240e:3b1:d800::/38 maxlen: 38
240e:3b2:d000::/37 maxlen: 37
240e:3b2:d800::/38 maxlen: 38
240e:3b3:d000::/37 maxlen: 37
240e:3b3:d800::/38 maxlen: 38
240e:3b4:d000::/37 maxlen: 37
240e:3b4:d800::/38 maxlen: 38
240e:3b5:d000::/37 maxlen: 37
240e:3b5:d800::/38 maxlen: 38
240e:3b6:d000::/37 maxlen: 37
240e:3b6:d800::/38 maxlen: 38
240e:3b7:d000::/37 maxlen: 37
240e:3b7:d800::/38 maxlen: 38
240e:3b8:d000::/37 maxlen: 37
240e:3b8:d800::/38 maxlen: 38
240e:3b9:d000::/37 maxlen: 37
240e:3b9:d800::/38 maxlen: 38
240e:3ba:d000::/37 maxlen: 37
240e:3ba:d800::/38 maxlen: 38
240e:3bb:d000::/37 maxlen: 37
240e:3bb:d800::/38 maxlen: 38
240e:3bc:d000::/37 maxlen: 37
240e:3bc:d800::/38 maxlen: 38
240e:3bd:d000::/37 maxlen: 37
240e:3bd:d800::/38 maxlen: 38
240e:3be:d000::/37 maxlen: 37
240e:3be:d800::/38 maxlen: 38
240e:3bf:d000::/37 maxlen: 37
240e:3bf:d800::/38 maxlen: 38
240e:6b2::/36 maxlen: 36
240e:6b2:1000::/36 maxlen: 36
240e:6b2:2000::/36 maxlen: 36
240e:7b6:2000::/36 maxlen: 36
240e:982:e609::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c1:9a:86:af:b6:12:c1:86:23:98:c8:46:b0:39:ca:c9:70:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 16 15:57:11 2026 GMT
Not After : Jul 15 16:02:11 2027 GMT
Subject: CN=26BBB48598EEFDFDDA0E0316A3C7B8C09A888FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:f9:0c:14:8d:e3:94:32:39:60:7a:79:99:
5e:be:52:cb:34:23:86:54:97:26:ad:fe:bf:90:ec:
b2:17:07:b3:29:83:0d:4d:e1:b4:24:61:7d:77:3b:
84:57:3f:55:fd:34:81:b4:a7:6a:ed:ec:29:a0:96:
69:92:d8:c2:db:a1:a8:2c:f1:a9:9c:d6:15:c1:cc:
29:6f:9f:92:e1:5a:12:8e:02:a1:b1:a2:9e:c2:61:
8f:7d:b3:89:14:39:04:e7:9c:ec:fc:0e:3e:96:38:
f4:d6:2b:0d:32:98:ee:f8:6e:7c:b4:cd:e4:6e:a4:
01:0d:0e:a9:54:9c:e3:7a:c7:93:a8:1a:f2:10:d3:
21:12:4d:b7:97:16:fd:28:21:e9:91:f7:c4:85:9a:
e2:da:a6:b4:95:f8:d0:ff:69:d7:ae:a5:3f:c6:a2:
c6:cf:f4:84:68:c7:4a:c0:97:2a:0e:54:35:2b:a8:
8a:20:07:ba:84:ee:88:3c:75:00:7d:b0:6c:66:04:
64:3c:3e:81:f9:17:31:85:c3:d7:bc:16:65:92:4c:
91:a4:c9:b1:8d:3f:7d:d9:c8:63:81:71:22:ae:45:
0a:cf:cf:d9:00:8a:49:1f:b9:2c:5a:cc:a7:6e:f1:
e9:da:3a:28:dc:11:5a:17:75:51:c5:91:c4:27:9c:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:B4:85:98:EE:FD:FD:DA:0E:03:16:A3:C7:B8:C0:9A:88:8F:C1
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:fc:7000::-240e:fc:efff:ffff:ffff:ffff:ffff:ffff
240e:ff:c004::/48
240e:ff:c00c::/48
240e:108:4046::/48
240e:108:4846::/48
240e:3b0:d000::-240e:3b0:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b1:d000::-240e:3b1:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b2:d000::-240e:3b2:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b3:d000::-240e:3b3:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b4:d000::-240e:3b4:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b5:d000::-240e:3b5:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b6:d000::-240e:3b6:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b7:d000::-240e:3b7:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b8:d000::-240e:3b8:dbff:ffff:ffff:ffff:ffff:ffff
240e:3b9:d000::-240e:3b9:dbff:ffff:ffff:ffff:ffff:ffff
240e:3ba:d000::-240e:3ba:dbff:ffff:ffff:ffff:ffff:ffff
240e:3bb:d000::-240e:3bb:dbff:ffff:ffff:ffff:ffff:ffff
240e:3bc:d000::-240e:3bc:dbff:ffff:ffff:ffff:ffff:ffff
240e:3bd:d000::-240e:3bd:dbff:ffff:ffff:ffff:ffff:ffff
240e:3be:d000::-240e:3be:dbff:ffff:ffff:ffff:ffff:ffff
240e:3bf:d000::-240e:3bf:dbff:ffff:ffff:ffff:ffff:ffff
240e:6b2::-240e:6b2:2fff:ffff:ffff:ffff:ffff:ffff
240e:7b6:2000::/36
240e:982:e609::/48
Signature Algorithm: sha256WithRSAEncryption
30:eb:c5:e6:e4:e8:0a:ae:f9:41:42:a9:74:ae:38:e1:c4:87:
4a:45:a4:9f:ee:9b:48:5c:7e:d4:d6:b2:97:12:2f:fb:55:e4:
e1:dc:2e:df:6f:0d:34:0e:63:a4:23:6c:58:9e:e0:bf:00:b1:
68:c6:7e:36:07:57:66:e4:f9:a2:50:14:1a:a6:98:08:69:23:
86:a6:45:c1:43:1b:e6:96:4d:74:ed:21:0b:d2:1e:bc:1c:fc:
9e:86:0d:f1:90:ba:3e:12:5b:90:df:23:e1:6e:96:fb:0e:3d:
80:ac:60:a2:89:81:dc:c0:66:9e:6b:a6:36:75:6f:bf:f8:60:
83:a2:e4:2b:26:4f:3b:5c:5e:c7:fe:db:77:a8:85:03:bb:5e:
31:e1:ca:29:c8:92:42:94:3b:2b:0d:2f:3e:4e:a2:08:8d:35:
c6:e4:0e:c7:5c:4e:89:a1:67:d5:f6:9e:3d:89:58:fe:b4:fc:
92:ac:4e:ab:67:2c:3a:73:00:90:6e:08:85:91:da:6b:b7:f4:
51:84:75:24:ec:96:88:13:69:31:b2:33:2f:53:93:08:ea:2a:
c3:2c:cf:b4:b2:1c:94:46:32:e0:4f:70:d1:56:40:c8:04:de:
fe:57:c4:d6:5d:b5:f9:93:17:3c:13:94:0c:4b:f5:b5:bb:e3:
31:da:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:23 2026 by rpki-client