Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
File: AS136959.roa (raw, json)
Hash identifier: SJgfrPn8jksFP1I51Y5d0hMPvlu/fL+n21kkpFVF4fI=
Subject key identifier: 11:3A:C4:C1:5F:7C:9D:7A:0D:F4:D8:BC:B7:D0:1B:7E:AE:8D:48:C7
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 388E4C7037A550733EF80CA3967EAFDEDA535E30
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
Signing time: Fri 07 Aug 2026 01:25:03 +0000
ROA not before: Fri 07 Aug 2026 01:20:03 +0000
ROA not after: Fri 06 Aug 2027 01:25:03 +0000
asID: 136959
IP address blocks: 27.36.113.0/24 maxlen: 24
27.36.118.0/23 maxlen: 23
27.36.118.0/24 maxlen: 24
27.36.119.0/24 maxlen: 24
27.36.120.0/22 maxlen: 22
27.36.120.0/24 maxlen: 24
27.36.121.0/24 maxlen: 24
27.36.123.0/24 maxlen: 24
27.36.124.0/22 maxlen: 22
27.36.124.0/24 maxlen: 24
27.36.125.0/24 maxlen: 24
27.36.126.0/24 maxlen: 24
27.36.127.0/24 maxlen: 24
27.36.224.0/22 maxlen: 22
27.45.150.0/24 maxlen: 24
27.45.151.0/24 maxlen: 24
27.45.160.0/24 maxlen: 24
27.45.161.0/24 maxlen: 24
27.45.164.0/24 maxlen: 24
27.45.165.0/24 maxlen: 24
27.45.166.0/24 maxlen: 24
27.45.167.0/24 maxlen: 24
58.255.172.0/22 maxlen: 22
58.255.175.0/24 maxlen: 24
112.90.152.0/22 maxlen: 22
112.90.152.0/24 maxlen: 24
112.90.153.0/24 maxlen: 24
112.90.154.0/24 maxlen: 24
112.90.155.0/24 maxlen: 24
112.90.156.0/22 maxlen: 22
112.90.156.0/24 maxlen: 24
112.90.157.0/24 maxlen: 24
112.93.104.0/21 maxlen: 21
112.93.104.0/24 maxlen: 24
112.93.105.0/24 maxlen: 24
112.93.106.0/24 maxlen: 24
112.93.107.0/24 maxlen: 24
112.93.108.0/24 maxlen: 24
112.93.109.0/24 maxlen: 24
112.93.110.0/24 maxlen: 24
112.93.111.0/24 maxlen: 24
112.93.112.0/22 maxlen: 22
112.93.112.0/24 maxlen: 24
112.93.114.0/24 maxlen: 24
112.93.115.0/24 maxlen: 24
112.96.82.0/24 maxlen: 24
112.96.83.0/24 maxlen: 24
120.80.84.0/24 maxlen: 24
120.80.85.0/24 maxlen: 24
120.83.13.0/24 maxlen: 24
120.83.144.0/23 maxlen: 23
120.83.144.0/24 maxlen: 24
120.83.146.0/23 maxlen: 23
120.83.146.0/24 maxlen: 24
120.83.180.0/23 maxlen: 23
120.83.182.0/23 maxlen: 23
120.83.182.0/24 maxlen: 24
120.83.183.0/24 maxlen: 24
122.13.168.0/21 maxlen: 21
122.13.168.0/24 maxlen: 24
122.13.170.0/24 maxlen: 24
122.13.171.0/24 maxlen: 24
122.13.172.0/24 maxlen: 24
122.13.173.0/24 maxlen: 24
122.13.175.0/24 maxlen: 24
122.13.254.0/24 maxlen: 24
163.142.152.0/21 maxlen: 21
163.142.152.0/24 maxlen: 24
163.142.153.0/24 maxlen: 24
163.142.154.0/24 maxlen: 24
163.142.155.0/24 maxlen: 24
163.142.156.0/24 maxlen: 24
163.142.157.0/24 maxlen: 24
163.142.158.0/24 maxlen: 24
163.142.159.0/24 maxlen: 24
163.177.152.0/21 maxlen: 21
163.177.152.0/23 maxlen: 23
163.177.153.0/24 maxlen: 24
163.177.154.0/24 maxlen: 24
163.177.155.0/24 maxlen: 24
163.177.156.0/24 maxlen: 24
163.177.157.0/24 maxlen: 24
163.177.158.0/24 maxlen: 24
163.177.159.0/24 maxlen: 24
221.4.146.0/24 maxlen: 24
221.4.154.0/24 maxlen: 24
221.4.159.0/24 maxlen: 24
221.5.35.0/24 maxlen: 24
221.5.96.0/23 maxlen: 23
221.5.96.0/24 maxlen: 24
221.5.97.0/24 maxlen: 24
221.5.102.0/24 maxlen: 24
221.5.103.0/24 maxlen: 24
221.5.107.0/24 maxlen: 24
2408:8459:4c80::/44 maxlen: 44
2408:8459:4c90::/44 maxlen: 44
2408:8459:4ca0::/44 maxlen: 44
2408:8459:4cb0::/44 maxlen: 44
2408:8459:4e80::/44 maxlen: 44
2408:8459:4e90::/44 maxlen: 44
2408:8459:4ea0::/44 maxlen: 44
2408:8459:4eb0::/44 maxlen: 44
2408:8459:5080::/44 maxlen: 44
2408:8459:5090::/44 maxlen: 44
2408:8459:50a0::/44 maxlen: 44
2408:8459:50b0::/44 maxlen: 44
2408:8459:5280::/44 maxlen: 44
2408:8459:5290::/44 maxlen: 44
2408:8459:52a0::/44 maxlen: 44
2408:8459:52b0::/44 maxlen: 44
2408:8459:5480::/44 maxlen: 44
2408:8459:5490::/44 maxlen: 44
2408:8459:54a0::/44 maxlen: 44
2408:8459:54b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 03:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8e:4c:70:37:a5:50:73:3e:f8:0c:a3:96:7e:af:de:da:53:5e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Aug 7 01:20:03 2026 GMT
Not After : Aug 6 01:25:03 2027 GMT
Subject: CN=113AC4C15F7C9D7A0DF4D8BCB7D01B7EAE8D48C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:d3:c4:55:45:2a:14:6a:1a:22:bf:ac:55:
14:1b:67:7d:6d:06:7e:97:8d:48:b2:69:1e:ce:96:
c7:e5:b7:42:42:4c:45:e2:6c:48:b0:4f:ee:90:f1:
18:33:79:43:ca:71:d2:72:8e:bb:90:3d:27:00:6a:
d4:d3:bf:b1:87:5c:7d:f7:82:1f:4a:66:79:3e:c3:
80:a5:ca:d4:e1:dd:8e:0a:ef:00:34:de:04:ea:1a:
3c:3a:08:98:13:f0:0d:a1:42:45:64:2b:d1:e9:48:
01:5e:f3:61:a2:92:eb:c5:24:b7:ca:e7:cd:12:1a:
f6:58:99:a5:38:2a:8b:67:bc:39:c3:5d:61:68:61:
c9:2d:80:0c:a7:54:cf:3e:b4:81:d2:db:e7:20:8d:
05:bd:e0:be:cd:a3:f4:23:eb:ad:aa:54:51:66:a2:
ec:dc:68:f0:db:1c:88:d3:14:cb:21:66:69:a1:e3:
bf:cf:79:de:de:ac:47:e9:de:35:73:e8:a2:07:20:
f6:31:17:bb:0e:aa:05:bf:8a:df:5a:be:f8:33:b1:
b7:fe:c0:ef:12:8b:e5:49:03:37:39:3d:de:dc:d7:
51:26:40:8c:36:54:7d:04:0b:14:a7:ae:67:b6:11:
e3:75:aa:ea:c1:e4:9b:85:9c:e3:bb:31:d0:69:43:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:C4:C1:5F:7C:9D:7A:0D:F4:D8:BC:B7:D0:1B:7E:AE:8D:48:C7
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS136959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.36.113.0/24
27.36.118.0-27.36.127.255
27.36.224.0/22
27.45.150.0/23
27.45.160.0/23
27.45.164.0/22
58.255.172.0/22
112.90.152.0/21
112.93.104.0-112.93.115.255
112.96.82.0/23
120.80.84.0/23
120.83.13.0/24
120.83.144.0/22
120.83.180.0/22
122.13.168.0/21
122.13.254.0/24
163.142.152.0/21
163.177.152.0/21
221.4.146.0/24
221.4.154.0/24
221.4.159.0/24
221.5.35.0/24
221.5.96.0/23
221.5.102.0/23
221.5.107.0/24
IPv6:
2408:8459:4c80::/42
2408:8459:4e80::/42
2408:8459:5080::/42
2408:8459:5280::/42
2408:8459:5480::/42
Signature Algorithm: sha256WithRSAEncryption
26:16:ad:27:61:28:3d:d1:01:98:5c:7a:9e:4b:92:37:e8:a9:
40:15:f1:f5:08:7a:67:dc:c6:08:29:0f:9a:45:6d:ba:7b:b6:
8d:3c:0e:f9:35:01:7a:5d:e9:1f:e2:bb:19:7c:e5:f6:54:70:
30:3a:23:51:45:a2:3b:1a:1f:d3:26:5a:23:9d:8b:fa:88:23:
84:72:ed:9a:7a:4d:04:ad:49:b8:dc:97:3b:9d:59:58:15:21:
d2:cd:5b:49:43:f4:8b:f3:25:ff:a8:e5:97:f2:2e:a6:b0:f1:
65:a7:e1:e3:7b:5e:c4:0a:5e:7b:2f:32:23:09:bd:84:ea:09:
f3:e3:8b:7d:26:6c:ea:79:34:5d:4c:14:97:c0:15:89:84:cc:
52:54:a6:eb:49:5d:3f:2e:0e:82:4b:5b:0e:fb:52:b2:a9:ef:
37:68:b5:d0:c0:2e:3d:ad:86:6a:94:bb:7a:19:05:d8:06:4e:
09:f9:15:45:53:87:a8:70:63:59:73:0a:85:99:2d:71:9d:eb:
97:60:90:5b:f6:bc:92:2d:10:61:f1:04:c7:de:3d:e9:33:85:
f4:76:14:78:a6:5e:6a:20:53:63:b9:97:ec:29:0a:6b:a0:de:
43:48:a2:e1:20:24:26:67:ea:53:e8:1c:39:2c:f4:b2:21:fc:
46:87:96:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:53:10 2026 by rpki-client