Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137688.roa
File: AS137688.roa (raw, json)
Hash identifier: Z7+tvo6WDgO0k4V7p1S9fhjMTrBYx6gPjEeC09+N1jg=
Subject key identifier: 74:1E:4A:CA:68:72:51:B9:D2:1D:C1:F3:40:59:14:29:66:3E:32:E2
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 041916CC0244BB8110C8121F115F8782A7F684B6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137688.roa
Signing time: Wed 17 Jun 2026 16:10:43 +0000
ROA not before: Wed 17 Jun 2026 16:05:43 +0000
ROA not after: Wed 16 Jun 2027 16:10:43 +0000
asID: 137688
IP address blocks: 42.202.24.0/21 maxlen: 21
42.203.224.0/19 maxlen: 19
59.45.64.0/19 maxlen: 19
59.47.0.0/20 maxlen: 20
59.47.192.0/19 maxlen: 19
59.47.224.0/20 maxlen: 20
123.177.12.0/23 maxlen: 23
123.186.144.0/20 maxlen: 20
123.245.192.0/20 maxlen: 20
123.246.96.0/20 maxlen: 20
182.202.128.0/19 maxlen: 19
182.202.160.0/19 maxlen: 19
219.149.32.0/21 maxlen: 21
240e:1:a000::/37 maxlen: 37
240e:86:3000::/37 maxlen: 37
240e:30c:4a00::/39 maxlen: 39
240e:30c:4c00::/38 maxlen: 38
240e:30c:5000::/38 maxlen: 38
240e:30c:5400::/39 maxlen: 39
240e:30d:4a00::/39 maxlen: 39
240e:30d:4c00::/38 maxlen: 38
240e:30d:5000::/38 maxlen: 38
240e:30d:5400::/39 maxlen: 39
240e:30e:4a00::/39 maxlen: 39
240e:30e:4c00::/38 maxlen: 38
240e:30e:5000::/38 maxlen: 38
240e:30e:5400::/39 maxlen: 39
240e:30f:4a00::/39 maxlen: 39
240e:30f:4c00::/38 maxlen: 38
240e:30f:5000::/38 maxlen: 38
240e:30f:5400::/39 maxlen: 39
240e:60c:6000::/36 maxlen: 36
240e:60c:b000::/37 maxlen: 37
240e:60c:d800::/38 maxlen: 38
240e:60c:f800::/38 maxlen: 38
240e:90d:a000::/36 maxlen: 36
240e:90d:d000::/37 maxlen: 37
240e:90d:f000::/37 maxlen: 37
240e:90e:2000::/36 maxlen: 36
240e:981:240d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:19:16:cc:02:44:bb:81:10:c8:12:1f:11:5f:87:82:a7:f6:84:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 17 16:05:43 2026 GMT
Not After : Jun 16 16:10:43 2027 GMT
Subject: CN=741E4ACA687251B9D21DC1F340591429663E32E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:12:cc:0e:32:cd:5a:21:84:e9:31:07:24:
28:92:eb:9d:97:22:0e:7f:39:7e:23:df:0f:7f:d6:
3a:12:9b:53:55:e7:78:29:e2:e8:38:ae:82:0d:6f:
f5:8d:29:8f:3a:14:dd:e0:36:6e:88:e5:c7:31:14:
cc:8e:45:06:be:c2:3f:52:18:0a:e2:b0:cc:b5:e3:
d2:6b:bb:60:8e:9e:24:0b:16:99:81:2e:78:60:bf:
7d:76:fc:c2:8d:a4:7b:a2:54:74:e9:5b:13:9e:f3:
92:bb:63:68:9f:f9:d8:92:44:fd:d0:e4:df:76:41:
60:80:71:bb:df:cf:ec:32:a1:d4:d9:4d:5c:10:cc:
10:9e:8c:f6:b6:44:6c:d5:0a:b0:31:c5:b1:ef:d9:
0c:66:00:ff:c7:ef:77:80:5c:c2:51:31:5c:fe:e7:
b2:b8:53:2f:af:9c:37:26:05:c8:64:6e:22:02:57:
7b:29:42:99:51:05:72:13:0d:af:20:91:89:47:89:
ec:36:34:c8:2c:ef:e3:20:90:00:2b:2c:e5:c9:0b:
55:20:3e:7f:da:ab:f8:48:56:e7:90:b1:c3:2f:20:
61:0d:ea:71:21:aa:75:0b:e3:fb:b5:4d:c7:84:73:
c6:ab:19:f3:cb:d2:80:8d:1f:8f:83:13:61:7c:93:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:4A:CA:68:72:51:B9:D2:1D:C1:F3:40:59:14:29:66:3E:32:E2
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137688.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.202.24.0/21
42.203.224.0/19
59.45.64.0/19
59.47.0.0/20
59.47.192.0-59.47.239.255
123.177.12.0/23
123.186.144.0/20
123.245.192.0/20
123.246.96.0/20
182.202.128.0/18
219.149.32.0/21
IPv6:
240e:1:a000::/37
240e:86:3000::/37
240e:30c:4a00::-240e:30c:55ff:ffff:ffff:ffff:ffff:ffff
240e:30d:4a00::-240e:30d:55ff:ffff:ffff:ffff:ffff:ffff
240e:30e:4a00::-240e:30e:55ff:ffff:ffff:ffff:ffff:ffff
240e:30f:4a00::-240e:30f:55ff:ffff:ffff:ffff:ffff:ffff
240e:60c:6000::/36
240e:60c:b000::/37
240e:60c:d800::/38
240e:60c:f800::/38
240e:90d:a000::/36
240e:90d:d000::/37
240e:90d:f000::/37
240e:90e:2000::/36
240e:981:240d::/48
Signature Algorithm: sha256WithRSAEncryption
0e:49:42:f7:bb:05:b1:06:0f:61:a8:03:e2:1d:4c:b6:a4:7f:
3f:ec:ff:48:e3:47:d2:b1:5e:88:2c:54:f2:ef:16:48:57:34:
03:82:72:fa:04:27:20:ce:2b:50:bd:9e:1e:2f:a5:15:27:1b:
6e:bc:a8:10:12:c5:c6:6e:d4:e6:5f:19:59:f9:76:c3:a2:78:
8c:ab:88:bf:4f:09:21:12:4e:e9:20:af:b5:b4:42:6a:a1:e3:
d4:c1:9e:62:67:9f:7b:76:6e:bd:f9:b4:c9:82:71:b9:ad:dc:
b8:24:e3:fa:fb:16:0c:62:9b:75:92:72:d4:0e:11:9b:0d:a4:
bb:96:84:f0:4b:05:4e:bd:21:2b:e5:5c:97:90:fc:ba:0a:c6:
09:87:07:d2:0d:ea:3a:c6:9d:2f:f7:3f:f5:f6:ec:89:5e:6b:
44:4e:81:e7:4c:bf:3b:a2:2d:2b:52:44:1c:71:6d:f0:b1:6f:
8c:27:d4:f5:5c:15:f0:a7:fa:ec:ef:57:cd:20:36:40:12:97:
b3:92:9d:cd:18:5a:19:04:61:5a:8e:c7:0d:c2:fe:76:41:57:
3b:75:32:26:8c:0b:4e:38:06:60:cc:e8:38:8d:92:8f:ee:a8:
26:d9:44:7a:1e:36:f2:d2:36:fa:80:11:fc:33:f3:87:b4:f1:
28:97:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:59 2026 by rpki-client