Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134762.roa
File:                     AS134762.roa (raw, json)
Hash identifier:          fJEoHZQ7eF80YODvDYeFB4CkeeBCT2EZk5ttrDyOqos=
Subject key identifier:   7D:B7:2B:90:D7:B5:13:F3:18:23:E9:C6:35:E5:9F:59:02:DB:2A:38
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       0BF9541262FE4705EF0A023B251DD2FAEE5960D6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134762.roa
Signing time:             Thu 21 May 2026 16:15:15 +0000
ROA not before:           Thu 21 May 2026 16:10:15 +0000
ROA not after:            Thu 20 May 2027 16:15:15 +0000
asID:                     134762
IP address blocks:        59.44.96.0/19 maxlen: 19
                          123.177.60.0/22 maxlen: 22
                          123.185.96.0/20 maxlen: 20
                          240e:30c:2c00::/39 maxlen: 39
                          240e:30e:1a00::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 06:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f9:54:12:62:fe:47:05:ef:0a:02:3b:25:1d:d2:fa:ee:59:60:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 21 16:10:15 2026 GMT
            Not After : May 20 16:15:15 2027 GMT
        Subject: CN=7DB72B90D7B513F31823E9C635E59F5902DB2A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:59:74:69:28:85:48:ef:f1:35:b3:ce:9a:
                    74:7a:06:37:44:95:1e:56:cd:52:3f:cc:af:79:35:
                    18:08:ce:c5:cd:d6:f4:87:bf:b8:f0:d0:9f:06:b0:
                    6f:1c:20:32:7b:80:69:91:f9:ce:52:3b:92:bc:97:
                    f8:c4:46:cc:4b:45:5d:06:ea:cd:5a:2b:23:58:cc:
                    4d:e7:30:dc:e2:71:c7:60:27:0e:97:9d:c8:71:6e:
                    25:77:d0:93:09:83:43:eb:aa:f0:71:12:51:a1:d5:
                    29:40:f2:80:7f:0d:d3:89:77:ed:d9:81:b4:75:46:
                    bb:fe:9a:b5:be:dc:01:39:a6:9f:72:5b:ef:aa:ab:
                    05:0e:44:5b:ca:b5:93:6e:19:0a:c7:fb:73:27:2c:
                    25:e6:f8:e8:89:71:2a:ce:2e:03:44:4f:64:d7:7d:
                    5c:2a:9f:f0:dd:65:7b:6f:0b:3c:88:54:18:ed:0a:
                    0e:70:c6:e8:d4:be:4c:a1:35:e4:f8:d0:c3:e7:00:
                    b6:1b:c9:3a:46:2c:8e:6c:d5:e5:a7:01:62:50:30:
                    fd:00:c2:aa:b6:e2:e0:c4:2c:01:fe:db:f9:57:0c:
                    1a:1e:a0:77:83:ac:64:49:66:bc:74:51:a1:50:01:
                    73:96:1f:f4:2a:d0:0a:d3:26:f5:a2:7a:7e:e6:08:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B7:2B:90:D7:B5:13:F3:18:23:E9:C6:35:E5:9F:59:02:DB:2A:38
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.44.96.0/19
                  123.177.60.0/22
                  123.185.96.0/20
                IPv6:
                  240e:30c:2c00::/39
                  240e:30e:1a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         17:cf:84:48:28:57:bf:33:f5:da:86:68:ad:9f:e4:4a:1e:ca:
         69:1a:06:2a:9b:4c:34:86:62:81:47:e6:41:69:4c:66:9b:07:
         c7:eb:ac:aa:f8:40:2b:0e:13:e3:ce:4e:69:bd:08:38:f0:b7:
         4d:cf:61:b9:59:86:4a:ad:17:a3:30:fc:cb:d4:63:3c:56:4c:
         c8:e1:e1:76:e9:55:40:bb:e3:c2:b9:e3:4b:92:52:60:f3:81:
         ed:76:cc:c8:ec:10:66:4c:5b:f1:92:c5:f6:46:71:38:06:13:
         98:42:9a:6f:14:f8:cb:46:f1:8a:2f:c4:51:9a:da:24:99:a1:
         b3:22:f0:a1:d2:53:af:25:85:a6:f0:e1:9d:5c:de:6f:7d:64:
         ed:81:b8:c4:9a:66:62:f2:f0:4c:95:19:ed:a3:68:f2:bf:2e:
         ed:b7:d8:e3:c1:03:2f:20:0e:10:c9:1a:7f:5c:ae:bd:2f:fc:
         05:62:99:d9:5c:25:4c:bf:13:8f:7b:4c:5e:a1:65:39:90:9f:
         f9:d9:01:4b:b7:3f:09:3b:a4:4b:2d:aa:06:de:57:94:2e:36:
         98:f0:70:85:dc:cb:fc:53:cd:fa:8f:cb:b4:9a:4e:fb:c3:fa:
         b9:21:9b:8e:08:13:82:0c:44:ef:9f:06:6d:97:fa:42:33:5d:
         f6:ef:83:78
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUC/lUEmL+RwXvCgI7JR3S+u5ZYNYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE2MTAxNVoX
DTI3MDUyMDE2MTUxNVowMzExMC8GA1UEAxMoN0RCNzJCOTBEN0I1MTNGMzE4MjNF
OUM2MzVFNTlGNTkwMkRCMkEzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANlGWXRpKIVI7/E1s86adHoGN0SVHlbNUj/Mr3k1GAjOxc3W9Ie/uPDQnwaw
bxwgMnuAaZH5zlI7kryX+MRGzEtFXQbqzVorI1jMTecw3OJxx2AnDpedyHFuJXfQ
kwmDQ+uq8HESUaHVKUDygH8N04l37dmBtHVGu/6atb7cATmmn3Jb76qrBQ5EW8q1
k24ZCsf7cycsJeb46IlxKs4uA0RPZNd9XCqf8N1le28LPIhUGO0KDnDG6NS+TKE1
5PjQw+cAthvJOkYsjmzV5acBYlAw/QDCqrbi4MQsAf7b+VcMGh6gd4OsZElmvHRR
oVABc5Yf9CrQCtMm9aJ6fuYIBtcCAwEAAaOCAggwggIEMB0GA1UdDgQWBBR9tyuQ
17UT8xgj6cY15Z9ZAtsqODAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM0NzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQFOyxgAwQCe7E8AwQEe7lgMBYE
AgACMBADBgEkDgMMLAMGASQOAw4aMA0GCSqGSIb3DQEBCwUAA4IBAQAXz4RIKFe/
M/Xahmitn+RKHsppGgYqm0w0hmKBR+ZBaUxmmwfH66yq+EArDhPjzk5pvQg48LdN
z2G5WYZKrRejMPzL1GM8VkzI4eF26VVAu+PCueNLklJg84HtdszI7BBmTFvxksX2
RnE4BhOYQppvFPjLRvGKL8RRmtokmaGzIvCh0lOvJYWm8OGdXN5vfWTtgbjEmmZi
8vBMlRnto2jyvy7tt9jjwQMvIA4QyRp/XK69L/wFYpnZXCVMvxOPe0xeoWU5kJ/5
2QFLtz8JO6RLLaoG3leULjaY8HCF3Mv8U836j8u0mk77w/q5IZuOCBOCDETvnwZt
l/pCM13274N4
-----END CERTIFICATE-----
Generated at Sat May 23 07:08:24 2026 by rpki-client