Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS136195.roa
File: AS136195.roa (raw, json)
Hash identifier: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=
Subject key identifier: F1:0A:7C:73:CB:83:24:AF:9F:C8:E9:50:C4:10:BF:CA:94:DA:90:28
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 4D8A5BF1D76342DB8F666F0C2DAB71A9C40DE9AF
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS136195.roa
Signing time: Tue 16 Jun 2026 17:54:06 +0000
ROA not before: Tue 16 Jun 2026 17:49:06 +0000
ROA not after: Tue 15 Jun 2027 17:54:06 +0000
asID: 136195
IP address blocks: 140.249.3.0/24 maxlen: 24
140.249.7.0/24 maxlen: 24
140.249.17.0/24 maxlen: 24
140.249.18.0/23 maxlen: 23
140.249.20.0/22 maxlen: 22
140.249.24.0/24 maxlen: 24
140.249.28.0/24 maxlen: 24
140.249.29.0/24 maxlen: 24
140.249.48.0/21 maxlen: 21
140.249.62.0/23 maxlen: 23
140.249.128.0/19 maxlen: 19
140.249.128.0/22 maxlen: 22
140.249.132.0/22 maxlen: 22
140.249.136.0/24 maxlen: 24
140.249.160.0/19 maxlen: 19
140.249.192.0/20 maxlen: 20
140.249.208.0/21 maxlen: 21
140.249.216.0/21 maxlen: 21
140.249.224.0/20 maxlen: 20
140.249.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8a:5b:f1:d7:63:42:db:8f:66:6f:0c:2d:ab:71:a9:c4:0d:e9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 16 17:49:06 2026 GMT
Not After : Jun 15 17:54:06 2027 GMT
Subject: CN=F10A7C73CB8324AF9FC8E950C410BFCA94DA9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:39:85:b6:82:a9:e3:76:ce:63:1f:67:1e:
28:a1:b4:c2:b5:5a:63:5c:7d:09:b3:6b:13:b8:4d:
e1:61:12:56:12:71:b1:0e:09:ba:2d:a4:ba:8a:36:
08:57:05:3c:56:eb:32:86:13:99:10:05:53:0a:31:
cd:24:a4:c2:c0:f5:8a:59:2c:19:c2:49:2f:cd:7d:
1a:9a:1e:e9:f3:e0:53:e5:44:d7:d1:93:f0:c2:fb:
28:fb:bc:0f:aa:6a:e0:74:70:19:9e:be:bf:92:9b:
17:0e:08:e5:2a:eb:df:92:f4:dc:43:a1:fe:8d:67:
2e:83:13:8f:56:43:d7:b8:fa:74:6c:e3:21:00:5e:
c7:c7:1e:da:86:a9:de:c8:86:0b:ac:3b:52:8d:8e:
ea:47:df:b0:c6:4d:0d:a2:94:b0:c2:99:39:a9:ef:
1c:31:c9:e1:70:d2:52:30:dd:2d:ca:f5:1a:fc:0a:
2a:df:51:73:6e:03:f5:8b:ef:f3:a2:63:c8:b1:fe:
00:d7:ee:aa:a2:a0:11:8e:58:9b:96:21:f3:35:ab:
55:a7:1f:69:76:36:10:3e:be:da:1b:2e:8f:be:50:
1f:a7:be:9e:94:0d:ee:d1:87:0b:97:c6:52:f8:05:
29:de:b0:13:c8:fd:aa:03:32:d5:fb:e5:ff:d5:51:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:7C:73:CB:83:24:AF:9F:C8:E9:50:C4:10:BF:CA:94:DA:90:28
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS136195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.249.3.0/24
140.249.7.0/24
140.249.17.0-140.249.24.255
140.249.28.0/23
140.249.48.0/21
140.249.62.0/23
140.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
e5:1a:56:5b:00:d5:22:48:9f:3a:76:77:a5:e0:33:44:ed:15:
84:72:5e:0c:1d:71:fb:1f:f4:25:a5:6f:0c:10:4f:3a:03:1b:
26:a6:f6:b0:e2:3f:a5:5a:24:6b:3d:e0:92:a3:78:21:4d:46:
c6:be:7c:22:6a:76:31:d3:35:a2:8f:d5:1e:84:19:9d:2b:6c:
0e:ab:42:91:08:5e:c5:54:9c:65:93:a0:0b:2a:1a:98:f8:e1:
84:76:4f:37:c9:f4:47:5d:b9:56:81:8b:14:9b:14:c2:f3:c6:
71:90:00:1f:89:f1:03:06:cc:63:68:70:28:9c:0e:e8:2b:e6:
70:88:04:34:25:f6:3f:85:1d:64:90:10:ea:94:f4:51:6a:d7:
f9:9d:6a:b3:ed:11:68:8d:57:37:52:16:b0:62:a2:ab:52:92:
6e:bb:ed:72:a6:6a:36:ce:24:3b:54:df:da:6b:9d:d6:e3:ce:
76:27:a1:73:d6:bb:c6:97:3c:d0:80:2b:44:a5:b7:1b:27:2e:
4f:ff:3a:39:e9:2a:a6:e6:3a:6b:be:48:71:59:15:dc:15:47:
e1:81:3d:6c:56:94:73:35:57:9b:ab:09:fb:87:11:41:cc:d7:
77:97:ce:97:12:28:4b:08:98:64:8c:ff:77:64:5a:87:f3:df:
67:01:65:b0
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUTYpb8ddjQtuPZm8MLatxqcQN6a8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNloX
DTI3MDYxNTE3NTQwNlowMzExMC8GA1UEAxMoRjEwQTdDNzNDQjgzMjRBRjlGQzhF
OTUwQzQxMEJGQ0E5NERBOTAyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXNOYW2gqnjds5jH2ceKKG0wrVaY1x9CbNrE7hN4WESVhJxsQ4Jui2kuoo2
CFcFPFbrMoYTmRAFUwoxzSSkwsD1ilksGcJJL819Gpoe6fPgU+VE19GT8ML7KPu8
D6pq4HRwGZ6+v5KbFw4I5Srr35L03EOh/o1nLoMTj1ZD17j6dGzjIQBex8ce2oap
3siGC6w7Uo2O6kffsMZNDaKUsMKZOanvHDHJ4XDSUjDdLcr1GvwKKt9Rc24D9Yvv
86JjyLH+ANfuqqKgEY5Ym5Yh8zWrVacfaXY2ED6+2hsuj75QH6e+npQN7tGHC5fG
UvgFKd6wE8j9qgMy1fvl/9VRpPsCAwEAAaOCAhAwggIMMB0GA1UdDgQWBBTxCnxz
y4Mkr5/I6VDEEL/KlNqQKDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8wL0FTMTM2MTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAjPkDAwQAjPkHMAwDBACM+RED
BACM+RgDBAGM+RwDBAOM+TADBAGM+T4DBAeM+YAwDQYJKoZIhvcNAQELBQADggEB
AOUaVlsA1SJInzp2d6XgM0TtFYRyXgwdcfsf9CWlbwwQTzoDGyam9rDiP6VaJGs9
4JKjeCFNRsa+fCJqdjHTNaKP1R6EGZ0rbA6rQpEIXsVUnGWToAsqGpj44YR2TzfJ
9EdduVaBixSbFMLzxnGQAB+J8QMGzGNocCicDugr5nCIBDQl9j+FHWSQEOqU9FFq
1/mdarPtEWiNVzdSFrBioqtSkm677XKmajbOJDtU39prndbjznYnoXPWu8aXPNCA
K0SltxsnLk//OjnpKqbmOmu+SHFZFdwVR+GBPWxWlHM1V5urCfuHEUHM13eXzpcS
KEsImGSM/3dkWofz32cBZbA=
-----END CERTIFICATE-----
Generated at Tue Jul 14 22:49:47 2026 by rpki-client