Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134773.roa
File: AS134773.roa (raw, json)
Hash identifier: cY4Xo9aH8iP3YoSVa8ipVTOrGvc6zJrwnFkaijS9IIE=
Subject key identifier: B1:92:76:A5:00:3E:B6:91:EF:00:A8:E4:3F:BA:13:46:20:66:D6:1C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3FF7E4524409E7C36B5A6FC55626D4DB4B6BF05B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134773.roa
Signing time: Tue 02 Jun 2026 16:24:20 +0000
ROA not before: Tue 02 Jun 2026 16:19:20 +0000
ROA not after: Tue 01 Jun 2027 16:24:20 +0000
asID: 134773
IP address blocks: 59.37.0.0/23 maxlen: 23
61.144.6.0/24 maxlen: 24
202.111.242.0/24 maxlen: 24
219.137.159.0/24 maxlen: 24
219.137.193.0/24 maxlen: 24
240e:5e:4000::/48 maxlen: 48
240e:5e:4001::/48 maxlen: 48
240e:108:4041::/48 maxlen: 48
240e:108:405a::/48 maxlen: 48
240e:108:4841::/48 maxlen: 48
240e:6b0:751::/48 maxlen: 48
240e:6b0:3000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 18:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f7:e4:52:44:09:e7:c3:6b:5a:6f:c5:56:26:d4:db:4b:6b:f0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 16:19:20 2026 GMT
Not After : Jun 1 16:24:20 2027 GMT
Subject: CN=B19276A5003EB691EF00A8E43FBA13462066D61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:cf:b2:04:14:7d:f4:70:36:7f:26:9b:29:
d9:94:04:b5:e3:89:e5:af:8a:22:ea:dd:35:ef:68:
c9:e7:c3:87:ee:41:c4:5b:0a:77:f9:b7:05:c7:22:
62:2e:e8:7d:40:49:11:10:69:0c:38:a8:90:32:da:
a1:1b:61:53:03:f6:89:1e:99:09:7b:f7:a7:96:75:
15:41:de:33:af:83:47:34:68:50:04:c9:db:4f:ce:
89:45:27:48:29:e0:d3:6a:4f:1d:94:4c:1e:c6:f7:
d9:ef:bc:a7:5e:c8:4a:45:6b:b2:92:03:e5:04:98:
c6:2c:41:68:c5:81:92:10:33:25:bb:f9:33:b2:c4:
e0:f8:0d:56:5e:4a:41:ee:df:ab:4a:85:4b:bc:a1:
72:fa:29:c9:3e:08:bf:ba:7c:0b:9a:bf:f8:52:a1:
7f:5d:c5:77:bc:2f:41:66:bc:d9:f6:00:b7:a8:ab:
70:ab:ca:5c:de:e2:fe:26:c0:ae:4c:c0:75:a6:5a:
5e:6c:6c:b4:39:0b:af:ce:4e:4a:5c:56:b2:5c:96:
4d:8d:ea:50:57:49:b5:dd:31:14:30:85:ba:26:58:
ba:c4:98:64:e4:9d:f8:fc:2a:2b:d1:93:f2:fd:8a:
bf:ec:af:9a:eb:fe:19:1a:38:54:0d:36:37:9e:98:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:76:A5:00:3E:B6:91:EF:00:A8:E4:3F:BA:13:46:20:66:D6:1C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.37.0.0/23
61.144.6.0/24
202.111.242.0/24
219.137.159.0/24
219.137.193.0/24
IPv6:
240e:5e:4000::/47
240e:108:4041::/48
240e:108:405a::/48
240e:108:4841::/48
240e:6b0:751::/48
240e:6b0:3000::/44
Signature Algorithm: sha256WithRSAEncryption
4d:49:8e:64:64:89:75:ed:26:f5:9f:a4:e3:ce:1d:c1:e5:2d:
ca:76:1e:51:5e:54:21:0e:dc:5b:2e:4d:40:41:c1:54:67:b1:
4a:4c:3f:61:51:bf:3c:19:c7:b3:62:45:12:cf:4e:bc:f1:71:
90:01:1e:64:30:78:06:5f:84:38:8c:ce:72:3f:e5:9a:5f:c9:
5e:1a:2d:6b:77:34:cc:72:70:26:01:95:c7:3d:c8:41:41:07:
ce:e1:22:9f:d6:0c:14:00:92:5d:fa:4b:aa:d0:04:b3:01:1f:
22:bc:78:06:78:d5:d2:11:40:9f:55:aa:e5:7a:53:fa:16:9c:
9b:4c:cb:51:03:41:a6:12:61:4c:8d:ee:72:82:f3:ec:41:62:
8d:05:65:75:dc:b4:15:74:d1:1c:34:19:53:6b:d5:c6:fa:6c:
e6:e8:ef:f2:e4:36:be:b4:b9:01:97:2c:44:07:a7:c2:59:26:
0c:3b:90:ee:41:c5:c7:4f:07:41:e3:43:81:ac:19:8d:3e:0e:
cb:37:84:52:0d:c4:f1:ee:74:0a:75:89:1d:16:fb:35:36:da:
44:bb:86:3f:34:be:95:ba:e4:9f:19:c6:2f:4a:51:0f:3a:0b:
d4:bd:3c:4e:f2:61:cd:3a:ef:41:15:12:bc:5e:31:0f:a5:62:
af:06:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:11:34 2026 by rpki-client