Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9394.roa
File: AS9394.roa (raw, json)
Hash identifier: B+T4gaAPz6kB96EMgH3U+nXNEgCtP9/TPtNWT8nOnrU=
Subject key identifier: 09:16:A4:A9:F7:E0:61:9F:28:EC:D1:CD:DB:FD:ED:4B:B7:E3:A9:3D
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 21640BB24E858068E02B0AA4845086B018E73950
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9394.roa
Signing time: Tue 12 May 2026 13:35:26 +0000
ROA not before: Tue 12 May 2026 13:30:26 +0000
ROA not after: Tue 11 May 2027 13:35:26 +0000
asID: 9394
IP address blocks: 36.192.0.0/16 maxlen: 16
61.232.0.0/16 maxlen: 16
61.232.0.0/19 maxlen: 19
61.232.16.0/20 maxlen: 20
61.232.32.0/19 maxlen: 19
61.232.64.0/19 maxlen: 19
61.232.96.0/19 maxlen: 19
61.232.128.0/19 maxlen: 19
61.232.160.0/19 maxlen: 19
61.232.192.0/19 maxlen: 19
61.232.224.0/19 maxlen: 19
61.233.0.0/16 maxlen: 16
61.233.0.0/19 maxlen: 19
61.233.32.0/19 maxlen: 19
61.233.64.0/19 maxlen: 19
61.233.96.0/19 maxlen: 19
61.233.128.0/19 maxlen: 19
61.233.160.0/19 maxlen: 19
61.233.192.0/19 maxlen: 19
61.233.224.0/19 maxlen: 19
61.234.0.0/16 maxlen: 16
61.234.0.0/19 maxlen: 19
61.234.32.0/19 maxlen: 19
61.234.64.0/19 maxlen: 19
61.234.96.0/19 maxlen: 19
61.234.128.0/19 maxlen: 19
61.234.160.0/19 maxlen: 19
61.234.192.0/19 maxlen: 19
61.234.224.0/19 maxlen: 19
61.235.0.0/16 maxlen: 16
61.235.0.0/19 maxlen: 19
61.235.32.0/19 maxlen: 19
61.235.64.0/19 maxlen: 19
61.235.96.0/19 maxlen: 19
61.235.128.0/19 maxlen: 19
61.235.160.0/19 maxlen: 19
61.235.192.0/19 maxlen: 19
61.235.224.0/19 maxlen: 19
61.237.0.0/16 maxlen: 16
61.237.0.0/17 maxlen: 17
61.237.0.0/19 maxlen: 19
61.237.128.0/17 maxlen: 17
101.144.0.0/12 maxlen: 12
103.3.128.0/22 maxlen: 22
110.112.0.0/16 maxlen: 16
110.120.0.0/16 maxlen: 16
110.120.0.0/24 maxlen: 24
110.120.1.0/24 maxlen: 24
110.211.0.0/16 maxlen: 16
110.211.0.0/24 maxlen: 24
110.211.1.0/24 maxlen: 24
122.84.0.0/16 maxlen: 16
123.64.0.0/16 maxlen: 16
123.64.0.0/20 maxlen: 20
123.64.0.0/24 maxlen: 24
123.64.1.0/24 maxlen: 24
123.64.6.0/24 maxlen: 24
123.64.253.0/24 maxlen: 24
123.65.0.0/16 maxlen: 16
123.65.70.0/24 maxlen: 24
123.65.107.0/24 maxlen: 24
123.65.108.0/24 maxlen: 24
123.65.232.0/24 maxlen: 24
123.66.0.0/16 maxlen: 16
123.66.0.0/17 maxlen: 17
211.98.0.0/16 maxlen: 16
211.98.0.0/19 maxlen: 19
211.98.32.0/19 maxlen: 19
211.98.64.0/19 maxlen: 19
211.98.96.0/19 maxlen: 19
211.98.128.0/19 maxlen: 19
211.98.160.0/19 maxlen: 19
211.98.192.0/19 maxlen: 19
211.98.224.0/19 maxlen: 19
221.172.0.0/16 maxlen: 16
221.174.0.0/16 maxlen: 16
221.174.0.0/17 maxlen: 17
221.174.128.0/17 maxlen: 17
222.44.0.0/16 maxlen: 16
222.50.0.0/16 maxlen: 16
222.50.120.0/24 maxlen: 24
222.50.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:64:0b:b2:4e:85:80:68:e0:2b:0a:a4:84:50:86:b0:18:e7:39:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: May 12 13:30:26 2026 GMT
Not After : May 11 13:35:26 2027 GMT
Subject: CN=0916A4A9F7E0619F28ECD1CDDBFDED4BB7E3A93D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:4c:c4:c1:a1:ac:0d:f6:ba:ae:7b:be:bf:
a4:49:69:bb:e7:2c:32:c3:03:f1:84:da:06:7d:dc:
8e:55:5a:d7:4d:dc:b8:0d:ab:7c:0d:d7:d9:f4:ff:
31:00:d5:3d:9d:4d:1b:98:63:3d:6f:02:b1:22:34:
f8:de:33:ad:f3:2e:6b:24:df:aa:da:5f:59:74:e6:
77:67:dc:de:e2:60:a9:fe:9b:f1:b1:f7:e5:8a:9b:
00:3c:0e:21:4c:0e:9b:15:7a:45:f3:37:b3:ed:80:
7a:5d:a9:0a:5d:c0:f5:06:48:f5:7a:be:6a:d9:72:
4d:5f:df:2c:54:d8:ac:03:70:00:f9:42:26:48:0f:
8c:eb:b1:93:5e:a9:dd:e9:42:20:7e:43:e4:e8:3e:
5c:1b:a4:69:db:8f:40:f7:cd:de:7a:11:51:2d:1f:
c9:5f:b5:5e:81:40:83:06:4a:55:00:8c:38:c1:c4:
96:49:53:37:dc:ae:84:d0:87:c2:d7:fb:db:c3:fc:
89:ab:e1:0e:2c:ff:be:20:2f:1b:f7:9c:8f:18:dd:
7a:ec:9a:18:a4:72:ea:54:44:f5:54:0f:aa:70:18:
49:59:da:cf:f7:d5:4c:9f:57:75:8b:44:eb:4b:ab:
03:93:90:13:77:80:5e:3c:74:80:09:4a:24:37:46:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:A4:A9:F7:E0:61:9F:28:EC:D1:CD:DB:FD:ED:4B:B7:E3:A9:3D
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.192.0.0/16
61.232.0.0/14
61.237.0.0/16
101.144.0.0/12
103.3.128.0/22
110.112.0.0/16
110.120.0.0/16
110.211.0.0/16
122.84.0.0/16
123.64.0.0-123.66.255.255
211.98.0.0/16
221.172.0.0/16
221.174.0.0/16
222.44.0.0/16
222.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:c0:99:11:75:12:60:62:56:a8:bd:f9:f5:e9:6c:76:74:d3:
ca:dc:c0:e6:9f:1d:34:de:43:54:95:e1:fc:1d:2e:c0:c3:cf:
67:94:1b:c0:72:43:ae:60:46:cf:56:0b:65:da:93:ca:0c:73:
6d:b9:1a:13:1f:57:16:95:a1:53:c7:76:6b:be:04:b6:ae:41:
20:88:1c:fd:22:2b:45:f2:65:db:9e:96:e8:cb:1d:b6:f9:b4:
f4:82:ea:a3:b6:fc:bc:b9:6f:97:36:1c:07:e4:86:c9:70:d8:
cf:a3:b2:49:26:2d:90:e2:19:eb:31:50:6e:f7:4f:f1:07:ef:
60:34:b4:1e:a0:72:2f:31:86:e3:5f:e4:4f:c1:fc:33:94:97:
2e:87:34:f8:89:a2:a6:e6:83:1e:29:85:5e:18:d5:9e:e0:f5:
59:ba:4f:dd:eb:15:08:f0:33:b3:3b:4b:c9:e3:0e:fb:cc:8c:
8f:08:26:68:f4:c6:e8:c1:e1:51:6b:40:74:b9:32:7d:4d:19:
34:73:84:79:00:63:74:5f:09:4c:50:9e:09:46:ad:17:15:c2:
6f:57:06:7e:50:b0:9f:13:f6:cc:12:a6:6e:11:86:6c:5b:52:
01:be:99:e4:77:48:58:f5:e0:37:a7:9e:ea:79:1d:e0:db:87:
95:9b:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:36 2026 by rpki-client