Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23650.roa
File: AS23650.roa (raw, json)
Hash identifier: cnLXKJ1JqO8o/a/pvDVRDhe6tphSI+cuP4bHnizPawg=
Subject key identifier: A6:F5:B1:B3:56:33:69:19:BA:F5:FE:D3:EC:67:5A:8F:97:F5:BF:07
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 354F36BF251B38DC93A530C5E22F0D7F88111494
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23650.roa
Signing time: Mon 20 Jul 2026 02:15:27 +0000
ROA not before: Mon 20 Jul 2026 02:10:27 +0000
ROA not after: Mon 19 Jul 2027 02:15:27 +0000
asID: 23650
IP address blocks: 58.215.32.0/23 maxlen: 23
58.215.73.0/24 maxlen: 24
58.215.96.0/20 maxlen: 20
58.215.112.0/21 maxlen: 21
58.215.120.0/22 maxlen: 22
58.215.124.0/23 maxlen: 23
58.215.128.0/24 maxlen: 24
58.215.144.0/22 maxlen: 22
58.215.151.0/24 maxlen: 24
58.215.159.0/24 maxlen: 24
61.147.189.0/24 maxlen: 24
61.147.190.0/23 maxlen: 23
61.147.197.0/24 maxlen: 24
61.147.198.0/24 maxlen: 24
61.160.134.0/24 maxlen: 24
61.160.140.0/24 maxlen: 24
61.160.150.0/24 maxlen: 24
61.160.158.0/24 maxlen: 24
61.160.236.0/24 maxlen: 24
61.160.240.0/24 maxlen: 24
61.177.113.0/24 maxlen: 24
117.84.172.0/24 maxlen: 24
180.97.172.0/24 maxlen: 24
180.101.198.0/24 maxlen: 24
221.228.19.0/24 maxlen: 24
221.228.66.0/23 maxlen: 23
221.228.216.0/22 maxlen: 22
221.228.224.0/24 maxlen: 24
221.228.225.0/24 maxlen: 24
221.228.226.0/24 maxlen: 24
221.228.253.0/24 maxlen: 24
221.228.254.0/24 maxlen: 24
240e:1a::/35 maxlen: 35
240e:e9:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4f:36:bf:25:1b:38:dc:93:a5:30:c5:e2:2f:0d:7f:88:11:14:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 20 02:10:27 2026 GMT
Not After : Jul 19 02:15:27 2027 GMT
Subject: CN=A6F5B1B356336919BAF5FED3EC675A8F97F5BF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:6a:b6:02:b1:44:91:d8:98:7a:cc:51:45:
4f:41:44:e8:07:60:5f:c7:f5:0b:b9:8a:39:0d:57:
0b:4e:6a:06:35:95:36:df:32:bb:ee:bc:84:3a:5d:
dd:d5:6d:dd:66:7a:f9:29:5a:5a:6e:be:d5:3c:e5:
78:7c:23:9a:a2:b6:72:83:58:84:6c:30:87:40:50:
18:6c:0b:97:f5:19:e9:4b:d6:e2:41:0b:34:85:94:
22:4f:39:b8:27:dd:c1:6b:b1:8d:a2:f7:ad:b9:5b:
c8:fc:ac:07:18:1c:90:f4:95:ab:3b:57:7d:69:a0:
85:c3:86:8a:68:e6:fb:ec:13:79:75:a4:c6:54:fd:
15:3d:cf:b9:fe:93:53:9b:6a:d8:c3:f1:7c:56:b0:
ca:76:be:44:d2:df:4c:2a:b1:21:0b:bf:89:70:a0:
f5:84:e6:c4:29:a6:69:5a:d9:1e:f5:40:a8:58:50:
70:02:d5:f1:be:6f:93:91:2c:28:91:62:71:fd:1d:
10:70:68:f0:c5:bc:cb:46:4c:f9:50:b0:c6:20:49:
69:4b:c1:d7:43:f6:14:f0:7b:86:3c:fc:3d:84:2f:
7d:be:70:e3:d3:6b:3e:e9:f4:cf:a7:b6:ee:74:19:
7e:46:90:09:7e:91:18:ef:89:5f:39:62:c7:ef:29:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:B1:B3:56:33:69:19:BA:F5:FE:D3:EC:67:5A:8F:97:F5:BF:07
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.215.32.0/23
58.215.73.0/24
58.215.96.0-58.215.125.255
58.215.128.0/24
58.215.144.0/22
58.215.151.0/24
58.215.159.0/24
61.147.189.0-61.147.191.255
61.147.197.0-61.147.198.255
61.160.134.0/24
61.160.140.0/24
61.160.150.0/24
61.160.158.0/24
61.160.236.0/24
61.160.240.0/24
61.177.113.0/24
117.84.172.0/24
180.97.172.0/24
180.101.198.0/24
221.228.19.0/24
221.228.66.0/23
221.228.216.0/22
221.228.224.0-221.228.226.255
221.228.253.0-221.228.254.255
IPv6:
240e:1a::/35
240e:e9:8000::/33
Signature Algorithm: sha256WithRSAEncryption
10:12:c9:13:71:5e:8c:0f:3c:37:1d:dd:bc:de:15:85:8b:5e:
37:94:03:61:01:7d:e1:db:34:08:cf:79:c2:9e:0a:4b:45:37:
9e:48:7a:5b:b4:3a:52:e1:53:06:a6:bb:97:ba:94:88:df:dc:
f9:ae:cc:5d:98:d2:f9:4c:10:fa:eb:40:d0:b2:ec:7d:62:a0:
9f:57:4a:5b:be:a9:6d:4f:03:9e:1b:a2:37:ad:c5:77:d6:d9:
9d:65:f0:c1:c7:25:94:36:27:1b:f5:2a:7d:85:80:1b:04:26:
ef:4c:7a:f1:b9:5d:96:c6:5e:78:38:b5:53:3c:a2:23:e7:8b:
ea:77:15:05:b4:61:3b:aa:13:21:25:c2:76:49:96:d4:79:c0:
75:f4:72:6b:a1:0f:46:f2:6e:27:90:27:e5:8f:8e:ce:fd:05:
b7:29:e0:1d:94:19:c2:74:07:a4:f1:6a:c1:6c:3f:91:b9:c5:
93:62:e6:dd:85:40:19:a8:b1:74:99:05:04:94:7c:c4:12:6c:
71:58:b4:c4:57:7a:a9:20:aa:eb:0e:96:d6:eb:a7:f2:01:1d:
8f:50:09:0f:66:df:21:18:2d:02:93:2e:ab:12:ac:ee:75:be:
02:35:75:d6:99:b6:e5:8e:70:66:d7:f2:90:16:05:5a:08:99:
7e:d6:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:43 2026 by rpki-client