Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS4134.roa
File: AS4134.roa (raw, json)
Hash identifier: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=
Subject key identifier: 05:EA:6C:78:43:FD:CC:CF:AD:33:B2:66:01:F6:79:00:73:7C:9D:E3
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 458F0DF80427DE018492835A7920EED73DCD3F03
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS4134.roa
Signing time: Tue 14 Jul 2026 16:43:33 +0000
ROA not before: Tue 14 Jul 2026 16:38:33 +0000
ROA not after: Tue 13 Jul 2027 16:43:33 +0000
asID: 4134
IP address blocks: 139.200.0.0/16 maxlen: 16
139.201.0.0/16 maxlen: 16
139.201.114.0/24 maxlen: 24
139.202.0.0/16 maxlen: 16
139.203.0.0/16 maxlen: 16
139.204.0.0/15 maxlen: 15
139.206.0.0/16 maxlen: 16
139.207.0.0/16 maxlen: 16
140.75.0.0/16 maxlen: 16
140.224.0.0/16 maxlen: 16
140.237.0.0/16 maxlen: 16
140.240.0.0/16 maxlen: 16
140.243.0.0/16 maxlen: 16
140.249.0.0/16 maxlen: 16
140.250.0.0/16 maxlen: 16
140.255.0.0/16 maxlen: 16
144.0.0.0/16 maxlen: 16
144.7.0.0/17 maxlen: 17
144.12.0.0/16 maxlen: 16
144.52.0.0/16 maxlen: 16
144.123.0.0/16 maxlen: 16
144.123.32.0/19 maxlen: 19
144.255.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8f:0d:f8:04:27:de:01:84:92:83:5a:79:20:ee:d7:3d:cd:3f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jul 14 16:38:33 2026 GMT
Not After : Jul 13 16:43:33 2027 GMT
Subject: CN=05EA6C7843FDCCCFAD33B26601F67900737C9DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:11:3d:ef:a2:4c:5e:22:40:bd:c8:8a:30:
d3:96:0e:51:d0:73:1a:bd:29:28:53:c5:fb:d1:8d:
16:98:9d:50:0b:c7:a7:06:b1:77:b7:ad:de:38:85:
f2:8a:fa:b0:b2:34:f9:0d:d1:cd:31:37:26:9b:8b:
fc:83:05:ea:93:df:82:73:19:18:29:46:9c:92:20:
1f:af:59:fa:43:4f:a2:d2:fb:e3:f5:19:ef:0b:5e:
f8:8a:4b:76:61:67:5f:6f:e3:d9:26:f3:c5:68:d9:
0e:e8:1a:f9:d7:7d:21:8a:7c:7d:0c:df:07:52:cd:
64:50:0b:e6:45:1d:15:21:2a:40:e3:c5:57:52:cf:
83:be:16:06:62:b7:0b:00:01:51:2e:56:8a:cd:5b:
74:17:c4:41:e9:f0:18:e0:a0:39:f8:fb:2a:0f:b4:
09:52:24:2f:3e:8e:d7:a1:08:e9:ad:73:4b:b6:41:
fb:46:60:3b:12:30:25:19:e3:a7:d1:22:ea:d4:60:
46:31:ca:ad:71:c1:af:cd:ad:92:4a:a5:ab:ce:7b:
56:3c:85:1f:f8:c8:b9:c0:03:03:d1:6d:30:e7:01:
a9:f4:7d:43:9b:94:f2:ef:5d:48:fb:d2:ab:5b:d8:
6f:be:a8:10:6a:9c:db:b9:9c:9b:59:12:50:0f:35:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:6C:78:43:FD:CC:CF:AD:33:B2:66:01:F6:79:00:73:7C:9D:E3
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS4134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.200.0.0/13
140.75.0.0/16
140.224.0.0/16
140.237.0.0/16
140.240.0.0/16
140.243.0.0/16
140.249.0.0-140.250.255.255
140.255.0.0/16
144.0.0.0/16
144.7.0.0/17
144.12.0.0/16
144.52.0.0/16
144.123.0.0/16
144.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:9e:ad:91:ca:cd:86:d4:c0:c6:4c:43:a1:51:d0:05:1c:88:
f0:2f:65:26:21:22:37:64:43:1d:3a:b5:fa:60:d7:e5:9c:e2:
9b:21:0b:d8:45:99:b5:98:af:d3:83:40:78:07:2a:ee:8e:5a:
40:c7:5e:45:b3:7a:27:e5:65:eb:22:71:7e:e4:1d:99:ba:0e:
50:ea:e3:21:08:5d:dd:68:c1:aa:fc:db:23:0c:4b:a3:9a:99:
6f:55:ed:71:1a:7f:64:19:96:44:3c:80:cb:20:27:7e:50:7c:
91:e8:19:31:71:9d:d7:a0:0b:d6:fa:97:d3:71:ff:ce:bc:ee:
68:fa:bc:72:c6:63:da:c1:5e:a9:28:0b:cc:15:bc:3a:b1:88:
a7:28:91:54:ad:c5:55:7a:04:98:bc:b0:92:b7:d3:2f:86:4c:
a9:5c:32:fb:92:f1:10:d4:12:74:21:5a:63:95:73:e9:32:90:
42:12:77:89:d2:06:45:65:75:f7:21:88:dd:d8:e5:0f:a4:31:
80:bc:cc:4d:e3:bc:03:7f:f7:b1:dd:43:97:d1:14:67:3c:5b:
b0:c4:9c:2f:06:ec:d7:0b:9b:59:13:6c:da:63:7c:e2:b1:bf:
05:93:02:64:70:3b:57:4b:1b:ef:0e:b7:61:9e:14:1d:ce:79:
91:96:14:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:54:37 2026 by rpki-client