Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS132203.roa
File: AS132203.roa (raw, json)
Hash identifier: MGh7geS9q7/6iNL2Np6bgBq+89E2Xke7QjRB3yPNdgk=
Subject key identifier: 3B:B0:B2:1A:EF:27:17:F7:A7:CC:91:CE:7A:56:C1:17:83:F1:84:76
Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Certificate serial: 71627E3F0F122D2841CCE71CD74716DACCDA8233
Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS132203.roa
Signing time: Wed 01 Jul 2026 00:10:06 +0000
ROA not before: Wed 01 Jul 2026 00:05:06 +0000
ROA not after: Wed 30 Jun 2027 00:10:06 +0000
asID: 132203
IP address blocks: 103.238.16.0/23 maxlen: 23
182.254.118.0/24 maxlen: 24
203.205.128.0/23 maxlen: 23
203.205.134.0/24 maxlen: 24
203.205.135.0/24 maxlen: 24
203.205.136.0/24 maxlen: 24
203.205.137.0/24 maxlen: 24
203.205.138.0/23 maxlen: 23
203.205.140.0/24 maxlen: 24
203.205.141.0/24 maxlen: 24
203.205.142.0/24 maxlen: 24
203.205.143.0/24 maxlen: 24
203.205.144.0/24 maxlen: 24
203.205.145.0/24 maxlen: 24
203.205.146.0/24 maxlen: 24
203.205.147.0/24 maxlen: 24
203.205.155.0/24 maxlen: 24
203.205.157.0/24 maxlen: 24
203.205.159.0/24 maxlen: 24
203.205.188.0/24 maxlen: 24
203.205.191.0/24 maxlen: 24
203.205.192.0/22 maxlen: 22
203.205.193.0/24 maxlen: 24
203.205.194.0/23 maxlen: 23
203.205.196.0/22 maxlen: 22
203.205.196.0/23 maxlen: 23
203.205.218.0/24 maxlen: 24
203.205.219.0/24 maxlen: 24
203.205.220.0/23 maxlen: 23
203.205.222.0/23 maxlen: 23
203.205.224.0/24 maxlen: 24
203.205.232.0/23 maxlen: 23
203.205.234.0/23 maxlen: 23
203.205.236.0/23 maxlen: 23
203.205.238.0/23 maxlen: 23
203.205.248.0/23 maxlen: 23
203.205.250.0/23 maxlen: 23
203.205.252.0/23 maxlen: 23
203.205.254.0/23 maxlen: 23
211.152.148.0/23 maxlen: 23
211.152.154.0/23 maxlen: 23
211.152.158.0/23 maxlen: 23
211.152.158.0/24 maxlen: 24
211.152.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 19:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:62:7e:3f:0f:12:2d:28:41:cc:e7:1c:d7:47:16:da:cc:da:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Validity
Not Before: Jul 1 00:05:06 2026 GMT
Not After : Jun 30 00:10:06 2027 GMT
Subject: CN=3BB0B21AEF2717F7A7CC91CE7A56C11783F18476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:18:ea:15:3e:a1:52:f1:2e:15:39:40:28:
cb:66:ff:a7:24:70:26:65:f7:fe:1c:3a:9a:d6:40:
e6:a2:c8:d6:09:17:e2:55:05:bd:ee:34:71:96:5d:
28:a3:2a:5f:59:db:de:ec:92:f1:33:7e:8e:23:3a:
4d:46:93:bc:d3:fc:39:50:8c:ac:a7:96:f0:70:0b:
de:7b:45:f8:13:ef:ca:e6:ad:7c:39:34:88:b9:51:
21:c4:f3:a2:23:ff:3a:01:23:bb:2f:7d:8c:3a:27:
55:4c:ef:00:65:bf:04:f7:a1:a3:0f:79:fb:60:ac:
ca:2d:40:df:28:02:af:c8:8d:59:34:6f:b7:a7:ed:
f9:aa:bd:4b:54:b4:ef:ed:67:13:eb:8d:c2:24:03:
be:27:8b:7c:db:2c:7c:35:98:c9:86:a7:f8:99:a5:
65:b1:3d:2a:37:3a:90:b6:cd:dd:76:18:b2:0d:de:
38:cd:30:7b:22:6f:17:af:b0:92:2c:cc:e5:12:c6:
ed:56:4a:2f:d9:2d:8c:43:ac:66:13:1e:65:f9:cd:
26:17:71:19:51:c0:a0:a2:73:b7:12:9a:13:19:e2:
a5:4e:f7:8a:c8:be:b5:3e:c2:5e:21:ac:2a:ba:af:
cb:7d:ab:0d:a7:cd:08:41:4b:ba:ec:8c:fd:01:91:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:B2:1A:EF:27:17:F7:A7:CC:91:CE:7A:56:C1:17:83:F1:84:76
X509v3 Authority Key Identifier:
keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS132203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.16.0/23
182.254.118.0/24
203.205.128.0/23
203.205.134.0-203.205.147.255
203.205.155.0/24
203.205.157.0/24
203.205.159.0/24
203.205.188.0/24
203.205.191.0-203.205.199.255
203.205.218.0-203.205.224.255
203.205.232.0/21
203.205.248.0/21
211.152.148.0/23
211.152.154.0/23
211.152.158.0/23
Signature Algorithm: sha256WithRSAEncryption
09:9f:a1:14:1e:46:05:de:68:cb:2d:5b:e6:b5:9f:53:5e:7d:
b8:99:23:6d:39:6d:59:cd:6c:50:7c:f3:44:9a:0b:74:59:a8:
88:d9:27:51:c8:b4:a6:e5:49:ec:d1:9b:3c:18:f4:e4:90:56:
5f:66:e8:e1:28:89:c6:a4:6b:3a:89:3b:44:20:df:2c:27:cb:
08:01:a4:a4:7a:e3:64:b1:e9:dd:0d:4d:90:2d:68:4d:dd:40:
70:e6:36:f0:ad:f8:c0:b9:15:38:b4:2a:e6:93:9b:4e:f5:36:
14:fa:90:b4:09:f6:27:d5:d3:51:ea:77:d8:18:03:8d:67:cf:
d5:13:14:0c:84:29:2d:0b:cc:8a:cc:3c:ff:61:0c:50:71:3a:
de:57:9d:ff:47:5d:38:9a:a8:48:53:95:4e:a6:c3:ae:40:d9:
e1:8f:5f:a3:61:44:d1:c9:e0:e1:9f:88:54:86:e3:4d:9a:9d:
2a:0d:aa:ba:10:2a:ef:ff:b4:cb:32:da:20:97:ee:8c:a7:c3:
97:9c:94:b2:80:f9:20:03:34:32:c5:1a:dd:3a:fe:72:36:01:
2f:8e:b1:80:e2:e9:2b:aa:e2:dd:48:93:94:bd:9f:64:6a:11:
f7:b3:58:3e:6e:4b:c1:99:ed:5c:75:7e:0f:03:a5:61:2d:76:
55:f4:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:09:45 2026 by rpki-client