Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
File: AS138421.roa (raw, json)
Hash identifier: pH8WllyihonWVPB/Lw3h0XiyhGP+W+zLeq7xGHriEOA=
Subject key identifier: BB:9F:BA:FC:7A:41:AF:52:9C:B6:A8:FC:3E:59:70:A8:44:97:BD:79
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 5DF8E9DEE552CB6ED108648F8EC63EE7E977842C
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
Signing time: Tue 27 Oct 2026 08:05:29 +0000
ROA not before: Tue 27 Oct 2026 08:00:29 +0000
ROA not after: Tue 26 Oct 2027 08:05:29 +0000
asID: 138421
IP address blocks: 58.246.165.0/24 maxlen: 24
58.246.207.0/24 maxlen: 24
58.247.254.0/23 maxlen: 23
112.64.32.0/24 maxlen: 24
112.64.33.0/24 maxlen: 24
112.64.34.0/24 maxlen: 24
112.64.35.0/24 maxlen: 24
112.64.45.0/24 maxlen: 24
112.64.64.0/24 maxlen: 24
112.64.112.0/22 maxlen: 22
112.64.212.0/22 maxlen: 22
112.65.64.0/24 maxlen: 24
112.65.66.0/24 maxlen: 24
112.65.72.0/24 maxlen: 24
112.65.73.0/24 maxlen: 24
112.65.74.0/24 maxlen: 24
112.65.75.0/24 maxlen: 24
112.65.94.0/24 maxlen: 24
112.65.112.0/24 maxlen: 24
112.65.114.0/24 maxlen: 24
112.65.116.0/23 maxlen: 23
112.65.116.0/24 maxlen: 24
112.65.117.0/24 maxlen: 24
112.65.118.0/24 maxlen: 24
112.65.216.0/24 maxlen: 24
112.65.217.0/24 maxlen: 24
112.65.219.0/24 maxlen: 24
112.65.220.0/24 maxlen: 24
112.65.222.0/23 maxlen: 23
112.65.222.0/24 maxlen: 24
112.65.223.0/24 maxlen: 24
112.65.224.0/23 maxlen: 23
112.65.226.0/24 maxlen: 24
112.65.227.0/24 maxlen: 24
112.65.228.0/22 maxlen: 22
112.65.232.0/23 maxlen: 23
112.65.235.0/24 maxlen: 24
112.65.237.0/24 maxlen: 24
112.65.238.0/24 maxlen: 24
112.65.240.0/20 maxlen: 20
210.22.165.0/24 maxlen: 24
210.51.20.0/22 maxlen: 22
210.51.25.0/24 maxlen: 24
210.51.26.0/24 maxlen: 24
210.51.27.0/24 maxlen: 24
210.51.29.0/24 maxlen: 24
210.51.32.0/24 maxlen: 24
210.51.34.0/23 maxlen: 23
210.51.36.0/22 maxlen: 22
210.51.36.0/24 maxlen: 24
210.51.40.0/24 maxlen: 24
210.51.41.0/24 maxlen: 24
210.51.45.0/24 maxlen: 24
210.51.46.0/24 maxlen: 24
210.51.47.0/24 maxlen: 24
210.51.48.0/22 maxlen: 22
210.51.52.0/24 maxlen: 24
210.51.53.0/24 maxlen: 24
210.51.54.0/23 maxlen: 23
210.51.56.0/23 maxlen: 23
210.51.59.0/24 maxlen: 24
210.51.61.0/24 maxlen: 24
210.51.62.0/23 maxlen: 23
210.52.212.0/24 maxlen: 24
223.167.85.0/24 maxlen: 24
223.167.106.0/24 maxlen: 24
223.167.107.0/24 maxlen: 24
223.167.108.0/24 maxlen: 24
223.167.109.0/24 maxlen: 24
223.167.110.0/24 maxlen: 24
223.167.111.0/24 maxlen: 24
2408:8000:9fff::/48 maxlen: 48
2408:80f1::/44 maxlen: 44
2408:80f1:40::/44 maxlen: 44
2408:80f1:70::/44 maxlen: 44
2408:80f1:110::/44 maxlen: 44
2408:80f1:120::/44 maxlen: 44
2408:80f1:160::/44 maxlen: 44
2408:80f1:170::/44 maxlen: 44
2408:80f1:1c0::/44 maxlen: 44
2408:80f1:1d0::/44 maxlen: 44
2408:80f1:1e0::/44 maxlen: 44
2408:80f1:220::/44 maxlen: 44
2408:80f1:240::/44 maxlen: 44
2408:870c::/44 maxlen: 44
2408:870c:20::/44 maxlen: 44
2408:870c:d0::/44 maxlen: 44
2408:870c:e0::/44 maxlen: 44
2408:870c:f0::/44 maxlen: 44
2408:870c:150::/44 maxlen: 44
2408:870c:2020::/44 maxlen: 44
2408:870c:2030::/44 maxlen: 44
2408:870c:2040::/44 maxlen: 44
2408:870c:2050::/44 maxlen: 44
2408:870c:2070::/44 maxlen: 44
2408:870c:2080::/44 maxlen: 44
2408:870c:2090::/44 maxlen: 44
2408:870c:20a0::/44 maxlen: 44
2408:870c:20b0::/44 maxlen: 44
2408:870c:20c0::/44 maxlen: 44
2408:870c:20d0::/44 maxlen: 44
2408:870c:3000::/44 maxlen: 44
2408:870c:3010::/44 maxlen: 44
2408:870c:3020::/44 maxlen: 44
2408:870c:3030::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 17:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f8:e9:de:e5:52:cb:6e:d1:08:64:8f:8e:c6:3e:e7:e9:77:84:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Oct 27 08:00:29 2026 GMT
Not After : Oct 26 08:05:29 2027 GMT
Subject: CN=BB9FBAFC7A41AF529CB6A8FC3E5970A84497BD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:d3:37:42:86:8d:c0:5e:26:28:e2:83:4b:
4f:fc:09:c9:4a:ef:78:60:41:c7:fb:78:4a:72:40:
f9:5b:4e:2e:df:68:ab:52:fb:53:1a:93:80:87:36:
ef:59:2d:5c:a9:76:7f:89:a3:5f:2a:cb:58:97:fc:
50:ce:ed:17:8a:a8:02:42:23:74:e5:4c:af:de:5c:
af:2c:30:b7:0c:ba:a1:ac:35:e6:47:ce:cd:6d:a8:
df:83:4b:17:fc:93:58:69:2e:a3:5b:4a:db:2c:de:
43:bd:f6:87:4c:be:dd:63:17:a5:97:93:33:9c:ba:
2d:83:89:16:8e:46:f7:7c:47:fc:e5:d3:b8:05:c2:
a9:61:e5:eb:4a:5b:2b:eb:3f:17:54:76:07:ae:39:
da:53:cb:63:96:9a:c7:91:a4:4b:64:60:34:e4:9d:
37:9b:ae:77:a9:1b:f1:15:53:29:82:36:10:c3:aa:
d9:5a:38:9e:02:17:5d:c6:ed:34:a1:63:f5:ca:90:
3c:13:48:1a:eb:86:20:e7:88:4e:71:5e:95:f4:ab:
c2:40:e2:c7:8d:e3:a4:0e:8c:72:14:d1:16:ed:03:
8e:fd:b2:7c:cf:3a:33:0a:11:8e:09:68:aa:24:08:
3a:3e:c7:d8:ee:ae:1d:40:cb:33:c2:36:b4:21:81:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:BA:FC:7A:41:AF:52:9C:B6:A8:FC:3E:59:70:A8:44:97:BD:79
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.246.165.0/24
58.246.207.0/24
58.247.254.0/23
112.64.32.0/22
112.64.45.0/24
112.64.64.0/24
112.64.112.0/22
112.64.212.0/22
112.65.64.0/24
112.65.66.0/24
112.65.72.0/22
112.65.94.0/24
112.65.112.0/24
112.65.114.0/24
112.65.116.0-112.65.118.255
112.65.216.0/23
112.65.219.0-112.65.220.255
112.65.222.0-112.65.233.255
112.65.235.0/24
112.65.237.0-112.65.238.255
112.65.240.0/20
210.22.165.0/24
210.51.20.0/22
210.51.25.0-210.51.27.255
210.51.29.0/24
210.51.32.0/24
210.51.34.0-210.51.41.255
210.51.45.0-210.51.57.255
210.51.59.0/24
210.51.61.0-210.51.63.255
210.52.212.0/24
223.167.85.0/24
223.167.106.0-223.167.111.255
IPv6:
2408:8000:9fff::/48
2408:80f1::/44
2408:80f1:40::/44
2408:80f1:70::/44
2408:80f1:110::-2408:80f1:12f:ffff:ffff:ffff:ffff:ffff
2408:80f1:160::/43
2408:80f1:1c0::-2408:80f1:1ef:ffff:ffff:ffff:ffff:ffff
2408:80f1:220::/44
2408:80f1:240::/44
2408:870c::/44
2408:870c:20::/44
2408:870c:d0::-2408:870c:ff:ffff:ffff:ffff:ffff:ffff
2408:870c:150::/44
2408:870c:2020::-2408:870c:205f:ffff:ffff:ffff:ffff:ffff
2408:870c:2070::-2408:870c:20df:ffff:ffff:ffff:ffff:ffff
2408:870c:3000::/42
Signature Algorithm: sha256WithRSAEncryption
2b:47:cc:96:e4:35:89:03:7f:37:a0:e7:89:8e:42:31:ae:d8:
91:dc:1d:e9:70:ed:e8:8d:a0:14:72:10:f3:ed:6a:c9:ca:8c:
46:d1:71:b3:fc:50:51:67:06:19:42:0c:20:e9:e3:32:8c:2d:
4c:23:43:6c:48:1a:e1:13:2e:4f:54:f5:68:d7:a9:06:3b:7d:
9d:2e:55:ce:4a:01:fe:a7:e9:a4:cb:c6:a1:62:f0:2b:79:6f:
d2:a6:b5:45:ff:32:74:b1:df:81:64:0e:f1:22:89:41:14:06:
38:21:eb:64:5e:c3:01:32:fb:f5:60:ed:40:b9:9a:22:43:81:
bf:70:32:92:be:2a:7e:a9:e8:0a:fe:f8:3f:5b:ac:78:aa:68:
a6:4b:d1:7f:85:96:21:6a:7f:23:18:fd:4e:2d:c3:be:4d:e4:
a0:18:41:fb:fa:d3:55:3e:90:bc:fa:54:7c:76:04:6d:53:e1:
8a:4d:cc:e3:a3:73:8d:56:ec:66:1c:78:ad:c1:98:11:d4:5c:
de:65:57:21:e1:5d:f8:57:a9:a2:f9:ac:1b:0d:03:4a:06:70:
8d:4d:8c:af:4c:28:8f:51:51:24:89:54:e2:a3:c5:36:24:a6:
79:76:fe:bd:62:b3:d9:bb:53:24:08:06:85:fa:b7:68:2c:00:
bb:9c:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:18 2026 by rpki-client