Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137702.roa
File: AS137702.roa (raw, json)
Hash identifier: QaoB274hordeTsh9M8zAnwSpJ0VTRIw2qAI4QBN3o1s=
Subject key identifier: 98:A5:F1:35:60:D9:59:DC:C5:E6:ED:C8:50:8D:5F:08:16:61:21:D6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 07BBCBF5393B33460D6DBD3B486632437BEC83AB
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137702.roa
Signing time: Thu 11 Jun 2026 15:45:17 +0000
ROA not before: Thu 11 Jun 2026 15:40:17 +0000
ROA not after: Thu 10 Jun 2027 15:45:17 +0000
asID: 137702
IP address blocks: 58.212.8.0/23 maxlen: 23
58.212.84.0/23 maxlen: 23
58.212.130.0/23 maxlen: 23
58.217.156.0/22 maxlen: 22
58.217.192.0/21 maxlen: 21
58.217.193.0/24 maxlen: 24
58.217.208.0/20 maxlen: 20
58.217.244.0/24 maxlen: 24
58.217.245.0/24 maxlen: 24
58.223.21.0/24 maxlen: 24
58.223.24.0/24 maxlen: 24
58.223.81.0/24 maxlen: 24
61.132.51.0/24 maxlen: 24
61.132.74.0/24 maxlen: 24
61.132.75.0/24 maxlen: 24
61.147.136.0/21 maxlen: 21
61.147.165.0/24 maxlen: 24
61.147.166.0/23 maxlen: 23
61.147.168.0/21 maxlen: 21
61.147.176.0/22 maxlen: 22
61.147.180.0/24 maxlen: 24
61.155.5.0/24 maxlen: 24
61.155.7.0/24 maxlen: 24
61.155.8.0/24 maxlen: 24
61.155.9.0/24 maxlen: 24
61.155.106.0/24 maxlen: 24
61.155.107.0/24 maxlen: 24
61.155.236.0/24 maxlen: 24
61.155.238.0/24 maxlen: 24
121.237.32.0/23 maxlen: 23
180.96.0.0/21 maxlen: 21
180.96.4.0/24 maxlen: 24
180.96.8.0/21 maxlen: 21
180.96.8.0/24 maxlen: 24
180.96.9.0/24 maxlen: 24
180.96.16.0/20 maxlen: 20
180.96.32.0/19 maxlen: 19
180.96.64.0/21 maxlen: 21
180.96.70.0/24 maxlen: 24
180.96.72.0/21 maxlen: 21
180.96.80.0/21 maxlen: 21
180.97.0.0/18 maxlen: 18
180.97.104.0/21 maxlen: 21
180.97.112.0/21 maxlen: 21
180.97.123.0/24 maxlen: 24
180.97.128.0/21 maxlen: 21
180.100.19.0/24 maxlen: 24
180.100.20.0/24 maxlen: 24
202.102.52.0/22 maxlen: 22
202.102.56.0/21 maxlen: 21
202.102.61.0/24 maxlen: 24
202.102.64.0/22 maxlen: 22
202.102.68.0/24 maxlen: 24
202.102.69.0/24 maxlen: 24
202.102.70.0/24 maxlen: 24
202.102.72.0/21 maxlen: 21
202.102.72.0/24 maxlen: 24
202.102.76.0/24 maxlen: 24
202.102.80.0/20 maxlen: 20
202.102.85.0/24 maxlen: 24
202.102.96.0/22 maxlen: 22
202.102.114.0/23 maxlen: 23
202.111.126.0/23 maxlen: 23
221.231.128.0/21 maxlen: 21
221.231.136.0/21 maxlen: 21
240e:1a:10::/44 maxlen: 44
240e:1a:40::/44 maxlen: 44
240e:5a:6801::/48 maxlen: 48
240e:5a:6c00::/38 maxlen: 38
240e:e9:4000::/37 maxlen: 37
240e:e9:8000::/37 maxlen: 37
240e:978::/40 maxlen: 40
240e:978:1000::/40 maxlen: 40
240e:978:2000::/40 maxlen: 40
240e:978:3000::/40 maxlen: 40
240e:978:4000::/40 maxlen: 40
240e:978:5000::/40 maxlen: 40
240e:978:6000::/40 maxlen: 40
240e:978:7000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:bb:cb:f5:39:3b:33:46:0d:6d:bd:3b:48:66:32:43:7b:ec:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 15:40:17 2026 GMT
Not After : Jun 10 15:45:17 2027 GMT
Subject: CN=98A5F13560D959DCC5E6EDC8508D5F08166121D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:b9:83:0b:9c:59:96:05:98:92:85:4e:38:
ab:8d:5f:b9:47:d3:96:a4:d0:b9:e2:16:40:eb:84:
c7:62:69:78:4e:ee:02:fb:ef:3d:1d:38:d1:cb:a2:
d5:c7:60:73:fa:7f:fe:25:c6:5a:7d:b9:fd:a2:8f:
0d:35:8e:76:ee:e9:72:18:50:b5:18:99:8d:09:e9:
cf:aa:0c:a8:8f:09:3a:7a:93:f6:bc:5d:64:29:98:
61:52:8e:83:78:3b:6e:f8:89:a6:6a:ad:d9:11:8c:
bd:60:cc:cf:52:3c:ea:a5:f7:35:b8:d5:c6:0b:ce:
b1:7f:46:c1:d5:33:c5:7d:87:f4:c5:8b:a5:dc:b8:
5d:65:ed:24:b4:28:58:80:85:07:e1:4b:c0:fa:55:
5f:12:fd:48:4a:7d:24:1c:c5:b2:a9:c5:5c:2c:a8:
6d:5c:39:12:86:1c:61:16:54:8e:82:c4:9c:53:ca:
33:60:f5:21:91:9e:fa:db:45:f5:df:6b:0e:ed:67:
11:03:97:6b:91:e9:44:7d:c6:50:80:cc:ca:06:e5:
bb:e2:2d:49:e6:a1:06:ea:7b:83:4d:19:7f:a5:24:
35:4e:bc:47:e6:bb:73:9c:d4:a7:69:37:2f:6e:43:
59:3a:8c:b4:85:e3:15:b4:b9:7f:2e:82:82:69:fe:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:F1:35:60:D9:59:DC:C5:E6:ED:C8:50:8D:5F:08:16:61:21:D6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.212.8.0/23
58.212.84.0/23
58.212.130.0/23
58.217.156.0/22
58.217.192.0/21
58.217.208.0/20
58.217.244.0/23
58.223.21.0/24
58.223.24.0/24
58.223.81.0/24
61.132.51.0/24
61.132.74.0/23
61.147.136.0/21
61.147.165.0-61.147.180.255
61.155.5.0/24
61.155.7.0-61.155.9.255
61.155.106.0/23
61.155.236.0/24
61.155.238.0/24
121.237.32.0/23
180.96.0.0-180.96.87.255
180.97.0.0/18
180.97.104.0-180.97.119.255
180.97.123.0/24
180.97.128.0/21
180.100.19.0-180.100.20.255
202.102.52.0-202.102.70.255
202.102.72.0-202.102.99.255
202.102.114.0/23
202.111.126.0/23
221.231.128.0/20
IPv6:
240e:1a:10::/44
240e:1a:40::/44
240e:5a:6801::/48
240e:5a:6c00::/38
240e:e9:4000::/37
240e:e9:8000::/37
240e:978::/40
240e:978:1000::/40
240e:978:2000::/40
240e:978:3000::/40
240e:978:4000::/40
240e:978:5000::/40
240e:978:6000::/40
240e:978:7000::/40
Signature Algorithm: sha256WithRSAEncryption
b7:a4:81:ae:b9:a4:a8:46:10:32:dd:71:91:f3:b9:90:f7:58:
31:c7:86:2c:62:52:51:6a:ff:c9:d7:60:bb:77:44:8e:41:73:
12:d9:3b:e8:a9:91:ca:08:74:33:2d:ab:cb:ed:59:02:e1:e0:
d8:c5:ae:1e:ac:c2:eb:95:35:ba:53:b1:ad:37:d1:ea:37:f1:
7f:ff:c9:ac:86:64:9c:46:92:43:0b:61:e0:75:2b:95:e3:9f:
db:ac:d5:11:21:0b:90:ce:6d:3c:fa:0f:f7:6a:69:28:66:be:
a1:f2:66:61:78:75:a2:55:b6:b0:1c:ec:07:eb:ce:67:2d:6a:
1d:cb:b6:84:47:c4:4d:a8:3f:24:ce:6a:8f:ed:00:34:ad:fd:
24:21:f2:d6:3a:21:32:76:b7:ed:7b:e3:85:ab:25:e7:9b:bc:
02:28:fe:91:05:07:e3:32:3a:66:c4:4e:dd:dd:45:c6:06:e5:
8c:15:f1:42:1a:af:42:cd:57:62:09:9b:d9:87:c9:42:bb:0e:
f2:7c:6f:2b:d2:6a:4d:97:ef:5f:79:02:d4:01:99:67:87:c5:
e9:2f:86:b5:e3:7f:c8:13:7f:2f:d8:71:9c:f6:2e:a0:05:45:
d1:dc:2d:a3:7e:0f:29:e2:03:3d:6e:88:37:a5:ae:5e:b1:58:
c7:d5:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:43 2026 by rpki-client