Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137689.roa
File: AS137689.roa (raw, json)
Hash identifier: thYrEVm8TfY32KZ3Qd/SziFauxEa+y+rIYFj8r6MtM0=
Subject key identifier: 8E:A5:36:B9:B4:62:72:1A:5C:65:96:7F:3C:3A:31:E5:22:F9:20:2E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7E184251087AE91A5852591F59EFEFCAFCDE131F
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137689.roa
Signing time: Thu 25 Jun 2026 16:33:07 +0000
ROA not before: Thu 25 Jun 2026 16:28:07 +0000
ROA not after: Thu 24 Jun 2027 16:33:07 +0000
asID: 137689
IP address blocks: 36.113.0.0/19 maxlen: 19
36.113.0.0/24 maxlen: 24
36.113.1.0/24 maxlen: 24
36.113.2.0/24 maxlen: 24
36.113.3.0/24 maxlen: 24
36.113.4.0/24 maxlen: 24
36.113.5.0/24 maxlen: 24
36.113.16.0/22 maxlen: 22
36.113.20.0/22 maxlen: 22
36.113.24.0/23 maxlen: 23
36.113.26.0/23 maxlen: 23
36.113.28.0/24 maxlen: 24
36.113.29.0/24 maxlen: 24
36.113.30.0/24 maxlen: 24
36.113.31.0/24 maxlen: 24
36.113.32.0/19 maxlen: 19
36.113.32.0/24 maxlen: 24
36.113.33.0/24 maxlen: 24
36.113.34.0/24 maxlen: 24
36.113.35.0/24 maxlen: 24
36.113.36.0/24 maxlen: 24
36.113.37.0/24 maxlen: 24
36.113.38.0/24 maxlen: 24
36.113.39.0/24 maxlen: 24
36.113.40.0/24 maxlen: 24
36.113.48.0/22 maxlen: 22
36.113.52.0/22 maxlen: 22
36.113.56.0/23 maxlen: 23
36.113.58.0/23 maxlen: 23
36.113.64.0/24 maxlen: 24
36.113.65.0/24 maxlen: 24
36.113.66.0/24 maxlen: 24
36.113.67.0/24 maxlen: 24
36.113.68.0/24 maxlen: 24
36.113.69.0/24 maxlen: 24
36.113.70.0/24 maxlen: 24
36.113.71.0/24 maxlen: 24
36.113.80.0/24 maxlen: 24
36.113.81.0/24 maxlen: 24
36.113.82.0/24 maxlen: 24
36.113.83.0/24 maxlen: 24
36.113.96.0/19 maxlen: 19
36.113.96.0/20 maxlen: 20
36.113.112.0/24 maxlen: 24
36.113.113.0/24 maxlen: 24
36.113.114.0/24 maxlen: 24
36.113.115.0/24 maxlen: 24
36.113.116.0/24 maxlen: 24
36.113.117.0/24 maxlen: 24
36.113.118.0/24 maxlen: 24
36.113.119.0/24 maxlen: 24
36.113.120.0/24 maxlen: 24
36.113.128.0/19 maxlen: 19
36.113.151.0/24 maxlen: 24
36.113.152.0/24 maxlen: 24
36.113.160.0/23 maxlen: 23
36.113.184.0/22 maxlen: 22
36.113.188.0/22 maxlen: 22
36.113.192.0/23 maxlen: 23
36.113.204.0/24 maxlen: 24
36.113.205.0/24 maxlen: 24
36.113.251.0/24 maxlen: 24
36.113.252.0/24 maxlen: 24
36.113.253.0/24 maxlen: 24
36.113.254.0/24 maxlen: 24
115.170.132.0/24 maxlen: 24
115.170.133.0/24 maxlen: 24
117.60.157.0/24 maxlen: 24
117.60.158.0/24 maxlen: 24
117.61.208.0/24 maxlen: 24
117.61.209.0/24 maxlen: 24
117.61.210.0/24 maxlen: 24
117.61.211.0/24 maxlen: 24
117.61.212.0/24 maxlen: 24
117.61.213.0/24 maxlen: 24
117.61.216.0/24 maxlen: 24
117.61.217.0/24 maxlen: 24
117.61.218.0/24 maxlen: 24
117.61.219.0/24 maxlen: 24
117.61.222.0/24 maxlen: 24
117.61.223.0/24 maxlen: 24
117.61.232.0/24 maxlen: 24
117.61.233.0/24 maxlen: 24
117.61.234.0/24 maxlen: 24
117.61.235.0/24 maxlen: 24
117.61.254.0/24 maxlen: 24
240e:e8:f0f0::/44 maxlen: 44
240e:e8:f1f0::/44 maxlen: 44
240e:100:30::/44 maxlen: 44
240e:100:40::/44 maxlen: 44
240e:100:50::/44 maxlen: 44
240e:100:60::/44 maxlen: 44
240e:878::/44 maxlen: 44
240e:878:10::/44 maxlen: 44
240e:878:20::/44 maxlen: 44
240e:878:30::/44 maxlen: 44
240e:878:40::/44 maxlen: 44
240e:878:50::/44 maxlen: 44
240e:878:60::/44 maxlen: 44
240e:878:70::/44 maxlen: 44
240e:878:80::/44 maxlen: 44
240e:878:90::/44 maxlen: 44
240e:878:a0::/44 maxlen: 44
240e:878:b0::/44 maxlen: 44
240e:878:c0::/44 maxlen: 44
240e:878:d0::/44 maxlen: 44
240e:878:100::/42 maxlen: 42
240e:878:140::/42 maxlen: 42
240e:878:1c0::/44 maxlen: 44
240e:878:1e0::/44 maxlen: 44
240e:878:200::/42 maxlen: 42
240e:878:240::/42 maxlen: 42
240e:878:280::/42 maxlen: 42
240e:878:2c0::/43 maxlen: 43
240e:878:2e0::/43 maxlen: 43
240e:878:300::/42 maxlen: 42
240e:878:340::/42 maxlen: 42
240e:878:380::/42 maxlen: 42
240e:878:3c0::/43 maxlen: 43
240e:878:3e0::/43 maxlen: 43
240e:878:700::/44 maxlen: 44
240e:878:710::/44 maxlen: 44
240e:878:720::/44 maxlen: 44
240e:878:730::/44 maxlen: 44
240e:878:740::/44 maxlen: 44
240e:878:750::/44 maxlen: 44
240e:878:760::/44 maxlen: 44
240e:878:770::/44 maxlen: 44
240e:878:780::/44 maxlen: 44
240e:878:790::/44 maxlen: 44
240e:878:7a0::/44 maxlen: 44
240e:878:7b0::/44 maxlen: 44
240e:878:7c0::/44 maxlen: 44
240e:878:7d0::/44 maxlen: 44
240e:878:7e0::/44 maxlen: 44
240e:878:7f0::/44 maxlen: 44
240e:878:800::/44 maxlen: 44
240e:878:810::/44 maxlen: 44
240e:878:820::/44 maxlen: 44
240e:878:830::/44 maxlen: 44
240e:878:8c0::/44 maxlen: 44
240e:878:8d0::/44 maxlen: 44
240e:878:8e0::/44 maxlen: 44
240e:878:8f0::/44 maxlen: 44
240e:878:e00::/43 maxlen: 43
240e:878:e20::/43 maxlen: 43
240e:878:e40::/43 maxlen: 43
240e:878:e60::/43 maxlen: 43
240e:878:f00::/40 maxlen: 40
240e:878:1000::/40 maxlen: 40
240e:878:1100::/41 maxlen: 41
240e:878:1180::/41 maxlen: 41
240e:878:1300::/40 maxlen: 40
240e:878:1400::/40 maxlen: 40
240e:878:1500::/41 maxlen: 41
240e:878:1580::/41 maxlen: 41
240e:878:1700::/42 maxlen: 42
240e:878:1740::/42 maxlen: 42
240e:878:1780::/43 maxlen: 43
240e:878:17a0::/43 maxlen: 43
240e:878:1800::/42 maxlen: 42
240e:878:1840::/42 maxlen: 42
240e:878:1880::/43 maxlen: 43
240e:878:18a0::/43 maxlen: 43
240e:879:80c0::/43 maxlen: 43
240e:879:80e0::/43 maxlen: 43
240e:879:8100::/43 maxlen: 43
240e:879:8120::/43 maxlen: 43
240e:879:8140::/43 maxlen: 43
240e:879:8160::/43 maxlen: 43
240e:880::/43 maxlen: 43
240e:880:20::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:18:42:51:08:7a:e9:1a:58:52:59:1f:59:ef:ef:ca:fc:de:13:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 25 16:28:07 2026 GMT
Not After : Jun 24 16:33:07 2027 GMT
Subject: CN=8EA536B9B462721A5C65967F3C3A31E522F9202E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:97:d8:0b:f2:f2:35:11:e9:73:da:fb:04:
64:ea:d1:20:df:92:c8:e8:1b:b4:ad:42:43:c9:43:
31:27:e2:ec:2e:35:a9:ee:91:0e:5c:6f:3b:a9:a4:
e0:21:2f:1a:dc:b5:e7:14:c4:90:6f:8f:0a:e4:5e:
f4:fb:77:5d:18:69:81:6f:9c:fc:3a:c1:72:86:63:
2d:c4:4a:75:03:88:78:15:08:36:4b:ea:57:2b:81:
de:89:34:da:74:fb:2d:61:50:e9:7e:ef:03:27:94:
1d:59:8b:11:9b:3a:26:ac:b0:7d:e3:57:ba:2f:bc:
be:c5:92:9d:5c:f7:b7:77:56:21:55:4f:e1:3c:97:
11:07:00:2b:43:36:b3:9f:3b:0f:0c:4c:94:52:78:
0c:5c:66:e1:9f:8e:79:07:3e:50:bc:a6:ae:6d:d5:
e4:c1:13:1e:a6:23:80:55:04:98:fd:57:3c:a7:1a:
34:76:b8:a3:92:9e:c7:2b:55:5e:74:9e:fb:c6:8f:
c1:22:4a:74:39:9b:16:95:2a:68:0e:7e:37:72:14:
79:b1:af:bc:81:ba:a5:ab:d1:85:3b:b4:4d:78:14:
0a:dd:39:f2:38:71:e6:f6:66:92:ac:5a:05:67:70:
25:2c:8b:8c:05:f7:54:4c:d5:c5:69:cb:0a:e6:ac:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:36:B9:B4:62:72:1A:5C:65:96:7F:3C:3A:31:E5:22:F9:20:2E
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.113.0.0-36.113.71.255
36.113.80.0/22
36.113.96.0-36.113.161.255
36.113.184.0-36.113.193.255
36.113.204.0/23
36.113.251.0-36.113.254.255
115.170.132.0/23
117.60.157.0-117.60.158.255
117.61.208.0-117.61.213.255
117.61.216.0/22
117.61.222.0/23
117.61.232.0/22
117.61.254.0/24
IPv6:
240e:e8:f0f0::/44
240e:e8:f1f0::/44
240e:100:30::-240e:100:6f:ffff:ffff:ffff:ffff:ffff
240e:878::-240e:878:df:ffff:ffff:ffff:ffff:ffff
240e:878:100::/41
240e:878:1c0::/44
240e:878:1e0::/44
240e:878:200::/39
240e:878:700::-240e:878:83f:ffff:ffff:ffff:ffff:ffff
240e:878:8c0::/42
240e:878:e00::/41
240e:878:f00::-240e:878:11ff:ffff:ffff:ffff:ffff:ffff
240e:878:1300::-240e:878:15ff:ffff:ffff:ffff:ffff:ffff
240e:878:1700::-240e:878:17bf:ffff:ffff:ffff:ffff:ffff
240e:878:1800::-240e:878:18bf:ffff:ffff:ffff:ffff:ffff
240e:879:80c0::-240e:879:817f:ffff:ffff:ffff:ffff:ffff
240e:880::/42
Signature Algorithm: sha256WithRSAEncryption
ad:2a:b5:d3:55:54:f9:f9:d5:f0:ee:61:46:6a:fe:ad:82:8b:
7c:00:51:19:56:5f:84:c6:6a:19:f8:ea:81:a7:3b:9d:cf:80:
e7:c6:86:ca:67:24:59:ba:c2:68:e2:8d:02:20:af:6a:db:44:
74:e0:7c:79:f0:39:0a:e4:3c:29:1c:8a:58:6c:2a:85:1e:ca:
41:1c:04:d7:c9:3a:35:60:f1:5d:2c:88:79:d3:aa:a8:f6:5e:
16:b6:3f:fb:10:43:d5:0f:94:3f:0c:66:a1:e2:8d:7b:8a:77:
85:80:53:86:03:5c:a8:a0:24:76:63:ac:e4:f2:7f:87:8f:23:
b9:06:8c:d3:69:51:74:01:72:6f:be:bd:e0:7f:1f:4c:ca:12:
17:af:5f:bd:7e:5d:09:15:c9:86:a2:19:92:2b:d6:09:34:41:
0d:52:9e:9d:f5:87:96:65:30:b3:c6:fc:67:4c:d3:d0:a6:f8:
45:87:4d:4b:4b:67:5a:32:69:92:be:7f:94:2a:8b:72:ea:84:
b1:5d:fe:0e:4a:f1:a3:10:10:a4:cc:b8:1a:25:45:55:a9:0a:
b4:6e:a0:9c:30:2e:e6:b7:1f:90:ce:2f:e6:be:0b:d5:7e:a7:
e3:ae:85:e0:5f:46:07:8d:fa:e1:7f:18:ef:ce:b6:e8:62:52:
18:55:03:40
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUfhhCUQh66RpYUlkfWe/vyvzeEx8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYyNTE2MjgwN1oX
DTI3MDYyNDE2MzMwN1owMzExMC8GA1UEAxMoOEVBNTM2QjlCNDYyNzIxQTVDNjU5
NjdGM0MzQTMxRTUyMkY5MjAyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJVjl9gL8vI1Eelz2vsEZOrRIN+SyOgbtK1CQ8lDMSfi7C41qe6RDlxvO6mk
4CEvGty15xTEkG+PCuRe9Pt3XRhpgW+c/DrBcoZjLcRKdQOIeBUINkvqVyuB3ok0
2nT7LWFQ6X7vAyeUHVmLEZs6JqywfeNXui+8vsWSnVz3t3dWIVVP4TyXEQcAK0M2
s587DwxMlFJ4DFxm4Z+OeQc+ULymrm3V5METHqYjgFUEmP1XPKcaNHa4o5KexytV
XnSe+8aPwSJKdDmbFpUqaA5+N3IUebGvvIG6pavRhTu0TXgUCt058jhx5vZmkqxa
BWdwJSyLjAX3VEzVxWnLCuas6D8CAwEAAaOCA1MwggNPMB0GA1UdDgQWBBSOpTa5
tGJyGlxlln88OjHlIvkgLjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM3Njg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBjAYIKwYBBQUHAQcBAf8EggF7MIIBdzCBgwQCAAEwfTALAwMAJHEDBAMkcUAD
BAIkcVAwDAMEBSRxYAMEASRxoDAMAwQDJHG4AwQBJHHAAwQBJHHMMAwDBAAkcfsD
BAAkcf4DBAFzqoQwDAMEAHU8nQMEAHU8njAMAwQEdT3QAwQBdT3UAwQCdT3YAwQB
dT3eAwQCdT3oAwQAdT3+MIHuBAIAAjCB5wMHBCQOAOjw8AMHBCQOAOjx8DASAwcE
JA4BAAAwAwcEJA4BAABgMBADBQMkDgh4AwcFJA4IeADAAwcHJA4IeAEAAwcEJA4I
eAHAAwcEJA4IeAHgAwYBJA4IeAIwEQMGACQOCHgHAwcGJA4IeAgAAwcGJA4IeAjA
AwcHJA4IeA4AMBADBgAkDgh4DwMGASQOCHgQMBADBgAkDgh4EwMGASQOCHgUMBED
BgAkDgh4FwMHBiQOCHgXgDARAwYDJA4IeBgDBwYkDgh4GIAwEgMHBiQOCHmAwAMH
ByQOCHmBAAMHBiQOCIAAADANBgkqhkiG9w0BAQsFAAOCAQEArSq101VU+fnV8O5h
Rmr+rYKLfABRGVZfhMZqGfjqgac7nc+A58aGymckWbrCaOKNAiCvattEdOB8efA5
CuQ8KRyKWGwqhR7KQRwE18k6NWDxXSyIedOqqPZeFrY/+xBD1Q+UPwxmoeKNe4p3
hYBThgNcqKAkdmOs5PJ/h48juQaM02lRdAFyb7694H8fTMoSF69fvX5dCRXJhqIZ
kivWCTRBDVKenfWHlmUws8b8Z0zT0Kb4RYdNS0tnWjJpkr5/lCqLcuqEsV3+Dkrx
oxAQpMy4GiVFVakKtG6gnDAu5rcfkM4v5r4L1X6n466F4F9GB4364X8Y78626GJS
GFUDQA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:58:56 2026 by rpki-client