Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
File: AS136958.roa (raw, json)
Hash identifier: 3xj3odGKaqLFxrzBzGQWXeVLg4XgxNah3r2c253qLrc=
Subject key identifier: 99:D0:01:16:AF:37:ED:BC:5E:A7:DA:57:FF:1D:C0:91:10:BA:94:55
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 16C2269D2485FF1C1D36F9A06E45B9AD3E84D9C4
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
Signing time: Thu 09 Jul 2026 07:17:03 +0000
ROA not before: Thu 09 Jul 2026 07:12:03 +0000
ROA not after: Thu 08 Jul 2027 07:17:03 +0000
asID: 136958
IP address blocks: 157.122.208.0/21 maxlen: 21
157.122.214.0/24 maxlen: 24
157.122.224.0/21 maxlen: 21
157.122.226.0/24 maxlen: 24
157.122.230.0/24 maxlen: 24
157.122.231.0/24 maxlen: 24
157.148.1.0/24 maxlen: 24
157.148.2.0/24 maxlen: 24
157.148.3.0/24 maxlen: 24
157.148.4.0/24 maxlen: 24
157.148.5.0/24 maxlen: 24
157.148.6.0/24 maxlen: 24
157.148.7.0/24 maxlen: 24
157.148.8.0/24 maxlen: 24
157.148.11.0/24 maxlen: 24
157.148.12.0/24 maxlen: 24
157.148.13.0/24 maxlen: 24
157.148.14.0/24 maxlen: 24
157.148.15.0/24 maxlen: 24
157.148.16.0/24 maxlen: 24
157.148.17.0/24 maxlen: 24
157.148.18.0/24 maxlen: 24
157.148.19.0/24 maxlen: 24
157.148.20.0/24 maxlen: 24
157.148.21.0/24 maxlen: 24
157.148.22.0/24 maxlen: 24
157.148.23.0/24 maxlen: 24
157.148.24.0/21 maxlen: 21
157.148.26.0/24 maxlen: 24
157.148.27.0/24 maxlen: 24
157.148.28.0/24 maxlen: 24
157.148.29.0/24 maxlen: 24
157.148.30.0/24 maxlen: 24
157.148.32.0/24 maxlen: 24
157.148.33.0/24 maxlen: 24
157.148.34.0/24 maxlen: 24
157.148.35.0/24 maxlen: 24
157.148.36.0/24 maxlen: 24
157.148.37.0/24 maxlen: 24
157.148.38.0/24 maxlen: 24
157.148.39.0/24 maxlen: 24
157.148.40.0/24 maxlen: 24
157.148.41.0/24 maxlen: 24
157.148.42.0/24 maxlen: 24
157.148.43.0/24 maxlen: 24
157.148.44.0/24 maxlen: 24
157.148.45.0/24 maxlen: 24
157.148.46.0/24 maxlen: 24
157.148.47.0/24 maxlen: 24
157.148.48.0/24 maxlen: 24
157.148.49.0/24 maxlen: 24
157.148.50.0/24 maxlen: 24
157.148.51.0/24 maxlen: 24
157.148.52.0/24 maxlen: 24
157.148.53.0/24 maxlen: 24
157.148.54.0/24 maxlen: 24
157.148.55.0/24 maxlen: 24
157.148.56.0/24 maxlen: 24
157.148.57.0/24 maxlen: 24
157.148.58.0/24 maxlen: 24
157.148.59.0/24 maxlen: 24
157.148.60.0/24 maxlen: 24
157.148.61.0/24 maxlen: 24
157.148.62.0/24 maxlen: 24
157.148.63.0/24 maxlen: 24
157.148.64.0/24 maxlen: 24
157.148.65.0/24 maxlen: 24
157.148.66.0/24 maxlen: 24
157.148.67.0/24 maxlen: 24
157.148.68.0/24 maxlen: 24
157.148.69.0/24 maxlen: 24
157.148.70.0/24 maxlen: 24
157.148.71.0/24 maxlen: 24
157.148.72.0/24 maxlen: 24
157.148.73.0/24 maxlen: 24
157.148.74.0/24 maxlen: 24
157.148.75.0/24 maxlen: 24
157.148.76.0/24 maxlen: 24
157.148.77.0/24 maxlen: 24
157.148.78.0/24 maxlen: 24
157.148.79.0/24 maxlen: 24
157.148.80.0/21 maxlen: 21
157.148.81.0/24 maxlen: 24
157.148.82.0/24 maxlen: 24
157.148.83.0/24 maxlen: 24
157.148.84.0/24 maxlen: 24
157.148.85.0/24 maxlen: 24
157.148.86.0/24 maxlen: 24
157.148.87.0/24 maxlen: 24
157.148.88.0/24 maxlen: 24
157.148.89.0/24 maxlen: 24
157.148.90.0/24 maxlen: 24
157.148.91.0/24 maxlen: 24
157.148.92.0/24 maxlen: 24
157.148.93.0/24 maxlen: 24
157.148.94.0/24 maxlen: 24
157.148.95.0/24 maxlen: 24
157.148.96.0/21 maxlen: 21
157.148.97.0/24 maxlen: 24
157.148.102.0/24 maxlen: 24
157.148.103.0/24 maxlen: 24
157.148.104.0/24 maxlen: 24
157.148.105.0/24 maxlen: 24
157.148.106.0/24 maxlen: 24
157.148.107.0/24 maxlen: 24
157.148.108.0/24 maxlen: 24
157.148.110.0/24 maxlen: 24
157.148.111.0/24 maxlen: 24
157.148.112.0/24 maxlen: 24
157.148.113.0/24 maxlen: 24
157.148.114.0/24 maxlen: 24
157.148.115.0/24 maxlen: 24
157.148.116.0/24 maxlen: 24
157.148.117.0/24 maxlen: 24
157.148.118.0/24 maxlen: 24
157.148.119.0/24 maxlen: 24
157.148.120.0/24 maxlen: 24
157.148.121.0/24 maxlen: 24
157.148.122.0/24 maxlen: 24
157.148.123.0/24 maxlen: 24
157.148.124.0/24 maxlen: 24
157.148.125.0/24 maxlen: 24
157.148.126.0/24 maxlen: 24
157.148.127.0/24 maxlen: 24
157.255.0.0/24 maxlen: 24
157.255.1.0/24 maxlen: 24
157.255.2.0/24 maxlen: 24
157.255.3.0/24 maxlen: 24
157.255.4.0/24 maxlen: 24
157.255.5.0/24 maxlen: 24
157.255.6.0/24 maxlen: 24
157.255.7.0/24 maxlen: 24
157.255.8.0/24 maxlen: 24
157.255.9.0/24 maxlen: 24
157.255.10.0/24 maxlen: 24
157.255.11.0/24 maxlen: 24
157.255.12.0/24 maxlen: 24
157.255.13.0/24 maxlen: 24
157.255.14.0/24 maxlen: 24
157.255.15.0/24 maxlen: 24
157.255.16.0/24 maxlen: 24
157.255.17.0/24 maxlen: 24
157.255.18.0/24 maxlen: 24
157.255.19.0/24 maxlen: 24
157.255.20.0/23 maxlen: 23
157.255.22.0/24 maxlen: 24
157.255.23.0/24 maxlen: 24
157.255.27.0/24 maxlen: 24
157.255.28.0/24 maxlen: 24
157.255.29.0/24 maxlen: 24
157.255.30.0/24 maxlen: 24
157.255.32.0/21 maxlen: 21
157.255.33.0/24 maxlen: 24
157.255.34.0/24 maxlen: 24
157.255.35.0/24 maxlen: 24
157.255.39.0/24 maxlen: 24
157.255.40.0/21 maxlen: 21
157.255.48.0/21 maxlen: 21
157.255.48.0/24 maxlen: 24
157.255.49.0/24 maxlen: 24
157.255.50.0/24 maxlen: 24
157.255.51.0/24 maxlen: 24
157.255.52.0/24 maxlen: 24
157.255.55.0/24 maxlen: 24
157.255.56.0/21 maxlen: 21
157.255.56.0/24 maxlen: 24
157.255.57.0/24 maxlen: 24
157.255.58.0/24 maxlen: 24
157.255.59.0/24 maxlen: 24
157.255.60.0/24 maxlen: 24
157.255.61.0/24 maxlen: 24
157.255.62.0/24 maxlen: 24
157.255.64.0/20 maxlen: 20
157.255.65.0/24 maxlen: 24
157.255.66.0/24 maxlen: 24
157.255.67.0/24 maxlen: 24
157.255.68.0/24 maxlen: 24
157.255.71.0/24 maxlen: 24
157.255.72.0/24 maxlen: 24
157.255.73.0/24 maxlen: 24
157.255.74.0/24 maxlen: 24
157.255.77.0/24 maxlen: 24
157.255.78.0/24 maxlen: 24
157.255.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 03:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c2:26:9d:24:85:ff:1c:1d:36:f9:a0:6e:45:b9:ad:3e:84:d9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jul 9 07:12:03 2026 GMT
Not After : Jul 8 07:17:03 2027 GMT
Subject: CN=99D00116AF37EDBC5EA7DA57FF1DC09110BA9455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:a8:e3:b4:ba:ee:c6:84:67:5f:38:1a:15:
c7:1e:59:9f:94:74:0a:58:d5:f6:02:9e:3a:39:7e:
30:a2:dd:82:44:1a:4a:3f:eb:a3:a3:2d:39:74:33:
51:4e:62:c4:4c:55:17:15:85:c5:10:48:f9:68:44:
dd:3c:74:db:72:0b:65:f7:f0:75:bf:fa:24:ba:e7:
23:ec:88:d9:7a:2c:46:d4:a1:15:85:81:52:15:20:
57:61:a1:92:86:50:24:d4:44:ab:55:27:4d:80:b6:
0a:09:7a:23:0b:c7:de:cb:e2:29:6a:95:28:3a:4c:
a8:83:e0:f2:4d:54:0a:e8:bc:6d:e5:10:36:06:64:
b4:b5:c0:84:e3:7f:05:d8:60:f8:0a:2f:5c:b7:7f:
a6:72:27:8c:45:11:6a:8e:64:82:8a:54:17:3c:f0:
1a:74:77:5d:46:28:a2:f2:41:06:07:ab:26:89:aa:
c3:8e:43:01:d7:68:f7:01:9c:17:25:f9:25:83:67:
a6:b3:a1:6e:c1:b7:81:a3:cb:3c:1c:c6:62:fe:6d:
ac:1d:cf:71:a6:90:51:93:8b:94:21:e9:ce:93:e1:
cb:a4:bc:6b:e3:d9:e7:15:fc:ab:2d:46:5a:d6:d5:
f9:5a:20:c2:15:52:59:b3:44:37:47:1f:09:be:59:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D0:01:16:AF:37:ED:BC:5E:A7:DA:57:FF:1D:C0:91:10:BA:94:55
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS136958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.122.208.0/21
157.122.224.0/21
157.148.1.0-157.148.8.255
157.148.11.0-157.148.108.255
157.148.110.0-157.148.127.255
157.255.0.0-157.255.23.255
157.255.27.0-157.255.30.255
157.255.32.0-157.255.79.255
Signature Algorithm: sha256WithRSAEncryption
7a:9a:6e:86:1d:bb:eb:7a:dc:45:30:4e:81:5b:84:b3:d3:18:
eb:77:d1:de:47:a2:13:15:7a:37:ad:93:d9:b5:70:bb:1d:23:
05:a4:af:d1:ca:14:d7:f3:5c:7f:e7:f6:91:05:cb:ac:66:52:
4e:00:ea:a5:f0:92:ba:3e:72:53:bf:a8:e3:25:43:dd:06:b9:
8d:d0:c3:64:a6:36:e3:cb:40:1c:99:f4:ae:ce:cd:b3:11:c4:
a2:de:de:81:7b:39:0d:b2:0f:3b:15:1e:71:70:84:65:36:2a:
f4:8d:2b:1c:37:ec:71:0c:20:00:23:c3:7f:16:93:11:71:05:
e3:a8:7d:55:bc:bb:c1:dc:b1:2b:41:73:ce:e7:96:84:45:9a:
39:9d:00:fb:ee:2e:b8:d0:6a:4d:5e:79:23:6c:de:bc:c2:e5:
d1:65:62:b3:c3:67:a8:21:19:cb:ed:d8:e3:1a:34:d3:04:04:
b8:53:f5:50:35:9a:a3:33:39:3f:ea:7b:02:97:c1:67:09:a7:
5e:17:7b:89:30:e8:f4:ff:02:34:29:65:97:13:98:62:c1:3c:
f9:c8:90:91:60:de:2e:b2:b7:f4:f0:26:8c:60:19:9c:a6:8d:
87:a6:4f:16:0d:88:fa:2f:ca:b3:94:79:3a:3c:a5:87:d7:26:
06:f4:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:13 2026 by rpki-client