Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38365.roa
File: AS38365.roa (raw, json)
Hash identifier: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=
Subject key identifier: B4:C9:03:8B:12:74:B3:FB:36:C7:64:78:F9:0B:DB:1F:39:4F:72:64
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 17375067CBBB1E6006B02EB95E5CA6DDF5BAE323
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38365.roa
Signing time: Sun 17 May 2026 10:18:00 +0000
ROA not before: Sun 17 May 2026 10:13:00 +0000
ROA not after: Sun 16 May 2027 10:18:00 +0000
asID: 38365
IP address blocks: 42.199.0.0/16 maxlen: 24
101.247.0.0/17 maxlen: 24
103.6.76.0/22 maxlen: 24
106.12.0.0/18 maxlen: 24
106.12.64.0/18 maxlen: 24
106.12.128.0/18 maxlen: 24
106.12.192.0/19 maxlen: 24
106.12.224.0/20 maxlen: 24
106.12.240.0/21 maxlen: 24
106.12.250.0/23 maxlen: 24
106.13.0.0/18 maxlen: 24
106.13.64.0/18 maxlen: 24
106.13.128.0/18 maxlen: 24
106.13.192.0/19 maxlen: 24
106.13.224.0/20 maxlen: 24
106.13.240.0/22 maxlen: 24
106.13.244.0/22 maxlen: 24
106.13.248.0/23 maxlen: 24
106.13.250.0/23 maxlen: 24
106.13.252.0/22 maxlen: 24
114.110.96.0/22 maxlen: 24
114.111.16.0/20 maxlen: 24
117.58.0.0/17 maxlen: 24
119.75.208.0/20 maxlen: 24
120.48.0.0/16 maxlen: 24
120.49.0.0/18 maxlen: 24
120.49.64.0/18 maxlen: 24
120.49.128.0/18 maxlen: 24
120.49.192.0/18 maxlen: 24
120.49.192.0/21 maxlen: 24
120.49.200.0/21 maxlen: 24
120.49.208.0/21 maxlen: 24
122.248.48.0/20 maxlen: 24
150.242.120.0/22 maxlen: 24
180.76.16.0/20 maxlen: 24
180.76.32.0/20 maxlen: 24
180.76.48.0/20 maxlen: 24
180.76.64.0/18 maxlen: 24
180.76.76.0/24 maxlen: 24
180.76.128.0/18 maxlen: 24
180.76.192.0/22 maxlen: 24
180.76.196.0/23 maxlen: 24
180.76.198.0/23 maxlen: 24
180.76.200.0/21 maxlen: 24
180.76.208.0/20 maxlen: 24
180.76.224.0/19 maxlen: 24
182.61.0.0/18 maxlen: 24
182.61.64.0/18 maxlen: 24
182.61.128.0/23 maxlen: 24
182.61.130.0/23 maxlen: 24
182.61.132.0/22 maxlen: 24
182.61.136.0/21 maxlen: 24
182.61.144.0/20 maxlen: 24
182.61.192.0/23 maxlen: 24
182.61.194.0/23 maxlen: 24
182.61.196.0/23 maxlen: 24
182.61.198.0/23 maxlen: 24
182.61.200.0/21 maxlen: 24
182.61.208.0/21 maxlen: 24
182.61.216.0/21 maxlen: 24
182.61.224.0/19 maxlen: 24
202.181.120.0/22 maxlen: 24
202.181.124.0/22 maxlen: 24
2400:da00::/32 maxlen: 48
240c:4000::/22 maxlen: 48
240c:409f::/46 maxlen: 48
240c:409f:4::/46 maxlen: 48
240c:409f:1000::/47 maxlen: 48
240c:409f:2000::/46 maxlen: 48
240c:409f:3000::/46 maxlen: 48
240c:409f:3004::/46 maxlen: 48
240c:409f:4000::/46 maxlen: 48
240c:409f:4004::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:37:50:67:cb:bb:1e:60:06:b0:2e:b9:5e:5c:a6:dd:f5:ba:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: May 17 10:13:00 2026 GMT
Not After : May 16 10:18:00 2027 GMT
Subject: CN=B4C9038B1274B3FB36C76478F90BDB1F394F7264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:5f:86:95:08:6c:34:86:23:b4:d3:5a:0f:
31:be:b9:8b:ca:45:ff:ae:4b:ba:89:b3:6b:8b:2e:
af:0e:ab:5f:10:70:ec:2f:8b:67:2e:b6:1a:45:56:
8b:c0:01:b9:e6:6d:25:38:b4:02:d9:9d:2a:ce:27:
45:34:88:b5:4d:95:dc:1d:b1:0e:df:ea:cb:64:01:
85:f9:98:71:56:90:1a:e9:4c:51:e7:87:ca:5a:0f:
c7:a4:32:2e:05:17:a7:1e:79:22:7d:8a:b1:49:4f:
59:17:e6:00:1c:5e:5a:99:55:e8:3c:2a:c4:d8:f9:
b1:3f:cf:e0:fc:47:b2:67:07:d2:a6:bf:7a:c9:99:
d6:73:ad:5e:34:94:93:fe:a2:dd:70:6e:5d:54:34:
e2:f8:41:f2:63:11:86:ca:fb:01:23:78:07:c6:ec:
b0:51:31:44:ea:13:4d:c7:a0:36:97:5c:a0:c9:55:
1a:d1:85:4b:89:6f:1f:dc:39:de:0b:bc:4c:a1:33:
3a:d4:90:08:a8:ac:a7:3d:7e:33:c5:b7:2a:4e:74:
e2:3f:26:af:0b:24:67:f8:a4:38:1e:0b:c1:34:76:
d5:4f:2e:40:73:30:2e:21:7f:6d:7b:54:c6:a2:99:
26:a1:90:83:41:e4:15:97:39:af:b6:90:53:90:f8:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:03:8B:12:74:B3:FB:36:C7:64:78:F9:0B:DB:1F:39:4F:72:64
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38365.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.199.0.0/16
101.247.0.0/17
103.6.76.0/22
106.12.0.0-106.12.247.255
106.12.250.0/23
106.13.0.0/16
114.110.96.0/22
114.111.16.0/20
117.58.0.0/17
119.75.208.0/20
120.48.0.0/15
122.248.48.0/20
150.242.120.0/22
180.76.16.0-180.76.255.255
182.61.0.0-182.61.159.255
182.61.192.0/18
202.181.120.0/21
IPv6:
2400:da00::/32
240c:4000::/22
Signature Algorithm: sha256WithRSAEncryption
71:89:56:d1:af:39:bd:29:88:78:89:56:60:b9:f3:65:20:fd:
1c:41:69:81:b0:95:76:d7:9b:99:23:88:fe:56:36:27:5f:b8:
df:66:ca:86:6b:5b:dc:1d:a2:23:78:8c:2f:38:82:7b:4c:1d:
e3:cb:53:8b:a5:d2:95:47:84:c3:52:bd:a7:e4:91:c2:85:de:
a4:7e:96:44:49:d3:14:58:74:2b:68:20:5f:e8:9c:a5:01:0a:
5b:ea:07:a6:26:42:cd:cb:d4:64:66:b0:e1:a7:8d:5c:92:b8:
3e:1e:e5:2f:cf:dd:1b:54:72:98:ac:68:f1:58:8f:f2:f3:fd:
1b:b3:58:49:95:db:ee:ce:9f:6e:87:2e:71:d5:30:01:bc:36:
1b:2e:8a:57:19:00:9a:81:68:00:1e:60:2f:c6:43:c7:0a:06:
66:72:65:66:7b:76:e9:9b:30:51:ec:1a:7a:5c:23:b2:75:04:
c3:07:26:a8:b0:dd:b1:e5:bb:58:87:e9:b7:af:ae:86:40:80:
bb:86:89:84:5a:6f:ab:96:01:35:00:fc:f7:2d:df:de:e3:60:
ab:c1:65:3f:1e:51:82:ca:c7:fc:85:28:c5:62:71:a8:39:92:
1e:2c:1d:5d:24:40:8a:5b:54:e6:ec:d7:03:e4:32:26:1f:33:
1e:38:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:22 2026 by rpki-client