Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134770.roa
File: AS134770.roa (raw, json)
Hash identifier: 4NSe3xO5hQ8aTHiSfX4+S07TnlQLdFmyBB/6QlR9gPM=
Subject key identifier: CB:81:D6:C7:85:A1:B7:95:09:46:77:E4:F8:FE:E4:45:C4:B7:D4:1D
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 59E02A9E1B113FF46EE20C3A1E4BFD380D432113
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134770.roa
Signing time: Fri 07 Aug 2026 03:10:53 +0000
ROA not before: Fri 07 Aug 2026 03:05:53 +0000
ROA not after: Fri 06 Aug 2027 03:10:53 +0000
asID: 134770
IP address blocks: 58.211.215.0/24 maxlen: 24
61.155.134.0/24 maxlen: 24
61.155.135.0/24 maxlen: 24
61.155.139.0/24 maxlen: 24
61.155.171.0/24 maxlen: 24
61.160.174.0/24 maxlen: 24
61.160.175.0/24 maxlen: 24
61.160.179.0/24 maxlen: 24
114.219.141.0/24 maxlen: 24
117.81.78.0/24 maxlen: 24
117.81.94.0/24 maxlen: 24
117.81.175.0/24 maxlen: 24
121.228.171.0/24 maxlen: 24
121.228.173.0/24 maxlen: 24
121.228.174.0/24 maxlen: 24
121.228.176.0/24 maxlen: 24
121.228.177.0/24 maxlen: 24
121.228.178.0/24 maxlen: 24
121.228.179.0/24 maxlen: 24
121.228.180.0/24 maxlen: 24
121.228.181.0/24 maxlen: 24
121.228.182.0/24 maxlen: 24
121.228.183.0/24 maxlen: 24
121.228.184.0/24 maxlen: 24
121.239.11.0/24 maxlen: 24
180.97.79.0/24 maxlen: 24
180.97.93.0/24 maxlen: 24
180.97.94.0/24 maxlen: 24
180.97.95.0/24 maxlen: 24
180.97.166.0/24 maxlen: 24
180.101.80.0/22 maxlen: 22
180.101.84.0/23 maxlen: 23
180.101.86.0/24 maxlen: 24
180.101.210.0/24 maxlen: 24
180.101.211.0/24 maxlen: 24
180.101.212.0/22 maxlen: 22
180.101.216.0/24 maxlen: 24
180.101.223.0/24 maxlen: 24
218.94.231.0/24 maxlen: 24
218.94.232.0/24 maxlen: 24
221.224.84.0/24 maxlen: 24
221.224.105.0/24 maxlen: 24
221.224.139.0/24 maxlen: 24
221.224.220.0/24 maxlen: 24
240e:1a:150::/44 maxlen: 44
240e:e9:6800::/37 maxlen: 37
240e:979:e00::/40 maxlen: 40
240e:979:1e00::/40 maxlen: 40
240e:979:2e00::/40 maxlen: 40
240e:979:3e00::/40 maxlen: 40
240e:979:4e00::/40 maxlen: 40
240e:979:5e00::/40 maxlen: 40
240e:979:6e00::/40 maxlen: 40
240e:979:7e00::/40 maxlen: 40
240e:980:8120::/44 maxlen: 44
240e:980:8130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e0:2a:9e:1b:11:3f:f4:6e:e2:0c:3a:1e:4b:fd:38:0d:43:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Aug 7 03:05:53 2026 GMT
Not After : Aug 6 03:10:53 2027 GMT
Subject: CN=CB81D6C785A1B795094677E4F8FEE445C4B7D41D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:99:3f:39:01:11:34:c7:58:1f:e3:0d:07:
d7:15:e2:43:95:06:56:8a:c4:ab:d4:30:d1:23:3b:
40:d0:98:2b:19:38:8c:98:c0:74:9b:c3:6d:aa:d6:
7a:26:48:f9:68:84:0c:bc:d2:5e:7e:39:1f:5b:bb:
a4:09:92:f7:db:16:04:79:a3:21:e0:4d:a1:5b:27:
7e:1e:5f:eb:f5:93:97:27:b7:f3:6b:c2:dd:10:99:
86:ec:14:88:c9:75:4f:2e:9e:69:ec:e3:47:0d:d7:
3f:39:eb:db:7b:b4:73:b8:bf:96:06:99:56:97:d6:
54:2d:ce:5e:25:b5:94:41:09:fe:f0:83:45:0c:ea:
03:df:df:61:a6:73:d0:b7:02:0e:db:c5:4c:cf:43:
08:ed:89:da:7e:66:3b:5c:6b:9a:cf:27:09:01:dc:
5b:96:72:99:2c:75:f0:3d:a6:c5:aa:31:e1:70:7a:
38:b1:ea:52:c8:fd:11:03:0c:2c:1c:8a:89:1f:2b:
44:ac:3b:80:df:7b:2f:a9:58:b8:51:87:14:92:da:
7f:86:a7:c1:cf:3c:0a:14:da:f1:a5:83:5f:81:12:
8f:02:5a:f6:ee:ff:06:c9:f8:eb:9b:31:b6:52:b8:
79:a6:9a:1f:5c:9b:ce:0a:e7:61:fc:71:36:92:1f:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:D6:C7:85:A1:B7:95:09:46:77:E4:F8:FE:E4:45:C4:B7:D4:1D
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.211.215.0/24
61.155.134.0/23
61.155.139.0/24
61.155.171.0/24
61.160.174.0/23
61.160.179.0/24
114.219.141.0/24
117.81.78.0/24
117.81.94.0/24
117.81.175.0/24
121.228.171.0/24
121.228.173.0-121.228.174.255
121.228.176.0-121.228.184.255
121.239.11.0/24
180.97.79.0/24
180.97.93.0-180.97.95.255
180.97.166.0/24
180.101.80.0-180.101.86.255
180.101.210.0-180.101.216.255
180.101.223.0/24
218.94.231.0-218.94.232.255
221.224.84.0/24
221.224.105.0/24
221.224.139.0/24
221.224.220.0/24
IPv6:
240e:1a:150::/44
240e:e9:6800::/37
240e:979:e00::/40
240e:979:1e00::/40
240e:979:2e00::/40
240e:979:3e00::/40
240e:979:4e00::/40
240e:979:5e00::/40
240e:979:6e00::/40
240e:979:7e00::/40
240e:980:8120::/43
Signature Algorithm: sha256WithRSAEncryption
5b:a8:a6:85:01:14:8d:b8:c1:5e:d9:61:9c:ab:9a:ab:dd:2a:
9a:42:96:a0:96:c7:bf:77:92:00:0a:c0:ab:c2:c8:38:ae:63:
75:cf:f9:fb:60:8c:9c:cc:9e:d0:3c:74:2f:e9:cd:a6:5f:24:
54:c3:71:c8:3f:28:be:a0:00:28:b5:4f:b1:f3:a5:9c:43:34:
6c:97:6f:dd:df:39:3b:1f:9d:78:6e:5b:95:2c:4d:95:a4:fb:
4b:09:60:90:14:d1:19:64:e0:2b:2d:a9:a8:79:08:b7:4a:23:
b3:3e:bc:fe:c8:1c:9d:04:28:b9:eb:8c:f6:28:f1:8c:39:35:
fb:71:15:a3:1c:07:45:96:44:62:fc:56:bc:fe:87:fa:24:64:
d5:e7:f3:19:0b:78:4f:ae:d7:9b:c4:91:f4:fd:65:ce:25:ab:
ec:c1:60:1f:a2:88:fc:17:b0:81:d4:1f:ca:70:61:d0:e1:4a:
b9:8d:a6:6c:23:24:5e:00:86:2c:e4:da:8e:46:24:22:be:16:
8d:09:b5:3d:22:ca:30:87:29:99:bb:43:bd:b6:78:5e:5f:13:
94:f3:0e:33:45:83:d3:22:4c:c8:ac:30:aa:82:41:fc:77:b6:
a5:3b:13:61:85:68:9a:47:b8:0f:3c:40:bd:02:67:65:c4:a2:
6f:5b:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:42:46 2026 by rpki-client