Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134767.roa
File: AS134767.roa (raw, json)
Hash identifier: /eutHKTXsG2gEjcQMICv4ZFPWxB1UaI/dA5QBet7QYk=
Subject key identifier: 98:4B:9C:09:0D:46:35:4B:14:33:EF:9C:66:37:35:BC:F7:CA:E1:30
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 082DC1069D83646B1657090CCE4580466B2E9C3A
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134767.roa
Signing time: Thu 21 May 2026 16:11:00 +0000
ROA not before: Thu 21 May 2026 16:06:00 +0000
ROA not after: Thu 20 May 2027 16:11:00 +0000
asID: 134767
IP address blocks: 106.56.52.0/22 maxlen: 22
106.56.56.0/21 maxlen: 21
240e:12:9800::/48 maxlen: 48
240e:12:9801::/48 maxlen: 48
240e:34c:510e::/48 maxlen: 48
240e:34c:510f::/48 maxlen: 48
240e:34c:51e0::/44 maxlen: 44
240e:34c:51f0::/44 maxlen: 44
240e:34c:520e::/48 maxlen: 48
240e:34c:520f::/48 maxlen: 48
240e:34c:52e0::/44 maxlen: 44
240e:34c:52f0::/44 maxlen: 44
240e:34c:530e::/48 maxlen: 48
240e:34c:530f::/48 maxlen: 48
240e:34c:53e0::/44 maxlen: 44
240e:34c:53f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2d:c1:06:9d:83:64:6b:16:57:09:0c:ce:45:80:46:6b:2e:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:06:00 2026 GMT
Not After : May 20 16:11:00 2027 GMT
Subject: CN=984B9C090D46354B1433EF9C663735BCF7CAE130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:d9:d0:07:4f:a5:f1:41:df:1d:33:1f:1a:
2c:b9:97:d5:a9:43:c4:4a:60:13:cb:b2:b8:db:f3:
36:62:21:b4:69:a4:3d:e9:3e:bc:fc:a8:66:07:7d:
09:89:63:d1:7e:23:73:44:77:c2:3e:d1:a2:2a:6f:
84:89:76:c3:31:fa:18:a8:77:1d:45:87:cb:8c:b8:
6b:57:fa:09:f9:29:c9:da:44:0d:d1:69:22:e3:cf:
d1:74:0e:18:91:37:32:9b:34:61:f6:e0:e3:fd:49:
d8:0d:6e:aa:4b:13:1b:84:8d:42:b2:86:11:02:7e:
ec:30:5c:c1:0a:e5:0b:0f:50:c8:cf:43:44:fe:44:
a9:0b:7d:76:18:55:21:00:b1:87:ec:e5:6a:6d:fe:
ac:28:93:cb:c6:3c:34:e0:55:ea:96:be:ce:7d:5f:
17:67:e7:4b:2d:55:8c:31:eb:d6:0a:12:66:2e:77:
9f:2f:08:97:e7:10:d6:53:f5:67:f1:9d:28:c5:3a:
09:e4:45:39:43:e5:3d:fa:cd:42:40:c1:bf:1f:8f:
06:35:3b:d2:7d:ea:52:82:30:27:e5:e9:09:a0:96:
89:ab:20:cb:b4:bb:c0:4c:0b:f3:8f:3c:fe:58:ee:
7f:1e:ce:75:0c:2f:1d:21:14:5a:18:77:29:b6:52:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4B:9C:09:0D:46:35:4B:14:33:EF:9C:66:37:35:BC:F7:CA:E1:30
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.56.52.0-106.56.63.255
IPv6:
240e:12:9800::/47
240e:34c:510e::/47
240e:34c:51e0::/43
240e:34c:520e::/47
240e:34c:52e0::/43
240e:34c:530e::/47
240e:34c:53e0::/43
Signature Algorithm: sha256WithRSAEncryption
00:dd:eb:28:52:67:63:ee:1f:6f:7c:5c:04:74:0f:82:86:91:
b3:01:cd:48:c5:b6:b5:9e:3a:46:df:06:e2:93:16:59:0d:6d:
df:81:00:81:38:5f:af:c5:8a:d0:fa:0c:ce:2f:76:6b:91:9e:
63:13:bb:04:0b:55:0b:6b:8a:6b:65:2e:2b:0f:cd:57:3f:8f:
5b:7c:bc:84:a5:fe:f0:e7:4b:e1:a2:19:8d:9c:0e:5c:32:20:
1e:ac:5a:1b:6d:99:92:ae:4a:a1:66:dc:1c:d4:29:a6:8a:fa:
08:7e:6f:85:20:57:7f:4f:1d:15:13:cb:37:0b:26:d8:c7:10:
34:b2:83:2a:3c:f8:d3:60:bf:dd:78:ae:55:2e:a4:0d:aa:89:
8d:a4:63:5c:74:b6:8f:26:5f:b9:17:77:70:31:57:1c:23:f1:
7b:e5:2c:8c:dc:6a:5c:19:73:47:65:c5:11:f8:30:ce:4d:8f:
28:7c:8d:e4:c1:a1:71:08:b5:82:3c:05:ba:13:d5:c4:e9:dc:
cf:22:86:32:1e:fb:27:a9:d5:a0:4a:07:a4:2c:28:98:01:f8:
f9:f1:60:6d:91:00:79:a7:34:5a:a2:bf:90:17:0e:bd:71:b2:
68:1e:4f:97:85:13:8f:16:d2:21:c4:1e:04:93:47:14:37:ab:
6b:13:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:24 2026 by rpki-client