Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
File: AS137697.roa (raw, json)
Hash identifier: LzWB0p2EfgbgCK1yofGXOeRoNkmdvONsl9H8DzO2Hmw=
Subject key identifier: 11:60:E1:A8:59:C9:8B:DC:40:3B:6D:B4:F2:7E:08:42:C8:F2:17:D9
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 12364C77C031D88D74E0764F284B91741B025E57
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
Signing time: Thu 28 May 2026 16:58:19 +0000
ROA not before: Thu 28 May 2026 16:53:19 +0000
ROA not after: Thu 27 May 2027 16:58:19 +0000
asID: 137697
IP address blocks: 49.71.36.0/24 maxlen: 24
49.71.37.0/24 maxlen: 24
49.71.38.0/24 maxlen: 24
49.71.39.0/24 maxlen: 24
49.86.44.0/22 maxlen: 22
58.220.0.0/24 maxlen: 24
58.220.1.0/24 maxlen: 24
58.220.2.0/24 maxlen: 24
58.220.3.0/24 maxlen: 24
58.220.4.0/24 maxlen: 24
58.220.6.0/24 maxlen: 24
58.220.7.0/24 maxlen: 24
58.220.8.0/24 maxlen: 24
58.220.9.0/24 maxlen: 24
58.220.10.0/24 maxlen: 24
58.220.11.0/24 maxlen: 24
58.220.12.0/24 maxlen: 24
58.220.14.0/24 maxlen: 24
58.220.16.0/24 maxlen: 24
58.220.17.0/24 maxlen: 24
58.220.18.0/24 maxlen: 24
58.220.19.0/24 maxlen: 24
58.220.20.0/24 maxlen: 24
58.220.21.0/24 maxlen: 24
58.220.22.0/24 maxlen: 24
58.220.23.0/24 maxlen: 24
58.220.24.0/24 maxlen: 24
58.220.25.0/24 maxlen: 24
58.220.26.0/24 maxlen: 24
58.220.27.0/24 maxlen: 24
58.220.28.0/24 maxlen: 24
58.220.29.0/24 maxlen: 24
58.220.30.0/24 maxlen: 24
58.220.31.0/24 maxlen: 24
58.220.32.0/24 maxlen: 24
58.220.33.0/24 maxlen: 24
58.220.34.0/24 maxlen: 24
58.220.35.0/24 maxlen: 24
58.220.36.0/24 maxlen: 24
58.220.37.0/24 maxlen: 24
58.220.39.0/24 maxlen: 24
58.220.40.0/24 maxlen: 24
58.220.41.0/24 maxlen: 24
58.220.42.0/24 maxlen: 24
58.220.43.0/24 maxlen: 24
58.220.44.0/24 maxlen: 24
58.220.45.0/24 maxlen: 24
58.220.46.0/24 maxlen: 24
58.220.47.0/24 maxlen: 24
58.220.48.0/24 maxlen: 24
58.220.49.0/24 maxlen: 24
58.220.50.0/24 maxlen: 24
58.220.51.0/24 maxlen: 24
58.220.52.0/24 maxlen: 24
58.220.54.0/24 maxlen: 24
58.220.56.0/24 maxlen: 24
58.220.57.0/24 maxlen: 24
58.220.58.0/24 maxlen: 24
58.220.61.0/24 maxlen: 24
58.220.62.0/24 maxlen: 24
58.220.63.0/24 maxlen: 24
58.220.64.0/24 maxlen: 24
58.220.65.0/24 maxlen: 24
58.220.66.0/24 maxlen: 24
58.220.67.0/24 maxlen: 24
58.220.68.0/24 maxlen: 24
58.220.69.0/24 maxlen: 24
58.220.70.0/24 maxlen: 24
58.220.71.0/24 maxlen: 24
58.220.72.0/24 maxlen: 24
58.220.73.0/24 maxlen: 24
58.220.74.0/24 maxlen: 24
58.220.75.0/24 maxlen: 24
58.220.76.0/24 maxlen: 24
58.220.77.0/24 maxlen: 24
58.220.78.0/24 maxlen: 24
58.220.79.0/24 maxlen: 24
58.220.80.0/24 maxlen: 24
58.220.81.0/24 maxlen: 24
58.220.82.0/23 maxlen: 23
58.220.92.0/24 maxlen: 24
58.220.93.0/24 maxlen: 24
58.220.94.0/24 maxlen: 24
58.220.95.0/24 maxlen: 24
58.220.175.0/24 maxlen: 24
58.220.176.0/24 maxlen: 24
58.220.220.0/24 maxlen: 24
61.147.67.0/24 maxlen: 24
61.147.68.0/24 maxlen: 24
61.147.69.0/24 maxlen: 24
61.147.70.0/24 maxlen: 24
61.147.72.0/24 maxlen: 24
61.147.73.0/24 maxlen: 24
61.147.74.0/24 maxlen: 24
61.147.75.0/24 maxlen: 24
61.147.77.0/24 maxlen: 24
61.147.78.0/24 maxlen: 24
61.147.80.0/24 maxlen: 24
61.147.81.0/24 maxlen: 24
61.147.82.0/24 maxlen: 24
61.147.83.0/24 maxlen: 24
61.147.84.0/24 maxlen: 24
61.147.85.0/24 maxlen: 24
61.147.88.0/24 maxlen: 24
61.147.89.0/24 maxlen: 24
61.147.90.0/24 maxlen: 24
61.147.91.0/24 maxlen: 24
61.147.92.0/24 maxlen: 24
61.147.93.0/24 maxlen: 24
61.147.94.0/24 maxlen: 24
61.147.95.0/24 maxlen: 24
61.147.96.0/24 maxlen: 24
61.147.97.0/24 maxlen: 24
61.147.98.0/24 maxlen: 24
61.147.99.0/24 maxlen: 24
61.147.100.0/24 maxlen: 24
61.147.102.0/24 maxlen: 24
61.147.103.0/24 maxlen: 24
61.147.104.0/24 maxlen: 24
61.147.105.0/24 maxlen: 24
61.147.106.0/24 maxlen: 24
61.147.107.0/24 maxlen: 24
61.147.108.0/23 maxlen: 23
61.147.110.0/24 maxlen: 24
61.147.111.0/24 maxlen: 24
61.147.112.0/23 maxlen: 23
61.147.114.0/24 maxlen: 24
61.147.115.0/24 maxlen: 24
61.147.116.0/24 maxlen: 24
61.147.117.0/24 maxlen: 24
61.147.118.0/24 maxlen: 24
61.147.119.0/24 maxlen: 24
61.147.120.0/24 maxlen: 24
61.147.121.0/24 maxlen: 24
61.147.122.0/24 maxlen: 24
61.147.123.0/24 maxlen: 24
61.147.124.0/24 maxlen: 24
61.147.125.0/24 maxlen: 24
61.147.126.0/24 maxlen: 24
61.147.127.0/24 maxlen: 24
114.230.92.0/22 maxlen: 22
114.230.136.0/22 maxlen: 22
114.230.152.0/22 maxlen: 22
114.230.196.0/22 maxlen: 22
114.230.204.0/22 maxlen: 22
114.230.212.0/22 maxlen: 22
114.230.220.0/22 maxlen: 22
117.91.176.0/20 maxlen: 20
117.91.192.0/24 maxlen: 24
117.91.193.0/24 maxlen: 24
117.91.194.0/24 maxlen: 24
117.91.195.0/24 maxlen: 24
117.91.196.0/24 maxlen: 24
117.91.197.0/24 maxlen: 24
117.91.198.0/24 maxlen: 24
117.91.199.0/24 maxlen: 24
121.233.192.0/22 maxlen: 22
180.97.178.0/24 maxlen: 24
180.97.179.0/24 maxlen: 24
180.97.180.0/24 maxlen: 24
180.97.181.0/24 maxlen: 24
180.97.182.0/24 maxlen: 24
180.97.183.0/24 maxlen: 24
180.97.184.0/24 maxlen: 24
180.97.185.0/24 maxlen: 24
180.97.186.0/24 maxlen: 24
180.97.187.0/24 maxlen: 24
180.97.188.0/24 maxlen: 24
180.97.189.0/24 maxlen: 24
180.97.190.0/24 maxlen: 24
180.119.118.0/23 maxlen: 23
180.119.120.0/22 maxlen: 22
180.119.136.0/22 maxlen: 22
180.119.144.0/22 maxlen: 22
180.119.168.0/22 maxlen: 22
180.119.232.0/22 maxlen: 22
221.229.36.0/23 maxlen: 23
221.229.77.0/24 maxlen: 24
222.189.228.0/24 maxlen: 24
222.189.237.0/24 maxlen: 24
222.189.238.0/23 maxlen: 23
240e:e9:b000::/37 maxlen: 37
240e:978:900::/40 maxlen: 40
240e:978:1900::/40 maxlen: 40
240e:982:dc0c::/48 maxlen: 48
240e:982:dc0d::/48 maxlen: 48
240e:982:dc0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:36:4c:77:c0:31:d8:8d:74:e0:76:4f:28:4b:91:74:1b:02:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:53:19 2026 GMT
Not After : May 27 16:58:19 2027 GMT
Subject: CN=1160E1A859C98BDC403B6DB4F27E0842C8F217D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:85:1f:d1:71:9c:03:d2:82:b5:10:c7:c1:
46:17:c1:bc:e5:fa:a2:b7:ef:0c:7a:be:d4:bf:28:
3e:e8:3d:89:3a:78:40:28:d7:b4:06:95:58:e6:67:
48:e8:c4:69:77:e1:91:5d:bf:61:ef:4e:bf:7e:d8:
1b:59:e2:60:39:98:76:d1:82:df:3b:43:c2:0a:7e:
1d:da:7e:0c:90:01:f4:f4:57:12:1d:6b:bd:66:50:
10:2b:6f:c1:c6:e8:48:0f:27:5e:56:1e:c1:aa:00:
53:5c:3d:4b:fe:a8:a2:75:f9:7f:cb:e5:31:29:34:
53:ce:75:44:71:c7:9e:85:4a:29:52:b0:8c:be:1b:
0b:43:7a:90:25:91:9e:61:28:57:64:86:f7:18:cf:
e4:35:4e:8d:14:8b:b2:57:01:84:82:1e:e7:6c:2d:
8f:c9:fa:93:e9:e6:22:aa:c0:84:2c:af:dd:12:75:
f9:fc:12:80:ca:35:4d:6e:8b:47:6c:aa:2d:13:86:
90:07:27:e4:c1:c2:e9:ad:44:2e:47:8f:43:98:7a:
b1:6b:21:53:f9:70:6b:7e:1b:60:3a:61:75:bb:07:
59:6e:f7:6c:34:6f:f4:5d:cc:30:60:c8:10:c6:b7:
ba:23:ca:01:7c:4e:72:56:19:63:d7:eb:b4:7a:7c:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:E1:A8:59:C9:8B:DC:40:3B:6D:B4:F2:7E:08:42:C8:F2:17:D9
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.71.36.0/22
49.86.44.0/22
58.220.0.0-58.220.4.255
58.220.6.0-58.220.12.255
58.220.14.0/24
58.220.16.0-58.220.37.255
58.220.39.0-58.220.52.255
58.220.54.0/24
58.220.56.0-58.220.58.255
58.220.61.0-58.220.83.255
58.220.92.0/22
58.220.175.0-58.220.176.255
58.220.220.0/24
61.147.67.0-61.147.70.255
61.147.72.0/22
61.147.77.0-61.147.78.255
61.147.80.0-61.147.85.255
61.147.88.0-61.147.100.255
61.147.102.0-61.147.127.255
114.230.92.0/22
114.230.136.0/22
114.230.152.0/22
114.230.196.0/22
114.230.204.0/22
114.230.212.0/22
114.230.220.0/22
117.91.176.0-117.91.199.255
121.233.192.0/22
180.97.178.0-180.97.190.255
180.119.118.0-180.119.123.255
180.119.136.0/22
180.119.144.0/22
180.119.168.0/22
180.119.232.0/22
221.229.36.0/23
221.229.77.0/24
222.189.228.0/24
222.189.237.0-222.189.239.255
IPv6:
240e:e9:b000::/37
240e:978:900::/40
240e:978:1900::/40
240e:982:dc0c::-240e:982:dc0e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:b7:04:16:15:77:1e:3f:ee:38:02:32:ae:79:09:ff:00:f9:
73:d2:3d:ff:17:c6:3f:26:57:27:9a:c1:7b:1b:45:b9:b1:7c:
a1:6e:f6:7c:ec:1d:4d:9f:47:eb:fb:af:d1:20:ef:cf:d0:6a:
28:70:fa:1f:26:cc:f9:e6:fb:e5:0e:ce:b3:07:ec:f2:16:48:
88:41:e5:4d:d3:64:2f:ff:8c:b5:05:1c:39:8f:16:71:32:42:
ae:fb:4d:25:24:3d:98:5f:35:c2:ce:aa:98:fe:19:10:77:5e:
99:b9:15:11:88:59:41:85:cf:e8:12:40:8a:62:bc:ec:c5:e1:
2e:e1:87:00:96:b4:60:e1:a3:19:b0:95:2b:af:6c:b1:4a:ca:
f5:4d:ee:dd:c5:bd:93:b4:25:eb:de:a4:e6:99:fd:e4:17:3e:
e8:8f:29:93:df:82:9d:c0:ae:6d:4d:27:57:99:06:7a:e4:32:
8f:db:3a:3c:0e:e5:5b:c5:a9:48:7f:66:b7:95:62:6a:32:80:
8d:4f:46:2a:3d:08:ba:59:ac:72:8e:b8:12:70:d0:9f:7a:36:
a1:e3:2c:0b:fb:69:90:ad:60:63:61:f0:6e:41:66:0e:65:3e:
3e:76:56:4c:c0:4c:43:5f:fd:0d:e6:3b:41:1d:72:63:d6:b8:
79:24:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client