Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
File: AS138421.roa (raw, json)
Hash identifier: 1o10Fd1A6Kmt2g1S18ZrzKVCdNBBE7G8kAbzUNhR3T4=
Subject key identifier: A9:0F:D6:CA:BC:11:E4:CC:82:2B:5D:F9:B9:F2:B3:F6:40:74:62:44
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 1DE1C4B461AC5775C9B2935A5069CFF0DA3AD732
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
Signing time: Thu 06 Aug 2026 05:11:07 +0000
ROA not before: Thu 06 Aug 2026 05:06:07 +0000
ROA not after: Thu 05 Aug 2027 05:11:07 +0000
asID: 138421
IP address blocks: 58.246.165.0/24 maxlen: 24
58.246.207.0/24 maxlen: 24
58.247.254.0/23 maxlen: 23
112.64.32.0/24 maxlen: 24
112.64.33.0/24 maxlen: 24
112.64.34.0/24 maxlen: 24
112.64.35.0/24 maxlen: 24
112.64.45.0/24 maxlen: 24
112.64.64.0/24 maxlen: 24
112.64.112.0/22 maxlen: 22
112.64.212.0/22 maxlen: 22
112.65.64.0/24 maxlen: 24
112.65.66.0/24 maxlen: 24
112.65.72.0/24 maxlen: 24
112.65.73.0/24 maxlen: 24
112.65.74.0/24 maxlen: 24
112.65.75.0/24 maxlen: 24
112.65.94.0/24 maxlen: 24
112.65.112.0/24 maxlen: 24
112.65.116.0/23 maxlen: 23
112.65.116.0/24 maxlen: 24
112.65.117.0/24 maxlen: 24
112.65.216.0/24 maxlen: 24
112.65.217.0/24 maxlen: 24
112.65.219.0/24 maxlen: 24
112.65.220.0/24 maxlen: 24
112.65.222.0/23 maxlen: 23
112.65.222.0/24 maxlen: 24
112.65.223.0/24 maxlen: 24
112.65.224.0/23 maxlen: 23
112.65.226.0/24 maxlen: 24
112.65.227.0/24 maxlen: 24
112.65.228.0/22 maxlen: 22
112.65.232.0/23 maxlen: 23
112.65.235.0/24 maxlen: 24
112.65.237.0/24 maxlen: 24
112.65.238.0/24 maxlen: 24
112.65.240.0/20 maxlen: 20
210.22.165.0/24 maxlen: 24
210.51.20.0/22 maxlen: 22
210.51.25.0/24 maxlen: 24
210.51.26.0/24 maxlen: 24
210.51.27.0/24 maxlen: 24
210.51.29.0/24 maxlen: 24
210.51.32.0/24 maxlen: 24
210.51.34.0/23 maxlen: 23
210.51.36.0/22 maxlen: 22
210.51.36.0/24 maxlen: 24
210.51.40.0/24 maxlen: 24
210.51.41.0/24 maxlen: 24
210.51.45.0/24 maxlen: 24
210.51.46.0/24 maxlen: 24
210.51.47.0/24 maxlen: 24
210.51.48.0/22 maxlen: 22
210.51.52.0/24 maxlen: 24
210.51.53.0/24 maxlen: 24
210.51.54.0/23 maxlen: 23
210.51.56.0/23 maxlen: 23
210.51.59.0/24 maxlen: 24
210.51.61.0/24 maxlen: 24
210.51.62.0/23 maxlen: 23
210.52.212.0/24 maxlen: 24
223.167.85.0/24 maxlen: 24
223.167.106.0/24 maxlen: 24
223.167.107.0/24 maxlen: 24
223.167.108.0/24 maxlen: 24
223.167.109.0/24 maxlen: 24
223.167.110.0/24 maxlen: 24
223.167.111.0/24 maxlen: 24
2408:8000:9fff::/48 maxlen: 48
2408:80f1::/44 maxlen: 44
2408:80f1:40::/44 maxlen: 44
2408:80f1:70::/44 maxlen: 44
2408:80f1:110::/44 maxlen: 44
2408:80f1:120::/44 maxlen: 44
2408:80f1:160::/44 maxlen: 44
2408:80f1:170::/44 maxlen: 44
2408:80f1:1c0::/44 maxlen: 44
2408:80f1:1d0::/44 maxlen: 44
2408:80f1:1e0::/44 maxlen: 44
2408:80f1:220::/44 maxlen: 44
2408:80f1:240::/44 maxlen: 44
2408:870c::/44 maxlen: 44
2408:870c:20::/44 maxlen: 44
2408:870c:d0::/44 maxlen: 44
2408:870c:e0::/44 maxlen: 44
2408:870c:f0::/44 maxlen: 44
2408:870c:150::/44 maxlen: 44
2408:870c:2020::/44 maxlen: 44
2408:870c:2030::/44 maxlen: 44
2408:870c:2040::/44 maxlen: 44
2408:870c:2050::/44 maxlen: 44
2408:870c:2070::/44 maxlen: 44
2408:870c:2080::/44 maxlen: 44
2408:870c:2090::/44 maxlen: 44
2408:870c:20a0::/44 maxlen: 44
2408:870c:20b0::/44 maxlen: 44
2408:870c:20c0::/44 maxlen: 44
2408:870c:20d0::/44 maxlen: 44
2408:870c:3000::/44 maxlen: 44
2408:870c:3010::/44 maxlen: 44
2408:870c:3020::/44 maxlen: 44
2408:870c:3030::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 23:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e1:c4:b4:61:ac:57:75:c9:b2:93:5a:50:69:cf:f0:da:3a:d7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Aug 6 05:06:07 2026 GMT
Not After : Aug 5 05:11:07 2027 GMT
Subject: CN=A90FD6CABC11E4CC822B5DF9B9F2B3F640746244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:f3:7f:b0:fa:5b:0e:7f:56:9e:88:a2:fd:
0c:4c:da:6a:b8:be:68:f7:be:6a:23:1d:6b:70:f3:
6b:69:af:2e:d3:88:10:39:75:25:43:84:65:82:02:
0d:08:3a:6f:7d:2c:2b:e6:93:3f:f2:22:2e:48:13:
14:cc:ea:a4:c3:77:83:4c:4b:9b:2b:e2:e5:7f:87:
c3:87:15:85:d2:ea:a3:6c:f7:71:5e:bc:42:6f:81:
f2:67:79:67:6e:ca:cc:b2:68:9b:68:55:2b:7a:59:
21:ef:d2:df:c7:89:5a:c2:f2:37:38:7a:d2:65:32:
ac:f4:13:b7:82:05:88:58:38:ac:c7:ef:69:36:3d:
cb:70:1c:3b:76:74:24:99:8a:ba:fb:ae:02:54:84:
42:88:70:e1:7a:06:e2:82:e3:84:18:76:d6:c2:a3:
12:21:e4:2a:83:1f:88:72:f2:72:da:45:71:c8:64:
2c:d9:3b:9f:45:12:5c:a4:61:8d:a5:da:cf:db:c2:
bb:ac:45:dd:09:cb:92:32:05:e2:b3:75:7b:0f:de:
80:0e:bc:56:b5:8d:3a:69:f0:92:4c:2f:1f:25:97:
44:10:3f:88:e6:17:24:da:51:e7:25:de:02:e8:c3:
47:24:34:2e:f1:9e:4d:16:0c:d9:a7:06:42:3f:78:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:D6:CA:BC:11:E4:CC:82:2B:5D:F9:B9:F2:B3:F6:40:74:62:44
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS138421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.246.165.0/24
58.246.207.0/24
58.247.254.0/23
112.64.32.0/22
112.64.45.0/24
112.64.64.0/24
112.64.112.0/22
112.64.212.0/22
112.65.64.0/24
112.65.66.0/24
112.65.72.0/22
112.65.94.0/24
112.65.112.0/24
112.65.116.0/23
112.65.216.0/23
112.65.219.0-112.65.220.255
112.65.222.0-112.65.233.255
112.65.235.0/24
112.65.237.0-112.65.238.255
112.65.240.0/20
210.22.165.0/24
210.51.20.0/22
210.51.25.0-210.51.27.255
210.51.29.0/24
210.51.32.0/24
210.51.34.0-210.51.41.255
210.51.45.0-210.51.57.255
210.51.59.0/24
210.51.61.0-210.51.63.255
210.52.212.0/24
223.167.85.0/24
223.167.106.0-223.167.111.255
IPv6:
2408:8000:9fff::/48
2408:80f1::/44
2408:80f1:40::/44
2408:80f1:70::/44
2408:80f1:110::-2408:80f1:12f:ffff:ffff:ffff:ffff:ffff
2408:80f1:160::/43
2408:80f1:1c0::-2408:80f1:1ef:ffff:ffff:ffff:ffff:ffff
2408:80f1:220::/44
2408:80f1:240::/44
2408:870c::/44
2408:870c:20::/44
2408:870c:d0::-2408:870c:ff:ffff:ffff:ffff:ffff:ffff
2408:870c:150::/44
2408:870c:2020::-2408:870c:205f:ffff:ffff:ffff:ffff:ffff
2408:870c:2070::-2408:870c:20df:ffff:ffff:ffff:ffff:ffff
2408:870c:3000::/42
Signature Algorithm: sha256WithRSAEncryption
89:cb:9a:6c:ce:ca:be:c4:be:55:c0:a3:8c:ef:4f:10:6f:c4:
6c:31:3a:79:ca:f8:d9:bc:ec:67:c1:33:01:2a:f4:4e:d7:da:
aa:b3:40:63:65:24:7a:b5:39:ec:8e:f9:ba:bd:f4:45:81:b5:
07:61:1b:e8:9a:63:2a:3f:6d:b2:7f:a1:84:62:04:40:0d:18:
86:4f:f1:64:73:e0:43:c7:59:6a:91:a7:30:f8:cd:52:64:02:
83:12:4f:c6:c9:d1:b4:19:2e:65:42:3f:47:4b:35:51:81:d4:
65:80:17:e8:4a:fa:bc:7e:ae:13:92:29:30:a8:d8:de:e3:c5:
69:ad:dc:ed:f3:91:27:24:ca:9f:02:1c:a8:4f:67:95:6b:41:
0a:db:20:50:84:b5:4b:bb:2c:16:6e:73:19:ff:4a:6e:25:5e:
e7:6d:e8:78:81:b5:b2:2c:28:ff:62:33:af:24:c7:5d:0a:89:
cc:c9:89:1e:24:78:3f:ff:c8:34:67:92:49:45:02:26:92:ea:
e6:83:b4:0b:60:dc:9d:72:1c:99:96:2a:a7:76:06:74:80:0e:
f5:e7:dc:0b:7c:80:92:48:f7:70:8f:1f:ed:5a:74:9c:8e:c6:
f8:b2:59:94:58:ce:73:e4:8d:a2:4b:92:47:54:58:28:63:2f:
42:f5:6b:03
-----BEGIN CERTIFICATE-----
MIIGxTCCBa2gAwIBAgIUHeHEtGGsV3XJspNaUGnP8No61zIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz
Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDgwNjA1MDYwN1oX
DTI3MDgwNTA1MTEwN1owMzExMC8GA1UEAxMoQTkwRkQ2Q0FCQzExRTRDQzgyMkI1
REY5QjlGMkIzRjY0MDc0NjI0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANuL83+w+lsOf1aeiKL9DEzaari+aPe+aiMda3Dza2mvLtOIEDl1JUOEZYIC
DQg6b30sK+aTP/IiLkgTFMzqpMN3g0xLmyvi5X+Hw4cVhdLqo2z3cV68Qm+B8md5
Z27KzLJom2hVK3pZIe/S38eJWsLyNzh60mUyrPQTt4IFiFg4rMfvaTY9y3AcO3Z0
JJmKuvuuAlSEQohw4XoG4oLjhBh21sKjEiHkKoMfiHLyctpFcchkLNk7n0USXKRh
jaXaz9vCu6xF3QnLkjIF4rN1ew/egA68VrWNOmnwkkwvHyWXRBA/iOYXJNpR5yXe
AujDRyQ0LvGeTRYM2acGQj94qiECAwEAAaOCA7gwggO0MB0GA1UdDgQWBBSpD9bK
vBHkzIIrXfm58rP2QHRiRDAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z
JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF
NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY
eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8xL0FTMTM4NDIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIB8QYIKwYBBQUHAQcBAf8EggHgMIIB3DCCAQgEAgABMIIBAAMEADr2pQMEADr2
zwMEATr3/gMEAnBAIAMEAHBALQMEAHBAQAMEAnBAcAMEAnBA1AMEAHBBQAMEAHBB
QgMEAnBBSAMEAHBBXgMEAHBBcAMEAXBBdAMEAXBB2DAMAwQAcEHbAwQAcEHcMAwD
BAFwQd4DBAFwQegDBABwQeswDAMEAHBB7QMEAHBB7gMEBHBB8AMEANIWpQMEAtIz
FDAMAwQA0jMZAwQC0jMYAwQA0jMdAwQA0jMgMAwDBAHSMyIDBAHSMygwDAMEANIz
LQMEAdIzOAMEANIzOzAMAwQA0jM9AwQG0jMAAwQA0jTUAwQA36dVMAwDBAHfp2oD
BATfp2Awgc0EAgACMIHGAwcAJAiAAJ//AwcEJAiA8QAAAwcEJAiA8QBAAwcEJAiA
8QBwMBIDBwQkCIDxARADBwQkCIDxASADBwUkCIDxAWAwEgMHBiQIgPEBwAMHBCQI
gPEB4AMHBCQIgPECIAMHBCQIgPECQAMHBCQIhwwAAAMHBCQIhwwAIDARAwcEJAiH
DADQAwYAJAiHDAADBwQkCIcMAVAwEgMHBSQIhwwgIAMHBSQIhwwgQDASAwcEJAiH
DCBwAwcFJAiHDCDAAwcGJAiHDDAAMA0GCSqGSIb3DQEBCwUAA4IBAQCJy5pszsq+
xL5VwKOM708Qb8RsMTp5yvjZvOxnwTMBKvRO19qqs0BjZSR6tTnsjvm6vfRFgbUH
YRvommMqP22yf6GEYgRADRiGT/Fkc+BDx1lqkacw+M1SZAKDEk/GydG0GS5lQj9H
SzVRgdRlgBfoSvq8fq4TkikwqNje48Vprdzt85EnJMqfAhyoT2eVa0EK2yBQhLVL
uywWbnMZ/0puJV7nbeh4gbWyLCj/YjOvJMddConMyYkeJHg//8g0Z5JJRQImkurm
g7QLYNydchyZliqndgZ0gA7159wLfICSSPdwjx/tWnScjsb4slmUWM5z5I2iS5JH
VFgoYy9C9WsD
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:59:46 2026 by rpki-client