Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
File: AS131325.roa (raw, json)
Hash identifier: +l1Tplvv+9v95G03FTHBlKtQmNwbGG+XMTV/zzWtNd4=
Subject key identifier: 25:9F:3A:01:8D:98:B2:FF:78:8C:27:65:A0:CA:C2:4D:63:F0:8C:F8
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 75280D3D4D2A3CD8A9081FC95F640CF7509F1913
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
Signing time: Sun 14 Jun 2026 16:44:16 +0000
ROA not before: Sun 14 Jun 2026 16:39:16 +0000
ROA not after: Sun 13 Jun 2027 16:44:16 +0000
asID: 131325
IP address blocks: 49.67.72.0/22 maxlen: 22
49.67.76.0/24 maxlen: 24
49.79.134.0/24 maxlen: 24
49.79.175.0/24 maxlen: 24
49.79.176.0/24 maxlen: 24
49.79.237.0/24 maxlen: 24
49.79.239.0/24 maxlen: 24
49.79.240.0/24 maxlen: 24
49.79.241.0/24 maxlen: 24
58.223.124.0/24 maxlen: 24
58.223.125.0/24 maxlen: 24
61.147.218.0/24 maxlen: 24
61.147.219.0/24 maxlen: 24
61.147.221.0/24 maxlen: 24
61.147.222.0/23 maxlen: 23
61.147.224.0/22 maxlen: 22
61.147.228.0/24 maxlen: 24
61.147.231.0/24 maxlen: 24
61.147.232.0/24 maxlen: 24
61.147.238.0/24 maxlen: 24
61.147.239.0/24 maxlen: 24
114.231.81.0/24 maxlen: 24
114.231.86.0/24 maxlen: 24
114.231.165.0/24 maxlen: 24
114.231.176.0/24 maxlen: 24
114.231.202.0/24 maxlen: 24
114.232.68.0/24 maxlen: 24
114.232.85.0/24 maxlen: 24
114.232.87.0/24 maxlen: 24
114.232.92.0/22 maxlen: 22
114.232.222.0/23 maxlen: 23
117.86.116.0/24 maxlen: 24
117.86.125.0/24 maxlen: 24
117.86.181.0/24 maxlen: 24
117.86.182.0/23 maxlen: 23
117.86.212.0/24 maxlen: 24
180.121.80.0/22 maxlen: 22
218.91.216.0/24 maxlen: 24
218.91.217.0/24 maxlen: 24
218.91.218.0/24 maxlen: 24
218.91.219.0/24 maxlen: 24
218.91.220.0/24 maxlen: 24
218.91.221.0/24 maxlen: 24
218.91.222.0/24 maxlen: 24
218.91.223.0/24 maxlen: 24
218.91.224.0/24 maxlen: 24
218.91.225.0/24 maxlen: 24
218.91.226.0/24 maxlen: 24
218.91.230.0/24 maxlen: 24
218.91.237.0/24 maxlen: 24
221.227.220.0/22 maxlen: 22
240e:1a:70::/44 maxlen: 44
240e:108:47::/48 maxlen: 48
240e:108:11d4::/48 maxlen: 48
240e:109:8047::/48 maxlen: 48
240e:698:4700::/40 maxlen: 40
240e:979:8500::/40 maxlen: 40
240e:979:9500::/40 maxlen: 40
240e:979:9508::/48 maxlen: 48
240e:980:4700::/40 maxlen: 40
240e:982:d400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:28:0d:3d:4d:2a:3c:d8:a9:08:1f:c9:5f:64:0c:f7:50:9f:19:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 14 16:39:16 2026 GMT
Not After : Jun 13 16:44:16 2027 GMT
Subject: CN=259F3A018D98B2FF788C2765A0CAC24D63F08CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:b1:d0:94:1c:78:60:40:99:21:53:b8:19:
10:dc:e9:f7:33:01:55:9b:cd:9c:c7:8e:0f:f2:69:
be:1a:60:5c:80:3f:84:83:8f:93:fb:74:0e:ca:0b:
75:c5:a1:f3:81:5f:28:08:38:84:84:fa:77:21:38:
ee:f0:d0:4e:8f:cc:e4:db:bd:72:92:e7:62:63:ea:
44:75:2a:0c:e8:bf:f3:6a:64:52:41:47:73:54:08:
8a:c2:ac:a3:66:7b:09:7f:71:77:b1:39:50:ea:e3:
a4:24:41:c2:f6:69:ab:9f:3d:10:cb:6f:fb:77:85:
e3:ad:11:46:3c:3a:2a:8f:08:02:12:ec:5e:f2:81:
6e:c2:16:08:0f:8d:01:ad:c1:36:7a:bc:ae:e1:b3:
a1:7e:75:f9:63:23:70:17:09:31:69:e9:21:f0:22:
01:b7:b3:d2:83:9a:30:24:3a:c2:e1:43:f3:09:16:
f1:1c:14:de:87:d2:8e:fd:2f:e1:97:ca:66:4d:7c:
8e:b5:6e:9d:6c:0b:31:44:8a:62:80:a2:c6:79:d9:
01:b7:e8:33:f1:09:e8:f3:0d:f5:e8:ec:fa:b7:9a:
61:30:f5:aa:41:a3:dc:b4:52:2c:01:55:4f:d4:64:
94:c3:18:24:69:17:06:a3:83:45:90:57:c6:e8:0c:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9F:3A:01:8D:98:B2:FF:78:8C:27:65:A0:CA:C2:4D:63:F0:8C:F8
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.67.72.0-49.67.76.255
49.79.134.0/24
49.79.175.0-49.79.176.255
49.79.237.0/24
49.79.239.0-49.79.241.255
58.223.124.0/23
61.147.218.0/23
61.147.221.0-61.147.228.255
61.147.231.0-61.147.232.255
61.147.238.0/23
114.231.81.0/24
114.231.86.0/24
114.231.165.0/24
114.231.176.0/24
114.231.202.0/24
114.232.68.0/24
114.232.85.0/24
114.232.87.0/24
114.232.92.0/22
114.232.222.0/23
117.86.116.0/24
117.86.125.0/24
117.86.181.0-117.86.183.255
117.86.212.0/24
180.121.80.0/22
218.91.216.0-218.91.226.255
218.91.230.0/24
218.91.237.0/24
221.227.220.0/22
IPv6:
240e:1a:70::/44
240e:108:47::/48
240e:108:11d4::/48
240e:109:8047::/48
240e:698:4700::/40
240e:979:8500::/40
240e:979:9500::/40
240e:980:4700::/40
240e:982:d400::/40
Signature Algorithm: sha256WithRSAEncryption
54:f1:19:e1:f3:b5:dc:18:2a:53:7c:04:eb:ac:4a:42:14:b3:
6a:d8:45:c7:87:4a:68:50:c7:4b:47:92:d6:94:42:b2:1b:96:
ee:55:81:84:d8:62:62:c7:b7:04:38:f6:4c:26:67:fa:6e:79:
d1:0d:83:c7:27:0a:24:e6:74:13:38:a9:aa:82:d5:e9:05:51:
48:05:be:79:4b:f8:04:43:ae:c2:91:6d:99:c5:f0:bf:e2:42:
d7:3f:26:f8:5c:c2:c7:52:d6:ca:8d:76:64:4c:10:15:dc:d0:
4a:47:3d:d2:c8:43:58:f7:b5:7b:db:1a:3c:a4:62:24:05:7a:
13:f0:aa:a8:b7:4f:30:52:ea:b1:5f:07:a1:28:85:6c:25:33:
7e:05:bb:5d:cb:27:3a:c9:4b:f5:8f:b5:59:98:74:ac:e4:3d:
43:b8:39:3b:14:9a:10:63:3f:d9:74:c9:10:08:d0:7d:b4:60:
ff:68:c0:fe:3e:4a:8f:34:16:2c:24:26:57:c9:1b:be:db:a2:
0c:34:19:c9:c5:93:65:0c:65:ea:01:d3:3f:94:42:ba:0b:91:
1c:1d:95:93:e1:b0:ec:a6:d2:7c:d8:70:36:a2:87:91:9d:77:
46:99:d9:fe:3a:6c:21:2e:34:c4:ca:a2:ff:a6:a6:62:89:91:
d4:1d:9f:01
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUdSgNPU0qPNipCB/JX2QM91CfGRMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNDE2MzkxNloX
DTI3MDYxMzE2NDQxNlowMzExMC8GA1UEAxMoMjU5RjNBMDE4RDk4QjJGRjc4OEMy
NzY1QTBDQUMyNEQ2M0YwOENGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI6BsdCUHHhgQJkhU7gZENzp9zMBVZvNnMeOD/JpvhpgXIA/hIOPk/t0DsoL
dcWh84FfKAg4hIT6dyE47vDQTo/M5Nu9cpLnYmPqRHUqDOi/82pkUkFHc1QIisKs
o2Z7CX9xd7E5UOrjpCRBwvZpq589EMtv+3eF460RRjw6Ko8IAhLsXvKBbsIWCA+N
Aa3BNnq8ruGzoX51+WMjcBcJMWnpIfAiAbez0oOaMCQ6wuFD8wkW8RwU3ofSjv0v
4ZfKZk18jrVunWwLMUSKYoCixnnZAbfoM/EJ6PMN9ejs+reaYTD1qkGj3LRSLAFV
T9RklMMYJGkXBqODRZBXxugMwgkCAwEAAaOCAyAwggMcMB0GA1UdDgQWBBQlnzoB
jZiy/3iMJ2WgysJNY/CM+DAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTMxMzI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBWQYIKwYBBQUHAQcBAf8EggFIMIIBRDCB7QQCAAEwgeYwDAMEAzFDSAMEADFD
TAMEADFPhjAMAwQAMU+vAwQAMU+wAwQAMU/tMAwDBAAxT+8DBAExT/ADBAE633wD
BAE9k9owDAMEAD2T3QMEAD2T5DAMAwQAPZPnAwQAPZPoAwQBPZPuAwQAcudRAwQA
cudWAwQAcuelAwQAcuewAwQAcufKAwQAcuhEAwQAcuhVAwQAcuhXAwQCcuhcAwQB
cujeAwQAdVZ0AwQAdVZ9MAwDBAB1VrUDBAN1VrADBAB1VtQDBAK0eVAwDAMEA9pb
2AMEANpb4gMEANpb5gMEANpb7QMEAt3j3DBSBAIAAjBMAwcEJA4AGgBwAwcAJA4B
CABHAwcAJA4BCBHUAwcAJA4BCYBHAwYAJA4GmEcDBgAkDgl5hQMGACQOCXmVAwYA
JA4JgEcDBgAkDgmC1DANBgkqhkiG9w0BAQsFAAOCAQEAVPEZ4fO13BgqU3wE66xK
QhSzathFx4dKaFDHS0eS1pRCshuW7lWBhNhiYse3BDj2TCZn+m550Q2DxycKJOZ0
EzipqoLV6QVRSAW+eUv4BEOuwpFtmcXwv+JC1z8m+FzCx1LWyo12ZEwQFdzQSkc9
0shDWPe1e9saPKRiJAV6E/CqqLdPMFLqsV8HoSiFbCUzfgW7XcsnOslL9Y+1WZh0
rOQ9Q7g5OxSaEGM/2XTJEAjQfbRg/2jA/j5KjzQWLCQmV8kbvtuiDDQZycWTZQxl
6gHTP5RCuguRHB2Vk+Gw7KbSfNhwNqKHkZ13RpnZ/jpsIS40xMqi/6amYomR1B2f
AQ==
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:45 2026 by rpki-client