Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137692.roa
File: AS137692.roa (raw, json)
Hash identifier: 880pno7pCFcyjNQ4Hxl2sSSKFSxxNIIlm/KP8L5zz6A=
Subject key identifier: 93:C0:8A:3C:A8:11:71:83:DB:42:16:B7:F1:D7:CA:F8:DF:3B:A1:ED
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7D44363589950FBAFE3BD8C170661AA1330D9AF3
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137692.roa
Signing time: Thu 25 Jun 2026 16:38:41 +0000
ROA not before: Thu 25 Jun 2026 16:33:41 +0000
ROA not after: Thu 24 Jun 2027 16:38:41 +0000
asID: 137692
IP address blocks: 115.170.165.0/24 maxlen: 24
115.170.166.0/24 maxlen: 24
115.170.169.0/24 maxlen: 24
115.170.234.0/24 maxlen: 24
115.170.235.0/24 maxlen: 24
117.61.84.0/23 maxlen: 23
117.61.86.0/24 maxlen: 24
117.61.87.0/24 maxlen: 24
117.61.88.0/24 maxlen: 24
117.61.89.0/24 maxlen: 24
117.61.90.0/24 maxlen: 24
117.61.91.0/24 maxlen: 24
117.61.92.0/23 maxlen: 23
117.61.94.0/24 maxlen: 24
117.61.107.0/24 maxlen: 24
117.61.122.0/24 maxlen: 24
203.160.192.0/19 maxlen: 19
203.160.192.0/24 maxlen: 24
203.160.196.0/24 maxlen: 24
203.160.212.0/24 maxlen: 24
203.168.0.0/19 maxlen: 19
203.168.0.0/23 maxlen: 23
203.168.2.0/24 maxlen: 24
203.168.3.0/24 maxlen: 24
203.168.5.0/24 maxlen: 24
203.168.6.0/24 maxlen: 24
203.168.7.0/24 maxlen: 24
203.168.8.0/24 maxlen: 24
203.168.9.0/24 maxlen: 24
203.168.10.0/24 maxlen: 24
203.168.11.0/24 maxlen: 24
203.168.12.0/24 maxlen: 24
203.168.13.0/24 maxlen: 24
203.168.14.0/24 maxlen: 24
203.168.15.0/24 maxlen: 24
203.168.16.0/23 maxlen: 23
203.168.18.0/24 maxlen: 24
240e:87c::/40 maxlen: 40
240e:87c:40::/44 maxlen: 44
240e:87c:50::/44 maxlen: 44
240e:87c:a0::/44 maxlen: 44
240e:87c:b0::/44 maxlen: 44
240e:87c:100::/40 maxlen: 40
240e:87c:200::/40 maxlen: 40
240e:87c:260::/43 maxlen: 43
240e:87c:280::/44 maxlen: 44
240e:87c:2d0::/44 maxlen: 44
240e:87c:2e0::/44 maxlen: 44
240e:87c:300::/40 maxlen: 40
240e:87c:360::/43 maxlen: 43
240e:87c:380::/44 maxlen: 44
240e:87c:700::/44 maxlen: 44
240e:87c:710::/44 maxlen: 44
240e:87c:720::/44 maxlen: 44
240e:87c:730::/44 maxlen: 44
240e:87c:740::/43 maxlen: 43
240e:87c:760::/44 maxlen: 44
240e:87c:770::/44 maxlen: 44
240e:87c:780::/43 maxlen: 43
240e:87c:7a0::/43 maxlen: 43
240e:87c:7c0::/44 maxlen: 44
240e:87c:7d0::/44 maxlen: 44
240e:87c:7e0::/43 maxlen: 43
240e:87c:800::/43 maxlen: 43
240e:87c:820::/43 maxlen: 43
240e:87c:840::/43 maxlen: 43
240e:87c:860::/43 maxlen: 43
240e:87c:11c0::/44 maxlen: 44
240e:87c:11d0::/44 maxlen: 44
240e:87c:1900::/41 maxlen: 41
240e:87c:1980::/42 maxlen: 42
240e:87c:19c0::/42 maxlen: 42
240e:87c:1a00::/41 maxlen: 41
240e:87c:1e00::/41 maxlen: 41
240e:87c:1e80::/42 maxlen: 42
240e:87c:1ec0::/42 maxlen: 42
240e:87c:1f00::/41 maxlen: 41
240e:87c:2200::/43 maxlen: 43
240e:87c:2220::/44 maxlen: 44
240e:87c:2230::/44 maxlen: 44
240e:87c:2240::/43 maxlen: 43
240e:87c:2320::/43 maxlen: 43
240e:87c:2340::/44 maxlen: 44
240e:87c:2350::/44 maxlen: 44
240e:87c:2360::/43 maxlen: 43
240e:87c:2500::/41 maxlen: 41
240e:87c:2580::/42 maxlen: 42
240e:87c:25c0::/43 maxlen: 43
240e:87c:25e0::/44 maxlen: 44
240e:87c:2600::/41 maxlen: 41
240e:87c:2680::/42 maxlen: 42
240e:87c:26c0::/43 maxlen: 43
240e:87c:26e0::/44 maxlen: 44
240e:87c:2b00::/41 maxlen: 41
240e:87c:2b80::/41 maxlen: 41
240e:87d:80c0::/44 maxlen: 44
240e:87d:80d0::/44 maxlen: 44
240e:87d:80e0::/44 maxlen: 44
240e:87d:80f0::/44 maxlen: 44
240e:900:40::/122 maxlen: 122
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:44:36:35:89:95:0f:ba:fe:3b:d8:c1:70:66:1a:a1:33:0d:9a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 25 16:33:41 2026 GMT
Not After : Jun 24 16:38:41 2027 GMT
Subject: CN=93C08A3CA8117183DB4216B7F1D7CAF8DF3BA1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:c5:43:5e:86:b7:9f:3e:72:7d:77:e1:e9:
38:48:da:93:1b:b6:44:5e:06:61:6d:6b:e4:0b:78:
45:c7:c1:e5:64:6f:c5:86:aa:0d:4d:34:fc:91:ea:
40:48:8b:7c:ea:70:f6:8d:03:a3:95:a7:73:62:2e:
07:ab:4f:33:9c:2c:97:bf:1f:b4:f7:a3:f7:4c:13:
6d:50:91:4c:dc:2f:2f:b0:f6:b3:97:ae:55:34:46:
db:c8:42:81:fe:f5:7e:85:c6:25:01:0b:9f:50:aa:
4d:10:e1:af:7a:54:c1:81:5f:c9:76:a2:a5:31:e0:
9a:5e:44:fb:78:04:3a:50:48:cf:b5:b2:d0:a9:91:
fe:37:d5:21:86:ef:33:fd:9b:f8:59:74:3e:b4:42:
9d:ac:93:e6:04:58:81:3a:e6:51:ff:ea:86:6b:fd:
be:05:4f:72:42:60:14:9e:ea:4a:be:07:22:ac:ed:
4e:0d:ff:d0:b5:78:cc:3a:93:19:c4:17:60:22:c4:
94:0a:54:2a:15:ce:cd:71:fe:e6:0b:a7:0a:ed:8d:
d3:c1:b9:0c:d1:96:7f:8f:6c:1b:7e:da:ba:82:68:
7f:37:7a:4c:84:a0:9f:da:86:06:6d:10:a7:0a:6e:
1e:b1:b9:75:29:57:f0:dd:c9:98:02:bc:c0:11:68:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:8A:3C:A8:11:71:83:DB:42:16:B7:F1:D7:CA:F8:DF:3B:A1:ED
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.170.165.0-115.170.166.255
115.170.169.0/24
115.170.234.0/23
117.61.84.0-117.61.94.255
117.61.107.0/24
117.61.122.0/24
203.160.192.0/19
203.168.0.0/19
IPv6:
240e:87c::/38
240e:87c:700::-240e:87c:87f:ffff:ffff:ffff:ffff:ffff
240e:87c:11c0::/43
240e:87c:1900::-240e:87c:1a7f:ffff:ffff:ffff:ffff:ffff
240e:87c:1e00::-240e:87c:1f7f:ffff:ffff:ffff:ffff:ffff
240e:87c:2200::-240e:87c:225f:ffff:ffff:ffff:ffff:ffff
240e:87c:2320::-240e:87c:237f:ffff:ffff:ffff:ffff:ffff
240e:87c:2500::-240e:87c:25ef:ffff:ffff:ffff:ffff:ffff
240e:87c:2600::-240e:87c:26ef:ffff:ffff:ffff:ffff:ffff
240e:87c:2b00::/40
240e:87d:80c0::/42
240e:900:40::/122
Signature Algorithm: sha256WithRSAEncryption
8b:dd:17:cf:1c:96:1e:6b:7c:f8:ab:80:49:c1:d4:79:aa:d1:
9c:88:9f:d0:2c:28:2f:c8:b6:0a:50:30:7b:51:31:04:34:98:
2f:9b:57:f2:bd:e8:e8:56:09:b0:5f:d7:6a:c6:39:47:49:61:
e1:86:b4:f6:d4:95:0f:93:29:96:9d:8b:97:0c:81:ef:af:17:
6b:db:b7:00:23:68:1e:f5:b3:28:01:32:1c:b4:97:3f:cb:13:
28:4d:0b:6f:8f:c7:cc:53:6d:8b:b5:7a:18:b7:f1:1b:bd:e0:
0a:70:e9:54:cf:00:2d:0a:4c:af:ca:5a:1b:96:3a:cd:6a:b3:
df:bc:f2:9f:f7:cc:6e:f4:f9:b2:8e:db:b9:d9:c7:dc:9c:d2:
d8:91:0f:a7:27:6b:5b:8d:35:43:64:c4:c0:f2:2a:72:87:73:
db:87:b5:f2:5b:92:dc:be:b6:c7:f9:1f:42:4a:37:69:5e:11:
ea:ba:39:c3:69:f6:6c:70:1b:6e:91:92:0a:40:7f:41:ef:e5:
4c:c3:39:9d:85:f8:8e:fc:53:4e:5d:ef:08:e7:3f:cf:09:66:
e1:30:5a:d7:5d:55:28:ac:72:0e:ad:3f:ed:e8:ac:de:9c:ee:
1c:82:9c:0f:86:6b:80:5d:5f:7b:ec:8a:c4:c6:6a:a9:b3:87:
9c:8b:0a:f3
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgIUfUQ2NYmVD7r+O9jBcGYaoTMNmvMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYyNTE2MzM0MVoX
DTI3MDYyNDE2Mzg0MVowMzExMC8GA1UEAxMoOTNDMDhBM0NBODExNzE4M0RCNDIx
NkI3RjFEN0NBRjhERjNCQTFFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+ExUNehrefPnJ9d+HpOEjakxu2RF4GYW1r5At4RcfB5WRvxYaqDU00/JHq
QEiLfOpw9o0Do5Wnc2IuB6tPM5wsl78ftPej90wTbVCRTNwvL7D2s5euVTRG28hC
gf71foXGJQELn1CqTRDhr3pUwYFfyXaipTHgml5E+3gEOlBIz7Wy0KmR/jfVIYbv
M/2b+Fl0PrRCnayT5gRYgTrmUf/qhmv9vgVPckJgFJ7qSr4HIqztTg3/0LV4zDqT
GcQXYCLElApUKhXOzXH+5gunCu2N08G5DNGWf49sG37auoJofzd6TISgn9qGBm0Q
pwpuHrG5dSlX8N3JmAK8wBFoXnECAwEAAaOCAukwggLlMB0GA1UdDgQWBBSTwIo8
qBFxg9tCFrfx18r43zuh7TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM3NjkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIBIgYIKwYBBQUHAQcBAf8EggERMIIBDTBGBAIAATBAMAwDBABzqqUDBABzqqYD
BABzqqkDBAFzquowDAMEAnU9VAMEAHU9XgMEAHU9awMEAHU9egMEBcugwAMEBcuo
ADCBwgQCAAIwgbsDBgIkDgh8ADARAwYAJA4IfAcDBwckDgh8CAADBwUkDgh8EcAw
EQMGACQOCHwZAwcHJA4IfBoAMBEDBgEkDgh8HgMHByQOCHwfADARAwYBJA4IfCID
BwUkDgh8IkAwEgMHBSQOCHwjIAMHByQOCHwjADARAwYAJA4IfCUDBwQkDgh8JeAw
EQMGASQOCHwmAwcEJA4IfCbgAwYAJA4IfCsDBwYkDgh9gMADEQYkDgkAAEAAAAAA
AAAAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCL3RfPHJYea3z4q4BJwdR5qtGciJ/Q
LCgvyLYKUDB7UTEENJgvm1fyvejoVgmwX9dqxjlHSWHhhrT21JUPkymWnYuXDIHv
rxdr27cAI2ge9bMoATIctJc/yxMoTQtvj8fMU22LtXoYt/EbveAKcOlUzwAtCkyv
ylobljrNarPfvPKf98xu9Pmyjtu52cfcnNLYkQ+nJ2tbjTVDZMTA8ipyh3Pbh7Xy
W5LcvrbH+R9CSjdpXhHqujnDafZscBtukZIKQH9B7+VMwzmdhfiO/FNOXe8I5z/P
CWbhMFrXXVUorHIOrT/t6KzenO4cgpwPhmuAXV977IrExmqps4eciwrz
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:59 2026 by rpki-client