Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: c83pHGal9G/ctie3/ktqoR8KgpidOHjIMIP20xSjnAg=
Subject key identifier: 46:B0:87:AA:12:EB:39:BC:27:3F:17:BB:EA:4B:10:12:7A:56:51:6F
Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial: 42D7379D74F3871C840398C26E75B3DC744D8030
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS0.roa
Signing time: Thu 27 Aug 2026 08:58:50 +0000
ROA not before: Thu 27 Aug 2026 08:53:50 +0000
ROA not after: Thu 26 Aug 2027 08:58:50 +0000
asID: 0
IP address blocks: 45.250.12.0/22 maxlen: 22
45.250.16.0/22 maxlen: 22
45.250.76.0/22 maxlen: 22
45.250.80.0/22 maxlen: 22
45.250.84.0/22 maxlen: 22
45.250.88.0/22 maxlen: 22
45.250.92.0/22 maxlen: 22
45.250.96.0/22 maxlen: 22
45.250.104.0/22 maxlen: 22
45.250.108.0/22 maxlen: 22
45.250.112.0/22 maxlen: 22
45.250.116.0/22 maxlen: 22
45.250.120.0/22 maxlen: 22
45.250.124.0/22 maxlen: 22
45.250.128.0/22 maxlen: 22
45.250.132.0/22 maxlen: 22
45.250.136.0/22 maxlen: 22
45.250.140.0/22 maxlen: 22
45.250.144.0/22 maxlen: 22
45.250.148.0/22 maxlen: 22
61.29.128.0/19 maxlen: 19
61.29.160.0/24 maxlen: 24
61.29.162.0/24 maxlen: 24
61.29.163.0/24 maxlen: 24
61.29.164.0/22 maxlen: 22
61.29.168.0/21 maxlen: 21
61.29.176.0/20 maxlen: 20
103.75.144.0/24 maxlen: 24
103.75.145.0/24 maxlen: 24
103.75.146.0/24 maxlen: 24
103.218.8.0/22 maxlen: 22
103.218.12.0/22 maxlen: 22
103.218.16.0/22 maxlen: 22
103.218.20.0/22 maxlen: 22
103.218.28.0/22 maxlen: 22
103.218.32.0/22 maxlen: 22
103.218.36.0/22 maxlen: 22
103.218.40.0/22 maxlen: 22
103.218.44.0/22 maxlen: 22
103.218.48.0/22 maxlen: 22
103.218.52.0/22 maxlen: 22
103.218.56.0/22 maxlen: 22
103.218.60.0/22 maxlen: 22
103.218.64.0/22 maxlen: 22
103.218.68.0/22 maxlen: 22
103.218.72.0/22 maxlen: 22
103.218.76.0/22 maxlen: 22
103.218.80.0/22 maxlen: 22
103.218.84.0/22 maxlen: 22
103.218.88.0/22 maxlen: 22
121.201.128.0/17 maxlen: 17
123.103.31.0/24 maxlen: 24
123.103.32.0/21 maxlen: 21
125.171.0.0/17 maxlen: 17
125.171.128.0/17 maxlen: 17
203.130.36.0/22 maxlen: 22
203.130.53.0/24 maxlen: 24
203.130.54.0/23 maxlen: 23
203.130.56.0/22 maxlen: 22
203.130.60.0/23 maxlen: 23
203.130.62.0/24 maxlen: 24
210.185.192.0/19 maxlen: 19
210.185.224.0/19 maxlen: 19
210.192.104.0/21 maxlen: 21
210.192.112.0/22 maxlen: 22
211.156.176.0/21 maxlen: 21
211.156.184.0/21 maxlen: 21
220.242.0.0/19 maxlen: 19
220.242.32.0/20 maxlen: 20
220.242.48.0/23 maxlen: 23
220.242.53.0/24 maxlen: 24
220.242.55.0/24 maxlen: 24
220.242.56.0/22 maxlen: 22
220.242.60.0/23 maxlen: 23
220.242.62.0/24 maxlen: 24
220.242.64.0/18 maxlen: 18
220.242.128.0/19 maxlen: 19
220.242.160.0/20 maxlen: 20
220.242.176.0/22 maxlen: 22
220.242.181.0/24 maxlen: 24
220.242.182.0/24 maxlen: 24
220.242.183.0/24 maxlen: 24
220.242.184.0/21 maxlen: 21
220.242.192.0/18 maxlen: 18
220.243.192.0/19 maxlen: 19
220.243.224.0/20 maxlen: 20
220.243.240.0/22 maxlen: 22
220.243.244.0/24 maxlen: 24
220.243.249.0/24 maxlen: 24
220.243.250.0/23 maxlen: 23
220.243.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d7:37:9d:74:f3:87:1c:84:03:98:c2:6e:75:b3:dc:74:4d:80:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
Validity
Not Before: Aug 27 08:53:50 2026 GMT
Not After : Aug 26 08:58:50 2027 GMT
Subject: CN=46B087AA12EB39BC273F17BBEA4B10127A56516F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:cb:a6:00:5f:fd:fa:01:e0:82:5c:f4:17:
cf:79:34:f5:23:44:98:c1:e7:cd:19:1b:b7:a7:3f:
32:a0:ca:68:22:73:1a:38:23:85:08:06:74:fd:c4:
bc:09:4c:21:9a:42:e5:33:b8:ba:70:0e:a1:86:13:
d2:9e:8b:b4:13:41:21:1f:57:fd:82:71:94:29:b6:
51:07:d5:23:39:1d:e9:49:46:d1:26:da:e8:d7:c8:
d4:30:79:dc:95:6a:a9:61:c1:b9:e3:43:f9:b5:b4:
b0:83:0a:2e:0a:61:79:a1:c8:a1:c2:98:95:d1:53:
98:72:6b:83:30:b6:8d:1e:df:2c:b0:67:90:c9:a1:
cc:e8:b1:4f:9d:ed:fb:29:94:68:45:21:8f:11:72:
13:3f:20:aa:93:54:f5:93:77:86:e3:74:bc:2c:2b:
fc:bb:fc:e2:8d:87:2a:7b:fd:6a:c0:dc:83:0f:5d:
c9:50:3c:31:82:32:72:69:a7:c3:0f:3e:b2:2b:e5:
67:7b:d4:24:02:53:c7:3c:1a:0b:d5:18:c7:52:2d:
b3:c5:a4:97:f8:aa:b0:10:81:b9:fb:bc:67:0b:6e:
ac:de:a6:60:54:0d:8e:ad:ae:98:e6:6b:93:ec:92:
34:bb:cc:4e:98:c4:a1:8e:19:b5:a4:ee:46:1c:ee:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:87:AA:12:EB:39:BC:27:3F:17:BB:EA:4B:10:12:7A:56:51:6F
X509v3 Authority Key Identifier:
keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.12.0-45.250.19.255
45.250.76.0-45.250.99.255
45.250.104.0-45.250.151.255
61.29.128.0-61.29.160.255
61.29.162.0-61.29.191.255
103.75.144.0-103.75.146.255
103.218.8.0-103.218.23.255
103.218.28.0-103.218.91.255
121.201.128.0/17
123.103.31.0-123.103.39.255
125.171.0.0/16
203.130.36.0/22
203.130.53.0-203.130.62.255
210.185.192.0/18
210.192.104.0-210.192.115.255
211.156.176.0/20
220.242.0.0-220.242.49.255
220.242.53.0/24
220.242.55.0-220.242.62.255
220.242.64.0-220.242.179.255
220.242.181.0-220.242.255.255
220.243.192.0-220.243.244.255
220.243.249.0-220.243.255.255
Signature Algorithm: sha256WithRSAEncryption
77:42:0a:62:8e:a3:8f:36:fb:30:76:3d:58:4f:eb:b2:f6:3b:
0d:63:64:19:f4:02:c1:31:0a:dc:28:a8:d3:d9:19:ed:93:2a:
9c:02:b0:9e:64:60:d1:61:e0:4a:b2:cd:fd:0e:0e:fc:fe:f8:
8e:37:2d:3b:a4:43:d9:6b:9c:1b:77:8b:5f:aa:1b:fd:0e:23:
e3:fb:b6:89:89:7e:79:b0:7a:37:af:12:ac:ea:53:b4:69:56:
56:1b:ec:2a:b4:3a:91:50:cf:e8:7d:f7:0f:0b:3a:e9:1a:6c:
cf:ce:60:8d:d3:6e:97:11:02:4f:c8:16:0f:69:cf:2b:e2:12:
47:c0:ad:ab:b6:9e:d1:c7:f6:bc:ee:5b:89:85:8b:c9:fc:10:
85:e4:7b:89:ef:53:c8:3e:b6:3a:f0:ab:d9:ca:4c:17:1c:bc:
10:c1:ad:b3:9a:81:8d:94:71:c5:0f:6e:0c:b6:af:2f:dd:bf:
d5:6d:69:b5:81:f4:6d:53:d6:88:31:a1:9d:ea:a0:02:0b:f3:
2a:07:b2:38:1d:75:c2:62:d7:8f:05:72:d2:fb:3f:b6:4e:8b:
fd:08:7f:fa:b3:34:d5:bd:00:95:21:79:37:9b:98:83:96:8e:
4f:cc:77:85:1f:5f:2b:25:ca:2d:46:ef:83:8e:51:73:16:92:
82:73:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:49 2026 by rpki-client