Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
File: AS134543.roa (raw, json)
Hash identifier: MELig0IcX+ocQa+yzUyUoz5isjH3xHJmJR07ZrXFGNo=
Subject key identifier: 8C:27:67:D6:5F:A5:7C:E4:A0:AB:DF:E9:F4:5A:02:24:25:7A:A0:86
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 0B3281723F92854DC245A20064370CA7D0BCC089
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
Signing time: Thu 06 Aug 2026 08:59:44 +0000
ROA not before: Thu 06 Aug 2026 08:54:44 +0000
ROA not after: Thu 05 Aug 2027 08:59:44 +0000
asID: 134543
IP address blocks: 157.122.216.0/21 maxlen: 21
157.122.220.0/24 maxlen: 24
157.122.221.0/24 maxlen: 24
157.122.222.0/24 maxlen: 24
157.148.128.0/21 maxlen: 21
157.148.128.0/24 maxlen: 24
157.148.130.0/24 maxlen: 24
157.148.131.0/24 maxlen: 24
157.148.132.0/24 maxlen: 24
157.148.133.0/24 maxlen: 24
157.255.120.0/24 maxlen: 24
157.255.121.0/24 maxlen: 24
157.255.122.0/24 maxlen: 24
157.255.123.0/24 maxlen: 24
157.255.124.0/22 maxlen: 22
157.255.124.0/23 maxlen: 23
157.255.126.0/23 maxlen: 23
157.255.128.0/19 maxlen: 19
157.255.128.0/24 maxlen: 24
157.255.129.0/24 maxlen: 24
157.255.130.0/24 maxlen: 24
157.255.131.0/24 maxlen: 24
157.255.132.0/24 maxlen: 24
157.255.133.0/24 maxlen: 24
157.255.134.0/24 maxlen: 24
157.255.136.0/24 maxlen: 24
157.255.137.0/24 maxlen: 24
157.255.138.0/24 maxlen: 24
157.255.142.0/24 maxlen: 24
157.255.143.0/24 maxlen: 24
157.255.144.0/23 maxlen: 23
157.255.145.0/24 maxlen: 24
157.255.148.0/24 maxlen: 24
157.255.150.0/24 maxlen: 24
157.255.151.0/24 maxlen: 24
157.255.154.0/24 maxlen: 24
157.255.156.0/24 maxlen: 24
157.255.157.0/24 maxlen: 24
157.255.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 03:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:32:81:72:3f:92:85:4d:c2:45:a2:00:64:37:0c:a7:d0:bc:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Aug 6 08:54:44 2026 GMT
Not After : Aug 5 08:59:44 2027 GMT
Subject: CN=8C2767D65FA57CE4A0ABDFE9F45A0224257AA086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:fd:72:39:62:b6:e2:bc:ae:d2:a8:da:f9:
0c:0c:af:2a:5d:4d:7e:74:a6:54:6a:08:d9:30:ba:
ef:8e:d8:29:6f:02:28:de:c1:0d:56:38:43:dd:57:
e0:e9:9e:6b:7f:ab:c4:6e:a7:99:e0:d8:ec:bb:e6:
98:64:d6:f4:6b:af:73:24:31:1c:a4:cb:0b:78:28:
15:2b:4d:ab:46:9b:c7:23:c9:6b:1c:55:7a:9b:c2:
58:4f:ff:8a:7c:0e:c3:96:60:95:63:5d:07:37:da:
81:a0:fb:6f:12:ce:22:86:e3:54:b5:29:97:30:91:
9c:0f:aa:58:09:97:46:2d:35:56:ce:2f:f0:26:ed:
60:b2:89:91:18:eb:9e:59:dc:79:40:f6:d9:0c:7a:
4c:1a:e4:fc:ee:0c:0a:17:52:9f:2f:0d:23:f0:be:
f1:14:6e:25:b0:31:59:ad:f5:ef:d4:9a:89:6a:33:
c4:a5:b1:65:1d:23:f1:24:35:49:c7:d2:c3:44:1d:
69:93:2b:e8:6e:d3:15:c9:78:fc:cc:12:6b:cc:45:
63:94:7d:02:05:48:2d:3c:3e:0d:f7:4f:7e:ae:19:
e2:9b:fa:49:5c:d4:d1:91:71:eb:c7:f2:00:24:a6:
9c:4d:72:3d:22:b5:83:b3:8a:ba:7d:2d:39:7e:fe:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:67:D6:5F:A5:7C:E4:A0:AB:DF:E9:F4:5A:02:24:25:7A:A0:86
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS134543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.216.0/21
157.148.128.0/21
157.255.120.0-157.255.159.255
Signature Algorithm: sha256WithRSAEncryption
46:15:31:7d:6a:14:bc:76:63:cd:8c:0e:a5:ca:8c:2e:2c:93:
da:b7:74:bb:4f:0a:f3:1d:2c:b3:dd:e8:f3:70:5b:87:d7:14:
51:ba:f6:66:63:fd:76:56:38:02:86:14:20:35:e4:e4:db:95:
53:86:85:b2:87:f3:d3:a2:50:ae:27:24:c5:86:62:38:bf:54:
4e:c9:95:ea:2c:76:06:ba:ba:93:15:34:44:35:cb:25:41:dd:
fc:8e:96:25:70:c7:bc:e8:7c:f8:77:78:1e:73:f8:fa:e0:b1:
df:18:60:df:c8:77:d1:59:18:e0:7d:80:38:7b:ef:86:e0:9f:
af:69:82:cb:31:f7:f1:cb:62:fd:7f:10:86:b6:50:9a:3e:df:
a9:6b:5d:d4:36:77:96:77:e3:b2:fd:b8:14:e2:51:ce:15:8c:
ff:f5:46:f4:03:a1:aa:5c:ab:32:34:c3:67:d2:17:48:29:ed:
79:26:bb:ae:55:ea:7c:ae:60:38:bf:33:84:a4:80:ea:3b:35:
16:d8:49:a9:7c:f7:10:bb:c9:04:ae:64:6c:83:33:97:92:ee:
4d:b6:2e:11:7b:6c:26:1f:f8:ff:92:0c:4a:74:37:20:ce:09:
f5:e9:bf:cb:b6:11:4e:dd:04:de:d1:d9:d1:81:e7:57:55:df:
06:1a:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:17 2026 by rpki-client