Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134773.roa
File: AS134773.roa (raw, json)
Hash identifier: sEvatW8k0deHIQVcytuhRBYts1aqZvedV0d21r2y42M=
Subject key identifier: 70:41:AC:13:E3:29:2F:F7:57:B8:C2:5E:20:D6:3C:D8:6E:71:E5:3A
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5E258801F8FB4B88A5E14D01A5F09E7F83527C3E
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134773.roa
Signing time: Thu 16 Jul 2026 16:02:00 +0000
ROA not before: Thu 16 Jul 2026 15:57:00 +0000
ROA not after: Thu 15 Jul 2027 16:02:00 +0000
asID: 134773
IP address blocks: 14.23.66.0/24 maxlen: 24
58.62.144.0/24 maxlen: 24
59.37.0.0/23 maxlen: 23
59.41.239.0/24 maxlen: 24
61.144.6.0/24 maxlen: 24
113.105.5.0/24 maxlen: 24
113.108.148.0/24 maxlen: 24
113.108.192.0/20 maxlen: 20
183.6.147.0/24 maxlen: 24
183.24.13.0/24 maxlen: 24
183.24.157.0/24 maxlen: 24
183.63.130.0/24 maxlen: 24
183.63.132.0/22 maxlen: 22
202.111.242.0/24 maxlen: 24
219.137.159.0/24 maxlen: 24
219.137.193.0/24 maxlen: 24
240e:5e:4000::/48 maxlen: 48
240e:5e:4001::/48 maxlen: 48
240e:108:4041::/48 maxlen: 48
240e:108:405a::/48 maxlen: 48
240e:108:4841::/48 maxlen: 48
240e:6b0:751::/48 maxlen: 48
240e:6b0:3000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 12:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:25:88:01:f8:fb:4b:88:a5:e1:4d:01:a5:f0:9e:7f:83:52:7c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 16 15:57:00 2026 GMT
Not After : Jul 15 16:02:00 2027 GMT
Subject: CN=7041AC13E3292FF757B8C25E20D63CD86E71E53A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:57:f8:06:c5:aa:7e:a9:ca:14:00:67:db:
5b:34:5f:39:4b:31:41:42:f6:04:28:f2:77:e5:fd:
b8:7a:1c:ad:13:2e:19:72:55:49:dc:90:a5:4b:0e:
2e:7b:d8:4f:d3:fe:2a:ff:76:d3:de:6c:34:34:cf:
e7:fd:c9:67:1f:44:14:63:cc:6a:1d:3d:3b:e4:c8:
b4:8a:d6:2c:0c:32:97:ec:0a:ea:b7:6b:bb:ef:4d:
48:bb:10:90:fc:ca:cd:9c:b3:c7:b9:7d:d3:54:d0:
9d:2a:dc:4a:6a:86:85:66:b7:8c:ec:a9:ab:82:63:
d7:67:3f:fe:39:57:46:99:ff:61:dd:6a:3b:80:dd:
ba:1c:d8:c3:2f:0a:86:c3:78:2b:7e:9e:9e:a9:ca:
e8:da:a2:e8:bd:35:99:04:0b:8c:a2:ec:99:e4:70:
11:22:2e:2b:a0:a9:10:be:32:7e:75:fd:63:6d:95:
3a:4f:d1:bc:05:f1:30:30:56:67:95:9c:bb:41:0b:
d4:85:50:23:9e:a3:d6:57:67:73:ff:83:0a:8e:e6:
4f:9d:d6:8a:05:c8:c8:a3:7d:19:dc:6e:09:2a:4d:
78:78:a6:00:8b:1c:b3:fd:de:6b:55:bc:90:79:60:
88:d8:3c:d6:67:cb:fd:cc:7b:56:65:ea:e3:c3:b4:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:AC:13:E3:29:2F:F7:57:B8:C2:5E:20:D6:3C:D8:6E:71:E5:3A
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.23.66.0/24
58.62.144.0/24
59.37.0.0/23
59.41.239.0/24
61.144.6.0/24
113.105.5.0/24
113.108.148.0/24
113.108.192.0/20
183.6.147.0/24
183.24.13.0/24
183.24.157.0/24
183.63.130.0/24
183.63.132.0/22
202.111.242.0/24
219.137.159.0/24
219.137.193.0/24
IPv6:
240e:5e:4000::/47
240e:108:4041::/48
240e:108:405a::/48
240e:108:4841::/48
240e:6b0:751::/48
240e:6b0:3000::/44
Signature Algorithm: sha256WithRSAEncryption
a0:4d:6c:c4:68:b3:51:6c:0c:53:31:db:56:2f:f0:a9:c9:e3:
a9:aa:4f:85:fb:c3:9c:19:d0:04:5a:88:e7:a9:5b:52:3c:84:
0a:21:21:48:be:50:02:08:f9:15:74:4c:22:71:b4:93:40:10:
bf:ff:22:02:9a:e9:fe:b3:f3:9e:b8:0a:18:03:19:30:d2:a2:
ff:5a:0e:75:9d:e8:40:58:96:95:62:71:e4:84:1d:6a:2c:65:
5f:55:82:55:d4:cf:b6:f8:b3:80:8f:cd:d4:74:c9:6d:4d:2b:
44:2e:3c:35:ac:70:89:db:ad:d7:66:57:80:2e:2b:75:a6:53:
ce:0c:9d:1a:43:b8:5d:a7:b1:06:02:cd:59:a7:e4:9a:04:e0:
44:41:c1:f6:75:40:c5:96:81:31:9c:97:ae:7e:5b:18:6d:8c:
56:8e:fb:1b:9b:c6:e0:3b:e7:48:9c:f2:64:1e:f9:90:c2:44:
61:68:9f:a4:7e:f9:c9:e9:f2:6f:85:84:fd:6c:81:24:59:12:
1a:dc:a7:eb:70:bf:92:be:44:42:9b:83:d4:a1:3a:27:f9:0d:
73:01:92:56:26:4f:71:d3:d4:b7:92:05:09:7e:0e:8b:4f:a5:
d7:61:c1:47:5e:62:7e:36:d5:bd:d8:ad:82:d1:f6:35:b0:d6:
f8:29:6c:99
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIUXiWIAfj7S4il4U0BpfCef4NSfD4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcxNjE1NTcwMFoX
DTI3MDcxNTE2MDIwMFowMzExMC8GA1UEAxMoNzA0MUFDMTNFMzI5MkZGNzU3QjhD
MjVFMjBENjNDRDg2RTcxRTUzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKclV/gGxap+qcoUAGfbWzRfOUsxQUL2BCjyd+X9uHocrRMuGXJVSdyQpUsO
LnvYT9P+Kv92095sNDTP5/3JZx9EFGPMah09O+TItIrWLAwyl+wK6rdru+9NSLsQ
kPzKzZyzx7l901TQnSrcSmqGhWa3jOypq4Jj12c//jlXRpn/Yd1qO4DduhzYwy8K
hsN4K36enqnK6Nqi6L01mQQLjKLsmeRwESIuK6CpEL4yfnX9Y22VOk/RvAXxMDBW
Z5Wcu0EL1IVQI56j1ldnc/+DCo7mT53WigXIyKN9GdxuCSpNeHimAIscs/3ea1W8
kHlgiNg81mfL/cx7VmXq48O00ikCAwEAAaOCAn8wggJ7MB0GA1UdDgQWBBRwQawT
4ykv91e4wl4g1jzYbnHlOjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM0NzczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIG5BggrBgEFBQcBBwEB/wSBqTCBpjBmBAIAATBgAwQADhdCAwQAOj6QAwQBOyUA
AwQAOynvAwQAPZAGAwQAcWkFAwQAcWyUAwQEcWzAAwQAtwaTAwQAtxgNAwQAtxid
AwQAtz+CAwQCtz+EAwQAym/yAwQA24mfAwQA24nBMDwEAgACMDYDBwEkDgBeQAAD
BwAkDgEIQEEDBwAkDgEIQFoDBwAkDgEISEEDBwAkDgawB1EDBwQkDgawMAAwDQYJ
KoZIhvcNAQELBQADggEBAKBNbMRos1FsDFMx21Yv8KnJ46mqT4X7w5wZ0ARaiOep
W1I8hAohIUi+UAII+RV0TCJxtJNAEL//IgKa6f6z8564ChgDGTDSov9aDnWd6EBY
lpViceSEHWosZV9VglXUz7b4s4CPzdR0yW1NK0QuPDWscInbrddmV4AuK3WmU84M
nRpDuF2nsQYCzVmn5JoE4ERBwfZ1QMWWgTGcl65+WxhtjFaO+xubxuA750ic8mQe
+ZDCRGFon6R++cnp8m+FhP1sgSRZEhrcp+twv5K+REKbg9ShOif5DXMBklYmT3HT
1LeSBQl+DotPpddhwUdeYn421b3YrYLR9jWw1vgpbJk=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:03:38 2026 by rpki-client