Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136199.roa
File: AS136199.roa (raw, json)
Hash identifier: e2OQUTflymUvKqmhX2qfr4DCXf2RM8dRgUkdakYxbiw=
Subject key identifier: 21:72:BC:9F:3C:E7:D5:A2:BF:57:40:6C:4D:75:2A:A6:8F:DD:64:50
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 445D56561102BCCBC471A5EF812A763D43969FA9
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136199.roa
Signing time: Tue 16 Jun 2026 16:02:25 +0000
ROA not before: Tue 16 Jun 2026 15:57:25 +0000
ROA not after: Tue 15 Jun 2027 16:02:25 +0000
asID: 136199
IP address blocks: 14.21.80.0/22 maxlen: 22
14.21.104.0/24 maxlen: 24
14.117.0.0/18 maxlen: 18
14.117.64.0/18 maxlen: 18
14.117.128.0/18 maxlen: 18
14.117.192.0/18 maxlen: 18
14.118.136.0/21 maxlen: 21
14.120.160.0/19 maxlen: 19
14.121.10.0/24 maxlen: 24
14.148.32.0/20 maxlen: 20
14.217.0.0/17 maxlen: 17
59.36.240.0/20 maxlen: 20
59.36.242.0/23 maxlen: 23
59.37.24.0/23 maxlen: 23
59.37.160.0/21 maxlen: 21
59.37.168.0/22 maxlen: 22
61.143.0.0/20 maxlen: 20
61.143.16.0/21 maxlen: 21
61.143.24.0/23 maxlen: 23
61.145.0.0/19 maxlen: 19
61.145.32.0/20 maxlen: 20
61.145.48.0/23 maxlen: 23
113.64.208.0/22 maxlen: 22
113.93.0.0/16 maxlen: 16
113.101.128.0/19 maxlen: 19
113.103.232.0/21 maxlen: 21
113.103.240.0/20 maxlen: 20
113.107.128.0/20 maxlen: 20
116.6.1.0/24 maxlen: 24
116.6.36.0/23 maxlen: 23
116.6.83.0/24 maxlen: 24
116.19.20.0/23 maxlen: 23
116.19.136.0/24 maxlen: 24
116.27.96.0/19 maxlen: 19
116.27.128.0/17 maxlen: 17
119.121.109.0/24 maxlen: 24
119.121.110.0/23 maxlen: 23
119.121.112.0/23 maxlen: 23
119.121.114.0/24 maxlen: 24
119.121.237.0/24 maxlen: 24
119.121.238.0/23 maxlen: 23
119.121.240.0/23 maxlen: 23
119.121.242.0/24 maxlen: 24
119.133.0.0/16 maxlen: 16
119.140.144.0/20 maxlen: 20
119.146.100.0/23 maxlen: 23
119.146.172.0/22 maxlen: 22
121.12.93.0/24 maxlen: 24
121.12.94.0/24 maxlen: 24
121.12.100.0/22 maxlen: 22
125.88.2.0/23 maxlen: 23
125.92.0.0/17 maxlen: 17
125.93.8.0/21 maxlen: 21
183.2.64.0/18 maxlen: 18
183.3.176.0/20 maxlen: 20
183.4.64.0/19 maxlen: 19
183.45.192.0/18 maxlen: 18
183.52.64.0/19 maxlen: 19
183.52.96.0/20 maxlen: 20
183.57.178.0/24 maxlen: 24
183.58.18.0/23 maxlen: 23
183.58.112.0/21 maxlen: 21
183.58.124.0/22 maxlen: 22
183.59.64.0/22 maxlen: 22
183.59.244.0/22 maxlen: 22
202.96.138.0/23 maxlen: 23
202.103.170.0/24 maxlen: 24
202.104.200.0/21 maxlen: 21
202.105.168.0/22 maxlen: 22
218.14.128.0/18 maxlen: 18
219.130.128.0/19 maxlen: 19
219.130.160.0/20 maxlen: 20
240e:108:404d::/48 maxlen: 48
240e:108:484d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5d:56:56:11:02:bc:cb:c4:71:a5:ef:81:2a:76:3d:43:96:9f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 15:57:25 2026 GMT
Not After : Jun 15 16:02:25 2027 GMT
Subject: CN=2172BC9F3CE7D5A2BF57406C4D752AA68FDD6450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:53:90:69:1a:7d:05:ce:38:a0:fe:bf:df:
8f:13:2d:59:dd:22:b8:24:b0:0a:45:48:8d:0e:19:
c3:16:6d:f0:f2:1a:2d:8c:4f:e3:60:40:65:82:83:
c4:b3:3f:1d:7b:a2:08:43:54:84:05:e3:6f:5e:40:
62:26:6d:2d:f3:93:52:03:90:1d:6a:57:45:bb:50:
0e:ef:8f:6d:14:e8:b3:94:43:9e:fa:18:20:d4:63:
4c:1c:ae:35:51:d0:7a:52:5b:c9:1b:f1:69:a0:8e:
27:0c:80:b9:f9:41:e0:8f:3f:37:72:4f:e2:03:72:
5f:40:7a:0a:cd:d1:55:9d:93:97:34:99:a3:62:e3:
93:28:ee:98:f9:03:af:4f:36:6e:41:88:02:79:79:
57:f7:9b:6d:19:cc:f9:98:18:38:68:9d:16:c4:04:
dc:ed:d2:68:a8:51:69:54:0a:4d:35:fa:c5:87:da:
83:3e:c4:f9:12:aa:79:0a:43:ed:1c:c5:65:1b:68:
f5:ed:4f:ea:1a:4a:be:7b:66:90:6c:b6:4d:97:df:
37:86:5b:a9:0a:c0:02:23:a2:0e:cc:e3:b8:4f:d0:
70:ce:5c:6e:36:53:ea:a4:c0:73:80:52:d4:3a:7b:
a6:48:93:0f:4c:ea:ac:1e:03:24:b6:af:ff:06:dd:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:BC:9F:3C:E7:D5:A2:BF:57:40:6C:4D:75:2A:A6:8F:DD:64:50
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.21.80.0/22
14.21.104.0/24
14.117.0.0/16
14.118.136.0/21
14.120.160.0/19
14.121.10.0/24
14.148.32.0/20
14.217.0.0/17
59.36.240.0/20
59.37.24.0/23
59.37.160.0-59.37.171.255
61.143.0.0-61.143.25.255
61.145.0.0-61.145.49.255
113.64.208.0/22
113.93.0.0/16
113.101.128.0/19
113.103.232.0-113.103.255.255
113.107.128.0/20
116.6.1.0/24
116.6.36.0/23
116.6.83.0/24
116.19.20.0/23
116.19.136.0/24
116.27.96.0-116.27.255.255
119.121.109.0-119.121.114.255
119.121.237.0-119.121.242.255
119.133.0.0/16
119.140.144.0/20
119.146.100.0/23
119.146.172.0/22
121.12.93.0-121.12.94.255
121.12.100.0/22
125.88.2.0/23
125.92.0.0/17
125.93.8.0/21
183.2.64.0/18
183.3.176.0/20
183.4.64.0/19
183.45.192.0/18
183.52.64.0-183.52.111.255
183.57.178.0/24
183.58.18.0/23
183.58.112.0/21
183.58.124.0/22
183.59.64.0/22
183.59.244.0/22
202.96.138.0/23
202.103.170.0/24
202.104.200.0/21
202.105.168.0/22
218.14.128.0/18
219.130.128.0-219.130.175.255
IPv6:
240e:108:404d::/48
240e:108:484d::/48
Signature Algorithm: sha256WithRSAEncryption
07:a3:12:c1:65:64:2d:25:fb:12:39:72:fe:a8:5f:ba:65:dc:
59:39:ee:42:84:e5:a8:48:e2:7e:c9:d3:a8:8f:cd:ff:5a:5c:
37:1d:7d:22:9f:dd:6b:33:70:6f:6a:63:ea:c1:fb:0d:9c:cd:
7b:8d:f7:6f:56:f7:0d:d3:c0:76:e2:40:61:80:14:99:58:11:
47:98:ee:1d:8d:3e:d6:96:57:d2:19:77:a1:5e:4b:cd:84:be:
63:56:d0:4e:56:1f:18:cf:f5:ea:02:8d:80:ad:6f:bb:c5:d8:
06:bb:18:67:a4:77:53:64:4c:fd:18:b9:ba:f0:81:9a:42:85:
eb:aa:1a:bd:58:84:7a:37:02:b7:2c:c6:33:b2:e3:8d:ea:57:
2e:3f:f8:6c:c8:fa:d9:99:17:8a:b5:18:f6:6f:b7:89:01:8a:
60:c0:2e:d5:7c:72:66:02:c1:9c:d0:73:03:07:5e:33:6f:dc:
2e:89:f9:2a:dc:c9:a5:e4:ce:09:68:27:6a:ce:bc:2c:05:d0:
85:69:77:ef:18:64:6d:a9:2c:ff:44:00:bf:35:1a:a4:e7:26:
d7:a6:4d:a7:bb:e0:96:50:3b:71:2c:57:ef:9b:10:5f:1c:53:
9a:d5:ec:72:f1:32:ba:9e:ae:4c:a9:65:73:53:4d:c8:ae:99:
73:a4:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:56:56 2026 by rpki-client