Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
File: AS146966.roa (raw, json)
Hash identifier: OJoyXWlXRxFMkl9gEfbU5Fv4haLodB8wA9Xdlryr3s0=
Subject key identifier: B5:8B:C3:96:15:51:5A:33:A3:A1:80:78:9F:F1:97:B7:95:D1:1A:A0
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 237019598AE767BB69170ADFF949FB62A521AF45
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
Signing time: Mon 20 Jul 2026 02:12:05 +0000
ROA not before: Mon 20 Jul 2026 02:07:05 +0000
ROA not after: Mon 19 Jul 2027 02:12:05 +0000
asID: 146966
IP address blocks: 49.71.79.0/24 maxlen: 24
49.71.126.0/23 maxlen: 23
49.86.40.0/22 maxlen: 22
58.220.38.0/24 maxlen: 24
58.220.85.0/24 maxlen: 24
58.220.163.0/24 maxlen: 24
58.220.164.0/24 maxlen: 24
58.220.177.0/24 maxlen: 24
58.220.178.0/23 maxlen: 23
58.220.178.0/24 maxlen: 24
58.220.179.0/24 maxlen: 24
58.220.180.0/24 maxlen: 24
58.220.188.0/24 maxlen: 24
61.132.32.0/24 maxlen: 24
114.230.85.0/24 maxlen: 24
114.230.172.0/22 maxlen: 22
114.230.228.0/22 maxlen: 22
114.230.232.0/21 maxlen: 21
117.91.16.0/21 maxlen: 21
117.91.40.0/22 maxlen: 22
121.229.160.0/24 maxlen: 24
121.229.168.0/24 maxlen: 24
121.229.172.0/24 maxlen: 24
121.229.175.0/24 maxlen: 24
121.229.177.0/24 maxlen: 24
121.229.204.0/24 maxlen: 24
121.229.205.0/24 maxlen: 24
121.233.208.0/23 maxlen: 23
121.233.230.0/24 maxlen: 24
121.233.238.0/23 maxlen: 23
121.237.180.0/24 maxlen: 24
121.237.181.0/24 maxlen: 24
121.237.182.0/24 maxlen: 24
121.237.183.0/24 maxlen: 24
180.97.176.0/23 maxlen: 23
180.97.176.0/24 maxlen: 24
180.97.177.0/24 maxlen: 24
180.97.191.0/24 maxlen: 24
180.119.35.0/24 maxlen: 24
180.119.140.0/23 maxlen: 23
180.119.152.0/22 maxlen: 22
202.111.123.0/24 maxlen: 24
203.170.58.0/24 maxlen: 24
203.170.59.0/24 maxlen: 24
203.205.88.0/24 maxlen: 24
218.91.113.0/24 maxlen: 24
218.91.114.0/24 maxlen: 24
221.229.0.0/24 maxlen: 24
221.229.4.0/24 maxlen: 24
221.229.21.0/24 maxlen: 24
221.229.38.0/24 maxlen: 24
221.229.52.0/23 maxlen: 23
221.229.68.0/24 maxlen: 24
221.229.92.0/24 maxlen: 24
221.229.99.0/24 maxlen: 24
221.229.101.0/24 maxlen: 24
221.229.103.0/24 maxlen: 24
221.229.106.0/24 maxlen: 24
221.229.107.0/24 maxlen: 24
222.189.172.0/23 maxlen: 23
222.191.77.0/24 maxlen: 24
222.191.78.0/24 maxlen: 24
240e:1a:160::/44 maxlen: 44
240e:978:2900::/40 maxlen: 40
240e:978:3900::/40 maxlen: 40
240e:978:4900::/40 maxlen: 40
240e:978:4929::/48 maxlen: 48
240e:978:492e::/48 maxlen: 48
240e:978:493a::/48 maxlen: 48
240e:978:4946::/48 maxlen: 48
240e:978:494a::/48 maxlen: 48
240e:978:494b::/48 maxlen: 48
240e:978:495c::/48 maxlen: 48
240e:978:4963::/48 maxlen: 48
240e:978:4971::/48 maxlen: 48
240e:978:499d::/48 maxlen: 48
240e:978:49ff::/48 maxlen: 48
240e:982:d902::/48 maxlen: 48
240e:982:d906::/48 maxlen: 48
240e:982:d914::/48 maxlen: 48
240e:982:d947::/48 maxlen: 48
240e:982:d948::/48 maxlen: 48
240e:982:d96c::/48 maxlen: 48
240e:982:d98d::/48 maxlen: 48
240e:982:d98f::/48 maxlen: 48
240e:982:d996::/48 maxlen: 48
240e:982:d9af::/48 maxlen: 48
240e:982:d9b4::/48 maxlen: 48
240e:982:d9bc::/48 maxlen: 48
240e:982:d9cd::/48 maxlen: 48
240e:982:d9cf::/48 maxlen: 48
240e:982:d9d4::/48 maxlen: 48
240e:982:d9d9::/48 maxlen: 48
240e:982:da26::/48 maxlen: 48
240e:982:da39::/48 maxlen: 48
240e:982:da51::/48 maxlen: 48
240e:982:da55::/48 maxlen: 48
240e:982:da60::/48 maxlen: 48
240e:982:dab2::/48 maxlen: 48
240e:982:dab6::/48 maxlen: 48
240e:982:dac3::/48 maxlen: 48
240e:982:dac9::/48 maxlen: 48
240e:982:dad6::/48 maxlen: 48
240e:982:dadb::/48 maxlen: 48
240e:982:daf1::/48 maxlen: 48
240e:982:db29::/48 maxlen: 48
240e:982:db2c::/48 maxlen: 48
240e:982:db36::/48 maxlen: 48
240e:982:db39::/48 maxlen: 48
240e:982:db51::/48 maxlen: 48
240e:982:db61::/48 maxlen: 48
240e:982:db66::/48 maxlen: 48
240e:982:db7d::/48 maxlen: 48
240e:982:dc18::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:70:19:59:8a:e7:67:bb:69:17:0a:df:f9:49:fb:62:a5:21:af:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 20 02:07:05 2026 GMT
Not After : Jul 19 02:12:05 2027 GMT
Subject: CN=B58BC39615515A33A3A180789FF197B795D11AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:62:bd:55:3e:e6:5c:3c:48:0c:03:87:7b:
da:85:ee:9b:27:b6:1f:58:cd:2b:95:94:06:6d:50:
d8:35:a2:2f:2b:69:64:f2:b6:be:83:3b:18:e1:a6:
5e:2a:22:20:1a:55:4d:57:83:50:fb:af:43:86:11:
7d:6c:78:48:49:82:c0:46:01:ca:22:e4:97:c7:6b:
05:97:d0:51:fc:25:8c:da:48:7d:77:18:3f:9c:e8:
02:be:31:a3:9b:86:e3:f0:e3:a8:17:07:e1:a1:65:
8f:8e:99:1e:85:e6:13:9d:de:d3:5c:fd:b7:7d:6a:
a7:33:05:41:40:2a:9b:d4:99:1f:89:58:8e:12:51:
63:db:00:1f:8f:69:07:44:e9:48:99:e7:5d:de:e5:
71:86:bc:61:43:08:79:e1:e7:f3:65:15:6b:2f:30:
dc:89:b9:67:c5:66:6c:0d:07:46:ae:ce:13:2a:82:
66:63:05:0a:2a:00:60:f8:36:aa:02:ae:1d:03:4b:
f8:cf:7b:a7:39:fd:48:22:b2:3c:21:50:ac:02:08:
aa:8f:c2:7f:93:88:1e:16:6d:f0:a1:2b:f4:f2:9c:
85:69:07:5e:22:c7:c8:75:69:46:24:fd:ec:16:5c:
43:14:46:ce:07:ce:2d:93:dc:d9:04:35:86:54:dd:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8B:C3:96:15:51:5A:33:A3:A1:80:78:9F:F1:97:B7:95:D1:1A:A0
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.71.79.0/24
49.71.126.0/23
49.86.40.0/22
58.220.38.0/24
58.220.85.0/24
58.220.163.0-58.220.164.255
58.220.177.0-58.220.180.255
58.220.188.0/24
61.132.32.0/24
114.230.85.0/24
114.230.172.0/22
114.230.228.0-114.230.239.255
117.91.16.0/21
117.91.40.0/22
121.229.160.0/24
121.229.168.0/24
121.229.172.0/24
121.229.175.0/24
121.229.177.0/24
121.229.204.0/23
121.233.208.0/23
121.233.230.0/24
121.233.238.0/23
121.237.180.0/22
180.97.176.0/23
180.97.191.0/24
180.119.35.0/24
180.119.140.0/23
180.119.152.0/22
202.111.123.0/24
203.170.58.0/23
203.205.88.0/24
218.91.113.0-218.91.114.255
221.229.0.0/24
221.229.4.0/24
221.229.21.0/24
221.229.38.0/24
221.229.52.0/23
221.229.68.0/24
221.229.92.0/24
221.229.99.0/24
221.229.101.0/24
221.229.103.0/24
221.229.106.0/23
222.189.172.0/23
222.191.77.0-222.191.78.255
IPv6:
240e:1a:160::/44
240e:978:2900::/40
240e:978:3900::/40
240e:978:4900::/40
240e:982:d902::/48
240e:982:d906::/48
240e:982:d914::/48
240e:982:d947::-240e:982:d948:ffff:ffff:ffff:ffff:ffff
240e:982:d96c::/48
240e:982:d98d::/48
240e:982:d98f::/48
240e:982:d996::/48
240e:982:d9af::/48
240e:982:d9b4::/48
240e:982:d9bc::/48
240e:982:d9cd::/48
240e:982:d9cf::/48
240e:982:d9d4::/48
240e:982:d9d9::/48
240e:982:da26::/48
240e:982:da39::/48
240e:982:da51::/48
240e:982:da55::/48
240e:982:da60::/48
240e:982:dab2::/48
240e:982:dab6::/48
240e:982:dac3::/48
240e:982:dac9::/48
240e:982:dad6::/48
240e:982:dadb::/48
240e:982:daf1::/48
240e:982:db29::/48
240e:982:db2c::/48
240e:982:db36::/48
240e:982:db39::/48
240e:982:db51::/48
240e:982:db61::/48
240e:982:db66::/48
240e:982:db7d::/48
240e:982:dc18::/46
Signature Algorithm: sha256WithRSAEncryption
24:da:c7:08:d1:58:e6:fc:27:7e:b2:56:07:bf:2f:f7:07:57:
96:83:b7:13:43:98:b3:3a:b7:14:45:dc:2b:05:20:00:bf:06:
23:76:d8:36:87:d1:93:80:3b:7f:fd:33:79:8d:2e:eb:7f:7b:
b5:21:01:90:b5:b9:7d:e5:8f:39:20:8b:41:82:6d:bb:73:75:
fa:56:45:ec:68:22:09:70:25:53:73:a3:d0:c2:f9:61:1a:75:
5e:ea:dc:27:73:21:60:ca:e3:c8:f9:d0:da:f9:4d:ca:ef:1f:
8c:0b:93:00:36:c2:69:36:3c:93:75:6b:35:91:3c:b6:8d:61:
53:72:1f:dd:ce:6b:5c:7f:12:5e:ac:21:cb:87:d2:49:2f:41:
33:36:9e:10:8c:e9:ec:5f:bf:8b:e8:59:65:8d:79:12:cf:03:
4f:d3:a6:de:ad:9a:28:05:3e:29:90:ef:2d:72:b4:65:03:56:
20:5e:bb:c7:a1:aa:6c:49:42:d7:8d:0c:c0:8c:0a:77:51:c3:
03:27:39:ed:26:b5:f1:e4:2f:35:2c:ee:7f:18:e9:6a:1f:86:
16:45:6b:1b:1c:33:66:45:ed:4c:87:50:b5:01:e1:3c:08:2a:
4e:00:0f:f4:81:a2:7c:e3:dc:14:73:c8:d5:a4:38:ab:e1:f5:
87:8b:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:18 2026 by rpki-client