Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS148981.roa
File: AS148981.roa (raw, json)
Hash identifier: 75atZt3WvBqejZCzjgR6NZ+jO/2gaLQKZcXvW6kYwo8=
Subject key identifier: 75:3F:50:60:1C:56:01:D3:62:0A:23:E2:FE:AD:97:51:FC:B3:7E:13
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 038DF82D63774854A5F3F000D8FD03727E808BF0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS148981.roa
Signing time: Thu 04 Jun 2026 16:07:22 +0000
ROA not before: Thu 04 Jun 2026 16:02:22 +0000
ROA not after: Thu 03 Jun 2027 16:07:22 +0000
asID: 148981
IP address blocks: 27.25.128.0/24 maxlen: 24
27.25.130.0/24 maxlen: 24
27.25.132.0/24 maxlen: 24
27.25.148.0/24 maxlen: 24
27.25.151.0/24 maxlen: 24
27.25.152.0/24 maxlen: 24
27.25.155.0/24 maxlen: 24
27.30.76.0/24 maxlen: 24
27.30.77.0/24 maxlen: 24
61.136.163.0/24 maxlen: 24
61.136.164.0/24 maxlen: 24
61.136.165.0/24 maxlen: 24
61.136.235.0/24 maxlen: 24
61.183.42.0/24 maxlen: 24
111.173.80.0/22 maxlen: 22
111.173.89.0/24 maxlen: 24
111.173.104.0/22 maxlen: 22
111.173.116.0/22 maxlen: 22
111.180.136.0/22 maxlen: 22
111.180.144.0/20 maxlen: 20
111.180.184.0/22 maxlen: 22
111.180.188.0/22 maxlen: 22
111.180.192.0/21 maxlen: 21
111.180.200.0/22 maxlen: 22
111.180.204.0/23 maxlen: 23
111.180.206.0/23 maxlen: 23
119.101.148.0/24 maxlen: 24
121.62.16.0/21 maxlen: 21
121.62.24.0/22 maxlen: 22
121.62.60.0/22 maxlen: 22
240e:105:f600::/40 maxlen: 40
240e:95d:3000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8d:f8:2d:63:77:48:54:a5:f3:f0:00:d8:fd:03:72:7e:80:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:02:22 2026 GMT
Not After : Jun 3 16:07:22 2027 GMT
Subject: CN=753F50601C5601D3620A23E2FEAD9751FCB37E13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:b5:73:69:aa:1f:dd:f5:0b:ba:b5:a8:a1:
dd:b9:97:55:93:fe:47:ee:c6:21:25:b3:c9:d6:75:
2c:50:16:42:3d:38:91:79:24:47:b7:d8:5d:53:13:
bc:1e:de:48:42:8a:bc:3b:2a:f8:fe:11:04:fa:66:
49:11:c0:68:d9:57:28:08:62:3b:73:65:12:ee:27:
83:bd:04:9f:ad:4e:48:01:12:f9:f1:29:c1:d4:2e:
f5:fc:8a:4d:22:07:2b:46:34:66:b3:b3:05:ad:3c:
04:89:17:1e:b7:53:5d:77:08:5e:61:c7:cc:28:28:
78:26:5a:ad:5f:fd:a3:11:bb:a6:33:4d:87:b1:63:
a7:a7:94:c2:a4:7b:4a:ba:74:58:63:61:8e:f7:7e:
0d:9a:50:55:63:7c:73:3c:c0:7a:20:d1:b0:ea:e9:
74:91:81:75:34:97:e7:be:cd:56:7c:b1:05:cc:e5:
19:32:28:ed:c3:33:4b:75:8a:0c:44:a1:6a:9c:eb:
6a:02:c0:6b:42:36:3d:72:d9:c6:b5:9f:e5:e6:37:
ba:c3:5b:00:a8:df:bf:f5:5b:14:e8:a2:a2:81:a5:
27:9c:6d:bb:7d:ca:a6:08:f5:08:bc:dd:3e:03:80:
41:7d:37:a0:45:e8:5a:9d:5b:9f:60:c3:b6:95:9e:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:50:60:1C:56:01:D3:62:0A:23:E2:FE:AD:97:51:FC:B3:7E:13
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS148981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.25.128.0/24
27.25.130.0/24
27.25.132.0/24
27.25.148.0/24
27.25.151.0-27.25.152.255
27.25.155.0/24
27.30.76.0/23
61.136.163.0-61.136.165.255
61.136.235.0/24
61.183.42.0/24
111.173.80.0/22
111.173.89.0/24
111.173.104.0/22
111.173.116.0/22
111.180.136.0/22
111.180.144.0/20
111.180.184.0-111.180.207.255
119.101.148.0/24
121.62.16.0-121.62.27.255
121.62.60.0/22
IPv6:
240e:105:f600::/40
240e:95d:3000::/38
Signature Algorithm: sha256WithRSAEncryption
15:13:5d:7c:d3:59:61:7a:ec:7d:e8:1e:3f:60:3b:6d:6a:d1:
be:9d:ff:32:ac:14:a4:50:9f:39:e7:29:53:b5:9d:a6:ca:10:
eb:bf:bf:47:10:54:77:71:e0:e7:0e:96:e0:57:95:85:18:07:
4c:c0:3c:af:c1:71:34:d7:35:80:07:6b:24:b1:f4:c8:43:64:
22:9f:de:ce:90:6a:7d:89:8d:1d:47:2d:44:48:da:33:af:19:
c3:1f:64:35:72:32:ed:ef:7d:91:b9:68:ce:47:3d:c4:6c:74:
52:a0:e5:7d:f6:6c:94:48:65:fd:cb:74:d6:f7:37:34:ea:3c:
0a:6c:56:7c:56:ec:6f:a7:01:ac:06:9c:e1:46:68:cc:7c:94:
5d:a0:91:7a:6b:a5:66:09:2b:18:0d:c4:fc:06:0b:2b:1c:03:
7a:92:59:92:be:f8:4d:13:05:eb:e3:68:79:be:35:7b:19:4f:
15:7b:26:e9:19:ec:8e:67:51:e7:37:57:fd:85:92:59:9c:24:
a1:4c:55:a2:82:19:e0:f5:ad:0c:b4:3c:6b:0f:03:fb:8d:31:
53:75:44:c4:35:eb:1d:97:79:66:ea:d1:c7:c7:a4:43:fb:85:
7a:6d:92:5c:80:a1:71:85:a7:f0:70:93:f9:10:65:be:3d:cc:
6d:be:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:43 2026 by rpki-client