Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136198.roa
File: AS136198.roa (raw, json)
Hash identifier: 3QWCo9EBOZvPdHP5tr28jiU3ZcL/m4dxwoZkzTVuHrE=
Subject key identifier: E2:A5:AF:72:7D:37:E9:37:96:80:EA:96:A1:7C:72:BE:EB:28:72:03
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 39BB93D9FE69F3C2712D491A92B0E19B29B95253
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136198.roa
Signing time: Tue 16 Jun 2026 16:02:13 +0000
ROA not before: Tue 16 Jun 2026 15:57:13 +0000
ROA not after: Tue 15 Jun 2027 16:02:13 +0000
asID: 136198
IP address blocks: 14.21.102.0/24 maxlen: 24
116.19.103.0/24 maxlen: 24
219.128.80.0/24 maxlen: 24
240e:108:4044::/48 maxlen: 48
240e:108:4844::/48 maxlen: 48
240e:3b0:222f::/48 maxlen: 48
240e:3b3:22f0::/44 maxlen: 44
240e:6b4:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bb:93:d9:fe:69:f3:c2:71:2d:49:1a:92:b0:e1:9b:29:b9:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 15:57:13 2026 GMT
Not After : Jun 15 16:02:13 2027 GMT
Subject: CN=E2A5AF727D37E9379680EA96A17C72BEEB287203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:8d:8a:5e:80:20:fa:33:a1:92:b3:d2:2c:
96:ef:dc:a6:83:ce:a6:cd:00:8f:a6:45:3c:23:8f:
a8:d5:98:45:cc:09:2b:b0:e5:03:89:05:4d:f1:f6:
59:1a:b1:c3:24:96:d2:5e:11:0f:e1:59:4f:0c:b0:
3a:e6:9f:61:3a:b4:a7:13:1f:c7:a3:9c:38:7b:7e:
4b:44:ff:e8:b5:af:e9:dc:50:ec:08:9b:08:26:be:
77:91:e5:55:b9:2d:3e:f9:60:82:45:24:34:54:ca:
38:4d:37:c3:2a:51:18:60:7b:6f:4e:d1:40:a5:7d:
23:1e:4c:71:7a:af:03:d9:69:d3:bb:f3:34:6c:e9:
48:67:f0:ea:c8:de:24:80:de:85:cc:5c:dc:f7:ba:
ab:00:23:40:8d:79:ca:39:0d:c2:28:6f:4c:8f:b5:
ac:9e:30:58:05:fc:6f:d4:da:6d:20:43:55:66:99:
45:10:70:1f:56:22:4c:2c:96:80:1f:48:a3:bc:96:
49:18:96:ef:51:cb:4d:86:dd:6d:d3:10:90:dd:c7:
a5:ca:56:86:b5:96:0c:fe:da:fd:d2:f6:43:b6:b2:
11:99:d8:fa:36:88:bb:95:49:62:b5:44:ff:73:6c:
89:3a:d0:b8:f2:13:dc:17:a1:e1:32:bf:37:8f:cc:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:AF:72:7D:37:E9:37:96:80:EA:96:A1:7C:72:BE:EB:28:72:03
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.102.0/24
116.19.103.0/24
219.128.80.0/24
IPv6:
240e:108:4044::/48
240e:108:4844::/48
240e:3b0:222f::/48
240e:3b3:22f0::/44
240e:6b4:130::/44
Signature Algorithm: sha256WithRSAEncryption
58:9c:a4:ae:3e:a7:96:9e:c1:e8:58:eb:6e:59:ee:e1:61:f0:
ca:26:a2:c5:b5:9c:0c:75:9d:67:74:a9:ca:67:51:1c:ce:fc:
ad:4c:7a:46:02:76:6e:32:78:51:58:e7:26:df:8e:98:29:20:
e4:56:3f:cb:4f:6f:ff:ec:ac:a6:35:e3:64:a0:64:fb:c5:57:
3e:b1:2a:bd:80:82:09:52:7a:ae:5d:c8:af:4a:f6:6d:00:51:
36:ee:4a:92:b7:9c:ff:d8:a3:ba:32:f8:4a:09:4b:f0:62:4d:
ca:95:71:a9:79:9e:53:dc:7a:e0:78:7e:09:25:57:c3:aa:b1:
4f:1a:21:31:24:b6:37:12:c1:fa:7b:bb:de:c6:1f:46:e3:82:
c5:a5:bd:8d:21:2d:a5:65:e7:6e:60:42:14:2c:30:d9:31:c8:
5d:41:d3:8c:f7:78:d9:8d:ba:87:6f:5a:df:90:0b:e7:3e:d0:
70:b2:d5:ac:3d:8e:bc:50:8f:7a:9d:60:13:57:c0:bb:42:34:
2a:e7:7c:16:4b:c6:4a:8d:ac:c8:92:04:7b:82:61:98:11:f3:
9b:01:7f:40:27:a7:e4:aa:5d:43:4d:ca:81:c2:5f:0a:86:0e:
96:70:41:05:28:15:9b:99:40:f4:db:c2:e5:c9:af:14:76:b3:
9b:67:4e:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUObuT2f5p88JxLUkakrDhmym5UlMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE1NTcxM1oX
DTI3MDYxNTE2MDIxM1owMzExMC8GA1UEAxMoRTJBNUFGNzI3RDM3RTkzNzk2ODBF
QTk2QTE3QzcyQkVFQjI4NzIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGxjYpegCD6M6GSs9Islu/cpoPOps0Aj6ZFPCOPqNWYRcwJK7DlA4kFTfH2
WRqxwySW0l4RD+FZTwywOuafYTq0pxMfx6OcOHt+S0T/6LWv6dxQ7AibCCa+d5Hl
VbktPvlggkUkNFTKOE03wypRGGB7b07RQKV9Ix5McXqvA9lp07vzNGzpSGfw6sje
JIDehcxc3Pe6qwAjQI15yjkNwihvTI+1rJ4wWAX8b9TabSBDVWaZRRBwH1YiTCyW
gB9Io7yWSRiW71HLTYbdbdMQkN3HpcpWhrWWDP7a/dL2Q7ayEZnY+jaIu5VJYrVE
/3NsiTrQuPIT3Beh4TK/N4/MlfMCAwEAAaOCAiUwggIhMB0GA1UdDgQWBBTipa9y
fTfpN5aA6pahfHK+6yhyAzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM2MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MGAGCCsGAQUFBwEHAQH/BFEwTzAYBAIAATASAwQADhVmAwQAdBNnAwQA24BQMDME
AgACMC0DBwAkDgEIQEQDBwAkDgEISEQDBwAkDgOwIi8DBwQkDgOzIvADBwQkDga0
ATAwDQYJKoZIhvcNAQELBQADggEBAFicpK4+p5aewehY625Z7uFh8MomosW1nAx1
nWd0qcpnURzO/K1MekYCdm4yeFFY5ybfjpgpIORWP8tPb//srKY142SgZPvFVz6x
Kr2AgglSeq5dyK9K9m0AUTbuSpK3nP/Yo7oy+EoJS/BiTcqVcal5nlPceuB4fgkl
V8OqsU8aITEktjcSwfp7u97GH0bjgsWlvY0hLaVl525gQhQsMNkxyF1B04z3eNmN
uodvWt+QC+c+0HCy1aw9jrxQj3qdYBNXwLtCNCrnfBZLxkqNrMiSBHuCYZgR85sB
f0Anp+SqXUNNyoHCXwqGDpZwQQUoFZuZQPTbwuXJrxR2s5tnTqU=
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:07 2026 by rpki-client