Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
File: AS137697.roa (raw, json)
Hash identifier: CSsO4Pd1kmuioBeHkIUx7fSXMW9ldIneO90kIK1KvTU=
Subject key identifier: E0:DE:1F:78:72:C9:08:12:AA:E4:6D:BB:AF:71:45:D7:8B:3E:63:48
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0F28CC28F8DEF64182E76C3ED8894594673ED9E5
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
Signing time: Mon 20 Jul 2026 02:11:56 +0000
ROA not before: Mon 20 Jul 2026 02:06:56 +0000
ROA not after: Mon 19 Jul 2027 02:11:56 +0000
asID: 137697
IP address blocks: 49.71.36.0/24 maxlen: 24
49.71.37.0/24 maxlen: 24
49.71.38.0/24 maxlen: 24
49.71.39.0/24 maxlen: 24
49.71.72.0/21 maxlen: 21
49.86.44.0/22 maxlen: 22
58.220.0.0/24 maxlen: 24
58.220.1.0/24 maxlen: 24
58.220.2.0/24 maxlen: 24
58.220.3.0/24 maxlen: 24
58.220.4.0/24 maxlen: 24
58.220.6.0/24 maxlen: 24
58.220.7.0/24 maxlen: 24
58.220.8.0/24 maxlen: 24
58.220.9.0/24 maxlen: 24
58.220.10.0/24 maxlen: 24
58.220.11.0/24 maxlen: 24
58.220.12.0/24 maxlen: 24
58.220.14.0/24 maxlen: 24
58.220.16.0/24 maxlen: 24
58.220.17.0/24 maxlen: 24
58.220.18.0/24 maxlen: 24
58.220.19.0/24 maxlen: 24
58.220.20.0/24 maxlen: 24
58.220.21.0/24 maxlen: 24
58.220.22.0/24 maxlen: 24
58.220.23.0/24 maxlen: 24
58.220.24.0/24 maxlen: 24
58.220.25.0/24 maxlen: 24
58.220.26.0/24 maxlen: 24
58.220.27.0/24 maxlen: 24
58.220.28.0/24 maxlen: 24
58.220.29.0/24 maxlen: 24
58.220.30.0/24 maxlen: 24
58.220.31.0/24 maxlen: 24
58.220.32.0/24 maxlen: 24
58.220.33.0/24 maxlen: 24
58.220.34.0/24 maxlen: 24
58.220.35.0/24 maxlen: 24
58.220.36.0/24 maxlen: 24
58.220.37.0/24 maxlen: 24
58.220.39.0/24 maxlen: 24
58.220.40.0/24 maxlen: 24
58.220.41.0/24 maxlen: 24
58.220.42.0/24 maxlen: 24
58.220.43.0/24 maxlen: 24
58.220.44.0/24 maxlen: 24
58.220.45.0/24 maxlen: 24
58.220.46.0/24 maxlen: 24
58.220.47.0/24 maxlen: 24
58.220.48.0/24 maxlen: 24
58.220.49.0/24 maxlen: 24
58.220.50.0/24 maxlen: 24
58.220.51.0/24 maxlen: 24
58.220.52.0/24 maxlen: 24
58.220.53.0/24 maxlen: 24
58.220.54.0/24 maxlen: 24
58.220.56.0/24 maxlen: 24
58.220.57.0/24 maxlen: 24
58.220.58.0/24 maxlen: 24
58.220.61.0/24 maxlen: 24
58.220.62.0/24 maxlen: 24
58.220.63.0/24 maxlen: 24
58.220.64.0/24 maxlen: 24
58.220.65.0/24 maxlen: 24
58.220.66.0/24 maxlen: 24
58.220.67.0/24 maxlen: 24
58.220.68.0/24 maxlen: 24
58.220.69.0/24 maxlen: 24
58.220.70.0/24 maxlen: 24
58.220.71.0/24 maxlen: 24
58.220.72.0/24 maxlen: 24
58.220.73.0/24 maxlen: 24
58.220.74.0/24 maxlen: 24
58.220.75.0/24 maxlen: 24
58.220.76.0/24 maxlen: 24
58.220.77.0/24 maxlen: 24
58.220.78.0/24 maxlen: 24
58.220.79.0/24 maxlen: 24
58.220.80.0/24 maxlen: 24
58.220.81.0/24 maxlen: 24
58.220.82.0/23 maxlen: 23
58.220.92.0/24 maxlen: 24
58.220.93.0/24 maxlen: 24
58.220.94.0/24 maxlen: 24
58.220.95.0/24 maxlen: 24
58.220.175.0/24 maxlen: 24
58.220.176.0/24 maxlen: 24
58.220.220.0/24 maxlen: 24
61.147.67.0/24 maxlen: 24
61.147.68.0/24 maxlen: 24
61.147.69.0/24 maxlen: 24
61.147.70.0/24 maxlen: 24
61.147.72.0/24 maxlen: 24
61.147.73.0/24 maxlen: 24
61.147.74.0/24 maxlen: 24
61.147.75.0/24 maxlen: 24
61.147.77.0/24 maxlen: 24
61.147.78.0/24 maxlen: 24
61.147.80.0/24 maxlen: 24
61.147.81.0/24 maxlen: 24
61.147.82.0/24 maxlen: 24
61.147.83.0/24 maxlen: 24
61.147.84.0/24 maxlen: 24
61.147.85.0/24 maxlen: 24
61.147.88.0/24 maxlen: 24
61.147.89.0/24 maxlen: 24
61.147.90.0/24 maxlen: 24
61.147.91.0/24 maxlen: 24
61.147.92.0/24 maxlen: 24
61.147.93.0/24 maxlen: 24
61.147.94.0/24 maxlen: 24
61.147.95.0/24 maxlen: 24
61.147.96.0/22 maxlen: 22
61.147.96.0/24 maxlen: 24
61.147.97.0/24 maxlen: 24
61.147.98.0/24 maxlen: 24
61.147.99.0/24 maxlen: 24
61.147.100.0/24 maxlen: 24
61.147.102.0/24 maxlen: 24
61.147.103.0/24 maxlen: 24
61.147.104.0/22 maxlen: 22
61.147.104.0/24 maxlen: 24
61.147.105.0/24 maxlen: 24
61.147.106.0/24 maxlen: 24
61.147.107.0/24 maxlen: 24
61.147.108.0/23 maxlen: 23
61.147.110.0/24 maxlen: 24
61.147.111.0/24 maxlen: 24
61.147.112.0/23 maxlen: 23
61.147.114.0/24 maxlen: 24
61.147.115.0/24 maxlen: 24
61.147.116.0/22 maxlen: 22
61.147.116.0/24 maxlen: 24
61.147.117.0/24 maxlen: 24
61.147.118.0/24 maxlen: 24
61.147.119.0/24 maxlen: 24
61.147.120.0/24 maxlen: 24
61.147.121.0/24 maxlen: 24
61.147.122.0/24 maxlen: 24
61.147.123.0/24 maxlen: 24
61.147.124.0/24 maxlen: 24
61.147.125.0/24 maxlen: 24
61.147.126.0/24 maxlen: 24
61.147.127.0/24 maxlen: 24
114.230.92.0/22 maxlen: 22
114.230.136.0/22 maxlen: 22
114.230.152.0/22 maxlen: 22
114.230.196.0/22 maxlen: 22
114.230.204.0/22 maxlen: 22
114.230.212.0/22 maxlen: 22
114.230.220.0/22 maxlen: 22
117.91.176.0/20 maxlen: 20
117.91.192.0/24 maxlen: 24
117.91.193.0/24 maxlen: 24
117.91.194.0/24 maxlen: 24
117.91.195.0/24 maxlen: 24
117.91.196.0/24 maxlen: 24
117.91.197.0/24 maxlen: 24
117.91.198.0/24 maxlen: 24
117.91.199.0/24 maxlen: 24
121.233.192.0/22 maxlen: 22
180.97.178.0/24 maxlen: 24
180.97.179.0/24 maxlen: 24
180.97.180.0/24 maxlen: 24
180.97.181.0/24 maxlen: 24
180.97.182.0/24 maxlen: 24
180.97.183.0/24 maxlen: 24
180.97.184.0/24 maxlen: 24
180.97.185.0/24 maxlen: 24
180.97.186.0/24 maxlen: 24
180.97.187.0/24 maxlen: 24
180.97.188.0/24 maxlen: 24
180.97.189.0/24 maxlen: 24
180.97.190.0/24 maxlen: 24
180.119.118.0/23 maxlen: 23
180.119.120.0/22 maxlen: 22
180.119.136.0/22 maxlen: 22
180.119.144.0/22 maxlen: 22
180.119.168.0/22 maxlen: 22
180.119.232.0/22 maxlen: 22
221.229.36.0/23 maxlen: 23
221.229.77.0/24 maxlen: 24
222.189.228.0/24 maxlen: 24
222.189.237.0/24 maxlen: 24
222.189.238.0/23 maxlen: 23
240e:e9:b000::/37 maxlen: 37
240e:978:900::/40 maxlen: 40
240e:978:1900::/40 maxlen: 40
240e:982:dc0c::/48 maxlen: 48
240e:982:dc0d::/48 maxlen: 48
240e:982:dc0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:28:cc:28:f8:de:f6:41:82:e7:6c:3e:d8:89:45:94:67:3e:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 20 02:06:56 2026 GMT
Not After : Jul 19 02:11:56 2027 GMT
Subject: CN=E0DE1F7872C90812AAE46DBBAF7145D78B3E6348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:95:21:6d:4e:7b:d4:e8:61:0b:43:6f:3d:
76:f1:e2:6d:4c:c4:f6:c5:7b:49:1e:dc:75:64:5f:
88:d0:cd:d3:ad:6a:8e:9e:fb:43:53:14:67:8b:e5:
23:75:85:ec:a7:5d:e0:a9:2e:79:0a:ac:ef:bf:76:
ad:56:2e:41:b8:59:52:bb:12:0e:6e:54:7e:96:84:
aa:2d:b7:52:2c:91:aa:b2:1f:9a:78:83:e6:18:37:
8c:ed:02:32:63:db:b8:cd:c0:15:38:8c:f4:51:21:
cc:59:8e:b7:61:1a:3f:40:a4:dc:89:1d:7c:eb:9e:
3f:12:dc:c7:c2:c4:25:cb:f8:28:c3:ab:94:df:72:
eb:c5:a1:ba:18:10:7c:cc:e5:6d:81:c6:34:02:29:
5e:50:63:8f:b5:01:04:d2:cf:19:1a:95:d3:9e:51:
3e:00:9d:aa:80:54:47:b9:41:1c:a7:16:84:3b:59:
24:ef:ba:11:56:fe:f4:c3:6a:13:ea:5a:e8:7f:86:
f5:2f:1f:19:46:ed:6b:c6:20:9d:57:9d:0a:45:ca:
ef:d7:c9:67:37:cb:aa:91:04:57:b2:12:21:73:ff:
d3:17:b5:53:e9:7a:9c:e4:2b:bb:65:0b:dd:6a:33:
79:c9:07:b3:c3:68:0c:30:aa:d3:dc:95:f3:6f:62:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:1F:78:72:C9:08:12:AA:E4:6D:BB:AF:71:45:D7:8B:3E:63:48
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.71.36.0/22
49.71.72.0/21
49.86.44.0/22
58.220.0.0-58.220.4.255
58.220.6.0-58.220.12.255
58.220.14.0/24
58.220.16.0-58.220.37.255
58.220.39.0-58.220.54.255
58.220.56.0-58.220.58.255
58.220.61.0-58.220.83.255
58.220.92.0/22
58.220.175.0-58.220.176.255
58.220.220.0/24
61.147.67.0-61.147.70.255
61.147.72.0/22
61.147.77.0-61.147.78.255
61.147.80.0-61.147.85.255
61.147.88.0-61.147.100.255
61.147.102.0-61.147.127.255
114.230.92.0/22
114.230.136.0/22
114.230.152.0/22
114.230.196.0/22
114.230.204.0/22
114.230.212.0/22
114.230.220.0/22
117.91.176.0-117.91.199.255
121.233.192.0/22
180.97.178.0-180.97.190.255
180.119.118.0-180.119.123.255
180.119.136.0/22
180.119.144.0/22
180.119.168.0/22
180.119.232.0/22
221.229.36.0/23
221.229.77.0/24
222.189.228.0/24
222.189.237.0-222.189.239.255
IPv6:
240e:e9:b000::/37
240e:978:900::/40
240e:978:1900::/40
240e:982:dc0c::-240e:982:dc0e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:28:79:0f:48:ac:74:ac:ff:9d:9c:92:b6:78:fd:3a:0d:94:
55:ba:cf:93:ef:39:91:1d:8f:b9:ae:f6:c0:d3:27:57:78:60:
ee:da:80:ed:be:fc:7e:cc:e5:4e:16:26:cc:51:b9:cd:1a:39:
9f:a4:04:7e:f8:a3:0f:95:b0:46:e3:61:0f:d0:03:b5:90:ec:
66:b2:2f:ba:64:21:c5:52:34:c1:c7:e2:88:88:3f:42:bc:8f:
11:cd:5c:dd:52:96:65:65:78:57:2b:e6:21:62:1e:db:f2:4c:
3e:a6:8c:fd:46:0f:3e:35:8c:0b:81:31:66:22:66:48:a2:7d:
21:38:e0:05:e2:7a:4f:a0:28:08:d1:15:51:72:3e:1e:f9:ac:
75:80:b2:04:74:0d:84:f1:49:1c:29:19:78:a3:1f:52:9e:78:
1c:4a:22:85:49:e6:32:64:58:48:7c:0d:15:8c:05:6a:b5:61:
29:82:41:69:1a:1e:ae:24:72:8d:74:f2:53:89:56:8c:5c:25:
11:38:22:70:88:d4:f4:ea:1a:cd:b4:e4:24:84:8a:4a:39:ef:
2a:a0:96:65:1a:fc:8e:25:58:1e:2c:4a:e5:5a:77:c0:98:6d:
61:89:1d:4e:66:a2:44:c5:c4:35:c8:63:f3:7a:13:84:7b:5e:
36:44:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:26 2026 by rpki-client