Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136197.roa
File: AS136197.roa (raw, json)
Hash identifier: W+2NGZO8CLJzOXZ2E1p68qeo/K1kYnsv+GAvqZePgTg=
Subject key identifier: 15:DA:02:10:EC:65:2D:5A:D3:C9:5E:36:73:E6:E9:59:9A:4E:0B:19
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5987183BBF0F9B12966E2AD0B8F82A049F1D467C
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136197.roa
Signing time: Mon 25 May 2026 16:08:20 +0000
ROA not before: Mon 25 May 2026 16:03:20 +0000
ROA not after: Mon 24 May 2027 16:08:20 +0000
asID: 136197
IP address blocks: 203.110.208.0/21 maxlen: 21
203.110.216.0/21 maxlen: 21
222.223.32.0/23 maxlen: 23
240e:108:2d::/48 maxlen: 48
240e:108:10f1::/48 maxlen: 48
240e:108:10f2::/48 maxlen: 48
240e:980:2d00::/40 maxlen: 40
240e:981:f100::/40 maxlen: 40
240e:981:f200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:87:18:3b:bf:0f:9b:12:96:6e:2a:d0:b8:f8:2a:04:9f:1d:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 25 16:03:20 2026 GMT
Not After : May 24 16:08:20 2027 GMT
Subject: CN=15DA0210EC652D5AD3C95E3673E6E9599A4E0B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:cd:73:f5:f7:30:bf:3f:28:0f:95:45:64:
75:7a:0a:5b:fc:24:a2:ab:62:6d:5a:a4:51:b0:38:
6c:04:99:76:48:97:c1:1d:32:1f:74:e6:29:55:d8:
01:85:5f:70:f4:1c:a2:1f:30:12:c7:57:70:39:10:
fa:92:0e:02:93:f0:58:30:6e:81:35:1c:e6:de:5d:
f9:5c:d4:4e:0f:4b:64:dc:bf:bc:7e:b1:56:c9:62:
ff:ff:26:1c:b7:02:5e:a2:1e:43:f5:eb:ec:d4:f3:
d3:14:42:20:0d:d6:ca:a6:7d:27:62:b1:94:6b:11:
9c:d2:ef:30:2d:a0:a7:ff:5d:ae:e5:1f:d5:a9:66:
af:70:ee:7b:98:c7:5a:ab:4f:9e:39:66:7a:21:eb:
df:b6:68:a4:51:f8:60:04:52:8f:e7:b7:38:b4:13:
d2:96:6a:3b:b0:80:73:ae:e3:4a:97:e7:66:3d:47:
0e:71:65:da:b0:04:81:8e:27:0c:cb:84:44:c7:f0:
06:1d:dd:cf:a5:89:5f:b6:34:eb:a6:89:43:13:a2:
9b:8b:76:f3:0f:44:86:21:54:6a:38:0b:f8:3e:f1:
74:c8:0c:61:0c:02:59:04:20:dc:46:3c:82:58:c4:
3e:56:4b:3b:a4:e3:e8:42:31:f3:2b:b6:09:37:53:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:02:10:EC:65:2D:5A:D3:C9:5E:36:73:E6:E9:59:9A:4E:0B:19
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136197.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.110.208.0/20
222.223.32.0/23
IPv6:
240e:108:2d::/48
240e:108:10f1::-240e:108:10f2:ffff:ffff:ffff:ffff:ffff
240e:980:2d00::/40
240e:981:f100::-240e:981:f2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:6d:0b:80:b8:78:f2:1c:f1:09:9e:9a:f4:9a:e0:17:cc:2e:
40:aa:21:68:d8:c9:9e:79:02:5e:1e:6d:e0:71:bf:8c:90:0b:
b9:31:26:e4:85:2a:4d:02:d2:08:84:11:7c:de:9b:3a:1e:79:
ab:3e:34:c6:6c:40:e5:cd:d5:78:35:38:17:45:c8:a2:9f:18:
ca:2e:62:19:f1:82:0e:d8:42:35:84:b3:88:1c:39:31:97:45:
ad:a3:05:df:21:08:2f:ad:46:11:ad:48:60:b4:6a:92:d1:51:
73:d4:c5:9c:99:38:88:29:1f:03:f4:72:ab:b5:12:74:54:66:
da:86:d8:7f:43:8a:b2:38:a1:d8:5e:67:a1:dd:37:d8:82:b0:
05:d7:2d:bb:9c:d1:63:69:5a:67:91:e0:96:3b:8e:c1:7a:d9:
7e:65:04:19:89:62:96:5f:a0:12:e8:4f:99:a2:e8:84:d0:e6:
ff:82:47:5f:59:3d:b6:1e:3d:cd:3e:3b:6b:68:cf:a1:f4:b8:
95:72:ed:3a:4f:9e:3d:9b:81:16:01:a7:95:0f:aa:86:b9:21:
80:ad:60:9c:9d:61:30:a6:a5:e9:9e:c5:0e:8b:b7:1b:ae:14:
1f:2f:c1:39:dd:46:93:e7:b8:08:50:d8:61:04:53:af:b3:e1:
2a:3a:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 04:13:24 2026 by rpki-client