Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137266.roa
File: AS137266.roa (raw, json)
Hash identifier: xYdYhRR1s8VpLp23jEjQKsqPsQTtOtpOBgEfhoGgVK8=
Subject key identifier: 3A:5C:0F:F8:9A:81:CD:96:D6:1D:04:7D:3F:26:CE:AA:3E:D8:E4:CE
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 78965229B735DCF409825578F742510B13DA5C5F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137266.roa
Signing time: Thu 02 Jul 2026 08:34:14 +0000
ROA not before: Thu 02 Jul 2026 08:29:14 +0000
ROA not after: Thu 01 Jul 2027 08:34:14 +0000
asID: 137266
IP address blocks: 27.16.129.0/24 maxlen: 24
27.16.130.0/23 maxlen: 23
27.16.132.0/22 maxlen: 22
27.16.144.0/22 maxlen: 22
27.16.148.0/22 maxlen: 22
27.16.152.0/22 maxlen: 22
27.16.160.0/22 maxlen: 22
27.16.172.0/22 maxlen: 22
27.16.180.0/22 maxlen: 22
27.16.184.0/22 maxlen: 22
27.16.188.0/22 maxlen: 22
27.16.196.0/22 maxlen: 22
27.16.200.0/21 maxlen: 21
27.16.208.0/22 maxlen: 22
27.16.212.0/22 maxlen: 22
27.16.216.0/22 maxlen: 22
27.16.220.0/22 maxlen: 22
27.16.224.0/22 maxlen: 22
27.16.232.0/22 maxlen: 22
27.16.236.0/22 maxlen: 22
27.16.252.0/24 maxlen: 24
27.17.64.0/22 maxlen: 22
27.17.70.0/23 maxlen: 23
27.17.72.0/22 maxlen: 22
27.17.76.0/23 maxlen: 23
27.17.78.0/23 maxlen: 23
27.17.80.0/20 maxlen: 20
27.17.96.0/20 maxlen: 20
27.17.112.0/21 maxlen: 21
27.17.120.0/22 maxlen: 22
27.17.140.0/24 maxlen: 24
27.17.142.0/23 maxlen: 23
27.17.144.0/20 maxlen: 20
27.17.160.0/19 maxlen: 19
27.17.192.0/19 maxlen: 19
27.17.224.0/19 maxlen: 19
27.18.0.0/17 maxlen: 17
27.18.128.0/17 maxlen: 17
27.19.0.0/18 maxlen: 18
27.19.64.0/19 maxlen: 19
27.19.92.0/22 maxlen: 22
27.19.100.0/22 maxlen: 22
27.19.104.0/22 maxlen: 22
27.19.108.0/22 maxlen: 22
27.19.116.0/22 maxlen: 22
27.19.120.0/21 maxlen: 21
27.19.132.0/22 maxlen: 22
27.19.140.0/22 maxlen: 22
27.19.144.0/20 maxlen: 20
27.19.160.0/21 maxlen: 21
27.19.172.0/22 maxlen: 22
27.19.176.0/22 maxlen: 22
27.19.180.0/22 maxlen: 22
27.19.184.0/21 maxlen: 21
27.19.196.0/22 maxlen: 22
27.19.200.0/21 maxlen: 21
27.19.208.0/21 maxlen: 21
27.19.216.0/22 maxlen: 22
27.19.224.0/22 maxlen: 22
27.19.228.0/22 maxlen: 22
27.19.232.0/22 maxlen: 22
27.19.236.0/22 maxlen: 22
59.172.156.0/22 maxlen: 22
59.174.84.0/22 maxlen: 22
111.175.40.0/22 maxlen: 22
111.175.60.0/22 maxlen: 22
119.98.0.0/20 maxlen: 20
119.98.16.0/21 maxlen: 21
119.98.32.0/19 maxlen: 19
119.98.64.0/18 maxlen: 18
119.98.128.0/18 maxlen: 18
119.98.196.0/22 maxlen: 22
119.98.200.0/21 maxlen: 21
119.98.208.0/22 maxlen: 22
119.98.224.0/20 maxlen: 20
119.98.240.0/21 maxlen: 21
119.98.248.0/23 maxlen: 23
121.60.116.0/22 maxlen: 22
171.83.0.0/18 maxlen: 18
171.83.64.0/18 maxlen: 18
171.83.88.0/22 maxlen: 22
171.113.0.0/18 maxlen: 18
171.113.64.0/18 maxlen: 18
171.113.128.0/18 maxlen: 18
171.113.192.0/18 maxlen: 18
219.139.192.0/19 maxlen: 19
219.139.224.0/19 maxlen: 19
219.140.0.0/18 maxlen: 18
219.140.64.0/18 maxlen: 18
219.140.112.0/22 maxlen: 22
219.140.128.0/18 maxlen: 18
219.140.192.0/18 maxlen: 18
219.140.196.0/24 maxlen: 24
221.232.0.0/16 maxlen: 16
221.234.128.0/17 maxlen: 17
221.235.64.0/19 maxlen: 19
221.235.251.0/24 maxlen: 24
240e:368:1419::/48 maxlen: 48
240e:368:141a::/48 maxlen: 48
240e:368:141b::/48 maxlen: 48
240e:368:141c::/48 maxlen: 48
240e:368:160c::/48 maxlen: 48
240e:368:160d::/48 maxlen: 48
240e:36e:1600::/40 maxlen: 40
240e:36e:1700::/40 maxlen: 40
240e:36f:15a0::/44 maxlen: 44
240e:36f:15b0::/44 maxlen: 44
240e:36f:15c0::/44 maxlen: 44
240e:36f:15d0::/44 maxlen: 44
240e:669:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:96:52:29:b7:35:dc:f4:09:82:55:78:f7:42:51:0b:13:da:5c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 2 08:29:14 2026 GMT
Not After : Jul 1 08:34:14 2027 GMT
Subject: CN=3A5C0FF89A81CD96D61D047D3F26CEAA3ED8E4CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:75:92:a0:a7:5b:92:41:5f:88:55:fa:87:
af:02:e0:b3:75:d0:c8:d2:6f:bb:d6:68:a6:d9:3f:
30:b8:e6:d6:04:c1:37:59:ca:3b:ed:f4:65:87:16:
ad:39:cd:eb:b8:6a:9b:cc:48:2c:61:82:a4:2f:a0:
23:78:c6:d6:94:5a:54:8c:92:68:d3:a0:30:97:a8:
88:12:e0:27:d5:9b:10:d0:39:84:f4:03:9a:1a:5a:
d2:43:bd:45:f0:3b:25:c9:58:40:2f:6e:57:8d:16:
1a:8f:3c:3e:a7:5d:b6:00:38:1b:a3:d7:66:5a:9a:
17:85:02:68:00:e5:e8:19:82:d0:af:09:d1:38:2d:
f4:04:10:79:79:61:b4:02:4b:3d:b7:ad:8c:5b:a2:
f5:a2:00:03:b4:c0:8c:a8:dd:e8:66:21:f6:98:f8:
f4:e8:41:e9:42:16:19:7d:c4:85:28:ce:ab:d7:b0:
9e:c2:8d:85:63:4e:46:fb:ef:d1:8a:e1:bc:eb:3d:
bc:b4:c4:4f:ab:9d:30:43:ec:4f:df:b9:15:70:c6:
12:0d:04:e9:07:57:b5:48:88:4b:5f:1f:79:d3:66:
d2:24:ee:ba:73:5e:58:bb:83:28:f2:24:43:c3:d2:
ef:1e:47:41:8a:c4:47:9f:9d:14:d7:a9:9f:5f:78:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:0F:F8:9A:81:CD:96:D6:1D:04:7D:3F:26:CE:AA:3E:D8:E4:CE
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.16.129.0-27.16.135.255
27.16.144.0-27.16.155.255
27.16.160.0/22
27.16.172.0/22
27.16.180.0-27.16.191.255
27.16.196.0-27.16.227.255
27.16.232.0/21
27.16.252.0/24
27.17.64.0/22
27.17.70.0-27.17.123.255
27.17.140.0/24
27.17.142.0-27.19.95.255
27.19.100.0-27.19.111.255
27.19.116.0-27.19.127.255
27.19.132.0/22
27.19.140.0-27.19.167.255
27.19.172.0-27.19.191.255
27.19.196.0-27.19.219.255
27.19.224.0/20
59.172.156.0/22
59.174.84.0/22
111.175.40.0/22
111.175.60.0/22
119.98.0.0-119.98.23.255
119.98.32.0-119.98.191.255
119.98.196.0-119.98.211.255
119.98.224.0-119.98.249.255
121.60.116.0/22
171.83.0.0/17
171.113.0.0/16
219.139.192.0-219.140.255.255
221.232.0.0/16
221.234.128.0/17
221.235.64.0/19
221.235.251.0/24
IPv6:
240e:368:1419::-240e:368:141c:ffff:ffff:ffff:ffff:ffff
240e:368:160c::/47
240e:36e:1600::/39
240e:36f:15a0::-240e:36f:15df:ffff:ffff:ffff:ffff:ffff
240e:669:8000::/48
Signature Algorithm: sha256WithRSAEncryption
5c:08:ca:7d:7e:98:3b:bf:9c:bd:25:f8:d0:76:15:67:51:9a:
60:c0:0b:3f:40:9a:81:99:6a:8d:79:c4:51:59:3a:d4:31:a1:
c7:61:b0:b0:91:4b:d4:85:4d:9c:a4:fb:b2:6d:7b:bf:1f:16:
d4:47:2b:5d:ad:2d:39:3e:a5:e8:86:92:24:3d:60:12:8e:b8:
99:de:76:ae:ff:11:5f:a7:c5:dc:ee:64:95:e4:32:71:a0:1c:
7a:0e:15:d9:06:c9:51:ef:76:90:fa:da:a9:a2:53:cf:24:5d:
d2:91:a6:dd:13:10:cd:38:bb:96:be:4b:5d:d0:92:a1:9f:ea:
8e:aa:3a:e8:02:25:4c:3c:ac:3c:92:c3:be:cb:78:58:09:2a:
a8:48:9c:49:92:5e:2b:cb:44:6b:63:b4:f8:6d:52:62:58:0d:
9a:c3:c7:14:0c:7f:b1:c5:a1:0d:90:60:84:d8:59:4a:f2:4d:
2d:bb:ff:2e:f6:34:3c:d6:45:53:08:bd:4b:f5:81:e3:f5:4a:
eb:32:ac:40:64:28:f6:12:d3:41:c0:85:d7:32:6c:6c:43:57:
a7:d5:a4:8a:0b:cd:30:6b:ef:5e:0e:2c:32:6f:8c:c0:86:d8:
14:fd:63:48:92:55:1d:fa:19:79:df:bf:00:e0:8e:47:fd:bc:
2f:de:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:59 2026 by rpki-client