Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136195.roa
File: AS136195.roa (raw, json)
Hash identifier: F0GbRuQ7QDbFjx3Nicms88ZRg6ZMLE5Z9Kv15XF3hmA=
Subject key identifier: BC:13:AB:99:1F:55:DF:BE:DE:BB:7F:9E:D1:D6:30:89:DC:AE:D1:3E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 2C49A66B01C5C3B7AAAE4F14512FA2B21550B439
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136195.roa
Signing time: Thu 28 May 2026 16:12:02 +0000
ROA not before: Thu 28 May 2026 16:07:02 +0000
ROA not after: Thu 27 May 2027 16:12:02 +0000
asID: 136195
IP address blocks: 150.138.99.0/24 maxlen: 24
150.138.112.0/21 maxlen: 21
150.138.126.0/23 maxlen: 23
150.138.135.0/24 maxlen: 24
150.139.192.0/19 maxlen: 19
182.40.32.0/20 maxlen: 20
182.40.96.0/20 maxlen: 20
182.40.96.0/24 maxlen: 24
182.40.97.0/24 maxlen: 24
182.40.98.0/24 maxlen: 24
182.40.99.0/24 maxlen: 24
182.40.102.0/24 maxlen: 24
182.40.103.0/24 maxlen: 24
182.40.104.0/24 maxlen: 24
182.40.105.0/24 maxlen: 24
182.40.106.0/24 maxlen: 24
182.40.107.0/24 maxlen: 24
182.40.108.0/24 maxlen: 24
182.40.109.0/24 maxlen: 24
182.40.160.0/21 maxlen: 21
182.40.192.0/19 maxlen: 19
240e:e:b800::/37 maxlen: 37
240e:108:4e::/48 maxlen: 48
240e:108:86::/48 maxlen: 48
240e:108:1100::/48 maxlen: 48
240e:108:1101::/48 maxlen: 48
240e:244:200::/40 maxlen: 40
240e:244:300::/40 maxlen: 40
240e:945:4400::/40 maxlen: 40
240e:980:4e00::/40 maxlen: 40
240e:980:8600::/40 maxlen: 40
240e:982::/40 maxlen: 40
240e:982:100::/40 maxlen: 40
240e:982:200::/40 maxlen: 40
240e:982:300::/40 maxlen: 40
240e:983:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:49:a6:6b:01:c5:c3:b7:aa:ae:4f:14:51:2f:a2:b2:15:50:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:07:02 2026 GMT
Not After : May 27 16:12:02 2027 GMT
Subject: CN=BC13AB991F55DFBEDEBB7F9ED1D63089DCAED13E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:33:39:d7:83:42:46:96:74:27:0a:ac:aa:
4b:c5:ed:91:26:23:b0:86:2c:f9:a4:60:8a:0d:fa:
60:cd:18:37:ef:6d:a1:08:cc:6f:5d:ca:1f:cf:36:
67:ae:c1:22:1e:b0:0d:69:0a:c2:d7:19:b1:40:51:
7c:da:12:31:68:67:f9:b2:1e:1f:f7:cf:94:07:39:
42:b2:cb:d0:2d:c6:a8:b5:7f:90:1c:92:14:5c:98:
89:f2:d8:25:bb:10:bf:2f:51:68:a1:de:9b:15:45:
b8:82:5c:8a:ab:2d:61:7f:2a:2c:86:3d:2b:4e:d0:
11:70:d7:9e:05:c4:9e:97:c5:aa:80:8c:10:4a:c5:
47:1c:6a:ea:86:5d:d9:db:45:d8:8f:37:ef:67:90:
d4:9d:80:ae:f9:cf:6d:8d:4d:4c:f5:7c:b8:70:20:
83:71:98:0f:71:08:4d:06:6f:6a:eb:4a:ea:e8:f1:
1e:59:c2:3c:ec:0f:ee:3e:a8:1d:b7:89:62:f0:01:
3e:7e:1d:c0:91:6a:bf:cd:c3:99:ac:c3:0a:5c:b7:
ed:91:24:58:3a:65:f5:dd:05:ad:c5:ee:f6:0a:f7:
89:ce:b8:2a:7a:ee:ba:15:2b:ab:a1:1f:8b:bd:81:
22:97:e7:98:f4:4c:2a:20:98:51:72:d7:23:66:70:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:AB:99:1F:55:DF:BE:DE:BB:7F:9E:D1:D6:30:89:DC:AE:D1:3E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.138.99.0/24
150.138.112.0/21
150.138.126.0/23
150.138.135.0/24
150.139.192.0/19
182.40.32.0/20
182.40.96.0/20
182.40.160.0/21
182.40.192.0/19
IPv6:
240e:e:b800::/37
240e:108:4e::/48
240e:108:86::/48
240e:108:1100::/47
240e:244:200::/39
240e:945:4400::/40
240e:980:4e00::/40
240e:980:8600::/40
240e:982::/38
240e:983:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d2:cb:11:93:d4:44:e9:1f:98:9c:f1:ec:75:89:63:fc:74:
c3:7b:76:7b:18:93:16:f1:18:48:cb:61:8f:8e:3b:d2:4d:a9:
34:bf:4c:2b:b0:23:8f:bd:3a:59:a1:86:eb:0e:32:09:70:48:
cd:85:9b:28:b2:0d:06:0f:45:ad:70:bb:30:42:65:ef:37:72:
c4:38:2b:6b:47:ce:1a:f1:f3:87:f7:e1:79:0c:9d:86:2c:4f:
40:ea:b8:63:55:a7:d1:81:00:ed:12:38:4e:97:40:9c:a9:a2:
51:1f:22:de:ab:c3:3d:76:a5:f1:46:c3:be:a2:cb:a7:f5:45:
5a:e2:d6:20:79:45:97:38:85:c5:1d:0d:53:e3:59:78:38:c1:
c5:57:fa:77:fd:c8:34:69:5b:c9:41:96:8c:e6:a3:3f:db:b8:
8c:c4:af:ae:65:f4:78:da:e8:00:03:21:0c:e2:b4:05:a0:9c:
cf:71:90:cc:52:b3:de:bc:67:78:4a:fc:7b:b4:a0:0d:dd:d7:
7a:52:dd:74:af:91:71:d1:7a:72:76:ab:4d:b3:db:be:8c:07:
b4:b7:b6:c5:dd:ef:40:d0:1a:91:3f:80:69:f9:6b:43:99:1c:
cc:9a:33:8e:a5:23:1d:7f:73:84:b1:61:7a:b7:b2:eb:72:1b:
ea:7f:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 04:12:05 2026 by rpki-client