Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
File: AS147038.roa (raw, json)
Hash identifier: QRewVTMdDMyGiZGl368Az+qQamGwoMzdEv2qyCLE6Hc=
Subject key identifier: F8:23:F4:80:75:C1:3B:78:45:B3:64:B5:41:6D:F8:C2:C4:EB:9A:C3
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5ABAF6A5C2FD287E303E861168B3BF97E9AD675B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
Signing time: Mon 03 Aug 2026 02:33:13 +0000
ROA not before: Mon 03 Aug 2026 02:28:13 +0000
ROA not after: Mon 02 Aug 2027 02:33:13 +0000
asID: 147038
IP address blocks: 60.164.36.0/23 maxlen: 23
60.165.148.0/22 maxlen: 22
60.165.235.0/24 maxlen: 24
60.165.238.0/24 maxlen: 24
60.165.239.0/24 maxlen: 24
61.134.69.0/24 maxlen: 24
61.159.86.0/23 maxlen: 23
118.180.19.0/24 maxlen: 24
118.181.104.0/22 maxlen: 22
118.183.57.0/24 maxlen: 24
118.183.59.0/24 maxlen: 24
118.183.200.0/24 maxlen: 24
118.183.201.0/24 maxlen: 24
118.183.202.0/24 maxlen: 24
118.183.205.0/24 maxlen: 24
118.183.236.0/24 maxlen: 24
118.183.237.0/24 maxlen: 24
118.183.238.0/24 maxlen: 24
118.183.239.0/24 maxlen: 24
125.74.160.0/23 maxlen: 23
125.76.110.0/24 maxlen: 24
125.76.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ba:f6:a5:c2:fd:28:7e:30:3e:86:11:68:b3:bf:97:e9:ad:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Aug 3 02:28:13 2026 GMT
Not After : Aug 2 02:33:13 2027 GMT
Subject: CN=F823F48075C13B7845B364B5416DF8C2C4EB9AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:db:94:78:82:30:ff:43:16:1f:4a:44:f3:
37:9c:52:13:76:2b:ea:11:1e:b4:48:09:6d:1b:59:
59:9c:3f:cc:6f:39:7c:76:ad:c5:5e:0f:45:de:24:
c5:9b:d3:e0:1a:b9:cc:b9:d7:67:07:3d:6f:41:e1:
56:80:1d:f1:e2:5d:24:42:d7:e5:08:03:48:d3:a8:
ac:d9:9e:5a:b9:d5:c3:13:dd:2b:ad:30:35:2c:49:
6a:aa:c7:f1:22:81:dc:9a:28:5c:38:92:12:41:4e:
c3:dd:97:0b:ae:71:75:23:ef:c1:99:9b:69:99:1f:
4b:d5:9a:ab:cc:8a:67:98:c8:c2:54:bf:b9:1a:60:
d1:4a:95:06:a7:18:d0:56:c6:24:f1:7d:ec:18:15:
30:e3:ff:49:1b:64:55:b0:ed:4e:e8:1e:00:03:cc:
c0:19:0d:7e:d4:69:f6:07:96:fe:69:ce:76:a4:f8:
2b:67:fa:3d:11:07:76:87:5a:b8:05:56:61:97:c4:
cf:67:72:f3:5a:8b:6a:de:c8:94:32:f7:d8:ac:97:
ef:0a:22:f1:aa:af:23:0a:df:67:21:f0:87:7f:67:
2d:0f:35:07:6a:20:6f:5e:6c:af:b5:19:72:25:d0:
52:96:4b:6c:40:d7:f1:3e:a1:65:5d:ee:27:30:19:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:F4:80:75:C1:3B:78:45:B3:64:B5:41:6D:F8:C2:C4:EB:9A:C3
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS147038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.164.36.0/23
60.165.148.0/22
60.165.235.0/24
60.165.238.0/23
61.134.69.0/24
61.159.86.0/23
118.180.19.0/24
118.181.104.0/22
118.183.57.0/24
118.183.59.0/24
118.183.200.0-118.183.202.255
118.183.205.0/24
118.183.236.0/22
125.74.160.0/23
125.76.110.0/24
125.76.120.0/21
Signature Algorithm: sha256WithRSAEncryption
97:fe:05:84:9a:a4:e8:ef:80:6c:95:7c:d5:f5:fd:73:db:fe:
17:c0:4b:52:e4:65:eb:39:05:10:0a:04:76:c9:cf:f9:c7:62:
87:3f:32:47:ed:b0:07:2e:b6:9e:44:c0:44:40:e8:fa:6a:71:
77:ee:dc:83:03:c1:9b:bb:dc:b4:8a:81:e1:20:57:62:31:25:
0d:09:eb:13:3e:2a:c2:df:2c:6d:bb:d5:d4:90:45:2f:b7:84:
df:3b:ba:0b:72:96:1d:00:57:fe:09:07:3a:68:d3:1f:19:ff:
18:34:d9:f0:e0:51:dd:55:39:a3:f4:9b:53:a4:3d:1a:cd:a0:
09:85:82:b9:7d:bb:51:e7:c5:7d:1b:f1:81:68:af:df:47:64:
a9:8e:d3:f4:b7:2b:e2:b0:9d:5c:ab:48:85:58:29:66:31:9f:
e9:6b:fa:b7:3e:ce:43:41:fe:27:4d:9c:7c:f1:8b:e8:c7:10:
40:ab:f0:e3:d3:bc:29:45:57:42:51:f3:47:2a:9c:47:1b:8c:
81:8b:90:1d:8a:c8:12:14:9c:a4:4e:c5:0b:59:7a:8f:af:4e:
8f:6c:e2:a7:f6:f0:ea:fe:ec:52:d6:b8:35:b0:55:af:51:3b:
07:76:b4:8d:db:23:2c:6a:33:37:69:28:26:2e:43:94:89:81:
26:a2:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:42:36 2026 by rpki-client