Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
File: AS131325.roa (raw, json)
Hash identifier: qftcr3Jvcw1Tjt+//KUaAAFfzy0VfkGMwNu8uSYQZlI=
Subject key identifier: 8C:4E:75:A4:0E:54:F1:0E:C0:1E:E2:39:DB:0D:C9:9F:89:42:32:25
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1D087CBBD04D9CEE8E90B4A9C2FE3631AD071488
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
Signing time: Thu 06 Aug 2026 02:20:32 +0000
ROA not before: Thu 06 Aug 2026 02:15:32 +0000
ROA not after: Thu 05 Aug 2027 02:20:32 +0000
asID: 131325
IP address blocks: 49.67.72.0/22 maxlen: 22
49.67.76.0/24 maxlen: 24
49.79.134.0/24 maxlen: 24
49.79.175.0/24 maxlen: 24
49.79.176.0/24 maxlen: 24
49.79.237.0/24 maxlen: 24
49.79.239.0/24 maxlen: 24
49.79.240.0/24 maxlen: 24
49.79.241.0/24 maxlen: 24
58.223.124.0/24 maxlen: 24
58.223.125.0/24 maxlen: 24
61.147.218.0/24 maxlen: 24
61.147.219.0/24 maxlen: 24
61.147.221.0/24 maxlen: 24
61.147.222.0/23 maxlen: 23
61.147.224.0/22 maxlen: 22
61.147.228.0/24 maxlen: 24
61.147.231.0/24 maxlen: 24
61.147.232.0/24 maxlen: 24
61.147.238.0/24 maxlen: 24
61.147.239.0/24 maxlen: 24
114.231.81.0/24 maxlen: 24
114.231.86.0/24 maxlen: 24
114.231.165.0/24 maxlen: 24
114.231.176.0/24 maxlen: 24
114.231.202.0/24 maxlen: 24
114.232.68.0/24 maxlen: 24
114.232.85.0/24 maxlen: 24
114.232.87.0/24 maxlen: 24
114.232.92.0/22 maxlen: 22
114.232.222.0/23 maxlen: 23
117.86.32.0/24 maxlen: 24
117.86.116.0/24 maxlen: 24
117.86.125.0/24 maxlen: 24
117.86.166.0/24 maxlen: 24
117.86.181.0/24 maxlen: 24
117.86.182.0/23 maxlen: 23
117.86.212.0/24 maxlen: 24
180.121.80.0/22 maxlen: 22
218.91.216.0/24 maxlen: 24
218.91.217.0/24 maxlen: 24
218.91.218.0/24 maxlen: 24
218.91.219.0/24 maxlen: 24
218.91.220.0/24 maxlen: 24
218.91.221.0/24 maxlen: 24
218.91.222.0/24 maxlen: 24
218.91.223.0/24 maxlen: 24
218.91.224.0/24 maxlen: 24
218.91.225.0/24 maxlen: 24
218.91.226.0/24 maxlen: 24
218.91.230.0/24 maxlen: 24
218.91.237.0/24 maxlen: 24
221.227.220.0/22 maxlen: 22
240e:1a:70::/44 maxlen: 44
240e:108:47::/48 maxlen: 48
240e:108:11d4::/48 maxlen: 48
240e:109:8047::/48 maxlen: 48
240e:698:4700::/40 maxlen: 40
240e:979:8500::/40 maxlen: 40
240e:979:9500::/40 maxlen: 40
240e:979:9508::/48 maxlen: 48
240e:980:4700::/40 maxlen: 40
240e:982:d400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:08:7c:bb:d0:4d:9c:ee:8e:90:b4:a9:c2:fe:36:31:ad:07:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Aug 6 02:15:32 2026 GMT
Not After : Aug 5 02:20:32 2027 GMT
Subject: CN=8C4E75A40E54F10EC01EE239DB0DC99F89423225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:5d:9a:40:32:4a:f8:fd:0c:53:77:ed:2e:
57:e6:86:12:cc:0d:59:8b:32:aa:d1:9b:03:fd:4c:
b7:45:39:93:60:57:e5:f3:b5:91:f2:31:24:7f:83:
fd:5d:3f:f4:12:e1:c5:4c:7b:8e:c5:3d:16:c3:7a:
12:43:d8:26:b9:b9:3a:cc:57:df:2a:1f:20:d1:c0:
f9:72:b4:7b:1a:ee:d4:85:5c:7c:f2:ec:26:22:a8:
a0:9b:6d:aa:a8:89:53:af:c4:64:26:a7:16:54:e5:
f6:0f:2e:b1:d1:87:e2:ec:e3:ee:9e:22:9c:82:77:
a1:31:e7:5e:a5:a5:7f:ff:47:79:b1:2d:23:f8:8b:
d7:c4:86:4b:18:6a:73:90:2e:99:7f:d5:fc:ed:a7:
01:96:02:84:bb:2e:00:9a:b3:1a:92:94:c9:df:e1:
aa:3d:1c:11:0d:92:46:7b:ac:b8:e8:04:0c:95:92:
45:6a:e9:7d:5d:3d:27:44:ca:18:b0:35:b9:fb:af:
6d:f4:67:e7:87:f4:fc:e2:8f:b3:01:74:12:0e:7d:
e3:22:4d:6e:88:bd:9e:30:73:ff:73:50:95:38:17:
04:3f:1a:a0:f6:bb:c1:39:5b:80:0b:98:47:3c:6d:
df:09:83:49:12:99:0c:41:97:12:bf:6a:23:b4:af:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4E:75:A4:0E:54:F1:0E:C0:1E:E2:39:DB:0D:C9:9F:89:42:32:25
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS131325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.67.72.0-49.67.76.255
49.79.134.0/24
49.79.175.0-49.79.176.255
49.79.237.0/24
49.79.239.0-49.79.241.255
58.223.124.0/23
61.147.218.0/23
61.147.221.0-61.147.228.255
61.147.231.0-61.147.232.255
61.147.238.0/23
114.231.81.0/24
114.231.86.0/24
114.231.165.0/24
114.231.176.0/24
114.231.202.0/24
114.232.68.0/24
114.232.85.0/24
114.232.87.0/24
114.232.92.0/22
114.232.222.0/23
117.86.32.0/24
117.86.116.0/24
117.86.125.0/24
117.86.166.0/24
117.86.181.0-117.86.183.255
117.86.212.0/24
180.121.80.0/22
218.91.216.0-218.91.226.255
218.91.230.0/24
218.91.237.0/24
221.227.220.0/22
IPv6:
240e:1a:70::/44
240e:108:47::/48
240e:108:11d4::/48
240e:109:8047::/48
240e:698:4700::/40
240e:979:8500::/40
240e:979:9500::/40
240e:980:4700::/40
240e:982:d400::/40
Signature Algorithm: sha256WithRSAEncryption
99:f2:0c:25:0b:ee:a6:af:d8:48:1b:20:37:92:78:ae:cb:01:
37:1b:92:e3:b3:39:fc:42:1c:39:59:7c:b0:f3:86:0f:e7:d0:
3b:22:37:84:83:b3:3c:45:37:9e:ec:85:aa:82:89:18:ce:d5:
8b:e2:ec:eb:25:d5:63:6f:b9:89:2a:b1:ee:20:ca:bb:0b:a7:
3c:99:4b:b5:4d:af:a4:5a:e1:2a:6a:62:cc:b6:d3:17:75:58:
6b:98:f0:27:81:ae:40:8a:9c:4b:d4:ba:83:f2:6e:76:5d:c1:
ca:c7:e8:7b:0a:28:32:37:83:bf:89:b1:d9:a3:ea:98:38:35:
4c:16:32:e7:7e:1f:04:aa:07:01:d7:f6:d4:8c:4f:19:0a:5e:
c2:6e:53:86:8e:ba:fe:44:32:ad:cf:29:a1:e7:c2:9f:52:66:
80:e7:cf:28:d9:b2:53:bc:66:f7:ad:9a:21:03:a6:6c:2a:68:
6a:30:d4:95:c4:08:c4:c7:3d:78:b9:85:4e:86:4f:bc:71:74:
5f:4a:5a:53:7a:65:fa:9c:15:76:74:5c:3c:ce:e7:01:52:c8:
3f:fe:0c:d6:9d:84:fd:d4:c0:27:70:13:04:7d:8a:a3:14:cd:
49:27:ac:28:93:33:1e:09:1d:04:20:5c:64:fa:7a:1a:23:44:
78:61:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:43:22 2026 by rpki-client