Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
File: AS146966.roa (raw, json)
Hash identifier: K0S18i0SgcBhtk4SWBM23S59xBJzCTB0Ep0O5xfkEdU=
Subject key identifier: AB:1A:53:C6:D6:1E:DA:5D:7F:AF:25:45:03:EC:36:E1:23:5E:17:9B
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1A081C732B0703EFF74B13094884340257A5F721
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
Signing time: Sun 14 Jun 2026 16:44:15 +0000
ROA not before: Sun 14 Jun 2026 16:39:15 +0000
ROA not after: Sun 13 Jun 2027 16:44:15 +0000
asID: 146966
IP address blocks: 49.71.79.0/24 maxlen: 24
49.71.126.0/23 maxlen: 23
49.86.40.0/22 maxlen: 22
58.220.38.0/24 maxlen: 24
58.220.85.0/24 maxlen: 24
58.220.163.0/24 maxlen: 24
58.220.164.0/24 maxlen: 24
58.220.177.0/24 maxlen: 24
58.220.178.0/23 maxlen: 23
58.220.178.0/24 maxlen: 24
58.220.179.0/24 maxlen: 24
58.220.180.0/24 maxlen: 24
58.220.188.0/24 maxlen: 24
61.132.32.0/24 maxlen: 24
114.230.85.0/24 maxlen: 24
114.230.172.0/22 maxlen: 22
114.230.228.0/22 maxlen: 22
114.230.232.0/21 maxlen: 21
117.91.16.0/21 maxlen: 21
117.91.40.0/22 maxlen: 22
121.229.160.0/24 maxlen: 24
121.229.168.0/24 maxlen: 24
121.229.172.0/24 maxlen: 24
121.229.175.0/24 maxlen: 24
121.229.177.0/24 maxlen: 24
121.229.204.0/24 maxlen: 24
121.229.205.0/24 maxlen: 24
121.233.208.0/23 maxlen: 23
121.233.230.0/24 maxlen: 24
121.233.238.0/23 maxlen: 23
121.237.180.0/24 maxlen: 24
121.237.181.0/24 maxlen: 24
121.237.182.0/24 maxlen: 24
121.237.183.0/24 maxlen: 24
180.97.176.0/23 maxlen: 23
180.97.176.0/24 maxlen: 24
180.97.177.0/24 maxlen: 24
180.97.191.0/24 maxlen: 24
180.119.35.0/24 maxlen: 24
180.119.140.0/23 maxlen: 23
180.119.152.0/22 maxlen: 22
202.111.123.0/24 maxlen: 24
203.170.58.0/24 maxlen: 24
203.170.59.0/24 maxlen: 24
203.205.88.0/24 maxlen: 24
218.91.113.0/24 maxlen: 24
218.91.114.0/24 maxlen: 24
221.229.0.0/24 maxlen: 24
221.229.4.0/24 maxlen: 24
221.229.21.0/24 maxlen: 24
221.229.38.0/24 maxlen: 24
221.229.52.0/23 maxlen: 23
221.229.68.0/24 maxlen: 24
221.229.92.0/24 maxlen: 24
221.229.99.0/24 maxlen: 24
221.229.101.0/24 maxlen: 24
221.229.103.0/24 maxlen: 24
221.229.106.0/24 maxlen: 24
221.229.107.0/24 maxlen: 24
222.189.172.0/23 maxlen: 23
222.191.77.0/24 maxlen: 24
222.191.78.0/24 maxlen: 24
240e:1a:160::/44 maxlen: 44
240e:978:2900::/40 maxlen: 40
240e:978:3900::/40 maxlen: 40
240e:978:4900::/40 maxlen: 40
240e:978:4929::/48 maxlen: 48
240e:978:492e::/48 maxlen: 48
240e:978:493a::/48 maxlen: 48
240e:978:4946::/48 maxlen: 48
240e:978:494a::/48 maxlen: 48
240e:978:495c::/48 maxlen: 48
240e:978:4963::/48 maxlen: 48
240e:978:4971::/48 maxlen: 48
240e:978:499d::/48 maxlen: 48
240e:978:49ff::/48 maxlen: 48
240e:982:d902::/48 maxlen: 48
240e:982:d906::/48 maxlen: 48
240e:982:d914::/48 maxlen: 48
240e:982:d947::/48 maxlen: 48
240e:982:d948::/48 maxlen: 48
240e:982:d96c::/48 maxlen: 48
240e:982:d98d::/48 maxlen: 48
240e:982:d98f::/48 maxlen: 48
240e:982:d996::/48 maxlen: 48
240e:982:d9af::/48 maxlen: 48
240e:982:d9b4::/48 maxlen: 48
240e:982:d9bc::/48 maxlen: 48
240e:982:d9cd::/48 maxlen: 48
240e:982:d9cf::/48 maxlen: 48
240e:982:d9d4::/48 maxlen: 48
240e:982:d9d9::/48 maxlen: 48
240e:982:da26::/48 maxlen: 48
240e:982:da39::/48 maxlen: 48
240e:982:da51::/48 maxlen: 48
240e:982:da55::/48 maxlen: 48
240e:982:da60::/48 maxlen: 48
240e:982:dab2::/48 maxlen: 48
240e:982:dab6::/48 maxlen: 48
240e:982:dac3::/48 maxlen: 48
240e:982:dac9::/48 maxlen: 48
240e:982:dad6::/48 maxlen: 48
240e:982:dadb::/48 maxlen: 48
240e:982:daf1::/48 maxlen: 48
240e:982:db29::/48 maxlen: 48
240e:982:db2c::/48 maxlen: 48
240e:982:db36::/48 maxlen: 48
240e:982:db39::/48 maxlen: 48
240e:982:db51::/48 maxlen: 48
240e:982:db61::/48 maxlen: 48
240e:982:db66::/48 maxlen: 48
240e:982:db7d::/48 maxlen: 48
240e:982:dc18::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:08:1c:73:2b:07:03:ef:f7:4b:13:09:48:84:34:02:57:a5:f7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 14 16:39:15 2026 GMT
Not After : Jun 13 16:44:15 2027 GMT
Subject: CN=AB1A53C6D61EDA5D7FAF254503EC36E1235E179B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:cd:36:61:6f:6b:8e:b8:3d:13:b8:11:99:
40:21:b9:ba:7c:4c:8b:28:06:f1:a7:3b:9d:3a:e5:
68:a8:fc:7c:27:12:bc:61:96:1e:a5:61:dc:b5:81:
86:a3:f1:06:65:e0:2a:39:69:06:70:a0:26:40:6b:
bf:54:a3:bb:59:6c:40:2e:cc:fb:b8:7a:0e:1f:a8:
6f:64:0d:7d:61:43:7b:0b:79:df:7e:66:8e:16:dc:
45:13:a3:87:cc:d9:f3:b7:94:08:88:f9:c9:2e:68:
bd:30:38:5c:30:a1:60:6f:2b:2e:a5:0d:fb:85:55:
ef:b7:98:e8:a8:b1:eb:c4:ec:4c:f1:80:93:f8:7a:
d8:c2:a3:5b:1d:85:d1:e3:7c:3a:e1:e3:1b:1e:6e:
52:5e:53:35:a4:0f:31:e8:e6:b6:6b:93:37:b7:32:
af:a8:9f:6e:10:ad:78:37:70:23:ec:e2:72:e9:90:
ac:23:00:e1:96:e7:29:4b:4f:25:9f:95:c4:53:72:
93:13:ab:0d:56:28:b0:67:d4:ee:72:f5:d2:db:21:
14:4c:d6:00:2c:7f:b6:68:3f:07:76:06:8a:88:88:
6e:88:69:4d:cd:e3:b8:9a:2d:1d:07:18:ad:2c:d3:
c4:1d:fc:9b:55:02:1e:a4:52:6b:39:75:7a:70:1e:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:53:C6:D6:1E:DA:5D:7F:AF:25:45:03:EC:36:E1:23:5E:17:9B
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS146966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.71.79.0/24
49.71.126.0/23
49.86.40.0/22
58.220.38.0/24
58.220.85.0/24
58.220.163.0-58.220.164.255
58.220.177.0-58.220.180.255
58.220.188.0/24
61.132.32.0/24
114.230.85.0/24
114.230.172.0/22
114.230.228.0-114.230.239.255
117.91.16.0/21
117.91.40.0/22
121.229.160.0/24
121.229.168.0/24
121.229.172.0/24
121.229.175.0/24
121.229.177.0/24
121.229.204.0/23
121.233.208.0/23
121.233.230.0/24
121.233.238.0/23
121.237.180.0/22
180.97.176.0/23
180.97.191.0/24
180.119.35.0/24
180.119.140.0/23
180.119.152.0/22
202.111.123.0/24
203.170.58.0/23
203.205.88.0/24
218.91.113.0-218.91.114.255
221.229.0.0/24
221.229.4.0/24
221.229.21.0/24
221.229.38.0/24
221.229.52.0/23
221.229.68.0/24
221.229.92.0/24
221.229.99.0/24
221.229.101.0/24
221.229.103.0/24
221.229.106.0/23
222.189.172.0/23
222.191.77.0-222.191.78.255
IPv6:
240e:1a:160::/44
240e:978:2900::/40
240e:978:3900::/40
240e:978:4900::/40
240e:982:d902::/48
240e:982:d906::/48
240e:982:d914::/48
240e:982:d947::-240e:982:d948:ffff:ffff:ffff:ffff:ffff
240e:982:d96c::/48
240e:982:d98d::/48
240e:982:d98f::/48
240e:982:d996::/48
240e:982:d9af::/48
240e:982:d9b4::/48
240e:982:d9bc::/48
240e:982:d9cd::/48
240e:982:d9cf::/48
240e:982:d9d4::/48
240e:982:d9d9::/48
240e:982:da26::/48
240e:982:da39::/48
240e:982:da51::/48
240e:982:da55::/48
240e:982:da60::/48
240e:982:dab2::/48
240e:982:dab6::/48
240e:982:dac3::/48
240e:982:dac9::/48
240e:982:dad6::/48
240e:982:dadb::/48
240e:982:daf1::/48
240e:982:db29::/48
240e:982:db2c::/48
240e:982:db36::/48
240e:982:db39::/48
240e:982:db51::/48
240e:982:db61::/48
240e:982:db66::/48
240e:982:db7d::/48
240e:982:dc18::/46
Signature Algorithm: sha256WithRSAEncryption
3a:92:5c:4e:80:27:d5:fa:c5:23:39:6c:bb:52:8a:ea:5f:4b:
f0:18:b9:2a:5e:0a:91:ef:09:9f:5f:a7:4d:5a:b0:12:1a:7e:
dd:f0:db:a8:aa:6b:da:95:83:f0:72:68:4c:0b:2a:cc:56:4c:
98:03:fd:23:e6:f3:57:39:f7:1e:f7:86:c1:9e:d9:b2:97:7d:
52:40:f8:e6:fe:99:83:fd:79:cd:a8:22:55:0c:5b:59:6e:f9:
45:5f:62:9f:11:f1:41:21:a7:4b:0f:74:b0:d4:00:00:e9:ca:
9f:ff:c8:61:e1:2d:5d:dc:17:57:d9:f8:2f:dc:41:7f:36:3f:
df:e2:7f:e9:5e:60:3f:04:d0:50:ba:31:97:4d:6b:68:c5:3c:
13:12:48:4d:f1:56:70:61:e3:53:62:5e:97:ec:2d:7a:ba:42:
56:2f:b5:0d:e8:4b:88:fb:0b:57:5b:e5:62:2e:6e:8c:8d:91:
14:1f:b0:d3:95:d8:b9:7e:01:12:b7:54:2f:e6:77:ca:34:0f:
c4:9c:19:ae:c1:f8:fe:08:2a:da:d3:94:51:c4:32:2a:b0:6e:
f2:be:78:37:ce:88:af:04:bb:82:59:94:ab:4c:a2:ec:39:45:
ae:40:49:a8:7a:1d:57:6c:4e:e6:79:0c:10:d4:43:ac:a1:5e:
16:c4:39:54
-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgIUGggccysHA+/3SxMJSIQ0Alel9yEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNDE2MzkxNVoX
DTI3MDYxMzE2NDQxNVowMzExMC8GA1UEAxMoQUIxQTUzQzZENjFFREE1RDdGQUYy
NTQ1MDNFQzM2RTEyMzVFMTc5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJZQzTZhb2uOuD0TuBGZQCG5unxMiygG8ac7nTrlaKj8fCcSvGGWHqVh3LWB
hqPxBmXgKjlpBnCgJkBrv1Sju1lsQC7M+7h6Dh+ob2QNfWFDewt5335mjhbcRROj
h8zZ87eUCIj5yS5ovTA4XDChYG8rLqUN+4VV77eY6Kix68TsTPGAk/h62MKjWx2F
0eN8OuHjGx5uUl5TNaQPMejmtmuTN7cyr6ifbhCteDdwI+zicumQrCMA4ZbnKUtP
JZ+VxFNykxOrDVYosGfU7nL10tshFEzWACx/tmg/B3YGioiIbohpTc3juJotHQcY
rSzTxB38m1UCHqRSazl1enAetoMCAwEAAaOCBKAwggScMB0GA1UdDgQWBBSrGlPG
1h7aXX+vJUUD7DbhI14XmzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQ2OTY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIIC2QYIKwYBBQUHAQcBAf8EggLIMIICxDCCAUQEAgABMIIBPAMEADFHTwMEATFH
fgMEAjFWKAMEADrcJgMEADrcVTAMAwQAOtyjAwQAOtykMAwDBAA63LEDBAA63LQD
BAA63LwDBAA9hCADBABy5lUDBAJy5qwwDAMEAnLm5AMEBHLm4AMEA3VbEAMEAnVb
KAMEAHnloAMEAHnlqAMEAHnlrAMEAHnlrwMEAHnlsQMEAXnlzAMEAXnp0AMEAHnp
5gMEAXnp7gMEAnnttAMEAbRhsAMEALRhvwMEALR3IwMEAbR3jAMEArR3mAMEAMpv
ewMEAcuqOgMEAMvNWDAMAwQA2ltxAwQA2ltyAwQA3eUAAwQA3eUEAwQA3eUVAwQA
3eUmAwQB3eU0AwQA3eVEAwQA3eVcAwQA3eVjAwQA3eVlAwQA3eVnAwQB3eVqAwQB
3r2sMAwDBADev00DBADev04wggF4BAIAAjCCAXADBwQkDgAaAWADBgAkDgl4KQMG
ACQOCXg5AwYAJA4JeEkDBwAkDgmC2QIDBwAkDgmC2QYDBwAkDgmC2RQwEgMHACQO
CYLZRwMHACQOCYLZSAMHACQOCYLZbAMHACQOCYLZjQMHACQOCYLZjwMHACQOCYLZ
lgMHACQOCYLZrwMHACQOCYLZtAMHACQOCYLZvAMHACQOCYLZzQMHACQOCYLZzwMH
ACQOCYLZ1AMHACQOCYLZ2QMHACQOCYLaJgMHACQOCYLaOQMHACQOCYLaUQMHACQO
CYLaVQMHACQOCYLaYAMHACQOCYLasgMHACQOCYLatgMHACQOCYLawwMHACQOCYLa
yQMHACQOCYLa1gMHACQOCYLa2wMHACQOCYLa8QMHACQOCYLbKQMHACQOCYLbLAMH
ACQOCYLbNgMHACQOCYLbOQMHACQOCYLbUQMHACQOCYLbYQMHACQOCYLbZgMHACQO
CYLbfQMHAiQOCYLcGDANBgkqhkiG9w0BAQsFAAOCAQEAOpJcToAn1frFIzlsu1KK
6l9L8Bi5Kl4Kke8Jn1+nTVqwEhp+3fDbqKpr2pWD8HJoTAsqzFZMmAP9I+bzVzn3
HveGwZ7Zspd9UkD45v6Zg/15zagiVQxbWW75RV9inxHxQSGnSw90sNQAAOnKn//I
YeEtXdwXV9n4L9xBfzY/3+J/6V5gPwTQULoxl01raMU8ExJITfFWcGHjU2Jel+wt
erpCVi+1DehLiPsLV1vlYi5ujI2RFB+w05XYuX4BErdUL+Z3yjQPxJwZrsH4/ggq
2tOUUcQyKrBu8r54N86IrwS7glmUq0yi7DlFrkBJqHodV2xO5nkMENRDrKFeFsQ5
VA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:59:06 2026 by rpki-client