Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
File: AS23764.roa (raw, json)
Hash identifier: t99R6/xaCmUwNTq03nvs4npuyfRxztfqLa9z0GNyYq8=
Subject key identifier: 18:B7:36:07:87:51:A4:3D:D8:53:8B:B0:5B:33:E5:6C:FE:F8:FD:FD
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2A26648A62A7A967CADD431C6F772C489DBF2D28
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
Signing time: Tue 22 Sep 2026 16:25:22 +0000
ROA not before: Tue 22 Sep 2026 16:20:22 +0000
ROA not after: Tue 21 Sep 2027 16:25:22 +0000
asID: 23764
IP address blocks: 121.59.38.0/24 maxlen: 24
121.59.100.0/24 maxlen: 24
121.59.106.0/24 maxlen: 24
121.59.109.0/24 maxlen: 24
121.59.120.0/24 maxlen: 24
121.59.122.0/24 maxlen: 24
121.59.124.0/24 maxlen: 24
121.59.140.0/24 maxlen: 24
125.93.24.0/24 maxlen: 24
125.93.25.0/24 maxlen: 24
125.93.26.0/24 maxlen: 24
203.8.30.0/24 maxlen: 24
203.12.200.0/24 maxlen: 24
203.12.201.0/24 maxlen: 24
203.12.202.0/24 maxlen: 24
203.12.203.0/24 maxlen: 24
203.12.204.0/24 maxlen: 24
203.12.205.0/24 maxlen: 24
203.14.188.0/24 maxlen: 24
203.14.189.0/24 maxlen: 24
203.14.190.0/24 maxlen: 24
203.14.191.0/24 maxlen: 24
203.15.113.0/24 maxlen: 24
203.15.116.0/24 maxlen: 24
203.15.117.0/24 maxlen: 24
203.15.118.0/24 maxlen: 24
203.19.32.0/22 maxlen: 22
203.19.37.0/24 maxlen: 24
203.19.38.0/24 maxlen: 24
203.20.136.0/24 maxlen: 24
203.20.137.0/24 maxlen: 24
203.20.138.0/24 maxlen: 24
203.20.139.0/24 maxlen: 24
203.20.140.0/24 maxlen: 24
203.20.141.0/24 maxlen: 24
203.20.142.0/24 maxlen: 24
203.20.143.0/24 maxlen: 24
203.33.8.0/24 maxlen: 24
203.33.9.0/24 maxlen: 24
203.33.10.0/24 maxlen: 24
203.34.194.0/24 maxlen: 24
203.34.196.0/24 maxlen: 24
203.34.197.0/24 maxlen: 24
203.34.199.0/24 maxlen: 24
203.56.55.0/24 maxlen: 24
203.80.136.0/24 maxlen: 24
203.80.137.0/24 maxlen: 24
203.80.138.0/24 maxlen: 24
203.80.139.0/24 maxlen: 24
203.80.141.0/24 maxlen: 24
203.81.0.0/24 maxlen: 24
203.81.3.0/24 maxlen: 24
203.81.4.0/24 maxlen: 24
203.81.6.0/23 maxlen: 23
203.81.6.0/24 maxlen: 24
203.82.17.0/24 maxlen: 24
203.82.18.0/24 maxlen: 24
203.82.19.0/24 maxlen: 24
203.82.23.0/24 maxlen: 24
203.86.103.0/24 maxlen: 24
203.86.106.0/24 maxlen: 24
203.86.109.0/24 maxlen: 24
203.86.111.0/24 maxlen: 24
203.86.113.0/24 maxlen: 24
203.86.115.0/24 maxlen: 24
203.86.126.0/24 maxlen: 24
203.86.127.0/24 maxlen: 24
203.89.10.0/24 maxlen: 24
203.89.11.0/24 maxlen: 24
203.89.12.0/24 maxlen: 24
203.99.10.0/24 maxlen: 24
203.99.11.0/24 maxlen: 24
203.99.13.0/24 maxlen: 24
203.100.52.0/24 maxlen: 24
203.100.54.0/24 maxlen: 24
203.119.120.0/24 maxlen: 24
203.119.124.0/24 maxlen: 24
203.119.125.0/24 maxlen: 24
203.128.224.0/24 maxlen: 24
203.128.229.0/24 maxlen: 24
203.128.230.0/24 maxlen: 24
203.129.9.0/24 maxlen: 24
203.144.96.0/24 maxlen: 24
203.144.97.0/24 maxlen: 24
203.144.98.0/24 maxlen: 24
203.144.99.0/24 maxlen: 24
203.144.100.0/24 maxlen: 24
203.144.101.0/24 maxlen: 24
203.144.102.0/24 maxlen: 24
203.144.103.0/24 maxlen: 24
203.144.104.0/24 maxlen: 24
203.144.105.0/24 maxlen: 24
203.195.115.0/24 maxlen: 24
203.196.8.0/24 maxlen: 24
203.196.9.0/24 maxlen: 24
203.196.10.0/24 maxlen: 24
203.196.11.0/24 maxlen: 24
203.196.12.0/24 maxlen: 24
203.196.13.0/24 maxlen: 24
203.196.14.0/24 maxlen: 24
203.196.15.0/24 maxlen: 24
210.48.136.0/22 maxlen: 22
210.48.140.0/22 maxlen: 22
210.48.143.0/24 maxlen: 24
218.30.39.0/24 maxlen: 24
218.30.62.0/23 maxlen: 23
218.185.241.0/24 maxlen: 24
218.185.243.0/24 maxlen: 24
218.185.245.0/24 maxlen: 24
220.247.140.0/24 maxlen: 24
220.247.141.0/24 maxlen: 24
220.247.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 10:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:26:64:8a:62:a7:a9:67:ca:dd:43:1c:6f:77:2c:48:9d:bf:2d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 22 16:20:22 2026 GMT
Not After : Sep 21 16:25:22 2027 GMT
Subject: CN=18B736078751A43DD8538BB05B33E56CFEF8FDFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:57:7f:13:24:6e:a5:f7:56:5b:ce:74:92:
7f:f0:77:7f:51:7e:08:ac:13:6e:78:ba:95:71:7e:
67:0f:ab:1f:4a:e0:35:e0:43:69:8a:ef:2e:16:92:
db:68:5b:2f:38:26:5c:4d:12:73:3c:5b:b1:e4:a0:
b9:79:18:d0:fb:a6:3b:ca:5c:4e:0e:fb:12:63:8e:
10:c6:f6:7a:a5:a2:97:0c:2c:33:68:2a:1b:e8:64:
bd:c7:51:72:c4:62:cc:8e:12:39:74:f2:77:74:79:
f1:a5:57:96:0a:8a:7a:0b:f7:86:76:71:36:96:0b:
e9:59:3c:2a:68:14:23:db:38:9e:69:98:2b:e9:80:
3e:31:bb:1d:3f:09:f6:a4:a5:f7:b4:10:62:1c:79:
14:3d:3e:40:38:da:dd:d5:86:ee:cc:e7:03:1d:89:
f5:79:2d:07:ff:56:18:84:d9:9e:65:6c:e1:f2:aa:
2a:1b:7e:92:66:71:f2:2a:83:55:27:40:c3:d5:f4:
63:c9:d6:2d:ee:da:77:73:38:e6:b6:00:09:d9:ad:
5e:cd:4e:4d:a8:d5:c1:e8:8b:c2:79:b9:f4:c2:3a:
54:51:92:3a:b5:5d:e6:20:5f:70:4c:68:f7:cd:f5:
db:bf:a1:5b:37:f5:e1:11:9c:16:2c:0e:bd:6b:22:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:36:07:87:51:A4:3D:D8:53:8B:B0:5B:33:E5:6C:FE:F8:FD:FD
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.59.38.0/24
121.59.100.0/24
121.59.106.0/24
121.59.109.0/24
121.59.120.0/24
121.59.122.0/24
121.59.124.0/24
121.59.140.0/24
125.93.24.0-125.93.26.255
203.8.30.0/24
203.12.200.0-203.12.205.255
203.14.188.0/22
203.15.113.0/24
203.15.116.0-203.15.118.255
203.19.32.0/22
203.19.37.0-203.19.38.255
203.20.136.0/21
203.33.8.0-203.33.10.255
203.34.194.0/24
203.34.196.0/23
203.34.199.0/24
203.56.55.0/24
203.80.136.0/22
203.80.141.0/24
203.81.0.0/24
203.81.3.0-203.81.4.255
203.81.6.0/23
203.82.17.0-203.82.19.255
203.82.23.0/24
203.86.103.0/24
203.86.106.0/24
203.86.109.0/24
203.86.111.0/24
203.86.113.0/24
203.86.115.0/24
203.86.126.0/23
203.89.10.0-203.89.12.255
203.99.10.0/23
203.99.13.0/24
203.100.52.0/24
203.100.54.0/24
203.119.120.0/24
203.119.124.0/23
203.128.224.0/24
203.128.229.0-203.128.230.255
203.129.9.0/24
203.144.96.0-203.144.105.255
203.195.115.0/24
203.196.8.0/21
210.48.136.0/21
218.30.39.0/24
218.30.62.0/23
218.185.241.0/24
218.185.243.0/24
218.185.245.0/24
220.247.140.0/23
220.247.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b3:67:37:83:9c:b4:59:dd:20:ca:ca:a7:a6:3d:2e:c7:90:
2a:e0:be:53:f3:93:3a:01:8c:f5:1c:6c:ce:f3:97:04:73:5a:
f7:11:4b:b2:ca:15:13:ac:4a:6c:2c:54:a2:e5:a0:30:94:7e:
5d:77:e9:f9:fe:1f:7a:9f:6f:b1:c4:02:cb:c3:64:c6:25:22:
6b:42:a6:c3:63:b2:d3:be:ee:1b:9d:52:94:38:bf:06:9c:3f:
3f:2d:14:68:a5:6a:cd:5b:54:65:9c:a8:20:53:93:6e:1c:3a:
d7:ca:a2:07:13:65:f8:d2:b8:55:5d:bf:30:7d:81:b5:e6:b6:
7e:37:e4:5f:ad:80:ef:c9:88:26:47:46:98:d6:a2:bc:31:cd:
c6:04:10:71:4e:04:d3:81:1a:a1:e0:eb:5d:bd:e6:aa:f8:69:
7f:ae:0b:98:64:9f:68:06:3b:76:61:af:41:cb:d1:8c:e1:14:
4f:89:fa:f8:4e:51:e7:43:19:28:c6:7b:32:aa:49:56:f3:6a:
09:ec:a4:0a:90:c3:40:b0:70:dc:f2:b7:7a:c1:77:e9:cd:8b:
c3:78:ae:33:47:b8:1f:55:fe:71:10:a3:41:fb:94:2e:b5:a2:
73:19:09:6b:ad:b0:43:58:fa:6d:2f:d3:88:22:07:2d:9d:41:
13:bd:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:19:12 2026 by rpki-client