Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134769.roa
File: AS134769.roa (raw, json)
Hash identifier: c0cfdLizJw3bNOHiqVJlbQfuGQTrhGGTYE7jD+ABVQI=
Subject key identifier: 97:E7:88:58:F9:F2:A2:45:2C:C2:9A:F5:26:CB:04:05:76:AB:C0:B9
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1DE15AD376BE87B2F418B6FBBADF42335851CE91
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134769.roa
Signing time: Sun 14 Jun 2026 16:44:16 +0000
ROA not before: Sun 14 Jun 2026 16:39:16 +0000
ROA not after: Sun 13 Jun 2027 16:44:16 +0000
asID: 134769
IP address blocks: 58.216.0.0/24 maxlen: 24
58.216.4.0/24 maxlen: 24
58.216.20.0/24 maxlen: 24
58.216.26.0/24 maxlen: 24
58.216.34.0/24 maxlen: 24
58.216.35.0/24 maxlen: 24
58.216.36.0/24 maxlen: 24
58.216.37.0/24 maxlen: 24
58.216.47.0/24 maxlen: 24
58.216.56.0/24 maxlen: 24
58.216.67.0/24 maxlen: 24
58.216.68.0/24 maxlen: 24
58.216.69.0/24 maxlen: 24
58.216.87.0/24 maxlen: 24
58.216.88.0/24 maxlen: 24
58.216.89.0/24 maxlen: 24
58.216.90.0/24 maxlen: 24
58.216.91.0/24 maxlen: 24
58.216.92.0/24 maxlen: 24
58.216.93.0/24 maxlen: 24
58.216.102.0/24 maxlen: 24
58.216.105.0/24 maxlen: 24
58.216.106.0/24 maxlen: 24
58.216.116.0/24 maxlen: 24
58.216.119.0/24 maxlen: 24
61.160.208.0/24 maxlen: 24
61.160.217.0/24 maxlen: 24
61.160.218.0/24 maxlen: 24
61.177.95.0/24 maxlen: 24
180.101.150.0/24 maxlen: 24
180.101.151.0/24 maxlen: 24
180.101.152.0/24 maxlen: 24
180.101.153.0/24 maxlen: 24
180.101.154.0/24 maxlen: 24
180.103.66.0/24 maxlen: 24
180.103.67.0/24 maxlen: 24
240e:1a:110::/44 maxlen: 44
240e:e9:7000::/37 maxlen: 37
240e:108:48::/48 maxlen: 48
240e:108:11d5::/48 maxlen: 48
240e:108:11d8::/48 maxlen: 48
240e:109:8048::/48 maxlen: 48
240e:698:4800::/40 maxlen: 40
240e:978:f00::/40 maxlen: 40
240e:980:4800::/40 maxlen: 40
240e:982:d500::/40 maxlen: 40
240e:982:d800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e1:5a:d3:76:be:87:b2:f4:18:b6:fb:ba:df:42:33:58:51:ce:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 14 16:39:16 2026 GMT
Not After : Jun 13 16:44:16 2027 GMT
Subject: CN=97E78858F9F2A2452CC29AF526CB040576ABC0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:ff:98:4d:f9:2b:6d:a6:fa:c7:08:e2:f1:
c0:ff:cd:ef:35:b9:aa:8a:fc:dc:cf:c3:b3:a4:dd:
16:1a:0f:be:a8:69:1e:49:55:39:fa:14:fa:73:35:
f8:12:c7:04:29:f3:b0:e2:82:3d:1a:7d:46:8d:63:
fb:38:ef:bd:11:06:29:11:7c:58:c7:e2:66:44:01:
2d:57:83:7f:b9:44:39:22:76:13:31:77:44:90:ea:
59:43:ed:c7:99:d5:08:4b:2a:f5:6a:8a:98:82:36:
af:bf:a2:d6:37:97:5a:6b:b5:56:16:fe:28:be:15:
1e:a3:6c:55:d1:24:cb:2b:98:7e:f5:a1:b3:f4:45:
9f:ce:0b:f7:30:a7:00:2e:8d:a2:f3:9e:d7:e1:fa:
23:ed:d2:ad:14:17:03:fe:51:d1:c2:3a:18:26:9e:
83:ce:c0:e3:93:86:44:62:6d:ed:d4:c4:b6:c7:51:
88:84:35:84:7a:01:f0:ce:ff:62:e0:ef:b0:1c:a2:
e2:1c:b3:6b:31:65:0f:9e:e3:9b:c2:4d:44:19:97:
b0:8d:3f:89:a1:b6:25:b9:bd:73:7d:f7:52:d0:9b:
a8:d8:a3:db:18:99:c7:e6:b9:b9:16:a2:ae:57:7a:
ca:f1:33:f4:a7:ba:62:46:b4:b5:f1:2c:be:4b:fa:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:88:58:F9:F2:A2:45:2C:C2:9A:F5:26:CB:04:05:76:AB:C0:B9
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.216.0.0/24
58.216.4.0/24
58.216.20.0/24
58.216.26.0/24
58.216.34.0-58.216.37.255
58.216.47.0/24
58.216.56.0/24
58.216.67.0-58.216.69.255
58.216.87.0-58.216.93.255
58.216.102.0/24
58.216.105.0-58.216.106.255
58.216.116.0/24
58.216.119.0/24
61.160.208.0/24
61.160.217.0-61.160.218.255
61.177.95.0/24
180.101.150.0-180.101.154.255
180.103.66.0/23
IPv6:
240e:1a:110::/44
240e:e9:7000::/37
240e:108:48::/48
240e:108:11d5::/48
240e:108:11d8::/48
240e:109:8048::/48
240e:698:4800::/40
240e:978:f00::/40
240e:980:4800::/40
240e:982:d500::/40
240e:982:d800::/40
Signature Algorithm: sha256WithRSAEncryption
a6:ad:32:3e:5f:c7:1a:49:b3:12:ec:33:58:f4:91:d7:be:2f:
b4:e6:7b:d6:6f:18:95:86:e7:31:a6:ac:21:0d:61:b2:57:ba:
d5:18:67:98:61:4e:6c:e5:ab:98:ba:50:eb:e8:ce:03:82:5c:
ef:00:33:c2:1f:ea:6b:fd:6b:9d:c8:09:3d:bf:76:9e:c2:5b:
91:1d:24:5c:21:2e:7e:50:68:eb:ba:51:b6:32:53:3b:bd:36:
67:70:49:9f:83:74:1f:36:62:7f:39:a0:b7:88:b6:c7:09:48:
75:ca:40:74:42:42:fa:ee:61:d4:3b:cd:be:7d:c9:ff:0c:db:
71:f9:5b:59:1e:aa:70:3e:80:ca:1a:c8:87:52:ef:0a:09:dc:
38:32:d3:29:f4:c9:c7:cf:8c:b5:b7:7c:bd:27:2b:19:6d:90:
a0:fe:50:e7:80:6a:4a:c9:a5:ea:f9:d3:02:e4:86:fe:48:25:
a5:cc:b1:2d:20:20:d6:09:1c:b3:72:d4:b1:a1:eb:6d:9e:f9:
f1:d1:1f:44:99:4a:42:68:c4:d3:5f:e8:94:ed:4d:b1:cd:41:
43:a6:ed:f0:14:01:cc:ba:9f:39:23:8d:1d:62:e3:2f:1b:db:
02:72:84:ae:49:12:2d:cf:96:16:a9:e8:dd:de:2f:91:d4:f5:
17:74:5b:d5
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIUHeFa03a+h7L0GLb7ut9CM1hRzpEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNDE2MzkxNloX
DTI3MDYxMzE2NDQxNlowMzExMC8GA1UEAxMoOTdFNzg4NThGOUYyQTI0NTJDQzI5
QUY1MjZDQjA0MDU3NkFCQzBCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ75/5hN+SttpvrHCOLxwP/N7zW5qor83M/Ds6TdFhoPvqhpHklVOfoU+nM1
+BLHBCnzsOKCPRp9Ro1j+zjvvREGKRF8WMfiZkQBLVeDf7lEOSJ2EzF3RJDqWUPt
x5nVCEsq9WqKmII2r7+i1jeXWmu1Vhb+KL4VHqNsVdEkyyuYfvWhs/RFn84L9zCn
AC6NovOe1+H6I+3SrRQXA/5R0cI6GCaeg87A45OGRGJt7dTEtsdRiIQ1hHoB8M7/
YuDvsByi4hyzazFlD57jm8JNRBmXsI0/iaG2Jbm9c333UtCbqNij2xiZx+a5uRai
rld6yvEz9Ke6Yka0tfEsvkv6W6kCAwEAAaOCAucwggLjMB0GA1UdDgQWBBSX54hY
+fKiRSzCmvUmywQFdqvAuTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM0NzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBIAYIKwYBBQUHAQcBAf8EggEPMIIBCzCBowQCAAEwgZwDBAA62AADBAA62AQD
BAA62BQDBAA62BowDAMEATrYIgMEATrYJAMEADrYLwMEADrYODAMAwQAOthDAwQB
OthEMAwDBAA62FcDBAE62FwDBAA62GYwDAMEADrYaQMEADrYagMEADrYdAMEADrY
dwMEAD2g0DAMAwQAPaDZAwQAPaDaAwQAPbFfMAwDBAG0ZZYDBAC0ZZoDBAG0Z0Iw
YwQCAAIwXQMHBCQOABoBEAMGAyQOAOlwAwcAJA4BCABIAwcAJA4BCBHVAwcAJA4B
CBHYAwcAJA4BCYBIAwYAJA4GmEgDBgAkDgl4DwMGACQOCYBIAwYAJA4JgtUDBgAk
DgmC2DANBgkqhkiG9w0BAQsFAAOCAQEApq0yPl/HGkmzEuwzWPSR174vtOZ71m8Y
lYbnMaasIQ1hsle61RhnmGFObOWrmLpQ6+jOA4Jc7wAzwh/qa/1rncgJPb92nsJb
kR0kXCEuflBo67pRtjJTO702Z3BJn4N0HzZifzmgt4i2xwlIdcpAdEJC+u5h1DvN
vn3J/wzbcflbWR6qcD6AyhrIh1LvCgncODLTKfTJx8+Mtbd8vScrGW2QoP5Q54Bq
Ssml6vnTAuSG/kglpcyxLSAg1gkcs3LUsaHrbZ758dEfRJlKQmjE01/olO1Nsc1B
Q6bt8BQBzLqfOSONHWLjLxvbAnKErkkSLc+WFqno3d4vkdT1F3Rb1Q==
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:07 2026 by rpki-client