Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS137718.roa
File: AS137718.roa (raw, json)
Hash identifier: dIgp2CS8swLeW+S+MZoTiCkhV84Wwb4gJZ0pdiojUzA=
Subject key identifier: CA:2C:71:91:FB:D2:36:61:F5:0A:5E:06:CB:91:68:A2:51:0E:B4:7D
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 4E9CC6D263050409D0F664D82EF2C9D912AC7394
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS137718.roa
Signing time: Thu 03 Sep 2026 09:53:14 +0000
ROA not before: Thu 03 Sep 2026 09:48:14 +0000
ROA not after: Thu 02 Sep 2027 09:53:14 +0000
asID: 137718
IP address blocks: 1.93.0.0/16 maxlen: 24
14.103.0.0/16 maxlen: 24
59.109.0.0/16 maxlen: 24
101.96.192.0/18 maxlen: 24
101.126.0.0/16 maxlen: 24
103.159.142.0/23 maxlen: 24
115.47.0.0/16 maxlen: 24
115.100.0.0/15 maxlen: 24
115.172.64.0/19 maxlen: 24
115.172.192.0/18 maxlen: 24
115.173.128.0/17 maxlen: 24
115.190.0.0/15 maxlen: 24
118.145.32.0/19 maxlen: 24
118.145.64.0/18 maxlen: 24
118.145.128.0/17 maxlen: 24
118.196.0.0/15 maxlen: 24
118.199.0.0/16 maxlen: 24
119.16.0.0/16 maxlen: 24
119.27.64.0/18 maxlen: 24
119.90.0.0/17 maxlen: 24
120.130.0.0/16 maxlen: 24
124.6.64.0/18 maxlen: 24
124.15.192.0/18 maxlen: 24
124.174.0.0/16 maxlen: 24
124.175.0.0/16 maxlen: 24
175.106.128.0/17 maxlen: 24
180.184.0.0/16 maxlen: 24
180.184.24.0/21 maxlen: 24
180.184.56.0/21 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
182.238.0.0/16 maxlen: 24
182.239.0.0/19 maxlen: 24
203.100.96.0/19 maxlen: 24
210.78.96.0/19 maxlen: 24
220.112.64.0/18 maxlen: 24
2406:d440::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9c:c6:d2:63:05:04:09:d0:f6:64:d8:2e:f2:c9:d9:12:ac:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Sep 3 09:48:14 2026 GMT
Not After : Sep 2 09:53:14 2027 GMT
Subject: CN=CA2C7191FBD23661F50A5E06CB9168A2510EB47D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:a4:ec:8b:d9:9f:55:4f:bd:f7:d6:bc:d4:
eb:2d:91:c7:e6:e3:37:86:ff:86:c9:bb:85:1a:85:
e6:e5:dd:f8:38:3c:39:3a:6f:fe:c1:15:9d:e8:f6:
ff:e1:a9:82:4d:72:92:c4:c7:2d:7c:96:74:e2:ab:
9f:e1:1a:d6:e7:3b:93:51:5e:c4:54:7a:83:cd:ac:
53:e2:09:a2:c5:82:08:3c:94:69:26:f8:8f:0f:fa:
70:ec:73:c8:31:63:4c:1f:48:cc:a6:3c:78:75:c3:
8b:32:53:46:9d:b8:b5:96:93:8c:38:4a:c4:77:cd:
d9:ac:85:5f:0c:f8:0f:8f:36:ce:d7:a8:94:b5:bd:
1a:e8:9f:7f:cd:76:0b:37:da:74:08:2d:a0:e4:0e:
e8:f2:f5:da:71:3f:83:c7:cd:7e:a3:79:3d:60:ce:
4b:72:1d:a8:d1:38:22:e7:62:37:43:2b:3e:e1:1a:
e9:96:c9:2e:06:ea:c9:79:75:85:80:f5:bc:c3:7d:
bb:b9:2b:f5:93:a0:c7:f0:d3:80:05:77:75:2c:25:
97:d7:c4:a1:b2:01:d7:be:b0:90:3b:24:b3:7d:f4:
b7:23:e3:5f:be:65:c3:5b:b9:f9:42:52:15:b0:a6:
54:57:95:6e:44:a9:3c:f8:cd:55:b1:4a:3f:b6:62:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:71:91:FB:D2:36:61:F5:0A:5E:06:CB:91:68:A2:51:0E:B4:7D
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS137718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.93.0.0/16
14.103.0.0/16
59.109.0.0/16
101.96.192.0/18
101.126.0.0/16
103.159.142.0/23
115.47.0.0/16
115.100.0.0/15
115.172.64.0/19
115.172.192.0/18
115.173.128.0/17
115.190.0.0/15
118.145.32.0-118.145.255.255
118.196.0.0/15
118.199.0.0/16
119.16.0.0/16
119.27.64.0/18
119.90.0.0/17
120.130.0.0/16
124.6.64.0/18
124.15.192.0/18
124.174.0.0/15
175.106.128.0/17
180.184.0.0/16
182.238.0.0-182.239.31.255
203.100.96.0/19
210.78.96.0/19
220.112.64.0/18
IPv6:
2406:d440::/32
Signature Algorithm: sha256WithRSAEncryption
6d:e5:54:8e:1f:72:4b:b9:e9:68:e0:70:d3:3c:9f:f2:fe:69:
97:57:18:4b:2e:70:25:1a:c3:66:02:eb:7a:ee:85:1b:6f:5f:
be:53:f3:75:79:20:58:28:f1:a6:54:2a:e0:2d:8e:48:8e:08:
19:37:91:05:d7:94:69:aa:53:2a:d6:28:ac:5d:55:a2:a1:35:
45:4a:ce:de:17:5a:61:9c:2b:98:80:05:51:c2:2f:bc:d9:2f:
6e:1c:7e:bf:ae:ae:1f:ce:70:a6:fa:00:ea:39:ef:6d:9c:45:
d8:ef:8c:2b:69:8c:53:60:01:93:94:1a:34:29:b2:e7:e5:d2:
10:15:31:df:c0:79:85:0a:e6:13:4b:ff:97:c3:1a:67:c5:09:
92:49:3c:71:c0:2b:93:22:c1:ac:6b:c2:31:1a:74:43:0b:74:
94:5f:41:54:47:27:69:ad:4e:8e:2a:fc:66:b2:95:69:97:3b:
d1:fa:17:3f:02:ee:77:93:94:8d:8d:5a:e4:b3:a8:57:2f:92:
be:92:17:21:2e:34:24:48:84:07:40:31:d3:df:37:26:64:64:
df:c4:d4:cb:98:f5:0d:47:0b:4c:78:1e:c4:cb:82:ca:1b:21:
da:3d:d6:65:de:9b:a0:5f:76:23:78:65:d4:23:1c:cb:1c:59:
bf:26:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:03:04 2026 by rpki-client