Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
File: AS134543.roa (raw, json)
Hash identifier: HEL3ch3uPZcCLN1S66P75Hs1+rehd0yRR6E8AisBIg8=
Subject key identifier: 69:FA:81:9F:51:90:0E:30:CB:85:F5:BF:3A:D0:EA:CE:81:8D:4F:D6
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 1BE4ABCB30E0918F20560DE752F72983C71846F2
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
Signing time: Thu 25 Jun 2026 03:13:28 +0000
ROA not before: Thu 25 Jun 2026 03:08:28 +0000
ROA not after: Thu 24 Jun 2027 03:13:28 +0000
asID: 134543
IP address blocks: 157.122.220.0/24 maxlen: 24
157.122.221.0/24 maxlen: 24
157.122.222.0/24 maxlen: 24
157.148.128.0/24 maxlen: 24
157.148.130.0/24 maxlen: 24
157.148.131.0/24 maxlen: 24
157.148.132.0/24 maxlen: 24
157.148.133.0/24 maxlen: 24
157.255.120.0/24 maxlen: 24
157.255.121.0/24 maxlen: 24
157.255.122.0/24 maxlen: 24
157.255.123.0/24 maxlen: 24
157.255.124.0/23 maxlen: 23
157.255.126.0/23 maxlen: 23
157.255.128.0/24 maxlen: 24
157.255.129.0/24 maxlen: 24
157.255.130.0/24 maxlen: 24
157.255.131.0/24 maxlen: 24
157.255.132.0/24 maxlen: 24
157.255.133.0/24 maxlen: 24
157.255.134.0/24 maxlen: 24
157.255.136.0/24 maxlen: 24
157.255.137.0/24 maxlen: 24
157.255.138.0/24 maxlen: 24
157.255.142.0/24 maxlen: 24
157.255.143.0/24 maxlen: 24
157.255.144.0/23 maxlen: 23
157.255.145.0/24 maxlen: 24
157.255.148.0/24 maxlen: 24
157.255.150.0/24 maxlen: 24
157.255.151.0/24 maxlen: 24
157.255.154.0/24 maxlen: 24
157.255.156.0/24 maxlen: 24
157.255.157.0/24 maxlen: 24
157.255.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e4:ab:cb:30:e0:91:8f:20:56:0d:e7:52:f7:29:83:c7:18:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jun 25 03:08:28 2026 GMT
Not After : Jun 24 03:13:28 2027 GMT
Subject: CN=69FA819F51900E30CB85F5BF3AD0EACE818D4FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3d:9d:36:3e:83:ab:c1:72:9c:11:21:b8:64:
7b:2d:97:3c:0c:2b:57:ff:e6:ea:8b:86:17:18:1b:
00:e8:13:09:55:d5:72:23:6e:fa:a6:b1:8e:01:92:
46:08:68:ca:43:3f:15:87:26:ab:5a:a3:63:07:81:
c4:6b:1f:45:9c:69:fc:4b:82:88:c7:6e:fa:28:64:
79:7c:a8:16:b7:7a:a0:f8:20:f6:cd:1c:2e:ce:a3:
53:40:92:6b:a9:d3:ff:7b:3d:d6:12:65:d0:ad:50:
ac:82:dd:7e:6f:10:93:77:bb:6c:d6:c6:17:4e:f2:
ed:55:81:bc:20:2b:91:14:b5:cf:a7:f7:93:0f:1a:
ae:38:85:95:c7:96:54:f1:ce:f2:ae:5e:56:3c:47:
e9:f6:59:82:4a:bb:18:73:20:22:8d:96:51:47:9e:
23:c2:07:09:2d:9c:bb:f0:47:74:53:04:fb:98:82:
f5:30:95:bf:03:d1:70:3b:5d:7e:ab:81:7e:3d:4a:
29:cb:18:72:68:9f:d8:db:40:e3:e0:88:55:96:02:
3c:5b:cb:95:61:64:c4:29:f0:f3:d4:92:5f:fa:ea:
62:bd:63:2c:1f:bf:a7:98:96:c0:2a:5e:e8:90:c5:
6a:a1:1b:da:2e:0b:6c:ee:cd:c9:47:ed:09:e2:60:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:81:9F:51:90:0E:30:CB:85:F5:BF:3A:D0:EA:CE:81:8D:4F:D6
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.220.0-157.122.222.255
157.148.128.0/24
157.148.130.0-157.148.133.255
157.255.120.0-157.255.134.255
157.255.136.0-157.255.138.255
157.255.142.0-157.255.145.255
157.255.148.0/24
157.255.150.0/23
157.255.154.0/24
157.255.156.0-157.255.158.255
Signature Algorithm: sha256WithRSAEncryption
72:b3:12:3a:d8:c2:6b:06:02:e7:77:d8:f4:f1:ad:fa:c2:d9:
76:80:91:c6:ee:48:b1:6c:3a:bc:d6:62:27:93:9e:05:30:89:
57:29:59:b4:d5:29:b7:ba:d4:6e:44:cc:b3:39:c2:a6:f1:a2:
d6:94:69:4b:b5:53:bc:6f:3c:01:8a:68:e0:7e:60:a9:74:07:
80:d3:c2:0a:28:2d:9f:47:f6:66:1a:72:24:8a:38:06:f2:fb:
75:48:a7:7d:2d:3e:dc:76:51:2e:5b:b8:40:b3:63:8b:dd:b0:
e9:72:f1:bd:9a:46:6b:98:d6:d5:a5:00:50:f6:4a:98:0c:a6:
22:44:56:34:fe:92:e1:1c:e1:b2:54:de:91:cf:68:67:f1:d9:
41:fb:80:9e:18:ab:9d:67:53:13:c7:a9:b8:d0:a6:08:ce:c5:
eb:d5:02:57:16:43:cd:71:25:7e:da:1e:69:e7:29:46:24:d5:
a3:db:a3:86:7e:85:b2:c4:f6:04:2b:2e:ec:ac:08:30:6c:d4:
b3:eb:e7:ae:d7:d6:40:af:a8:7d:19:f6:09:42:41:0b:32:8e:
e1:f5:75:66:6b:20:03:33:b7:0e:e0:ae:0e:82:e6:23:1e:c9:
04:50:83:32:2d:32:82:69:9d:6d:55:56:ed:c7:e4:b0:11:89:
4d:60:c0:8b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUG+SryzDgkY8gVg3nUvcpg8cYRvIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz
MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDYyNTAzMDgyOFoX
DTI3MDYyNDAzMTMyOFowMzExMC8GA1UEAxMoNjlGQTgxOUY1MTkwMEUzMENCODVG
NUJGM0FEMEVBQ0U4MThENEZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPQ9nTY+g6vBcpwRIbhkey2XPAwrV//m6ouGFxgbAOgTCVXVciNu+qaxjgGS
RghoykM/FYcmq1qjYweBxGsfRZxp/EuCiMdu+ihkeXyoFrd6oPgg9s0cLs6jU0CS
a6nT/3s91hJl0K1QrILdfm8Qk3e7bNbGF07y7VWBvCArkRS1z6f3kw8arjiFlceW
VPHO8q5eVjxH6fZZgkq7GHMgIo2WUUeeI8IHCS2cu/BHdFME+5iC9TCVvwPRcDtd
fquBfj1KKcsYcmif2NtA4+CIVZYCPFvLlWFkxCnw89SSX/rqYr1jLB+/p5iWwCpe
6JDFaqEb2i4LbO7NyUftCeJgxPcCAwEAAaOCAkswggJHMB0GA1UdDgQWBBRp+oGf
UZAOMMuF9b860OrOgY1P1jAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm
RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC
NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz
eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8wL0FTMTM0NTQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbDAMAwQCnXrcAwQAnXreAwQAnZSA
MAwDBAGdlIIDBAGdlIQwDAMEA53/eAMEAJ3/hjAMAwQDnf+IAwQAnf+KMAwDBAGd
/44DBAGd/5ADBACd/5QDBAGd/5YDBACd/5owDAMEAp3/nAMEAJ3/njANBgkqhkiG
9w0BAQsFAAOCAQEAcrMSOtjCawYC53fY9PGt+sLZdoCRxu5IsWw6vNZiJ5OeBTCJ
VylZtNUpt7rUbkTMsznCpvGi1pRpS7VTvG88AYpo4H5gqXQHgNPCCigtn0f2Zhpy
JIo4BvL7dUinfS0+3HZRLlu4QLNji92w6XLxvZpGa5jW1aUAUPZKmAymIkRWNP6S
4RzhslTekc9oZ/HZQfuAnhirnWdTE8epuNCmCM7F69UCVxZDzXElftoeaecpRiTV
o9ujhn6FssT2BCsu7KwIMGzUs+vnrtfWQK+ofRn2CUJBCzKO4fV1ZmsgAzO3DuCu
DoLmIx7JBFCDMi0ygmmdbVVW7cfksBGJTWDAiw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 17:58:38 2026 by rpki-client