Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136188.roa
File: AS136188.roa (raw, json)
Hash identifier: TOrL8QEW+9wbgeGapkv1+ZziuCZnK6lATAkm4UPQlhc=
Subject key identifier: 96:09:CA:37:F1:0C:8E:76:D0:C1:74:63:DC:59:8B:07:FD:1F:8C:FA
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 76111B210605F4FA3FA2E5CD0B24E38AA8C846E9
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136188.roa
Signing time: Mon 25 May 2026 16:52:01 +0000
ROA not before: Mon 25 May 2026 16:47:01 +0000
ROA not after: Mon 24 May 2027 16:52:01 +0000
asID: 136188
IP address blocks: 60.163.142.0/23 maxlen: 23
60.190.1.0/24 maxlen: 24
60.190.31.0/24 maxlen: 24
60.190.38.0/24 maxlen: 24
60.190.39.0/24 maxlen: 24
60.190.63.0/24 maxlen: 24
61.153.17.0/24 maxlen: 24
61.153.18.0/23 maxlen: 23
61.153.154.0/24 maxlen: 24
61.164.79.0/24 maxlen: 24
61.174.40.0/23 maxlen: 23
61.174.42.0/23 maxlen: 23
61.174.68.0/24 maxlen: 24
61.175.103.0/24 maxlen: 24
115.231.32.0/20 maxlen: 20
115.231.37.0/24 maxlen: 24
115.231.38.0/24 maxlen: 24
115.231.40.0/24 maxlen: 24
115.231.42.0/23 maxlen: 23
115.231.176.0/20 maxlen: 20
115.233.91.0/24 maxlen: 24
115.233.92.0/24 maxlen: 24
115.238.129.0/24 maxlen: 24
115.238.138.0/24 maxlen: 24
115.238.144.0/24 maxlen: 24
115.238.145.0/24 maxlen: 24
115.238.146.0/24 maxlen: 24
115.238.147.0/24 maxlen: 24
115.238.148.0/24 maxlen: 24
115.238.154.0/24 maxlen: 24
115.238.155.0/24 maxlen: 24
115.238.157.0/24 maxlen: 24
115.238.164.0/24 maxlen: 24
115.238.168.0/24 maxlen: 24
115.238.170.0/23 maxlen: 23
115.238.177.0/24 maxlen: 24
115.238.184.0/24 maxlen: 24
115.238.185.0/24 maxlen: 24
115.238.186.0/24 maxlen: 24
115.238.187.0/24 maxlen: 24
115.238.189.0/24 maxlen: 24
115.238.190.0/24 maxlen: 24
122.225.255.0/24 maxlen: 24
122.227.147.0/24 maxlen: 24
122.227.164.0/24 maxlen: 24
122.227.185.0/24 maxlen: 24
122.227.189.0/24 maxlen: 24
122.227.201.0/24 maxlen: 24
122.227.214.0/24 maxlen: 24
122.227.216.0/24 maxlen: 24
122.227.227.0/24 maxlen: 24
122.227.228.0/24 maxlen: 24
122.227.230.0/24 maxlen: 24
122.227.237.0/24 maxlen: 24
122.227.241.0/24 maxlen: 24
122.227.251.0/24 maxlen: 24
122.227.254.0/24 maxlen: 24
122.246.0.0/19 maxlen: 19
122.247.168.0/23 maxlen: 23
122.247.170.0/23 maxlen: 23
122.247.172.0/23 maxlen: 23
122.247.174.0/23 maxlen: 23
122.247.200.0/21 maxlen: 21
122.247.208.0/21 maxlen: 21
122.247.216.0/21 maxlen: 21
122.247.248.0/21 maxlen: 21
123.96.88.0/21 maxlen: 21
125.114.207.0/24 maxlen: 24
183.131.32.0/20 maxlen: 20
183.131.48.0/20 maxlen: 20
183.131.128.0/21 maxlen: 21
183.136.128.0/20 maxlen: 20
183.136.133.0/24 maxlen: 24
183.136.138.0/24 maxlen: 24
183.136.200.0/21 maxlen: 21
218.71.143.0/24 maxlen: 24
220.189.221.0/24 maxlen: 24
240e:1c:3000::/36 maxlen: 36
240e:f7:a000::/35 maxlen: 35
240e:971:2000::/36 maxlen: 36
240e:983:1b02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:11:1b:21:06:05:f4:fa:3f:a2:e5:cd:0b:24:e3:8a:a8:c8:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 25 16:47:01 2026 GMT
Not After : May 24 16:52:01 2027 GMT
Subject: CN=9609CA37F10C8E76D0C17463DC598B07FD1F8CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:9e:ba:ee:b8:cb:6c:41:88:60:e6:87:87:
95:75:f4:ba:19:0d:7f:58:74:bb:08:65:86:9f:bf:
cb:f1:c4:7b:4b:f3:43:a4:5c:9e:4c:ea:41:84:b8:
1d:9b:2a:13:36:9b:f2:4b:db:6c:c5:b2:5d:ad:33:
b0:a3:04:ba:c5:0d:00:62:9d:9e:a4:5a:83:03:37:
df:30:b1:d7:98:a2:97:5a:95:dc:a1:9d:5b:54:40:
b3:b3:11:4d:23:5f:ae:a9:41:81:bb:e1:79:c9:a6:
06:96:88:69:c7:57:1a:b5:be:d5:11:22:35:8d:6f:
cd:3b:03:0b:eb:ac:54:50:72:f8:f2:29:c1:f0:44:
f5:81:bd:a1:0b:ed:51:8d:54:cb:67:ba:95:d8:f8:
11:0e:51:62:44:20:51:4a:56:3a:65:7c:b4:49:4b:
9c:0a:f3:43:8a:ad:52:c7:2d:53:e9:44:58:cc:ef:
eb:f2:7f:da:60:35:ae:dc:56:66:45:fb:1c:8e:a6:
9c:a1:ed:c2:b9:db:dc:7b:00:5d:11:1e:7e:8e:99:
8d:08:3d:79:a6:37:76:ce:a6:7d:4f:8b:ab:3f:98:
90:4f:61:27:c2:47:f3:d8:01:6e:d1:dd:d5:46:c6:
3d:02:d5:28:0c:2d:f3:2d:93:b7:5e:f1:0a:8a:0f:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:CA:37:F1:0C:8E:76:D0:C1:74:63:DC:59:8B:07:FD:1F:8C:FA
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136188.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.163.142.0/23
60.190.1.0/24
60.190.31.0/24
60.190.38.0/23
60.190.63.0/24
61.153.17.0-61.153.19.255
61.153.154.0/24
61.164.79.0/24
61.174.40.0/22
61.174.68.0/24
61.175.103.0/24
115.231.32.0/20
115.231.176.0/20
115.233.91.0-115.233.92.255
115.238.129.0/24
115.238.138.0/24
115.238.144.0-115.238.148.255
115.238.154.0/23
115.238.157.0/24
115.238.164.0/24
115.238.168.0/24
115.238.170.0/23
115.238.177.0/24
115.238.184.0/22
115.238.189.0-115.238.190.255
122.225.255.0/24
122.227.147.0/24
122.227.164.0/24
122.227.185.0/24
122.227.189.0/24
122.227.201.0/24
122.227.214.0/24
122.227.216.0/24
122.227.227.0-122.227.228.255
122.227.230.0/24
122.227.237.0/24
122.227.241.0/24
122.227.251.0/24
122.227.254.0/24
122.246.0.0/19
122.247.168.0/21
122.247.200.0-122.247.223.255
122.247.248.0/21
123.96.88.0/21
125.114.207.0/24
183.131.32.0/19
183.131.128.0/21
183.136.128.0/20
183.136.200.0/21
218.71.143.0/24
220.189.221.0/24
IPv6:
240e:1c:3000::/36
240e:f7:a000::/35
240e:971:2000::/36
240e:983:1b02::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d1:e9:d1:df:47:7b:ef:7a:94:e1:7e:79:b0:2f:10:2a:0a:
32:98:24:1c:fa:5c:d2:00:36:07:f4:7c:57:f6:19:25:e0:50:
36:19:2d:e6:c8:64:5b:05:33:cf:82:d6:8c:b1:5c:d3:78:86:
53:cc:0d:c0:38:9f:ff:40:86:b3:0b:94:52:b2:c9:8c:81:99:
a7:f2:08:3f:05:85:ed:73:ce:6e:70:55:65:ac:a0:50:d3:b3:
84:46:10:d6:e6:6f:f4:01:00:a6:9b:96:3e:f8:02:98:19:22:
a5:f8:d1:e2:6a:57:da:a5:b5:64:c5:90:bf:a7:73:e9:ce:b7:
d0:b6:36:7a:55:94:5a:6a:ba:b2:c8:be:b0:2b:2b:4b:a6:1d:
ca:76:6b:45:f3:38:0c:d1:72:e9:19:0c:c5:98:56:29:d3:1a:
ec:99:d0:65:87:14:14:bc:89:d1:ad:c5:0a:92:4c:9f:3f:57:
49:69:76:f8:88:48:2e:c6:c5:c1:ee:0a:78:fe:56:cd:df:e4:
39:1f:c9:39:fa:65:1b:89:fc:91:9b:98:10:9a:77:29:5d:33:
c4:fd:e9:6e:63:8b:92:f7:65:21:22:f8:a7:43:2a:c6:fe:0a:
35:3a:ca:e4:61:6d:64:74:02:89:e3:3a:e2:68:07:36:3c:7f:
db:a0:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client