Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS133774.roa
File: AS133774.roa (raw, json)
Hash identifier: 3NM7s3Cja1Xll/QQjc5SiyiDzFwWMiTOUSVBbUJ8bso=
Subject key identifier: 9F:F4:0A:0F:2C:67:F7:5B:C3:2B:13:0F:43:52:F0:CE:87:9C:49:49
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 146DB4CDE268D2A7FA8CFEB34545C5B85E8005D8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS133774.roa
Signing time: Wed 20 May 2026 16:15:18 +0000
ROA not before: Wed 20 May 2026 16:10:18 +0000
ROA not after: Wed 19 May 2027 16:15:18 +0000
asID: 133774
IP address blocks: 27.148.149.0/24 maxlen: 24
27.148.202.0/24 maxlen: 24
27.150.182.0/24 maxlen: 24
27.150.188.0/24 maxlen: 24
27.150.189.0/24 maxlen: 24
59.56.17.0/24 maxlen: 24
59.56.21.0/24 maxlen: 24
59.56.100.0/24 maxlen: 24
59.56.101.0/24 maxlen: 24
117.27.232.0/24 maxlen: 24
117.27.234.0/24 maxlen: 24
121.207.225.0/24 maxlen: 24
121.207.226.0/24 maxlen: 24
218.66.100.0/24 maxlen: 24
218.66.101.0/24 maxlen: 24
218.66.102.0/24 maxlen: 24
220.162.239.0/24 maxlen: 24
220.162.240.0/24 maxlen: 24
222.77.187.0/24 maxlen: 24
222.77.188.0/24 maxlen: 24
222.77.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6d:b4:cd:e2:68:d2:a7:fa:8c:fe:b3:45:45:c5:b8:5e:80:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 20 16:10:18 2026 GMT
Not After : May 19 16:15:18 2027 GMT
Subject: CN=9FF40A0F2C67F75BC32B130F4352F0CE879C4949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:31:1e:64:90:7e:16:eb:7c:ea:a8:35:f5:
65:d4:f4:af:f8:c6:5d:75:a2:86:64:54:b5:22:3f:
b5:ce:b3:ca:a4:6f:ed:88:bb:ae:37:06:af:3f:ce:
c3:ef:c5:ba:dc:aa:59:27:f5:65:fa:ec:4b:0e:ee:
33:4e:cd:25:5c:42:8b:72:df:3a:d4:3f:ba:c4:26:
dd:a1:f5:e5:6f:cf:3b:71:e5:16:f1:dc:cf:e1:e3:
1d:4b:49:52:97:3c:86:ea:cb:0e:d1:a2:54:13:01:
26:35:68:d5:d4:3b:65:2f:ff:41:e4:60:7e:91:a6:
2f:72:84:4c:db:3e:21:62:80:f0:d6:66:59:8c:f9:
15:10:f6:73:d2:ec:d0:e0:a3:8b:84:73:bf:30:40:
84:c8:fb:49:6d:f5:02:6f:87:38:29:b6:4b:3d:20:
a2:4a:e9:c5:ab:a8:bf:e8:80:50:eb:e8:8f:cf:13:
73:b3:ee:24:4c:83:1e:30:61:53:06:71:50:ee:9a:
d9:57:bb:50:17:34:0c:be:2d:12:f2:a9:5a:97:f2:
7e:38:c6:5b:e1:3b:90:59:10:da:7f:31:ec:67:d9:
4a:e7:28:68:72:85:19:a9:43:67:54:d3:85:75:34:
97:10:c4:90:70:1b:f4:95:c1:77:e1:51:b3:75:a6:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:0A:0F:2C:67:F7:5B:C3:2B:13:0F:43:52:F0:CE:87:9C:49:49
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS133774.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.148.149.0/24
27.148.202.0/24
27.150.182.0/24
27.150.188.0/23
59.56.17.0/24
59.56.21.0/24
59.56.100.0/23
117.27.232.0/24
117.27.234.0/24
121.207.225.0-121.207.226.255
218.66.100.0-218.66.102.255
220.162.239.0-220.162.240.255
222.77.187.0-222.77.188.255
222.77.191.0/24
Signature Algorithm: sha256WithRSAEncryption
83:11:c6:db:34:03:1b:51:aa:69:9e:56:43:c8:cc:68:98:63:
d6:b4:f4:7f:c1:90:15:9c:60:1f:e8:9a:6f:03:29:45:5c:80:
1e:e1:65:ee:51:df:22:53:64:c7:6e:0b:ba:3c:44:31:17:13:
8b:c3:3b:13:e3:48:a7:69:75:e2:6a:a2:de:18:f8:e4:0b:ad:
66:8b:95:09:52:4f:55:20:35:84:bd:bd:7e:1b:e6:9c:fd:d2:
8c:44:0b:2d:c6:36:19:6b:9d:98:41:9a:53:41:c0:b5:f2:07:
d3:15:26:59:e6:5b:a2:27:f4:61:45:74:3c:71:71:c1:ee:a0:
97:98:ad:b5:b2:8c:75:9f:2e:e8:93:eb:d5:0e:5d:92:ad:57:
44:aa:85:bf:fe:27:38:78:f1:f1:c2:ee:3d:91:0c:1d:1a:fc:
63:d2:84:c9:d4:95:50:c8:8a:9d:85:aa:11:90:04:30:f0:a2:
3f:79:46:32:17:8a:9a:20:36:94:9d:6f:29:75:6c:8d:53:8f:
83:68:3e:ef:9c:40:8a:1a:91:ab:59:e6:bc:c6:18:13:eb:f4:
cd:2d:ff:c3:dd:d3:f6:ef:40:81:15:67:7d:44:53:17:a8:8e:
25:3e:29:a2:75:3e:ae:f0:c6:16:19:99:70:c6:fa:7e:ff:21:
e5:8f:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:25 2026 by rpki-client