Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS133119.roa
File: AS133119.roa (raw, json)
Hash identifier: ps021oXDgvJp1gp7DKvql3eOYp4ThgrB+wE9FLk00M8=
Subject key identifier: 96:61:59:12:71:20:E1:F0:4E:BE:7B:12:CF:F7:36:AB:FA:E2:2F:53
Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Certificate serial: 1635221EB91C29082E98E565EC44A6D1CB341BCB
Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS133119.roa
Signing time: Mon 11 May 2026 03:15:33 +0000
ROA not before: Mon 11 May 2026 03:10:33 +0000
ROA not after: Mon 10 May 2027 03:15:33 +0000
asID: 133119
IP address blocks: 110.43.64.0/20 maxlen: 20
110.43.112.0/21 maxlen: 21
110.43.160.0/21 maxlen: 21
110.43.168.0/21 maxlen: 21
110.43.176.0/21 maxlen: 21
110.43.192.0/19 maxlen: 19
120.92.0.0/23 maxlen: 23
120.92.2.0/23 maxlen: 23
120.92.4.0/23 maxlen: 23
120.92.6.0/23 maxlen: 23
120.92.8.0/23 maxlen: 23
120.92.10.0/23 maxlen: 23
120.92.12.0/23 maxlen: 23
120.92.14.0/23 maxlen: 23
120.92.16.0/21 maxlen: 21
120.92.24.0/21 maxlen: 21
120.92.32.0/21 maxlen: 21
120.92.40.0/21 maxlen: 21
120.92.48.0/21 maxlen: 21
120.92.56.0/21 maxlen: 21
120.92.64.0/21 maxlen: 21
120.92.72.0/21 maxlen: 21
120.92.80.0/21 maxlen: 21
120.92.88.0/21 maxlen: 21
120.92.96.0/21 maxlen: 21
120.92.104.0/21 maxlen: 21
120.92.112.0/21 maxlen: 21
120.92.120.0/21 maxlen: 21
120.92.192.0/19 maxlen: 19
120.92.192.0/23 maxlen: 23
120.92.194.0/23 maxlen: 23
120.92.200.0/21 maxlen: 21
120.92.208.0/20 maxlen: 20
120.131.0.0/23 maxlen: 23
120.131.2.0/23 maxlen: 23
120.131.4.0/23 maxlen: 23
120.131.6.0/23 maxlen: 23
120.131.8.0/23 maxlen: 23
120.131.10.0/23 maxlen: 23
120.131.12.0/23 maxlen: 23
120.131.14.0/23 maxlen: 23
2401:1d40::/48 maxlen: 48
2401:1d40:100::/48 maxlen: 48
2401:1d40:f21::/48 maxlen: 48
2401:1d40:f22::/48 maxlen: 48
2401:1d40:f23::/48 maxlen: 48
2401:1d40:f24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:35:22:1e:b9:1c:29:08:2e:98:e5:65:ec:44:a6:d1:cb:34:1b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Validity
Not Before: May 11 03:10:33 2026 GMT
Not After : May 10 03:15:33 2027 GMT
Subject: CN=966159127120E1F04EBE7B12CFF736ABFAE22F53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:b9:0a:32:45:10:cd:b6:81:03:3b:85:c1:
b3:40:ee:4d:fe:40:a3:f7:a6:e5:18:72:51:6e:6e:
47:f7:a0:4a:dc:a9:16:d5:f0:59:58:96:12:df:b4:
78:f4:bf:e8:2a:a6:be:52:a8:1b:74:d6:cc:f6:3a:
8c:ad:f4:ba:59:a3:56:b6:cf:69:31:b0:fb:95:1a:
35:4d:ef:fb:71:da:b1:0e:95:94:98:0e:20:3c:79:
03:f5:4b:1b:8f:da:97:78:c5:14:4e:7d:a6:fb:5a:
33:6d:2f:61:21:3a:8a:28:da:4d:aa:8d:70:10:6e:
57:04:c0:c8:c5:90:a8:e5:d6:74:16:77:be:b9:4f:
45:07:98:25:64:08:78:ac:43:8a:ca:d2:9b:8d:bf:
a2:c2:e9:f1:04:cf:3f:48:db:98:ea:c5:3c:59:5e:
3b:1f:2e:17:98:a0:d0:08:26:28:74:61:b6:61:82:
c8:11:29:2e:51:24:a8:89:5d:5e:27:4c:21:7e:9b:
d3:79:7f:23:d1:71:dc:d1:a8:bf:37:52:1c:7f:09:
ba:6c:2a:24:7c:4d:6a:d0:9a:0d:66:b9:e2:d4:43:
9d:65:2a:48:7e:e4:aa:6e:99:85:29:e5:b5:14:80:
b1:b5:58:a3:75:01:b2:20:b4:f6:fd:2b:13:ad:80:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:59:12:71:20:E1:F0:4E:BE:7B:12:CF:F7:36:AB:FA:E2:2F:53
X509v3 Authority Key Identifier:
keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS133119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.43.64.0/20
110.43.112.0/21
110.43.160.0-110.43.183.255
110.43.192.0/19
120.92.0.0/17
120.92.192.0/19
120.131.0.0/20
IPv6:
2401:1d40::/48
2401:1d40:100::/48
2401:1d40:f21::-2401:1d40:f24:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:d7:2d:92:42:c9:a0:a0:cb:0a:cc:fc:10:67:be:e5:14:54:
9f:26:72:55:9f:cd:ae:c2:37:ba:0d:00:3a:cc:3a:95:86:67:
30:65:df:4e:4f:38:0f:8b:bf:4a:af:cd:fe:df:9d:88:60:98:
b7:a7:03:83:71:c2:82:0d:3e:c8:78:c2:47:67:3f:f9:22:7f:
98:06:44:90:b8:54:17:dc:b0:37:42:a9:36:f9:6b:e7:51:f5:
aa:5a:7a:0a:62:e6:bc:00:f8:01:91:91:82:8d:8e:87:37:ad:
83:e7:c2:60:70:f4:0f:bc:17:83:a3:2b:f5:3c:e9:d4:7e:64:
1b:c4:32:75:fb:9f:c6:d1:58:09:87:90:76:26:a6:e8:cf:57:
fb:dc:09:f1:fd:16:d9:d0:74:d5:6c:3e:3c:d1:3f:3e:82:12:
86:73:0d:d6:e4:3d:82:08:25:05:c9:3e:40:b8:d8:31:eb:3a:
cb:4b:c3:c1:f8:fb:53:06:9c:12:27:9a:9c:3c:9e:2b:94:96:
ca:3e:e7:97:29:20:e8:58:26:70:06:8f:b7:c7:ec:82:58:f8:
15:5d:8f:05:57:35:78:ff:51:2e:32:d4:c8:2c:e4:75:c3:3a:
6e:43:59:c3:e9:fc:b9:28:21:a3:73:b3:5d:38:8d:78:b3:f9:
d8:ca:d1:45
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUFjUiHrkcKQgumOVl7ESm0cs0G8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz
QkMwRDg4NjAeFw0yNjA1MTEwMzEwMzNaFw0yNzA1MTAwMzE1MzNaMDMxMTAvBgNV
BAMTKDk2NjE1OTEyNzEyMEUxRjA0RUJFN0IxMkNGRjczNkFCRkFFMjJGNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIBrkKMkUQzbaBAzuFwbNA7k3+
QKP3puUYclFubkf3oErcqRbV8FlYlhLftHj0v+gqpr5SqBt01sz2Ooyt9LpZo1a2
z2kxsPuVGjVN7/tx2rEOlZSYDiA8eQP1SxuP2pd4xRROfab7WjNtL2EhOooo2k2q
jXAQblcEwMjFkKjl1nQWd765T0UHmCVkCHisQ4rK0puNv6LC6fEEzz9I25jqxTxZ
XjsfLheYoNAIJih0YbZhgsgRKS5RJKiJXV4nTCF+m9N5fyPRcdzRqL83Uhx/Cbps
KiR8TWrQmg1mueLUQ51lKkh+5KpumYUp5bUUgLG1WKN1AbIgtPb9KxOtgOF/AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUlmFZEnEg4fBOvnsSz/c2q/riL1MwHwYDVR0j
BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0
NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BUzEzMzExOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5BggrBgEFBQcBBwEB/wRqMGgwOAQC
AAEwMgMEBG4rQAMEA24rcDAMAwQFbiugAwQDbiuwAwQFbivAAwQHeFwAAwQFeFzA
AwQEeIMAMCwEAgACMCYDBwAkAR1AAAADBwAkAR1AAQAwEgMHACQBHUAPIQMHACQB
HUAPJDANBgkqhkiG9w0BAQsFAAOCAQEAL9ctkkLJoKDLCsz8EGe+5RRUnyZyVZ/N
rsI3ug0AOsw6lYZnMGXfTk84D4u/Sq/N/t+diGCYt6cDg3HCgg0+yHjCR2c/+SJ/
mAZEkLhUF9ywN0KpNvlr51H1qlp6CmLmvAD4AZGRgo2Ohzetg+fCYHD0D7wXg6Mr
9Tzp1H5kG8QydfufxtFYCYeQdiam6M9X+9wJ8f0W2dB01Ww+PNE/PoIShnMN1uQ9
ggglBck+QLjYMes6y0vDwfj7UwacEieanDyeK5SWyj7nlykg6FgmcAaPt8fsglj4
FV2PBVc1eP9RLjLUyCzkdcM6bkNZw+n8uSgho3OzXTiNeLP52MrRRQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:38 2026 by rpki-client