Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS24138.roa
File: AS24138.roa (raw, json)
Hash identifier: +77X7gzry2nYlFQUpC5B9ytIfCvn7L5JLLyO/fofIxY=
Subject key identifier: DB:53:C5:4F:14:34:04:0D:CC:A9:03:DD:30:97:15:E6:1E:BD:F8:31
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 4037827324F41725B05F426B508651673C18206F
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS24138.roa
Signing time: Tue 12 May 2026 08:40:54 +0000
ROA not before: Tue 12 May 2026 08:35:54 +0000
ROA not after: Tue 11 May 2027 08:40:54 +0000
asID: 24138
IP address blocks: 36.192.0.0/21 maxlen: 21
61.232.0.0/21 maxlen: 21
61.232.0.0/24 maxlen: 24
61.232.4.0/24 maxlen: 24
61.232.8.0/21 maxlen: 21
61.232.8.0/22 maxlen: 22
61.232.10.0/24 maxlen: 24
61.233.0.0/20 maxlen: 20
61.233.0.0/21 maxlen: 21
61.233.8.0/21 maxlen: 21
61.233.9.0/24 maxlen: 24
61.233.11.0/24 maxlen: 24
61.233.16.0/20 maxlen: 20
61.233.16.0/21 maxlen: 21
61.233.19.0/24 maxlen: 24
61.233.22.0/24 maxlen: 24
61.233.24.0/21 maxlen: 21
61.237.224.0/20 maxlen: 20
61.237.224.0/21 maxlen: 21
61.237.225.0/24 maxlen: 24
61.237.228.0/23 maxlen: 23
61.237.232.0/21 maxlen: 21
61.237.232.0/24 maxlen: 24
61.237.252.0/24 maxlen: 24
61.237.253.0/24 maxlen: 24
61.237.254.0/24 maxlen: 24
110.96.0.0/16 maxlen: 16
110.96.0.0/17 maxlen: 17
110.96.0.0/19 maxlen: 19
110.96.0.0/20 maxlen: 20
110.96.16.0/20 maxlen: 20
110.96.28.0/22 maxlen: 22
110.96.32.0/19 maxlen: 19
110.96.32.0/20 maxlen: 20
110.96.36.0/24 maxlen: 24
110.96.39.0/24 maxlen: 24
110.96.43.0/24 maxlen: 24
110.96.48.0/20 maxlen: 20
110.96.64.0/19 maxlen: 19
110.96.64.0/20 maxlen: 20
110.96.80.0/20 maxlen: 20
110.96.88.0/21 maxlen: 21
110.96.96.0/19 maxlen: 19
110.96.96.0/20 maxlen: 20
110.96.112.0/20 maxlen: 20
110.96.128.0/17 maxlen: 17
110.96.128.0/19 maxlen: 19
110.96.160.0/19 maxlen: 19
110.96.160.0/20 maxlen: 20
110.96.176.0/20 maxlen: 20
110.96.192.0/19 maxlen: 19
110.96.192.0/20 maxlen: 20
110.96.224.0/19 maxlen: 19
110.113.0.0/16 maxlen: 16
110.113.0.0/17 maxlen: 17
110.113.128.0/17 maxlen: 17
110.114.0.0/16 maxlen: 16
110.114.0.0/17 maxlen: 17
110.114.128.0/17 maxlen: 17
122.70.0.0/16 maxlen: 16
122.70.0.0/17 maxlen: 17
122.70.0.0/18 maxlen: 18
122.70.0.0/19 maxlen: 19
122.70.0.0/20 maxlen: 20
122.70.0.0/21 maxlen: 21
122.70.8.0/21 maxlen: 21
122.70.12.0/22 maxlen: 22
122.70.16.0/20 maxlen: 20
122.70.16.0/21 maxlen: 21
122.70.24.0/21 maxlen: 21
122.70.32.0/20 maxlen: 20
122.70.32.0/21 maxlen: 21
122.70.40.0/21 maxlen: 21
122.70.48.0/20 maxlen: 20
122.70.48.0/21 maxlen: 21
122.70.64.0/18 maxlen: 18
122.70.64.0/20 maxlen: 20
122.70.64.0/21 maxlen: 21
122.70.64.0/24 maxlen: 24
122.70.80.0/20 maxlen: 20
122.70.88.0/21 maxlen: 21
122.70.96.0/22 maxlen: 22
122.70.104.0/21 maxlen: 21
122.70.112.0/21 maxlen: 21
122.70.128.0/17 maxlen: 17
122.70.128.0/18 maxlen: 18
122.70.128.0/21 maxlen: 21
122.70.129.0/24 maxlen: 24
122.70.136.0/21 maxlen: 21
122.70.136.0/22 maxlen: 22
122.70.139.0/24 maxlen: 24
122.70.140.0/22 maxlen: 22
122.70.142.0/24 maxlen: 24
122.70.144.0/21 maxlen: 21
122.70.144.0/24 maxlen: 24
122.70.148.0/22 maxlen: 22
122.70.152.0/21 maxlen: 21
122.70.160.0/21 maxlen: 21
122.70.160.0/24 maxlen: 24
122.70.168.0/21 maxlen: 21
122.70.192.0/18 maxlen: 18
122.70.192.0/21 maxlen: 21
122.70.192.0/24 maxlen: 24
122.70.216.0/21 maxlen: 21
122.70.216.0/22 maxlen: 22
122.70.224.0/19 maxlen: 19
122.71.0.0/16 maxlen: 16
122.71.0.0/17 maxlen: 17
122.71.0.0/18 maxlen: 18
122.71.0.0/19 maxlen: 19
122.71.32.0/19 maxlen: 19
122.71.64.0/18 maxlen: 18
122.71.64.0/19 maxlen: 19
122.71.96.0/19 maxlen: 19
122.71.112.0/21 maxlen: 21
122.71.128.0/17 maxlen: 17
122.71.128.0/18 maxlen: 18
122.71.128.0/19 maxlen: 19
122.71.160.0/19 maxlen: 19
122.71.160.0/20 maxlen: 20
122.71.188.0/24 maxlen: 24
122.71.192.0/18 maxlen: 18
122.71.192.0/19 maxlen: 19
122.71.224.0/19 maxlen: 19
122.72.3.0/24 maxlen: 24
122.72.16.0/24 maxlen: 24
122.72.38.0/24 maxlen: 24
122.72.112.0/24 maxlen: 24
123.66.0.0/16 maxlen: 16
123.66.0.0/17 maxlen: 17
123.66.128.0/17 maxlen: 17
123.66.128.0/18 maxlen: 18
123.66.144.0/20 maxlen: 20
123.66.160.0/19 maxlen: 19
123.66.160.0/20 maxlen: 20
123.66.176.0/20 maxlen: 20
123.66.192.0/18 maxlen: 18
123.66.192.0/19 maxlen: 19
123.66.224.0/19 maxlen: 19
211.98.24.0/24 maxlen: 24
211.98.64.0/24 maxlen: 24
211.98.140.0/24 maxlen: 24
221.174.16.0/21 maxlen: 21
221.174.24.0/23 maxlen: 23
222.35.0.0/16 maxlen: 16
222.35.0.0/17 maxlen: 17
222.35.0.0/18 maxlen: 18
222.35.0.0/19 maxlen: 19
222.35.0.0/20 maxlen: 20
222.35.0.0/21 maxlen: 21
222.35.12.0/24 maxlen: 24
222.35.13.0/24 maxlen: 24
222.35.16.0/20 maxlen: 20
222.35.18.0/24 maxlen: 24
222.35.20.0/24 maxlen: 24
222.35.28.0/24 maxlen: 24
222.35.32.0/19 maxlen: 19
222.35.32.0/21 maxlen: 21
222.35.37.0/24 maxlen: 24
222.35.40.0/21 maxlen: 21
222.35.46.0/24 maxlen: 24
222.35.47.0/24 maxlen: 24
222.35.48.0/22 maxlen: 22
222.35.52.0/22 maxlen: 22
222.35.56.0/21 maxlen: 21
222.35.57.0/24 maxlen: 24
222.35.58.0/24 maxlen: 24
222.35.59.0/24 maxlen: 24
222.35.60.0/24 maxlen: 24
222.35.64.0/18 maxlen: 18
222.35.64.0/19 maxlen: 19
222.35.64.0/20 maxlen: 20
222.35.64.0/21 maxlen: 21
222.35.64.0/24 maxlen: 24
222.35.68.0/22 maxlen: 22
222.35.72.0/21 maxlen: 21
222.35.76.0/22 maxlen: 22
222.35.80.0/20 maxlen: 20
222.35.80.0/21 maxlen: 21
222.35.90.0/23 maxlen: 23
222.35.96.0/19 maxlen: 19
222.35.96.0/20 maxlen: 20
222.35.96.0/21 maxlen: 21
222.35.96.0/22 maxlen: 22
222.35.104.0/21 maxlen: 21
222.35.104.0/22 maxlen: 22
222.35.108.0/22 maxlen: 22
222.35.112.0/20 maxlen: 20
222.35.112.0/22 maxlen: 22
222.35.116.0/22 maxlen: 22
222.35.120.0/21 maxlen: 21
222.35.124.0/23 maxlen: 23
222.35.128.0/17 maxlen: 17
222.35.128.0/18 maxlen: 18
222.35.128.0/19 maxlen: 19
222.35.136.0/21 maxlen: 21
222.35.136.0/22 maxlen: 22
222.35.140.0/22 maxlen: 22
222.35.144.0/22 maxlen: 22
222.35.148.0/22 maxlen: 22
222.35.160.0/19 maxlen: 19
222.35.168.0/21 maxlen: 21
222.35.192.0/19 maxlen: 19
222.35.200.0/21 maxlen: 21
222.35.200.0/22 maxlen: 22
222.35.204.0/22 maxlen: 22
222.35.208.0/21 maxlen: 21
222.35.212.0/22 maxlen: 22
222.35.228.0/22 maxlen: 22
222.35.240.0/21 maxlen: 21
222.35.240.0/22 maxlen: 22
222.35.244.0/22 maxlen: 22
222.35.248.0/21 maxlen: 21
222.35.248.0/22 maxlen: 22
222.35.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:37:82:73:24:f4:17:25:b0:5f:42:6b:50:86:51:67:3c:18:20:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: May 12 08:35:54 2026 GMT
Not After : May 11 08:40:54 2027 GMT
Subject: CN=DB53C54F1434040DCCA903DD309715E61EBDF831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:7e:cf:e8:d7:09:f0:5e:a6:ed:b2:4b:0d:
9c:93:46:ed:eb:37:0c:e6:45:3c:b2:68:12:66:31:
ef:45:fc:d6:81:b1:98:11:8f:63:7a:cc:b1:33:2d:
82:76:c7:80:fb:2c:30:44:74:75:0b:54:0e:7c:a4:
6c:e3:98:39:1d:c9:4c:46:b0:12:d5:91:49:2e:84:
df:f1:17:d6:83:84:7f:b9:87:0d:38:27:b9:1d:c3:
f8:40:69:c0:c9:f3:af:82:8b:ca:29:40:b4:0a:c3:
34:49:6d:e8:c2:b4:e2:af:02:b3:81:3a:d7:f8:d4:
71:fb:42:92:27:bd:35:c7:e5:32:84:c3:b5:fe:1c:
c2:4a:71:08:78:14:5a:06:35:8c:0c:60:e1:00:68:
a4:2f:45:ec:0c:60:70:6e:11:b2:c0:27:c9:d4:d6:
ff:67:a3:94:bf:e1:ab:d3:af:f2:be:e8:8d:6d:06:
c1:b3:8b:86:a5:47:1f:e1:55:de:0f:3e:62:47:7a:
1f:a8:c3:f1:69:69:64:b7:e9:34:0f:e4:a8:58:b8:
fb:1d:12:8a:7f:b4:e5:04:63:0e:b7:0a:fc:41:44:
29:9f:57:e0:3d:d9:0d:23:ba:6e:bc:e2:54:f6:a9:
46:fa:a1:35:55:24:5a:e9:67:d5:58:9b:2b:1a:23:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:53:C5:4F:14:34:04:0D:CC:A9:03:DD:30:97:15:E6:1E:BD:F8:31
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS24138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.192.0.0/21
61.232.0.0/20
61.233.0.0/19
61.237.224.0/20
61.237.252.0-61.237.254.255
110.96.0.0/16
110.113.0.0-110.114.255.255
122.70.0.0/15
122.72.3.0/24
122.72.16.0/24
122.72.38.0/24
122.72.112.0/24
123.66.0.0/16
211.98.24.0/24
211.98.64.0/24
211.98.140.0/24
221.174.16.0-221.174.25.255
222.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:88:b4:b1:90:ec:78:e9:8e:c9:d9:a7:55:df:03:a8:94:f6:
94:61:7a:6e:bc:d7:44:15:52:1f:ec:0a:d5:1d:51:e2:ad:58:
b8:17:a0:75:24:2e:72:ec:cd:5a:9c:c4:c3:0e:05:99:92:aa:
04:6b:a9:0d:b6:6d:6e:81:11:8a:43:f2:7f:56:00:74:31:79:
60:5b:e3:67:d3:b7:35:c4:88:eb:f7:4f:d4:02:35:d2:a2:a3:
96:b6:26:5f:dd:4a:da:fc:35:66:77:31:05:b8:8a:8d:36:fa:
01:b6:87:06:b3:0a:8d:38:8f:c9:89:1a:3a:7c:ce:91:b7:ca:
e9:52:fa:9c:4a:da:46:4e:e7:b6:f4:54:e3:7d:f0:7b:d6:77:
13:37:46:25:7f:87:c9:ef:18:d8:23:f4:86:fb:92:0f:0c:9a:
72:7b:6a:53:4b:b0:e1:1a:43:87:07:33:07:22:36:65:ab:5b:
d6:3c:17:38:fa:f3:9c:15:4e:c1:39:d6:b4:9c:d2:74:91:5c:
42:6f:54:00:99:c9:49:7e:f4:ae:85:6d:5e:d8:a1:27:02:b8:
a6:ba:0b:32:7d:fa:0e:6a:0d:0e:df:5c:1d:2d:03:6c:18:30:
25:2e:bd:90:c5:29:2d:ab:3f:09:a2:48:68:64:f3:c2:0a:cf:
6a:52:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:35 2026 by rpki-client