Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134419.roa
File: AS134419.roa (raw, json)
Hash identifier: 6kjK7wvQRtepgx4++wpt14d5gfvkC68BWnT11fye1fE=
Subject key identifier: 76:82:A5:42:C5:39:43:54:B5:D7:DE:08:5F:8A:59:7B:EC:6B:9E:C2
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4DACDC82EA72711FF47557FBFD1023F5ED4DF3E1
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134419.roa
Signing time: Thu 21 May 2026 16:32:20 +0000
ROA not before: Thu 21 May 2026 16:27:20 +0000
ROA not after: Thu 20 May 2027 16:32:20 +0000
asID: 134419
IP address blocks: 106.127.184.0/21 maxlen: 21
113.14.100.0/22 maxlen: 22
113.14.104.0/21 maxlen: 21
113.14.112.0/20 maxlen: 20
113.14.208.0/21 maxlen: 21
113.15.160.0/19 maxlen: 19
113.15.163.0/24 maxlen: 24
113.17.0.0/19 maxlen: 19
116.10.48.0/20 maxlen: 20
116.10.64.0/20 maxlen: 20
116.11.0.0/19 maxlen: 19
116.11.32.0/22 maxlen: 22
116.11.32.0/24 maxlen: 24
116.253.176.0/21 maxlen: 21
171.108.160.0/20 maxlen: 20
171.109.144.0/20 maxlen: 20
171.110.24.0/21 maxlen: 21
171.110.32.0/21 maxlen: 21
180.137.96.0/19 maxlen: 19
180.142.64.0/21 maxlen: 21
180.142.128.0/21 maxlen: 21
180.142.129.0/24 maxlen: 24
180.142.131.0/24 maxlen: 24
180.143.152.0/21 maxlen: 21
180.143.153.0/24 maxlen: 24
180.143.168.0/21 maxlen: 21
202.103.214.0/23 maxlen: 23
202.103.247.0/24 maxlen: 24
218.21.104.0/21 maxlen: 21
218.21.112.0/21 maxlen: 21
218.65.132.0/24 maxlen: 24
218.65.152.0/24 maxlen: 24
218.65.168.0/24 maxlen: 24
218.65.192.0/21 maxlen: 21
218.65.224.0/21 maxlen: 21
218.65.224.0/24 maxlen: 24
218.65.230.0/24 maxlen: 24
219.159.192.0/20 maxlen: 20
219.159.251.0/24 maxlen: 24
220.173.216.0/21 maxlen: 21
220.173.224.0/21 maxlen: 21
222.83.188.0/22 maxlen: 22
222.83.192.0/20 maxlen: 20
222.83.244.0/22 maxlen: 22
222.216.219.0/24 maxlen: 24
222.217.104.0/21 maxlen: 21
222.217.182.0/24 maxlen: 24
222.218.146.0/23 maxlen: 23
222.218.148.0/22 maxlen: 22
222.218.152.0/21 maxlen: 21
222.218.157.0/24 maxlen: 24
222.218.160.0/20 maxlen: 20
222.218.176.0/21 maxlen: 21
240e:9:6000::/36 maxlen: 36
240e:49:9000::/38 maxlen: 38
240e:a6::/35 maxlen: 35
240e:a7:8800::/37 maxlen: 37
240e:250:1400::/40 maxlen: 40
240e:250:1500::/40 maxlen: 40
240e:250:1600::/40 maxlen: 40
240e:250:2906::/48 maxlen: 48
240e:350:5c00::/38 maxlen: 38
240e:350:5c03::/48 maxlen: 48
240e:350:6000::/38 maxlen: 38
240e:351:5c00::/38 maxlen: 38
240e:351:6000::/38 maxlen: 38
240e:352:5c00::/38 maxlen: 38
240e:352:5c00::/40 maxlen: 40
240e:352:6000::/38 maxlen: 38
240e:353:5c00::/38 maxlen: 38
240e:353:6000::/38 maxlen: 38
240e:354:5c00::/38 maxlen: 38
240e:354:6000::/38 maxlen: 38
240e:355:5c00::/38 maxlen: 38
240e:355:6000::/38 maxlen: 38
240e:356:5c00::/38 maxlen: 38
240e:356:6000::/38 maxlen: 38
240e:357:5c00::/38 maxlen: 38
240e:357:6000::/38 maxlen: 38
240e:650:8404::/48 maxlen: 48
240e:651:3000::/36 maxlen: 36
240e:950:5000::/38 maxlen: 38
240e:950:5400::/38 maxlen: 38
240e:950:5800::/38 maxlen: 38
240e:a50:5c00::/38 maxlen: 38
240e:a50:6000::/38 maxlen: 38
240e:a51:5c00::/38 maxlen: 38
240e:a51:6000::/38 maxlen: 38
240e:a52:5c00::/38 maxlen: 38
240e:a52:6000::/38 maxlen: 38
240e:a53:5c00::/38 maxlen: 38
240e:a53:6000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ac:dc:82:ea:72:71:1f:f4:75:57:fb:fd:10:23:f5:ed:4d:f3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:27:20 2026 GMT
Not After : May 20 16:32:20 2027 GMT
Subject: CN=7682A542C5394354B5D7DE085F8A597BEC6B9EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:83:be:94:64:da:05:4b:9b:84:0b:e7:1c:
bc:dd:5a:22:8a:e0:30:d5:eb:89:97:b2:eb:67:57:
cb:14:a2:29:f9:dc:b9:1a:ad:10:89:67:a5:d6:88:
68:6a:18:f2:01:d7:ed:0a:a4:02:dd:57:15:e3:59:
4f:65:01:a4:07:6a:89:00:d8:e2:f5:90:b2:f7:eb:
78:6a:80:b5:e9:23:29:a3:76:22:0d:d2:b5:ba:d9:
1e:7e:a2:05:d0:f8:73:b1:6a:aa:c2:ff:61:5c:bb:
aa:f0:2b:2b:2e:ea:6c:52:59:c7:45:23:54:e2:9e:
1e:4f:fa:74:a8:3b:9a:1e:ba:37:60:52:43:0d:bb:
69:5c:5c:a7:03:d2:99:d5:2f:25:b0:d0:de:a6:90:
89:17:0b:88:3e:88:5d:d6:a9:4d:8a:36:5d:e7:af:
72:05:d6:68:c3:e6:cc:3e:ff:e1:e0:3a:0e:f0:b8:
7d:14:1c:31:b9:2d:c0:98:4f:55:10:9d:42:86:33:
d9:ce:f1:1c:c0:4a:dc:14:b0:2f:6a:dc:cf:f0:3f:
4c:f9:83:c5:52:83:76:94:bd:40:9a:b6:e3:03:9d:
34:b3:8b:6a:bf:72:a4:b3:6d:e9:f8:37:37:33:4e:
3b:a7:2e:1c:a1:86:cf:e3:b0:2b:49:09:10:54:dd:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:A5:42:C5:39:43:54:B5:D7:DE:08:5F:8A:59:7B:EC:6B:9E:C2
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.127.184.0/21
113.14.100.0-113.14.127.255
113.14.208.0/21
113.15.160.0/19
113.17.0.0/19
116.10.48.0-116.10.79.255
116.11.0.0-116.11.35.255
116.253.176.0/21
171.108.160.0/20
171.109.144.0/20
171.110.24.0-171.110.39.255
180.137.96.0/19
180.142.64.0/21
180.142.128.0/21
180.143.152.0/21
180.143.168.0/21
202.103.214.0/23
202.103.247.0/24
218.21.104.0-218.21.119.255
218.65.132.0/24
218.65.152.0/24
218.65.168.0/24
218.65.192.0/21
218.65.224.0/21
219.159.192.0/20
219.159.251.0/24
220.173.216.0-220.173.231.255
222.83.188.0-222.83.207.255
222.83.244.0/22
222.216.219.0/24
222.217.104.0/21
222.217.182.0/24
222.218.146.0-222.218.183.255
IPv6:
240e:9:6000::/36
240e:49:9000::/38
240e:a6::/35
240e:a7:8800::/37
240e:250:1400::-240e:250:16ff:ffff:ffff:ffff:ffff:ffff
240e:250:2906::/48
240e:350:5c00::-240e:350:63ff:ffff:ffff:ffff:ffff:ffff
240e:351:5c00::-240e:351:63ff:ffff:ffff:ffff:ffff:ffff
240e:352:5c00::-240e:352:63ff:ffff:ffff:ffff:ffff:ffff
240e:353:5c00::-240e:353:63ff:ffff:ffff:ffff:ffff:ffff
240e:354:5c00::-240e:354:63ff:ffff:ffff:ffff:ffff:ffff
240e:355:5c00::-240e:355:63ff:ffff:ffff:ffff:ffff:ffff
240e:356:5c00::-240e:356:63ff:ffff:ffff:ffff:ffff:ffff
240e:357:5c00::-240e:357:63ff:ffff:ffff:ffff:ffff:ffff
240e:650:8404::/48
240e:651:3000::/36
240e:950:5000::-240e:950:5bff:ffff:ffff:ffff:ffff:ffff
240e:a50:5c00::-240e:a50:63ff:ffff:ffff:ffff:ffff:ffff
240e:a51:5c00::-240e:a51:63ff:ffff:ffff:ffff:ffff:ffff
240e:a52:5c00::-240e:a52:63ff:ffff:ffff:ffff:ffff:ffff
240e:a53:5c00::-240e:a53:63ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
80:15:c3:11:66:1d:76:20:a8:d0:d7:f1:5a:5c:67:ba:2e:c7:
b2:41:c9:81:70:06:ca:77:92:79:bd:ee:4f:06:0c:61:7c:da:
32:77:78:99:6b:68:0a:5a:dd:24:5a:cf:e9:d8:c3:6d:a0:57:
8a:0f:a6:0d:b8:fa:ec:7c:8e:b4:68:a6:dc:64:a2:f6:be:9e:
04:15:e4:8f:8e:4d:0b:59:15:0d:6d:81:80:92:88:ec:02:95:
b1:52:57:9d:f1:24:f5:51:a7:e6:ae:79:56:3a:0b:0d:cc:d6:
c8:91:52:10:17:4f:2a:19:39:15:f1:9b:0f:c4:f9:01:8e:6d:
67:bf:0c:f9:d4:c4:d6:39:fc:5e:34:f5:45:2b:1a:da:d0:cd:
89:a0:d5:dc:c0:fe:7a:ca:9a:93:69:9b:30:27:a7:14:37:eb:
fa:24:4c:5f:ef:19:69:69:d6:d8:58:4f:81:97:9e:56:1a:e9:
62:7b:59:7c:46:2e:4d:0e:90:fc:38:c2:95:e2:a6:02:47:8c:
d8:3a:84:a3:95:e2:a3:00:96:e5:bf:b6:08:c5:49:be:48:78:
9f:74:c9:1c:a3:51:e5:b2:8b:6e:24:32:0a:25:22:8a:38:50:
a2:33:ae:e6:89:bf:10:4f:54:50:e0:0b:df:ca:9f:05:1b:15:
1c:9f:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:25 2026 by rpki-client