Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS37965.roa
File: AS37965.roa (raw, json)
Hash identifier: MpdrYs4s5smAnslGmbwKHNEsVtiM3A2sQSme+KnOOpI=
Subject key identifier: C3:9A:B5:71:9A:76:4F:BE:E3:B8:B9:0F:25:5A:8A:5B:3F:3D:AD:1F
Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Certificate serial: 1343BBCDB07021B44FE4753481A5E16D6500CE67
Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS37965.roa
Signing time: Mon 06 Jul 2026 09:39:32 +0000
ROA not before: Mon 06 Jul 2026 09:34:32 +0000
ROA not after: Mon 05 Jul 2027 09:39:32 +0000
asID: 37965
IP address blocks: 222.126.128.0/17 maxlen: 17
222.126.128.0/23 maxlen: 23
222.126.130.0/23 maxlen: 23
222.126.132.0/23 maxlen: 23
222.126.138.0/24 maxlen: 24
222.126.140.0/23 maxlen: 23
222.126.141.0/24 maxlen: 24
222.126.142.0/23 maxlen: 23
222.126.144.0/24 maxlen: 24
222.126.146.0/23 maxlen: 23
222.126.147.0/24 maxlen: 24
222.126.148.0/23 maxlen: 23
222.126.150.0/23 maxlen: 23
222.126.150.0/24 maxlen: 24
222.126.152.0/23 maxlen: 23
222.126.154.0/23 maxlen: 23
222.126.156.0/23 maxlen: 23
222.126.158.0/23 maxlen: 23
222.126.160.0/23 maxlen: 23
222.126.162.0/23 maxlen: 23
222.126.164.0/23 maxlen: 23
222.126.164.0/24 maxlen: 24
222.126.166.0/23 maxlen: 23
222.126.168.0/23 maxlen: 23
222.126.170.0/23 maxlen: 23
222.126.170.0/24 maxlen: 24
222.126.171.0/24 maxlen: 24
222.126.172.0/23 maxlen: 23
222.126.173.0/24 maxlen: 24
222.126.174.0/23 maxlen: 23
222.126.174.0/24 maxlen: 24
222.126.176.0/23 maxlen: 23
222.126.178.0/23 maxlen: 23
222.126.179.0/24 maxlen: 24
222.126.180.0/23 maxlen: 23
222.126.180.0/24 maxlen: 24
222.126.181.0/24 maxlen: 24
222.126.182.0/23 maxlen: 23
222.126.182.0/24 maxlen: 24
222.126.183.0/24 maxlen: 24
222.126.184.0/23 maxlen: 23
222.126.186.0/23 maxlen: 23
222.126.188.0/23 maxlen: 24
222.126.192.0/23 maxlen: 23
222.126.194.0/23 maxlen: 23
222.126.196.0/23 maxlen: 23
222.126.200.0/23 maxlen: 23
222.126.202.0/23 maxlen: 23
222.126.208.0/23 maxlen: 23
222.126.212.0/23 maxlen: 23
222.126.214.0/23 maxlen: 23
222.126.216.0/23 maxlen: 23
222.126.216.0/24 maxlen: 24
222.126.228.0/23 maxlen: 23
222.126.234.0/23 maxlen: 23
222.126.236.0/23 maxlen: 23
222.126.236.0/24 maxlen: 24
222.126.238.0/23 maxlen: 23
222.126.239.0/24 maxlen: 24
222.126.240.0/23 maxlen: 23
222.126.241.0/24 maxlen: 24
222.126.242.0/23 maxlen: 23
222.126.243.0/24 maxlen: 24
222.126.244.0/23 maxlen: 23
222.126.244.0/24 maxlen: 24
222.126.246.0/23 maxlen: 23
222.126.248.0/23 maxlen: 23
222.126.248.0/24 maxlen: 24
222.126.249.0/24 maxlen: 24
222.126.250.0/23 maxlen: 23
222.126.254.0/23 maxlen: 23
222.126.255.0/24 maxlen: 24
2401:2a00:f000::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:43:bb:cd:b0:70:21:b4:4f:e4:75:34:81:a5:e1:6d:65:00:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Validity
Not Before: Jul 6 09:34:32 2026 GMT
Not After : Jul 5 09:39:32 2027 GMT
Subject: CN=C39AB5719A764FBEE3B8B90F255A8A5B3F3DAD1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:0d:7e:8f:be:e8:b9:fe:1a:2a:e7:9e:c4:
5e:2d:28:a8:19:74:f5:e8:77:85:01:70:59:14:86:
ed:5f:10:7f:06:e2:12:5f:06:47:d8:7d:93:da:9c:
4a:f2:53:51:3b:99:b9:93:b6:f8:cc:cb:16:e5:e1:
b2:ba:36:1c:95:27:ef:bf:62:fb:26:60:b9:21:e5:
a1:40:c0:f6:2b:8b:77:f5:29:d7:aa:b8:4f:4b:7b:
20:41:23:e1:ec:7b:93:c5:72:37:d0:61:cf:bb:5f:
f0:3d:c3:de:66:87:e1:d4:15:83:6e:70:63:37:e8:
91:c4:0c:20:38:59:9a:dc:8f:61:73:82:bd:f9:f4:
cc:08:4d:6f:88:2c:81:14:ed:e4:e1:ca:22:87:ed:
28:59:e8:ad:24:e4:c8:db:87:a5:28:2c:66:8f:76:
c2:41:0f:34:16:47:e1:a5:9c:97:3c:72:ba:d1:0f:
35:8f:da:97:57:a1:75:2a:f2:fc:01:3e:3c:13:06:
3e:ed:f5:c8:b7:f7:9c:01:a6:21:81:47:a5:c4:7d:
2e:57:e2:c1:fe:75:a2:7c:d8:2f:3a:c1:a6:06:7d:
a0:e1:ad:18:f1:34:29:34:59:82:bc:88:b0:5b:84:
6e:f0:c2:63:cc:39:89:75:ec:85:49:9f:17:99:21:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:B5:71:9A:76:4F:BE:E3:B8:B9:0F:25:5A:8A:5B:3F:3D:AD:1F
X509v3 Authority Key Identifier:
keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS37965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.126.128.0/17
IPv6:
2401:2a00:f000::/43
Signature Algorithm: sha256WithRSAEncryption
09:82:28:e4:1f:eb:7b:0a:65:cb:06:88:1d:76:9e:17:db:29:
31:d1:0e:62:bd:63:ea:1a:47:2f:25:5d:0c:cd:b4:fa:ad:78:
72:68:f4:ed:79:3a:06:35:4b:b1:4d:94:ec:83:6d:33:a3:74:
a9:b1:67:c1:3f:4c:f8:66:1a:a7:44:ac:8f:b1:56:c4:cf:74:
32:4c:03:85:b8:4e:64:ee:19:0a:f8:eb:4f:b5:ad:b3:e9:2b:
bd:e9:a2:97:18:4d:a3:af:f6:da:3d:9c:ea:4b:d7:b2:7a:45:
a7:da:77:3d:91:2a:25:6b:51:da:f5:b4:1d:42:55:49:66:03:
4c:82:fe:d5:fa:59:51:a8:b0:be:2d:f2:22:3d:a1:87:83:3a:
27:98:12:a5:df:d4:66:fd:99:5b:cb:8a:be:56:c8:7c:52:ab:
17:df:e3:11:2c:33:d6:bb:0b:5c:2c:3a:83:90:03:c2:b2:98:
7b:dc:ac:8e:6b:92:90:69:67:82:ad:9d:41:7a:9d:4e:de:f8:
13:64:d0:d4:bc:47:23:02:41:1b:1e:07:58:3e:72:e3:dd:1d:
49:dc:3f:9e:64:6d:52:ae:59:32:18:c4:22:48:91:61:d3:49:
6f:e2:df:99:cf:ea:f9:c0:ff:04:75:11:d0:5c:ea:b2:8a:62:
d5:cc:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:59:35 2026 by rpki-client