Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149178.roa
File: AS149178.roa (raw, json)
Hash identifier: L0uYaGf1qtjWLO2cRVcjk76wPWLU+2yrSll4qEtwgLE=
Subject key identifier: 2A:11:96:2F:96:8C:57:C9:79:C6:A3:96:20:4C:AC:D6:EB:02:69:5A
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1328404AAF165822FA9ED7ABC4D8473E9F371E79
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149178.roa
Signing time: Tue 16 Jun 2026 16:05:00 +0000
ROA not before: Tue 16 Jun 2026 16:00:00 +0000
ROA not after: Tue 15 Jun 2027 16:05:00 +0000
asID: 149178
IP address blocks: 223.244.0.0/18 maxlen: 18
223.244.21.0/24 maxlen: 24
240e:6:d1a0::/44 maxlen: 44
240e:108:1153::/48 maxlen: 48
240e:108:1154::/48 maxlen: 48
240e:95a:4000::/36 maxlen: 36
240e:982:5300::/40 maxlen: 40
240e:982:5400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:28:40:4a:af:16:58:22:fa:9e:d7:ab:c4:d8:47:3e:9f:37:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 16:00:00 2026 GMT
Not After : Jun 15 16:05:00 2027 GMT
Subject: CN=2A11962F968C57C979C6A396204CACD6EB02695A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:1d:42:67:a2:4f:8b:af:db:bd:3a:80:28:
32:8e:90:31:0c:a4:0f:76:6e:85:84:28:23:7b:6b:
b8:38:89:69:eb:58:65:8b:97:2a:f8:73:f9:71:73:
ed:c3:38:49:8e:6e:43:be:e6:bb:a7:cf:9c:d4:aa:
9a:c6:e6:f0:0e:f8:ff:90:93:41:a6:e1:59:94:30:
ac:5a:12:ec:73:d6:6f:ad:37:8c:ad:ab:69:57:f9:
96:7d:05:2a:f3:0a:01:0c:07:7b:74:ff:df:96:77:
65:f6:8b:5d:de:21:96:c7:e8:3d:79:65:89:50:ee:
35:0f:3b:e8:23:34:2d:db:60:be:38:98:2e:1a:93:
b2:18:69:ca:de:e5:1a:a1:65:d2:77:a9:d6:2e:e5:
6e:1c:32:2d:d8:48:b0:6f:7f:45:cc:de:ee:5a:8d:
d3:74:b6:d3:0b:3b:28:35:94:49:96:90:f4:9d:e4:
17:a6:b2:57:5e:03:d2:a5:55:66:cb:23:c7:28:e8:
ec:25:f8:e3:31:02:52:f9:8d:44:89:d7:7d:b0:bc:
36:d6:40:6b:4a:3e:ee:d1:93:e2:42:ba:49:3e:37:
4e:6d:0d:99:f3:e4:d2:db:0d:ec:4e:fc:0f:80:8f:
8d:63:2f:fb:a8:ff:1e:24:c6:21:af:6d:a9:6e:c0:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:11:96:2F:96:8C:57:C9:79:C6:A3:96:20:4C:AC:D6:EB:02:69:5A
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS149178.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.244.0.0/18
IPv6:
240e:6:d1a0::/44
240e:108:1153::-240e:108:1154:ffff:ffff:ffff:ffff:ffff
240e:95a:4000::/36
240e:982:5300::-240e:982:54ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:8b:79:c8:8d:b6:37:eb:fe:ac:e7:c8:be:f1:b8:69:02:3b:
02:bf:45:fa:4a:1c:db:78:fd:59:1a:4c:b6:c3:cb:7c:1c:33:
ab:dd:a5:23:1c:d5:35:99:f0:84:eb:56:f7:05:3e:57:8c:2e:
35:47:ca:2a:05:1a:94:57:76:22:20:a7:c0:88:dc:9a:d7:db:
25:34:24:bf:8e:39:84:8f:c1:70:1b:87:53:bd:3a:db:d5:7b:
3b:f7:56:5b:96:93:bf:a1:df:bd:11:fa:8a:bb:7d:1a:9c:3d:
a9:89:4f:d9:6c:be:db:13:de:c0:fc:33:51:a4:87:95:eb:81:
42:c9:c2:a8:97:bf:af:df:54:89:84:6a:df:34:2b:7c:fc:03:
86:30:73:b9:a7:0b:be:6b:7b:4f:83:2c:fa:4d:1b:3c:3b:09:
5a:03:8f:41:7a:73:70:3a:85:fa:89:e7:58:e1:57:1c:a9:bb:
5b:7c:be:91:01:09:21:3c:76:80:77:2f:12:07:f8:bf:99:92:
d6:93:5c:a9:a8:99:73:26:8e:09:6e:3d:82:d1:4d:32:46:01:
da:85:6f:3a:66:2a:09:c0:5b:7a:f5:d7:75:a7:19:04:c3:50:
e2:15:4d:f3:3f:68:9a:84:18:a6:e7:5c:67:a5:e0:e4:3d:0c:
47:86:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:56:10 2026 by rpki-client