Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139018.roa
File: AS139018.roa (raw, json)
Hash identifier: qHdj4YkhIDS8+vUqPfmXBXYSQD82J9eAAFgGiRFcKMM=
Subject key identifier: D8:B1:D3:25:D7:5D:1E:27:0E:48:0D:A1:C5:48:6E:B7:79:9B:63:C9
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 61E1BCBBB39477FE02736021443A2BE48826AB29
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139018.roa
Signing time: Thu 21 May 2026 16:31:58 +0000
ROA not before: Thu 21 May 2026 16:26:58 +0000
ROA not after: Thu 20 May 2027 16:31:58 +0000
asID: 139018
IP address blocks: 1.193.210.0/24 maxlen: 24
1.193.213.0/24 maxlen: 24
1.193.215.0/24 maxlen: 24
1.193.216.0/24 maxlen: 24
1.193.217.0/24 maxlen: 24
1.193.218.0/24 maxlen: 24
123.149.172.0/22 maxlen: 22
123.160.109.0/24 maxlen: 24
123.160.111.0/24 maxlen: 24
123.162.190.0/24 maxlen: 24
240e:b:f800::/37 maxlen: 37
240e:b:f803::/48 maxlen: 48
240e:4b:c000::/37 maxlen: 37
240e:93d::/36 maxlen: 36
240e:93d:1::/48 maxlen: 48
240e:93d:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e1:bc:bb:b3:94:77:fe:02:73:60:21:44:3a:2b:e4:88:26:ab:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:26:58 2026 GMT
Not After : May 20 16:31:58 2027 GMT
Subject: CN=D8B1D325D75D1E270E480DA1C5486EB7799B63C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:79:e2:d1:f9:10:4a:33:cd:03:34:af:39:
69:09:80:7f:71:d7:9f:33:e7:bb:46:1e:cc:83:3a:
eb:da:75:2e:59:19:85:07:68:d5:7b:58:cb:a6:65:
cb:29:ed:79:de:22:8d:bc:9f:1e:ae:17:16:bc:db:
55:fb:44:6f:c6:97:d2:33:e4:80:cf:16:be:77:fd:
36:95:92:d3:af:3b:ee:9f:ff:61:a4:db:34:0b:fb:
26:f1:95:a6:73:f7:2f:0e:23:8d:5e:fa:2d:fc:c4:
2b:d7:28:e6:3c:20:06:a3:b8:0f:67:c8:99:a5:d3:
fd:ad:cb:bf:07:a7:ce:f8:eb:9d:d4:23:63:02:77:
f6:c8:f8:8c:69:78:1b:ed:c5:3b:ba:ce:9c:86:74:
f6:25:fb:95:7f:ad:63:ee:0c:0e:c9:f9:c6:41:e6:
68:ee:15:fb:81:7a:10:22:92:88:e6:6e:4d:aa:df:
0f:b3:b8:11:28:8d:57:64:cb:4f:87:a2:aa:28:2f:
ff:a7:f7:93:9e:86:b0:95:a5:df:29:49:48:f6:5a:
93:f8:81:98:a0:91:49:ed:c9:99:d8:bd:e4:73:37:
24:8d:e5:0d:44:b2:1b:26:a7:e8:e2:5c:b8:84:e4:
81:4a:e7:f0:a9:d0:29:84:73:63:0a:e0:3a:d9:79:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:D3:25:D7:5D:1E:27:0E:48:0D:A1:C5:48:6E:B7:79:9B:63:C9
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.193.210.0/24
1.193.213.0/24
1.193.215.0-1.193.218.255
123.149.172.0/22
123.160.109.0/24
123.160.111.0/24
123.162.190.0/24
IPv6:
240e:b:f800::/37
240e:4b:c000::/37
240e:93d::-240e:93d:1000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:e8:05:6c:1e:5c:14:ba:f6:4c:bb:a0:06:c5:77:cd:f7:b0:
98:03:d1:cb:f6:61:f5:83:2a:9f:b5:77:56:67:ff:77:52:85:
a1:89:ab:0e:05:fc:6b:1b:e0:bf:3e:cf:f8:ec:35:15:22:71:
b7:67:a0:f5:13:ee:0e:aa:03:24:73:4d:69:e3:78:b0:d3:92:
2c:fc:45:51:91:52:ac:83:e2:7a:68:df:08:85:44:6d:75:91:
a7:6e:6d:12:5e:3f:6a:a0:66:5e:27:2c:a1:a9:86:5c:e7:09:
9d:d9:e2:bb:de:19:ee:0b:83:a6:17:9e:85:84:6c:11:2d:c7:
80:5e:fa:f2:bd:6a:8d:60:ab:f6:03:fc:74:b5:3a:31:49:bd:
cb:0a:51:4e:e8:3d:11:fc:4b:6c:6b:73:3e:a8:0c:c4:a3:ba:
04:4c:ee:f9:ef:64:25:5f:6e:e9:e6:1f:43:87:ec:39:3d:a6:
d6:64:e8:9a:14:fd:6f:e7:e3:dd:13:3d:46:25:2d:ad:fe:d8:
1a:be:c7:30:9d:4f:b4:b3:5f:ec:2d:f5:d1:07:2f:33:e9:ff:
1b:13:4a:d2:98:5b:48:94:31:64:f8:dd:60:9f:5f:f7:6a:88:
0c:a3:8c:dd:65:cc:6d:62:73:d2:84:9b:66:f5:ab:78:6a:81:
bd:98:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:25 2026 by rpki-client