Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136188.roa
File: AS136188.roa (raw, json)
Hash identifier: kvHGzaZbHFTkG9ES0LsNEUXzpkcyapVKJRJ5QMHUyEA=
Subject key identifier: BC:95:6A:54:2F:B2:B7:2D:C4:97:07:B2:25:D5:92:85:03:B1:B5:48
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 01588BC2E7E806DBCFE484E2D356CEABD6B692B0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136188.roa
Signing time: Wed 01 Jul 2026 02:45:39 +0000
ROA not before: Wed 01 Jul 2026 02:40:39 +0000
ROA not after: Wed 30 Jun 2027 02:45:39 +0000
asID: 136188
IP address blocks: 60.163.142.0/23 maxlen: 23
60.190.1.0/24 maxlen: 24
60.190.31.0/24 maxlen: 24
60.190.38.0/24 maxlen: 24
60.190.39.0/24 maxlen: 24
60.190.63.0/24 maxlen: 24
61.153.17.0/24 maxlen: 24
61.153.18.0/23 maxlen: 23
61.153.154.0/24 maxlen: 24
61.164.79.0/24 maxlen: 24
61.174.40.0/23 maxlen: 23
61.174.42.0/23 maxlen: 23
61.174.68.0/24 maxlen: 24
61.175.103.0/24 maxlen: 24
115.231.32.0/20 maxlen: 20
115.231.37.0/24 maxlen: 24
115.231.38.0/24 maxlen: 24
115.231.40.0/24 maxlen: 24
115.231.42.0/23 maxlen: 23
115.231.176.0/20 maxlen: 20
115.233.91.0/24 maxlen: 24
115.233.92.0/24 maxlen: 24
115.238.129.0/24 maxlen: 24
115.238.138.0/24 maxlen: 24
115.238.144.0/24 maxlen: 24
115.238.145.0/24 maxlen: 24
115.238.146.0/24 maxlen: 24
115.238.147.0/24 maxlen: 24
115.238.148.0/24 maxlen: 24
115.238.154.0/24 maxlen: 24
115.238.155.0/24 maxlen: 24
115.238.157.0/24 maxlen: 24
115.238.164.0/24 maxlen: 24
115.238.168.0/24 maxlen: 24
115.238.170.0/23 maxlen: 23
115.238.177.0/24 maxlen: 24
115.238.184.0/24 maxlen: 24
115.238.185.0/24 maxlen: 24
115.238.186.0/24 maxlen: 24
115.238.187.0/24 maxlen: 24
115.238.189.0/24 maxlen: 24
115.238.190.0/24 maxlen: 24
122.225.255.0/24 maxlen: 24
122.227.147.0/24 maxlen: 24
122.227.164.0/24 maxlen: 24
122.227.185.0/24 maxlen: 24
122.227.189.0/24 maxlen: 24
122.227.201.0/24 maxlen: 24
122.227.214.0/24 maxlen: 24
122.227.216.0/24 maxlen: 24
122.227.227.0/24 maxlen: 24
122.227.228.0/24 maxlen: 24
122.227.230.0/24 maxlen: 24
122.227.237.0/24 maxlen: 24
122.227.241.0/24 maxlen: 24
122.227.251.0/24 maxlen: 24
122.227.254.0/24 maxlen: 24
122.246.0.0/19 maxlen: 19
122.247.168.0/23 maxlen: 23
122.247.170.0/23 maxlen: 23
122.247.172.0/23 maxlen: 23
122.247.174.0/23 maxlen: 23
122.247.200.0/21 maxlen: 21
122.247.208.0/21 maxlen: 21
122.247.216.0/21 maxlen: 21
122.247.248.0/21 maxlen: 21
123.96.88.0/21 maxlen: 21
125.114.207.0/24 maxlen: 24
183.131.32.0/20 maxlen: 20
183.131.48.0/20 maxlen: 20
183.131.128.0/21 maxlen: 21
183.136.128.0/20 maxlen: 20
183.136.133.0/24 maxlen: 24
183.136.138.0/24 maxlen: 24
183.136.200.0/21 maxlen: 21
218.71.143.0/24 maxlen: 24
220.189.221.0/24 maxlen: 24
240e:1c:3000::/36 maxlen: 36
240e:f7:a000::/35 maxlen: 35
240e:f7:a004::/48 maxlen: 48
240e:971:2000::/36 maxlen: 36
240e:983:1b02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:58:8b:c2:e7:e8:06:db:cf:e4:84:e2:d3:56:ce:ab:d6:b6:92:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 1 02:40:39 2026 GMT
Not After : Jun 30 02:45:39 2027 GMT
Subject: CN=BC956A542FB2B72DC49707B225D5928503B1B548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:b7:63:07:6e:1d:5c:36:4b:c9:26:f6:f8:
02:ac:47:19:b6:0f:09:2d:25:6b:c5:c1:5e:85:57:
bd:fd:47:5b:75:3b:a7:52:1a:dd:90:74:ee:a9:b2:
3d:bb:7a:e0:5d:92:5b:30:d8:f3:48:62:6f:26:ef:
91:a1:f2:9d:76:14:97:01:ce:d5:db:33:7a:5c:b9:
11:bf:28:b1:85:3a:c3:0a:02:37:b8:ba:1a:d9:a7:
e1:0c:41:73:2f:c2:60:45:f8:4f:b1:22:90:66:2f:
f5:11:02:72:80:32:79:de:e5:70:89:7c:7e:75:f9:
19:ae:3c:b3:1c:89:d6:99:6f:f9:e5:7c:49:fb:9d:
68:b2:bd:f1:10:2a:2b:32:d0:05:a0:99:7e:f1:5a:
41:d8:87:51:1a:5a:9e:9c:3d:3d:13:f8:3f:2e:d2:
6b:e2:76:f2:5c:87:61:b0:36:da:da:96:20:91:a7:
18:be:15:1f:be:a4:93:c2:5f:c8:94:b2:64:60:92:
6e:b1:4e:aa:d3:e2:a2:7e:a1:44:fe:31:58:28:f3:
75:98:51:15:bd:b4:55:c8:65:d7:69:6f:01:63:fa:
49:02:d3:c5:67:41:5e:03:be:59:dc:4c:07:08:32:
61:34:1b:04:96:ef:33:2c:f7:6f:1a:60:8a:e1:20:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:95:6A:54:2F:B2:B7:2D:C4:97:07:B2:25:D5:92:85:03:B1:B5:48
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136188.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.163.142.0/23
60.190.1.0/24
60.190.31.0/24
60.190.38.0/23
60.190.63.0/24
61.153.17.0-61.153.19.255
61.153.154.0/24
61.164.79.0/24
61.174.40.0/22
61.174.68.0/24
61.175.103.0/24
115.231.32.0/20
115.231.176.0/20
115.233.91.0-115.233.92.255
115.238.129.0/24
115.238.138.0/24
115.238.144.0-115.238.148.255
115.238.154.0/23
115.238.157.0/24
115.238.164.0/24
115.238.168.0/24
115.238.170.0/23
115.238.177.0/24
115.238.184.0/22
115.238.189.0-115.238.190.255
122.225.255.0/24
122.227.147.0/24
122.227.164.0/24
122.227.185.0/24
122.227.189.0/24
122.227.201.0/24
122.227.214.0/24
122.227.216.0/24
122.227.227.0-122.227.228.255
122.227.230.0/24
122.227.237.0/24
122.227.241.0/24
122.227.251.0/24
122.227.254.0/24
122.246.0.0/19
122.247.168.0/21
122.247.200.0-122.247.223.255
122.247.248.0/21
123.96.88.0/21
125.114.207.0/24
183.131.32.0/19
183.131.128.0/21
183.136.128.0/20
183.136.200.0/21
218.71.143.0/24
220.189.221.0/24
IPv6:
240e:1c:3000::/36
240e:f7:a000::/35
240e:971:2000::/36
240e:983:1b02::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c1:aa:22:b1:4b:7a:eb:30:6e:ea:f7:a4:e1:06:a6:53:78:
53:66:7b:d3:b8:74:62:46:ef:fa:eb:1d:91:1b:28:3b:1b:2a:
08:f4:79:0e:36:6c:30:f8:06:f4:8f:00:1b:83:00:d7:39:ae:
88:99:11:1f:c5:fd:60:79:2d:ef:1c:31:99:ea:2e:53:4c:e8:
95:c2:66:fd:77:c8:44:b9:37:e9:db:0d:8e:e7:d4:f6:e3:99:
01:94:b9:16:c7:7c:75:b6:6e:1b:f5:cd:92:be:24:07:01:cd:
75:05:c3:bb:99:60:c0:b3:54:0f:c8:99:84:f3:48:96:5b:bb:
fc:61:66:4f:a8:86:b2:6e:59:1e:9a:d7:2f:ab:dc:93:8b:00:
18:7c:5d:7c:8b:aa:fc:18:95:ea:c7:ec:d0:87:6f:61:40:93:
fd:57:d3:7b:3b:b3:8c:54:47:66:3d:3b:8a:38:f8:af:df:84:
1f:93:86:54:ea:a4:16:50:aa:8f:35:dd:8b:16:87:01:dc:5c:
97:c5:56:e2:ea:c7:d7:ab:98:89:db:db:6b:04:97:81:62:72:
90:5e:76:21:4e:ce:10:d4:b3:4c:47:fd:7b:c4:53:8a:c4:ac:
96:6a:08:ea:2e:26:81:40:d3:b9:f4:d6:99:a5:77:eb:b4:70:
5c:8c:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:03:35 2026 by rpki-client