Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146788.roa
File: AS146788.roa (raw, json)
Hash identifier: YKRVVpEOG/SjpP5iuazLNu2+ftditm+qt0XCfUkNMTQ=
Subject key identifier: C4:34:B1:90:63:EF:69:1C:F3:10:0B:60:4B:A6:4E:CD:EF:A1:E9:E1
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 71614CF289E63D2D5C93CC3ECD2624EC1B744EF9
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146788.roa
Signing time: Fri 29 May 2026 07:32:22 +0000
ROA not before: Fri 29 May 2026 07:27:22 +0000
ROA not after: Fri 28 May 2027 07:32:22 +0000
asID: 146788
IP address blocks: 240a:4002:1b00::/40 maxlen: 40
240a:4010:8000::/33 maxlen: 33
240a:4040::/27 maxlen: 48
240a:4080:8000::/35 maxlen: 35
240a:4080:8000::/48 maxlen: 48
240a:4081:8000::/48 maxlen: 48
240a:4084:2000::/35 maxlen: 35
240a:4088:a000::/35 maxlen: 35
240a:408c:2000::/35 maxlen: 35
240a:4090:8000::/35 maxlen: 35
240a:4090:a000::/35 maxlen: 35
240a:4093::/35 maxlen: 35
240a:4094:2000::/35 maxlen: 35
240a:409c:2000::/35 maxlen: 35
240a:40a4:2000::/35 maxlen: 35
240a:40a8:8000::/35 maxlen: 35
240a:40aa:c000::/48 maxlen: 48
240a:40ac:2000::/35 maxlen: 35
240a:40c0:8200::/48 maxlen: 48
240a:40c0:8240::/48 maxlen: 48
240a:40c3:c200::/48 maxlen: 48
240a:40c4:4000::/44 maxlen: 44
240a:4172::/31 maxlen: 31
240a:4180::/31 maxlen: 31
240a:41b0::/34 maxlen: 34
240a:41b8:8800::/40 maxlen: 40
240a:41b8:a000::/40 maxlen: 40
240a:41b8:d400::/40 maxlen: 40
240a:41b8:e400::/40 maxlen: 40
240a:41d6::/31 maxlen: 31
240a:41f2::/31 maxlen: 31
240a:4208::/31 maxlen: 31
240a:420a::/31 maxlen: 31
240a:4224:9000::/44 maxlen: 44
240a:4224:a000::/44 maxlen: 44
240a:4224:c000::/44 maxlen: 44
240a:4224:d000::/44 maxlen: 44
240a:4224:e000::/44 maxlen: 44
240a:4225:1000::/44 maxlen: 44
240a:4225:3000::/44 maxlen: 44
240a:4230::/31 maxlen: 31
240a:4242::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:61:4c:f2:89:e6:3d:2d:5c:93:cc:3e:cd:26:24:ec:1b:74:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: May 29 07:27:22 2026 GMT
Not After : May 28 07:32:22 2027 GMT
Subject: CN=C434B19063EF691CF3100B604BA64ECDEFA1E9E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:40:ec:17:b9:87:e4:06:f5:2d:b0:82:8e:
7f:cd:a7:c8:c6:ef:d1:a4:47:07:73:65:59:e3:a7:
fb:a1:e1:74:1e:51:63:1d:3e:da:f4:2b:59:39:cb:
d7:6a:a1:9e:be:56:36:e6:d0:66:fb:90:28:5c:cd:
94:fd:cb:36:33:69:2e:8a:8b:a3:2a:d1:33:96:f7:
1b:7e:32:22:67:87:e4:12:1c:7a:b1:7c:2e:32:32:
3e:85:b2:28:9c:5a:08:49:45:65:22:49:68:b3:88:
00:7f:4c:14:18:de:3a:5b:16:69:4d:b3:3c:3c:b5:
e9:81:59:57:2e:bc:c9:d4:5d:b4:8d:a4:e6:1b:5a:
69:b0:80:c4:2b:45:cd:66:61:08:60:11:92:78:9d:
98:e6:f4:f3:a1:b4:86:1a:cd:07:56:77:c3:d1:16:
3c:56:f8:46:e0:e1:36:24:72:43:ab:7a:79:cc:1b:
fd:23:34:c9:21:ca:a5:df:c0:16:2b:9d:a8:5c:47:
a2:86:8b:77:71:82:e7:04:c4:b2:8e:9e:3b:1f:ab:
c3:b5:85:39:e3:d1:59:98:17:9f:e0:21:96:33:43:
e0:44:bb:1a:e5:5f:21:07:2e:e6:8c:3c:50:b1:53:
80:86:82:78:5c:38:fa:71:73:19:38:53:32:97:c0:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:B1:90:63:EF:69:1C:F3:10:0B:60:4B:A6:4E:CD:EF:A1:E9:E1
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146788.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:4002:1b00::/40
240a:4010:8000::/33
240a:4040::/27
240a:4080:8000::/35
240a:4081:8000::/48
240a:4084:2000::/35
240a:4088:a000::/35
240a:408c:2000::/35
240a:4090:8000::/34
240a:4093::/35
240a:4094:2000::/35
240a:409c:2000::/35
240a:40a4:2000::/35
240a:40a8:8000::/35
240a:40aa:c000::/48
240a:40ac:2000::/35
240a:40c0:8200::/48
240a:40c0:8240::/48
240a:40c3:c200::/48
240a:40c4:4000::/44
240a:4172::/31
240a:4180::/31
240a:41b0::/34
240a:41b8:8800::/40
240a:41b8:a000::/40
240a:41b8:d400::/40
240a:41b8:e400::/40
240a:41d6::/31
240a:41f2::/31
240a:4208::/30
240a:4224:9000::/44
240a:4224:a000::/44
240a:4224:c000::/44
240a:4224:d000::/44
240a:4224:e000::/44
240a:4225:1000::/44
240a:4225:3000::/44
240a:4230::/31
240a:4242::/31
Signature Algorithm: sha256WithRSAEncryption
a2:5c:f8:3f:8e:aa:97:19:b0:61:79:ff:a6:09:63:7c:63:85:
7d:fd:8a:ce:02:dd:7b:4f:12:59:89:05:51:9d:ab:2b:ff:5a:
8a:bc:25:d3:6b:26:ea:a0:36:a1:80:c0:59:a7:94:11:1f:2b:
e7:84:c9:e0:c8:91:5e:8b:8a:4b:97:9b:a5:97:7c:2f:7f:96:
fb:1a:90:cc:8a:14:d3:6c:28:ed:e6:05:01:19:2a:72:52:ba:
ba:23:21:57:35:e2:3e:38:5e:eb:78:9a:65:37:6a:28:0e:c1:
6d:44:f9:c7:bc:8b:dc:13:ac:dc:d3:50:0b:a9:96:d4:ef:83:
90:ad:d0:fe:e6:64:05:36:93:00:e3:6f:e7:79:3b:28:22:2f:
75:94:36:17:26:5f:f3:f6:56:af:d0:75:3b:d4:78:d5:04:10:
38:ac:08:83:ce:74:2c:de:39:c7:c0:4d:fd:17:c5:47:29:8c:
be:b3:e6:a9:0b:d6:06:fb:08:c3:26:93:5f:c0:62:f1:94:42:
e6:24:58:d7:f8:25:b9:d3:73:0f:1c:f1:83:58:fa:10:dc:fb:
f0:87:7e:9c:2d:ee:39:bc:9a:36:31:96:72:af:01:32:91:7d:
a6:97:49:ec:8f:bc:fc:84:e8:04:a5:5b:8b:72:60:0d:de:b9:
01:2c:5c:ec
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIUcWFM8onmPS1ck8w+zSYk7Bt0TvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2
Nzk2RjBGNjAeFw0yNjA1MjkwNzI3MjJaFw0yNzA1MjgwNzMyMjJaMDMxMTAvBgNV
BAMTKEM0MzRCMTkwNjNFRjY5MUNGMzEwMEI2MDRCQTY0RUNERUZBMUU5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCkDsF7mH5Ab1LbCCjn/Np8jG
79GkRwdzZVnjp/uh4XQeUWMdPtr0K1k5y9dqoZ6+Vjbm0Gb7kChczZT9yzYzaS6K
i6Mq0TOW9xt+MiJnh+QSHHqxfC4yMj6FsiicWghJRWUiSWiziAB/TBQY3jpbFmlN
szw8temBWVcuvMnUXbSNpOYbWmmwgMQrRc1mYQhgEZJ4nZjm9POhtIYazQdWd8PR
FjxW+Ebg4TYkckOrennMG/0jNMkhyqXfwBYrnahcR6KGi3dxgucExLKOnjsfq8O1
hTnj0VmYF5/gIZYzQ+BEuxrlXyEHLuaMPFCxU4CGgnhcOPpxcxk4UzKXwF1ZAgMB
AAGjggMlMIIDITAdBgNVHQ4EFgQUxDSxkGPvaRzzEAtgS6ZOze+h6eEwHwYDVR0j
BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4
OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzE0Njc4OC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAV4GCCsGAQUFBwEHAQH/BIIBTTCC
AUkwggFFBAIAAjCCAT0DBgAkCkACGwMGByQKQBCAAwUFJApAQAMGBSQKQICAAwcA
JApAgYAAAwYFJApAhCADBgUkCkCIoAMGBSQKQIwgAwYGJApAkIADBgUkCkCTAAMG
BSQKQJQgAwYFJApAnCADBgUkCkCkIAMGBSQKQKiAAwcAJApAqsAAAwYFJApArCAD
BwAkCkDAggADBwAkCkDAgkADBwAkCkDDwgADBwQkCkDEQAADBQEkCkFyAwUBJApB
gAMGBiQKQbAAAwYAJApBuIgDBgAkCkG4oAMGACQKQbjUAwYAJApBuOQDBQEkCkHW
AwUBJApB8gMFAiQKQggDBwQkCkIkkAADBwQkCkIkoAADBwQkCkIkwAADBwQkCkIk
0AADBwQkCkIk4AADBwQkCkIlEAADBwQkCkIlMAADBQEkCkIwAwUBJApCQjANBgkq
hkiG9w0BAQsFAAOCAQEAolz4P46qlxmwYXn/pgljfGOFff2KzgLde08SWYkFUZ2r
K/9airwl02sm6qA2oYDAWaeUER8r54TJ4MiRXouKS5ebpZd8L3+W+xqQzIoU02wo
7eYFARkqclK6uiMhVzXiPjhe63iaZTdqKA7BbUT5x7yL3BOs3NNQC6mW1O+DkK3Q
/uZkBTaTAONv53k7KCIvdZQ2FyZf8/ZWr9B1O9R41QQQOKwIg850LN45x8BN/RfF
RymMvrPmqQvWBvsIwyaTX8Bi8ZRC5iRY1/gludNzDxzxg1j6ENz78Id+nC3uObya
NjGWcq8BMpF9ppdJ7I+8/IToBKVbi3JgDd65ASxc7A==
-----END CERTIFICATE-----
Generated at Sat May 30 01:37:28 2026 by rpki-client