Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
File: AS135061.roa (raw, json)
Hash identifier: cJ2kOSnDBuSQIzA2w7Hs/s+HAJl9svOeDjkjyIYPXQY=
Subject key identifier: 31:45:42:30:C6:96:17:FF:F2:5B:6C:F1:2C:51:7F:44:2F:B5:F5:24
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 46D770FD1FB15BC7E4CC347707CAB277CF41D887
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
Signing time: Fri 05 Jun 2026 06:31:06 +0000
ROA not before: Fri 05 Jun 2026 06:26:06 +0000
ROA not after: Fri 04 Jun 2027 06:31:06 +0000
asID: 135061
IP address blocks: 157.255.168.0/24 maxlen: 24
157.255.169.0/24 maxlen: 24
157.255.180.0/24 maxlen: 24
157.255.181.0/24 maxlen: 24
157.255.182.0/24 maxlen: 24
157.255.183.0/24 maxlen: 24
157.255.184.0/24 maxlen: 24
157.255.187.0/24 maxlen: 24
157.255.192.0/24 maxlen: 24
157.255.193.0/24 maxlen: 24
157.255.194.0/24 maxlen: 24
157.255.195.0/24 maxlen: 24
157.255.204.0/24 maxlen: 24
157.255.205.0/24 maxlen: 24
157.255.222.0/24 maxlen: 24
157.255.223.0/24 maxlen: 24
157.255.225.0/24 maxlen: 24
157.255.226.0/24 maxlen: 24
157.255.227.0/24 maxlen: 24
157.255.228.0/24 maxlen: 24
157.255.230.0/24 maxlen: 24
157.255.232.0/24 maxlen: 24
157.255.233.0/24 maxlen: 24
157.255.234.0/24 maxlen: 24
157.255.235.0/24 maxlen: 24
157.255.239.0/24 maxlen: 24
157.255.240.0/24 maxlen: 24
157.255.241.0/24 maxlen: 24
157.255.242.0/24 maxlen: 24
157.255.243.0/24 maxlen: 24
157.255.244.0/24 maxlen: 24
157.255.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d7:70:fd:1f:b1:5b:c7:e4:cc:34:77:07:ca:b2:77:cf:41:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jun 5 06:26:06 2026 GMT
Not After : Jun 4 06:31:06 2027 GMT
Subject: CN=31454230C69617FFF25B6CF12C517F442FB5F524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:e2:f1:31:a3:46:4b:70:87:2a:ce:2e:06:
63:1d:a3:4d:26:c7:e5:ab:37:2f:ac:72:aa:67:0b:
db:e1:20:48:cb:39:73:4e:46:6c:b6:71:7e:31:8c:
e3:ca:7d:08:1d:c5:39:5b:28:fd:42:91:7d:4c:dd:
f3:c2:ea:4b:2a:56:58:fe:25:18:51:17:8d:a6:38:
d5:4b:f3:15:32:38:23:da:25:db:a1:81:ac:7c:3a:
f9:b5:51:ff:06:a4:cd:5c:bd:02:56:78:e7:96:75:
2c:4a:9e:41:fb:06:c7:12:42:da:65:13:12:78:59:
62:7f:50:39:59:a8:79:13:c8:be:50:1a:a1:9d:5a:
41:18:8c:60:f7:63:06:86:e1:de:0e:09:88:c1:e3:
ae:c1:97:25:b3:c8:c7:b1:03:c6:7a:45:2e:a8:b0:
43:eb:2a:ad:12:18:41:3e:f7:91:21:c7:d2:5e:9b:
11:40:fd:2a:85:48:f4:5d:00:cc:fd:05:e1:49:d3:
38:35:b3:8e:64:f4:35:9b:8e:6d:29:53:a5:9e:11:
37:cd:d0:8d:6f:0f:5b:81:72:f5:c8:b2:26:da:8e:
a8:aa:b1:93:3d:8f:c3:67:12:b1:29:3f:90:ad:5a:
c2:26:49:b8:c6:b2:94:aa:3c:90:be:c3:fb:c2:e7:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:42:30:C6:96:17:FF:F2:5B:6C:F1:2C:51:7F:44:2F:B5:F5:24
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS135061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.255.168.0/23
157.255.180.0-157.255.184.255
157.255.187.0/24
157.255.192.0/22
157.255.204.0/23
157.255.222.0/23
157.255.225.0-157.255.228.255
157.255.230.0/24
157.255.232.0/22
157.255.239.0-157.255.245.255
Signature Algorithm: sha256WithRSAEncryption
0e:a0:3d:8c:81:9f:9e:17:ad:96:3d:d4:ef:81:c2:0e:bb:76:
60:4d:34:40:12:46:bd:77:2f:6c:37:05:16:29:fe:94:24:1f:
96:d8:53:13:e6:3d:ea:c9:16:74:1d:d2:b3:67:8a:81:de:9f:
53:e9:d6:da:d2:8f:b9:98:bb:ee:c9:f6:a6:64:ba:2a:2b:fb:
63:f2:a3:59:c6:7e:59:e4:0a:68:c4:f7:b1:ca:23:d7:4e:cc:
18:b2:5b:0c:86:6b:c5:0e:ea:32:bf:96:77:dc:96:b2:80:ad:
f2:06:24:c1:55:0b:77:88:19:3f:d1:2d:8f:27:ac:5e:0e:46:
8a:d6:8a:a4:ba:19:1b:f0:ca:83:99:2b:5c:86:71:eb:9c:ba:
e3:c7:f8:87:f9:aa:ce:95:57:10:73:b3:f7:81:af:4e:95:b7:
e6:26:03:57:73:c8:de:0e:c6:fb:bd:f7:b3:ef:03:94:c3:ec:
79:1c:96:86:e1:a8:3b:35:b5:24:e9:96:26:a8:8d:75:46:ee:
f0:c1:3b:13:60:0a:85:74:3b:42:0e:d8:1c:60:56:02:87:8f:
7a:21:f7:f6:dc:8b:df:d4:99:6e:55:3e:0b:42:dd:ae:4d:fc:
f4:f6:8f:11:27:4a:26:e9:f0:17:3d:7b:69:76:99:7e:2b:15:
32:a5:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:33 2026 by rpki-client