Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134760.roa
File: AS134760.roa (raw, json)
Hash identifier: 2CVmu/6WhxfJpwSO5zmqsqhDrvIU3oFkL8H3CM2l0uo=
Subject key identifier: 59:8A:6C:FC:63:BC:20:76:89:ED:E0:5D:07:56:47:CB:D1:36:CB:0F
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 60CA1FC450C80D642EFA249E9C2B0063626AEE8C
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134760.roa
Signing time: Fri 29 May 2026 16:04:44 +0000
ROA not before: Fri 29 May 2026 15:59:44 +0000
ROA not after: Fri 28 May 2027 16:04:44 +0000
asID: 134760
IP address blocks: 27.185.4.0/22 maxlen: 22
27.185.192.0/18 maxlen: 18
106.119.160.0/21 maxlen: 21
106.119.168.0/21 maxlen: 21
106.119.176.0/21 maxlen: 21
124.236.0.0/17 maxlen: 17
124.239.158.0/23 maxlen: 23
124.239.161.0/24 maxlen: 24
124.239.162.0/23 maxlen: 23
219.148.34.0/24 maxlen: 24
240e:c:800::/37 maxlen: 37
240e:4c::/37 maxlen: 37
240e:b1:8800::/37 maxlen: 37
240e:108:10f3::/48 maxlen: 48
240e:108:10f4::/48 maxlen: 48
240e:940::/40 maxlen: 40
240e:940:100::/40 maxlen: 40
240e:940:8000::/40 maxlen: 40
240e:940:8100::/40 maxlen: 40
240e:940:c000::/40 maxlen: 40
240e:940:c100::/40 maxlen: 40
240e:940:e000::/40 maxlen: 40
240e:940:e100::/40 maxlen: 40
240e:981:f300::/40 maxlen: 40
240e:981:f400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ca:1f:c4:50:c8:0d:64:2e:fa:24:9e:9c:2b:00:63:62:6a:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 29 15:59:44 2026 GMT
Not After : May 28 16:04:44 2027 GMT
Subject: CN=598A6CFC63BC207689EDE05D075647CBD136CB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:8f:63:f1:72:cd:12:c8:c2:5f:b2:31:ff:
8f:7e:7e:ae:d6:35:0a:9b:92:4c:68:8c:4a:20:2d:
35:4c:b1:ed:d3:ab:76:64:2f:9b:90:54:c1:f6:95:
2a:b9:75:bd:5c:c2:5f:16:8b:85:eb:06:fb:1c:33:
d1:2e:63:7c:c6:f9:d4:86:8f:ec:64:a2:26:ab:ac:
b2:4b:56:b7:96:d8:36:d5:1b:e1:86:06:53:f3:29:
9f:e1:5c:e0:b1:1b:d2:40:d8:32:89:71:4d:e0:25:
c1:01:bc:df:d7:bf:ea:4e:e7:3b:98:ce:28:51:4f:
10:d0:30:f4:05:0b:cc:ed:f4:9e:1a:be:b1:01:37:
6d:43:c8:00:05:7a:65:bb:ad:a1:60:fd:9c:1c:87:
57:74:13:3c:39:83:76:f9:af:e1:4f:40:8d:bc:6a:
20:55:7c:28:ba:c9:11:19:54:47:5d:09:e1:9e:41:
91:94:7d:c6:cc:85:5f:8e:da:64:e4:6e:11:02:ae:
4a:d2:35:6a:22:e4:b3:35:cc:4a:68:ac:69:52:3a:
f7:51:b7:68:bc:0d:eb:ad:ee:e0:90:af:e6:d6:08:
49:ee:ee:98:5a:1f:da:d3:a9:a4:b0:46:ca:17:63:
bc:3e:82:ec:6f:ee:52:7c:a7:a7:c5:02:62:c5:89:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:6C:FC:63:BC:20:76:89:ED:E0:5D:07:56:47:CB:D1:36:CB:0F
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.185.4.0/22
27.185.192.0/18
106.119.160.0-106.119.183.255
124.236.0.0/17
124.239.158.0/23
124.239.161.0-124.239.163.255
219.148.34.0/24
IPv6:
240e:c:800::/37
240e:4c::/37
240e:b1:8800::/37
240e:108:10f3::-240e:108:10f4:ffff:ffff:ffff:ffff:ffff
240e:940::/39
240e:940:8000::/39
240e:940:c000::/39
240e:940:e000::/39
240e:981:f300::-240e:981:f4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:1d:ed:93:2e:54:d5:9c:d7:67:88:4b:5d:77:85:02:21:89:
fc:72:52:71:5f:c0:ad:2f:93:27:f9:97:a3:8c:c5:f4:de:e4:
84:ea:e5:de:ee:90:6a:cf:af:9d:04:8a:94:f0:da:32:21:12:
8c:9e:3d:8a:4a:d7:75:62:ac:1c:37:d2:1f:53:81:7c:b2:e4:
7f:96:ac:fe:0a:5a:bc:08:66:5a:66:17:18:a3:98:39:6c:dd:
b7:c8:aa:5c:84:3e:e6:33:4e:17:ba:8e:49:d2:96:59:aa:80:
a1:6f:76:3d:82:c5:4b:2d:f6:b6:d2:d4:c6:73:db:e6:ef:83:
b8:e0:15:ec:26:13:3d:8a:a0:3c:94:e0:ba:89:29:65:04:d6:
b5:22:20:ff:8c:53:d6:af:28:6f:79:10:68:3e:d1:04:36:2d:
a4:a7:07:a0:02:8e:41:38:be:7c:00:e7:da:b9:c4:e6:e9:0f:
22:5f:b1:9f:19:67:bb:72:99:de:7e:37:f5:1f:b5:16:bb:b1:
a6:db:a3:ba:c6:5b:28:64:db:fc:95:3d:9c:34:08:bc:41:af:
c4:e3:c1:cc:af:48:f2:9c:5c:bc:f3:fe:6f:9c:cb:dc:4f:5e:
8b:c1:28:8e:18:4e:a9:ec:70:6d:f6:2b:96:76:f6:01:7d:bd:
54:26:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:54:48 2026 by rpki-client