Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
File: AS135061.roa (raw, json)
Hash identifier: nxBwVTRQeGzN5n3l5G/G5VC41BPbCHTVYRHW042BCJI=
Subject key identifier: 91:A8:A6:3C:71:26:79:C9:A0:F4:53:77:5E:D4:3E:2D:D0:9B:EA:D8
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 761A36F7F8E10626EF8678B1CDA95BDE2DBA10B6
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
Signing time: Thu 06 Aug 2026 08:59:44 +0000
ROA not before: Thu 06 Aug 2026 08:54:44 +0000
ROA not after: Thu 05 Aug 2027 08:59:44 +0000
asID: 135061
IP address blocks: 157.255.168.0/21 maxlen: 21
157.255.168.0/24 maxlen: 24
157.255.169.0/24 maxlen: 24
157.255.172.0/22 maxlen: 22
157.255.176.0/20 maxlen: 20
157.255.176.0/22 maxlen: 22
157.255.180.0/24 maxlen: 24
157.255.181.0/24 maxlen: 24
157.255.182.0/24 maxlen: 24
157.255.183.0/24 maxlen: 24
157.255.184.0/24 maxlen: 24
157.255.187.0/24 maxlen: 24
157.255.188.0/22 maxlen: 22
157.255.192.0/19 maxlen: 19
157.255.192.0/24 maxlen: 24
157.255.193.0/24 maxlen: 24
157.255.194.0/24 maxlen: 24
157.255.195.0/24 maxlen: 24
157.255.196.0/22 maxlen: 22
157.255.200.0/23 maxlen: 23
157.255.202.0/23 maxlen: 23
157.255.204.0/24 maxlen: 24
157.255.205.0/24 maxlen: 24
157.255.206.0/23 maxlen: 23
157.255.208.0/22 maxlen: 22
157.255.212.0/22 maxlen: 22
157.255.216.0/22 maxlen: 22
157.255.220.0/23 maxlen: 23
157.255.222.0/24 maxlen: 24
157.255.223.0/24 maxlen: 24
157.255.224.0/20 maxlen: 20
157.255.225.0/24 maxlen: 24
157.255.226.0/24 maxlen: 24
157.255.227.0/24 maxlen: 24
157.255.228.0/24 maxlen: 24
157.255.230.0/24 maxlen: 24
157.255.232.0/24 maxlen: 24
157.255.233.0/24 maxlen: 24
157.255.234.0/24 maxlen: 24
157.255.235.0/24 maxlen: 24
157.255.239.0/24 maxlen: 24
157.255.240.0/21 maxlen: 21
157.255.240.0/24 maxlen: 24
157.255.241.0/24 maxlen: 24
157.255.242.0/24 maxlen: 24
157.255.243.0/24 maxlen: 24
157.255.244.0/24 maxlen: 24
157.255.245.0/24 maxlen: 24
157.255.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 08:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1a:36:f7:f8:e1:06:26:ef:86:78:b1:cd:a9:5b:de:2d:ba:10:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Aug 6 08:54:44 2026 GMT
Not After : Aug 5 08:59:44 2027 GMT
Subject: CN=91A8A63C712679C9A0F453775ED43E2DD09BEAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:17:c3:f6:4e:0b:0d:37:99:05:40:18:bc:
3f:b4:2e:c0:b0:27:de:55:97:28:07:b0:7a:f2:0f:
93:fb:bb:7f:a9:98:7e:32:ac:f7:63:54:59:d1:6b:
47:b9:e9:3a:f0:b2:b8:b2:0d:e7:cc:c6:4b:64:6f:
a6:48:5c:36:38:d5:ad:c5:7c:8f:ae:b3:21:84:63:
e8:3a:bd:9a:c1:49:76:91:c8:96:a3:31:98:9d:d5:
a0:67:f0:b0:2c:41:39:ca:d6:9e:c2:66:2d:83:30:
4b:fc:79:cb:8e:2d:35:e0:70:4e:e8:9e:a7:3d:02:
f1:11:a8:81:86:6d:43:93:02:df:6a:3b:61:11:5e:
75:3f:a2:cf:30:32:0a:cc:23:ca:61:be:f9:5a:d0:
38:45:36:98:c8:4c:e5:9e:fb:9b:ba:3b:b0:10:e3:
48:29:99:38:b2:87:40:11:ed:c7:64:f4:35:92:f0:
4b:9f:bb:cd:3a:a4:f5:23:52:80:56:0b:b8:1c:81:
98:7c:70:42:a7:c5:64:f3:c5:41:cd:9f:55:83:4b:
57:9a:35:8a:a2:49:cb:84:fd:c9:61:df:b6:92:76:
88:3c:21:8b:ba:2a:c9:2b:6e:a5:3d:3f:29:ad:20:
c3:2d:69:25:6e:26:d3:dc:e9:ed:53:87:ca:3b:a1:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:A6:3C:71:26:79:C9:A0:F4:53:77:5E:D4:3E:2D:D0:9B:EA:D8
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.255.168.0-157.255.247.255
Signature Algorithm: sha256WithRSAEncryption
33:9a:57:d5:d4:27:71:91:b1:b9:59:94:0f:13:de:2c:a1:54:
c3:01:cd:64:3f:5b:f3:8f:74:3e:18:48:75:18:ca:0a:6a:4e:
65:81:f4:c7:ff:a3:e5:e9:d4:94:c2:28:bb:bc:93:b9:ae:9c:
29:70:9f:b1:00:38:8f:2e:b6:ab:d5:ba:aa:2a:f1:b7:87:38:
fb:2d:c4:5d:ad:68:f8:e1:db:b0:a4:0a:f0:d0:ea:5a:02:98:
1f:70:b3:3c:d0:ad:81:ab:df:ff:48:20:e8:c3:30:d9:78:fd:
a0:a5:c4:61:66:0d:b7:49:2b:5b:3c:cb:e8:35:28:60:fe:58:
18:30:ca:9c:3b:f4:ed:16:c7:3a:45:16:80:55:09:8a:ce:59:
4d:ab:fd:eb:51:20:98:64:46:cc:96:0e:77:cf:20:88:f0:91:
9a:51:4e:b2:1c:01:f8:01:cb:af:11:dd:21:8c:02:75:7e:3f:
b2:ed:75:b5:6b:57:c9:7f:11:b7:e7:22:cc:d9:07:7f:16:de:
9e:64:24:65:32:ee:4d:73:f4:0b:11:98:5d:5c:5b:88:4e:68:
e9:6c:ef:33:e0:38:5a:05:c7:62:d4:99:75:51:de:4f:55:fb:
97:3e:53:3b:b0:58:8b:e4:a8:3a:ab:46:4c:87:65:10:2f:e5:
5c:84:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:04 2026 by rpki-client