Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa
File: AS137687.roa (raw, json)
Hash identifier: hjAFTn9DjpeN84gQegIU+VK/xZfXAdAPdn2vNuz3vJk=
Subject key identifier: E9:AF:A1:20:65:CD:44:98:19:8B:AB:9C:C3:F0:C1:3A:A0:E6:9C:D6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 38EB7515778D4078A43EC38A9F4306A8E74CAC70
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa
Signing time: Fri 19 Jun 2026 16:01:12 +0000
ROA not before: Fri 19 Jun 2026 15:56:12 +0000
ROA not after: Fri 18 Jun 2027 16:01:12 +0000
asID: 137687
IP address blocks: 1.192.136.0/23 maxlen: 23
1.192.188.0/22 maxlen: 22
1.192.192.0/22 maxlen: 22
1.192.200.0/22 maxlen: 22
1.194.224.0/20 maxlen: 20
36.99.32.0/20 maxlen: 20
36.99.48.0/22 maxlen: 22
36.99.50.0/23 maxlen: 23
36.99.60.0/23 maxlen: 23
36.99.64.0/21 maxlen: 21
36.99.72.0/22 maxlen: 22
36.99.80.0/21 maxlen: 21
36.99.96.0/22 maxlen: 22
36.99.97.0/24 maxlen: 24
36.99.98.0/23 maxlen: 23
36.99.116.0/22 maxlen: 22
36.99.116.0/24 maxlen: 24
36.99.120.0/22 maxlen: 22
36.99.136.0/21 maxlen: 21
36.99.152.0/23 maxlen: 23
36.99.160.0/20 maxlen: 20
36.99.176.0/21 maxlen: 21
36.99.184.0/21 maxlen: 21
36.99.192.0/20 maxlen: 20
36.99.192.0/23 maxlen: 23
36.99.194.0/23 maxlen: 23
36.99.194.0/24 maxlen: 24
36.99.197.0/24 maxlen: 24
36.99.200.0/23 maxlen: 23
36.99.203.0/24 maxlen: 24
36.99.224.0/21 maxlen: 21
36.99.225.0/24 maxlen: 24
36.99.227.0/24 maxlen: 24
36.99.248.0/21 maxlen: 21
36.99.248.0/23 maxlen: 23
36.99.248.0/24 maxlen: 24
36.99.249.0/24 maxlen: 24
36.99.250.0/24 maxlen: 24
36.99.251.0/24 maxlen: 24
36.99.252.0/24 maxlen: 24
106.42.28.0/22 maxlen: 22
106.42.192.0/21 maxlen: 21
106.42.212.0/22 maxlen: 22
106.42.232.0/22 maxlen: 22
106.42.244.0/22 maxlen: 22
123.52.0.0/21 maxlen: 21
123.52.60.0/22 maxlen: 22
123.52.64.0/22 maxlen: 22
123.53.44.0/22 maxlen: 22
123.53.52.0/22 maxlen: 22
123.53.56.0/22 maxlen: 22
123.160.220.0/22 maxlen: 22
123.161.56.0/21 maxlen: 21
123.161.58.0/24 maxlen: 24
123.161.60.0/24 maxlen: 24
123.161.61.0/24 maxlen: 24
123.161.63.0/24 maxlen: 24
171.8.167.0/24 maxlen: 24
171.15.32.0/21 maxlen: 21
171.15.96.0/21 maxlen: 21
171.15.108.0/22 maxlen: 22
171.15.112.0/22 maxlen: 22
171.15.128.0/22 maxlen: 22
171.15.136.0/22 maxlen: 22
240e:b:f000::/37 maxlen: 37
240e:4b:4000::/37 maxlen: 37
240e:4b:4000::/48 maxlen: 48
240e:108:4d::/48 maxlen: 48
240e:108:8f::/48 maxlen: 48
240e:108:10e0::/48 maxlen: 48
240e:108:4203::/48 maxlen: 48
240e:108:4a03::/48 maxlen: 48
240e:93c::/36 maxlen: 36
240e:93c::/40 maxlen: 40
240e:93c:f::/48 maxlen: 48
240e:93c:100::/40 maxlen: 40
240e:93c:10b::/48 maxlen: 48
240e:93c:200::/40 maxlen: 40
240e:93c:201::/48 maxlen: 48
240e:980:4d00::/40 maxlen: 40
240e:980:8f00::/40 maxlen: 40
240e:980:8f00::/41 maxlen: 41
240e:980:8f80::/41 maxlen: 41
240e:981:e000::/40 maxlen: 40
240e:981:e100::/40 maxlen: 40
240e:981:e200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:eb:75:15:77:8d:40:78:a4:3e:c3:8a:9f:43:06:a8:e7:4c:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 19 15:56:12 2026 GMT
Not After : Jun 18 16:01:12 2027 GMT
Subject: CN=E9AFA12065CD4498198BAB9CC3F0C13AA0E69CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:a6:6a:77:10:05:66:c8:98:93:e2:d6:7c:
1b:d0:94:c7:f9:2a:e9:4f:94:ec:b0:b2:e2:f9:23:
2d:eb:ad:89:30:d8:7f:40:52:e1:af:00:1a:37:dc:
d2:5c:61:e0:3e:b1:b4:a8:27:07:2c:c5:31:71:b8:
27:ae:7c:3c:78:01:51:a8:74:6d:23:4b:cd:46:37:
a4:35:9f:b8:bb:40:61:81:d5:db:5e:29:95:ae:77:
c0:63:bf:bb:1f:6c:25:61:73:71:23:0b:ec:79:62:
4f:dd:f0:3f:08:82:64:80:c7:d1:d3:12:02:76:5f:
9f:53:83:0c:c6:63:f5:5a:2b:2a:47:33:f8:35:e8:
dd:d6:13:17:9e:b5:a8:a8:de:17:e8:ea:eb:b7:e6:
81:07:b5:db:5b:95:c5:2c:3a:f5:b8:e4:e1:29:5c:
15:26:b4:d0:98:63:d3:6c:81:3d:b1:fe:64:61:09:
e8:ff:6f:97:80:a6:45:a1:db:35:39:e6:84:61:b6:
ad:29:8a:75:26:5f:85:c4:07:43:c5:f1:fb:b6:8b:
9e:16:9a:93:01:86:d5:fa:2e:c1:c7:1d:76:71:c6:
16:ca:f5:e5:74:c1:88:d0:19:24:84:4c:24:dc:e0:
24:8b:3c:91:26:7f:18:ad:ab:ef:d3:38:98:ba:f5:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:A1:20:65:CD:44:98:19:8B:AB:9C:C3:F0:C1:3A:A0:E6:9C:D6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.192.136.0/23
1.192.188.0-1.192.195.255
1.192.200.0/22
1.194.224.0/20
36.99.32.0-36.99.51.255
36.99.60.0/23
36.99.64.0-36.99.75.255
36.99.80.0/21
36.99.96.0/22
36.99.116.0-36.99.123.255
36.99.136.0/21
36.99.152.0/23
36.99.160.0-36.99.207.255
36.99.224.0/21
36.99.248.0/21
106.42.28.0/22
106.42.192.0/21
106.42.212.0/22
106.42.232.0/22
106.42.244.0/22
123.52.0.0/21
123.52.60.0-123.52.67.255
123.53.44.0/22
123.53.52.0-123.53.59.255
123.160.220.0/22
123.161.56.0/21
171.8.167.0/24
171.15.32.0/21
171.15.96.0/21
171.15.108.0-171.15.115.255
171.15.128.0/22
171.15.136.0/22
IPv6:
240e:b:f000::/37
240e:4b:4000::/37
240e:108:4d::/48
240e:108:8f::/48
240e:108:10e0::/48
240e:108:4203::/48
240e:108:4a03::/48
240e:93c::/36
240e:980:4d00::/40
240e:980:8f00::/40
240e:981:e000::-240e:981:e2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:b4:47:ef:f4:1e:63:1b:02:1e:16:c1:26:3a:f2:c7:33:04:
77:b5:95:97:6f:ff:4c:1d:19:13:ef:29:75:37:06:84:9f:3f:
de:b9:d2:62:59:1f:cc:be:b4:29:23:1e:a9:8d:f4:8b:69:b6:
b4:f8:7b:44:ee:df:cf:9a:b4:4b:84:ad:d2:66:b5:de:4f:68:
47:d6:74:78:53:59:00:0c:90:b2:92:c9:69:a6:e7:09:40:7d:
f7:c8:21:4e:bd:36:fe:05:e7:64:85:de:f7:6c:99:6a:86:8a:
2b:16:2e:df:06:37:fc:b8:6d:74:fa:2f:81:d5:03:97:01:40:
bc:49:88:7d:a6:0d:f4:40:0f:4b:6e:f7:bb:66:d6:5e:18:83:
61:fd:85:b9:be:83:25:6d:ce:8c:00:5f:83:98:a1:91:cc:21:
64:e0:43:c3:f1:d6:b2:1b:f8:81:a6:cf:cf:d5:21:6a:a1:8b:
7f:7b:fa:ec:9c:ea:94:a1:7f:b7:33:57:67:d9:18:c6:1c:1c:
27:5b:c3:40:d5:72:9a:a6:86:5f:57:f8:86:9a:db:de:ff:7b:
50:35:5c:ae:ff:11:fc:a8:84:87:c7:9a:80:1e:02:d9:2e:c2:
19:dc:7c:6c:c1:8a:cb:77:b6:7d:f5:1c:2c:f6:ec:b7:57:b2:
ae:aa:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 16:00:35 2026 by rpki-client