Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS133775.roa
File: AS133775.roa (raw, json)
Hash identifier: 5QbfV8Tij4p8AaB1tT/Mn3eqpMdVv8lhnDVm8JHQlYo=
Subject key identifier: 86:21:6B:0D:0A:63:CB:39:DC:A8:F9:5C:5E:9F:F8:7C:15:83:DF:20
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 48827C2F21ADAC19E543FECD9786F1484A3317D7
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS133775.roa
Signing time: Thu 11 Jun 2026 16:23:57 +0000
ROA not before: Thu 11 Jun 2026 16:18:57 +0000
ROA not after: Thu 10 Jun 2027 16:23:57 +0000
asID: 133775
IP address blocks: 27.148.160.0/19 maxlen: 19
27.148.192.0/22 maxlen: 22
27.148.248.0/23 maxlen: 23
27.159.64.0/20 maxlen: 20
27.159.80.0/22 maxlen: 22
27.159.86.0/23 maxlen: 23
27.159.88.0/21 maxlen: 21
27.159.93.0/24 maxlen: 24
27.159.96.0/21 maxlen: 21
27.159.120.0/23 maxlen: 23
59.60.147.0/24 maxlen: 24
59.60.154.0/24 maxlen: 24
59.60.156.0/24 maxlen: 24
106.122.244.0/22 maxlen: 22
110.80.128.0/20 maxlen: 20
110.88.128.0/20 maxlen: 20
110.88.144.0/21 maxlen: 21
110.88.152.0/21 maxlen: 21
110.88.160.0/21 maxlen: 21
117.25.128.0/19 maxlen: 19
117.25.132.0/24 maxlen: 24
117.25.147.0/24 maxlen: 24
117.28.254.0/23 maxlen: 23
117.31.112.0/20 maxlen: 20
120.39.160.0/20 maxlen: 20
120.41.32.0/20 maxlen: 20
120.41.36.0/24 maxlen: 24
120.41.41.0/24 maxlen: 24
120.41.46.0/24 maxlen: 24
120.41.250.0/23 maxlen: 23
120.41.252.0/23 maxlen: 23
121.204.234.0/23 maxlen: 23
121.204.236.0/22 maxlen: 22
121.204.240.0/22 maxlen: 22
124.72.140.0/22 maxlen: 22
125.77.192.0/21 maxlen: 21
218.5.72.0/21 maxlen: 21
218.5.184.0/24 maxlen: 24
218.85.132.0/22 maxlen: 22
218.85.136.0/22 maxlen: 22
222.76.208.0/20 maxlen: 20
240e:14:7000::/37 maxlen: 37
240e:d6:6800::/37 maxlen: 37
240e:108:28::/48 maxlen: 48
240e:108:1183::/48 maxlen: 48
240e:108:1184::/48 maxlen: 48
240e:109:8028::/48 maxlen: 48
240e:698:2800::/40 maxlen: 40
240e:964:1000::/37 maxlen: 37
240e:964:1103::/48 maxlen: 48
240e:964:2b00::/40 maxlen: 40
240e:964:3000::/37 maxlen: 37
240e:964:8800::/38 maxlen: 38
240e:964:9580::/41 maxlen: 41
240e:964:c400::/39 maxlen: 39
240e:964:cac0::/42 maxlen: 42
240e:964:e400::/39 maxlen: 39
240e:964:eac0::/42 maxlen: 42
240e:965:1000::/37 maxlen: 37
240e:965:8800::/38 maxlen: 38
240e:965:c400::/39 maxlen: 39
240e:965:e400::/39 maxlen: 39
240e:966:1000::/37 maxlen: 37
240e:966:8800::/38 maxlen: 38
240e:966:c400::/39 maxlen: 39
240e:966:e400::/39 maxlen: 39
240e:967:1000::/37 maxlen: 37
240e:967:8800::/38 maxlen: 38
240e:967:c400::/39 maxlen: 39
240e:967:e400::/39 maxlen: 39
240e:980:2800::/40 maxlen: 40
240e:982:8300::/40 maxlen: 40
240e:982:8400::/40 maxlen: 40
240e:983:1800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:82:7c:2f:21:ad:ac:19:e5:43:fe:cd:97:86:f1:48:4a:33:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:18:57 2026 GMT
Not After : Jun 10 16:23:57 2027 GMT
Subject: CN=86216B0D0A63CB39DCA8F95C5E9FF87C1583DF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:35:29:09:a9:b3:69:4a:f1:ae:e5:cd:70:
18:c2:d0:4d:2a:27:b6:ff:d9:cb:90:c2:28:61:ec:
44:6b:26:3a:5e:1a:2b:6c:f9:26:1d:29:a3:e3:48:
03:fa:cc:bd:21:0f:9f:19:e2:47:cc:d2:01:23:f4:
68:bb:ff:0b:9b:3b:83:fd:45:2e:12:b0:ed:ae:4e:
9a:58:88:3c:9a:5f:51:12:06:75:f2:63:c5:51:51:
c6:7f:3a:51:31:06:d2:03:62:a0:16:cc:24:cc:ce:
37:0a:c5:68:58:fc:b5:90:8e:9c:fd:8f:c3:85:46:
5c:97:1f:0c:13:c2:3e:0a:f2:71:97:ad:48:ec:5d:
f7:28:eb:6f:2b:05:c5:7f:8f:8a:61:aa:af:89:cd:
fc:ea:aa:80:e6:c2:1e:91:97:4a:b4:8d:6f:98:f9:
86:06:e9:17:ff:c1:7d:64:15:18:f1:a0:e6:a0:aa:
0f:21:d0:ad:6a:35:90:ff:7b:3d:5b:fe:e8:db:ce:
88:ea:24:65:ae:bd:5d:af:b0:9a:71:74:42:5d:1e:
d5:8b:6c:50:34:54:dd:31:44:f0:fa:7a:c1:5d:ac:
4f:75:b8:0b:42:89:2d:73:0b:cf:98:e4:3e:92:bf:
dd:2e:86:66:e1:54:d9:d8:f3:d9:77:2b:0e:c0:9a:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:21:6B:0D:0A:63:CB:39:DC:A8:F9:5C:5E:9F:F8:7C:15:83:DF:20
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS133775.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.148.160.0-27.148.195.255
27.148.248.0/23
27.159.64.0-27.159.83.255
27.159.86.0-27.159.103.255
27.159.120.0/23
59.60.147.0/24
59.60.154.0/24
59.60.156.0/24
106.122.244.0/22
110.80.128.0/20
110.88.128.0-110.88.167.255
117.25.128.0/19
117.28.254.0/23
117.31.112.0/20
120.39.160.0/20
120.41.32.0/20
120.41.250.0-120.41.253.255
121.204.234.0-121.204.243.255
124.72.140.0/22
125.77.192.0/21
218.5.72.0/21
218.5.184.0/24
218.85.132.0-218.85.139.255
222.76.208.0/20
IPv6:
240e:14:7000::/37
240e:d6:6800::/37
240e:108:28::/48
240e:108:1183::-240e:108:1184:ffff:ffff:ffff:ffff:ffff
240e:109:8028::/48
240e:698:2800::/40
240e:964:1000::/37
240e:964:2b00::/40
240e:964:3000::/37
240e:964:8800::/38
240e:964:9580::/41
240e:964:c400::/39
240e:964:cac0::/42
240e:964:e400::/39
240e:964:eac0::/42
240e:965:1000::/37
240e:965:8800::/38
240e:965:c400::/39
240e:965:e400::/39
240e:966:1000::/37
240e:966:8800::/38
240e:966:c400::/39
240e:966:e400::/39
240e:967:1000::/37
240e:967:8800::/38
240e:967:c400::/39
240e:967:e400::/39
240e:980:2800::/40
240e:982:8300::-240e:982:84ff:ffff:ffff:ffff:ffff:ffff
240e:983:1800::/48
Signature Algorithm: sha256WithRSAEncryption
89:ab:bc:0f:a8:31:64:1d:33:31:cf:63:7c:51:99:89:44:c3:
70:5c:c5:11:80:34:7c:f1:63:b8:a2:c8:18:11:9e:1d:ca:b3:
bb:a3:bb:f6:cf:56:70:cd:70:3c:b6:db:5f:f5:ba:c2:9b:87:
2b:d7:6c:b3:89:2c:69:04:67:76:16:51:59:ad:c0:71:73:64:
4f:ff:8e:3a:d8:00:79:c1:b1:70:e3:64:60:f2:a9:d2:f2:bb:
dd:23:3d:5f:e2:17:8f:cb:8c:5e:e0:af:ee:76:8c:cc:b8:97:
b2:83:63:76:e8:d3:ea:b0:75:37:cf:ea:68:6e:dd:70:40:99:
bd:34:36:9f:65:01:f3:3c:c1:09:5c:85:0a:f8:1f:c6:2c:01:
72:71:af:a9:4b:03:b8:56:40:12:0a:a7:ac:dd:65:60:4a:5b:
f4:47:c0:98:d9:5c:0a:26:5e:75:cb:55:ef:61:35:63:86:9b:
46:28:72:ac:e6:72:2c:b4:00:6e:44:1f:8d:80:ab:4a:7b:7c:
57:57:98:d8:10:45:82:75:4f:ae:29:85:ad:80:74:81:42:45:
9c:5a:80:66:6f:f5:87:d5:19:e8:66:fa:29:69:1e:9c:94:9c:
80:c9:be:fa:fc:90:b7:7d:6a:b9:a2:84:aa:41:e8:1f:06:85:
f0:50:6b:f0
-----BEGIN CERTIFICATE-----
MIIG0zCCBbugAwIBAgIUSIJ8LyGtrBnlQ/7Nl4bxSEozF9cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE2MTg1N1oX
DTI3MDYxMDE2MjM1N1owMzExMC8GA1UEAxMoODYyMTZCMEQwQTYzQ0IzOURDQThG
OTVDNUU5RkY4N0MxNTgzREYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFgNSkJqbNpSvGu5c1wGMLQTSontv/Zy5DCKGHsRGsmOl4aK2z5Jh0po+NI
A/rMvSEPnxniR8zSASP0aLv/C5s7g/1FLhKw7a5OmliIPJpfURIGdfJjxVFRxn86
UTEG0gNioBbMJMzONwrFaFj8tZCOnP2Pw4VGXJcfDBPCPgrycZetSOxd9yjrbysF
xX+PimGqr4nN/OqqgObCHpGXSrSNb5j5hgbpF//BfWQVGPGg5qCqDyHQrWo1kP97
PVv+6NvOiOokZa69Xa+wmnF0Ql0e1YtsUDRU3TFE8Pp6wV2sT3W4C0KJLXMLz5jk
PpK/3S6GZuFU2djz2XcrDsCa3+cCAwEAAaOCA8YwggPCMB0GA1UdDgQWBBSGIWsN
CmPLOdyo+Vxen/h8FYPfIDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTMzNzc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIB/wYIKwYBBQUHAQcBAf8EggHuMIIB6jCBzwQCAAEwgcgwDAMEBRuUoAMEAhuU
wAMEARuU+DAMAwQGG59AAwQCG59QMAwDBAEbn1YDBAMbn2ADBAEbn3gDBAA7PJMD
BAA7PJoDBAA7PJwDBAJqevQDBARuUIAwDAMEB25YgAMEA25YoAMEBXUZgAMEAXUc
/gMEBHUfcAMEBHgnoAMEBHgpIDAMAwQBeCn6AwQBeCn8MAwDBAF5zOoDBAJ5zPAD
BAJ8SIwDBAN9TcADBAPaBUgDBADaBbgwDAMEAtpVhAMEAtpViAMEBN5M0DCCARQE
AgACMIIBDAMGAyQOABRwAwYDJA4A1mgDBwAkDgEIACgwEgMHACQOAQgRgwMHACQO
AQgRhAMHACQOAQmAKAMGACQOBpgoAwYDJA4JZBADBgAkDglkKwMGAyQOCWQwAwYC
JA4JZIgDBwckDglklYADBgEkDglkxAMHBiQOCWTKwAMGASQOCWTkAwcGJA4JZOrA
AwYDJA4JZRADBgIkDglliAMGASQOCWXEAwYBJA4JZeQDBgMkDglmEAMGAiQOCWaI
AwYBJA4JZsQDBgEkDglm5AMGAyQOCWcQAwYCJA4JZ4gDBgEkDglnxAMGASQOCWfk
AwYAJA4JgCgwEAMGACQOCYKDAwYAJA4JgoQDBwAkDgmDGAAwDQYJKoZIhvcNAQEL
BQADggEBAImrvA+oMWQdMzHPY3xRmYlEw3BcxRGANHzxY7iiyBgRnh3Ks7uju/bP
VnDNcDy221/1usKbhyvXbLOJLGkEZ3YWUVmtwHFzZE//jjrYAHnBsXDjZGDyqdLy
u90jPV/iF4/LjF7gr+52jMy4l7KDY3bo0+qwdTfP6mhu3XBAmb00Np9lAfM8wQlc
hQr4H8YsAXJxr6lLA7hWQBIKp6zdZWBKW/RHwJjZXAomXnXLVe9hNWOGm0Yocqzm
ciy0AG5EH42Aq0p7fFdXmNgQRYJ1T64pha2AdIFCRZxagGZv9YfVGehm+ilpHpyU
nIDJvvr8kLd9armihKpB6B8GhfBQa/A=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:43 2026 by rpki-client