Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151058.roa
File: AS151058.roa (raw, json)
Hash identifier: p5FWSo7FhDojf5zDz9QyxiSLl/b+2weWUpCVjWVXAJg=
Subject key identifier: A3:3F:8D:71:CE:50:D7:0F:1A:81:99:C5:95:12:8E:C7:92:B3:25:C5
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 428C377C83E50F589C1DF31E1776FD567E1043E8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151058.roa
Signing time: Wed 03 Jun 2026 16:46:48 +0000
ROA not before: Wed 03 Jun 2026 16:41:48 +0000
ROA not after: Wed 02 Jun 2027 16:46:48 +0000
asID: 151058
IP address blocks: 36.1.0.0/17 maxlen: 17
36.101.0.0/17 maxlen: 17
36.101.128.0/17 maxlen: 17
59.49.128.0/18 maxlen: 18
59.49.192.0/18 maxlen: 18
59.50.105.0/24 maxlen: 24
59.50.128.0/17 maxlen: 17
61.186.32.0/19 maxlen: 19
112.66.0.0/16 maxlen: 16
115.168.54.0/24 maxlen: 24
115.168.86.0/24 maxlen: 24
118.84.253.0/24 maxlen: 24
119.41.0.0/17 maxlen: 17
119.41.128.0/17 maxlen: 17
121.58.0.0/18 maxlen: 18
124.225.0.0/17 maxlen: 17
124.225.128.0/17 maxlen: 17
202.100.192.0/19 maxlen: 19
202.100.215.0/24 maxlen: 24
202.100.217.0/24 maxlen: 24
202.100.218.0/24 maxlen: 24
202.100.224.0/19 maxlen: 19
202.100.231.0/24 maxlen: 24
218.77.128.0/18 maxlen: 18
218.77.192.0/18 maxlen: 18
220.174.128.0/17 maxlen: 17
223.198.0.0/16 maxlen: 16
223.199.0.0/16 maxlen: 16
240e:2:8000::/33 maxlen: 33
240e:28:a000::/35 maxlen: 35
240e:42:8000::/34 maxlen: 34
240e:42:8000::/36 maxlen: 36
240e:42:8010::/48 maxlen: 48
240e:42:8011::/48 maxlen: 48
240e:42:8012::/48 maxlen: 48
240e:42:c000::/36 maxlen: 36
240e:42:d000::/36 maxlen: 36
240e:42:e000::/35 maxlen: 35
240e:8a::/32 maxlen: 32
240e:8b::/34 maxlen: 34
240e:8b:4000::/34 maxlen: 34
240e:8b:8000::/33 maxlen: 33
240e:101:4000::/36 maxlen: 36
240e:101:5000::/36 maxlen: 36
240e:101:6000::/36 maxlen: 36
240e:101:7000::/36 maxlen: 36
240e:108:8c::/48 maxlen: 48
240e:108:1040::/44 maxlen: 44
240e:108:1040::/47 maxlen: 47
240e:108:1042::/48 maxlen: 48
240e:108:1240::/44 maxlen: 44
240e:108:40c1::/48 maxlen: 48
240e:108:48c1::/48 maxlen: 48
240e:181:4000::/36 maxlen: 36
240e:181:5000::/36 maxlen: 36
240e:181:6000::/36 maxlen: 36
240e:181:7000::/36 maxlen: 36
240e:214::/32 maxlen: 32
240e:215::/32 maxlen: 32
240e:216::/32 maxlen: 32
240e:217::/32 maxlen: 32
240e:314::/32 maxlen: 32
240e:315::/32 maxlen: 32
240e:316::/32 maxlen: 32
240e:317::/32 maxlen: 32
240e:415::/32 maxlen: 32
240e:416::/32 maxlen: 32
240e:417::/32 maxlen: 32
240e:514::/32 maxlen: 32
240e:515::/32 maxlen: 32
240e:516::/32 maxlen: 32
240e:517::/32 maxlen: 32
240e:614::/32 maxlen: 32
240e:615:5501::/48 maxlen: 48
240e:615:6c03::/48 maxlen: 48
240e:616::/32 maxlen: 32
240e:617::/32 maxlen: 32
240e:714::/32 maxlen: 32
240e:715::/32 maxlen: 32
240e:716::/32 maxlen: 32
240e:717::/32 maxlen: 32
240e:814::/32 maxlen: 32
240e:815::/32 maxlen: 32
240e:816::/32 maxlen: 32
240e:817::/32 maxlen: 32
240e:914::/32 maxlen: 32
240e:915::/32 maxlen: 32
240e:916::/32 maxlen: 32
240e:917::/32 maxlen: 32
240e:980:8c00::/40 maxlen: 40
240e:980:8c00::/41 maxlen: 41
240e:980:8c80::/41 maxlen: 41
240e:981:4000::/36 maxlen: 36
240e:981:4000::/39 maxlen: 39
240e:981:4200::/40 maxlen: 40
240e:983:400::/40 maxlen: 40
240e:b14::/32 maxlen: 32
240e:b15::/32 maxlen: 32
240e:b16::/32 maxlen: 32
240e:b17::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8c:37:7c:83:e5:0f:58:9c:1d:f3:1e:17:76:fd:56:7e:10:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 3 16:41:48 2026 GMT
Not After : Jun 2 16:46:48 2027 GMT
Subject: CN=A33F8D71CE50D70F1A8199C595128EC792B325C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:4c:83:72:9a:9e:79:0b:d5:97:26:89:b5:
23:ba:8f:6f:05:61:71:75:de:6b:a0:d1:8b:8b:da:
3d:28:6e:c2:ad:d5:1e:1f:ab:4a:84:8f:69:c1:c1:
ce:5c:f8:d9:96:7d:43:51:22:31:62:62:15:e5:a8:
83:b6:30:3d:78:c8:35:c9:f5:72:46:ba:01:50:28:
4a:84:e0:72:e0:0b:f3:f9:d6:b8:28:8a:2f:05:b6:
e4:6e:f7:c6:34:9f:d3:0a:8f:60:db:00:bd:55:48:
d3:80:6e:60:27:fb:1f:c2:25:8a:e7:d1:c4:44:06:
aa:e2:a6:a0:c0:69:2b:19:2e:f5:5f:a7:66:7d:4e:
68:a5:b9:7e:00:41:7e:5d:b7:a5:1b:df:52:7b:2d:
95:95:1a:37:91:ce:c7:04:e0:b0:f4:d5:b1:47:4c:
5f:a2:b1:90:47:46:02:54:f1:03:9b:8b:bd:b6:b6:
e4:1a:23:bf:7c:fe:4c:35:f5:7f:a3:1c:20:c2:cc:
05:d6:01:c5:72:cb:cf:8c:35:32:ad:e9:f3:fc:6b:
fa:36:8e:b2:ec:c4:9f:76:89:20:a6:18:b9:01:15:
fa:46:96:5b:9b:1e:6d:e2:a7:40:5b:2d:43:0b:7d:
e0:6d:72:0d:78:8e:83:3e:66:88:df:ec:d7:0c:10:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3F:8D:71:CE:50:D7:0F:1A:81:99:C5:95:12:8E:C7:92:B3:25:C5
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.1.0.0/17
36.101.0.0/16
59.49.128.0/17
59.50.105.0/24
59.50.128.0/17
61.186.32.0/19
112.66.0.0/16
115.168.54.0/24
115.168.86.0/24
118.84.253.0/24
119.41.0.0/16
121.58.0.0/18
124.225.0.0/16
202.100.192.0/18
218.77.128.0/17
220.174.128.0/17
223.198.0.0/15
IPv6:
240e:2:8000::/33
240e:28:a000::/35
240e:42:8000::/33
240e:8a::/31
240e:101:4000::/34
240e:108:8c::/48
240e:108:1040::/44
240e:108:1240::/44
240e:108:40c1::/48
240e:108:48c1::/48
240e:181:4000::/34
240e:214::/30
240e:314::/30
240e:415::-240e:417:ffff:ffff:ffff:ffff:ffff:ffff
240e:514::/30
240e:614::/32
240e:615:5501::/48
240e:615:6c03::/48
240e:616::/31
240e:714::/30
240e:814::/30
240e:914::/30
240e:980:8c00::/40
240e:981:4000::/36
240e:983:400::/40
240e:b14::/30
Signature Algorithm: sha256WithRSAEncryption
84:8b:8a:a5:61:31:42:88:69:83:3b:5b:ec:f4:2a:3b:e0:64:
51:bd:8b:1a:af:a6:5a:5d:dd:15:f0:cc:f6:f7:52:6c:81:3b:
c3:14:df:a6:86:0f:42:3d:4b:21:52:88:eb:05:ea:64:a3:6d:
36:8c:e2:ea:df:50:83:0c:78:98:fd:15:ba:ed:ad:e4:d2:f1:
c3:c6:7f:f9:a8:68:eb:43:2f:93:1e:1d:55:9e:16:b2:37:19:
62:01:b3:9f:49:8e:cd:9f:42:9e:0e:4f:06:11:5e:c9:9e:a5:
25:c4:24:34:1e:3e:45:0d:ad:9e:09:7c:8d:76:7f:ed:86:1a:
46:ac:9e:4d:e5:30:fc:eb:78:a9:47:6e:6c:86:bd:51:c5:3d:
c4:82:d3:73:19:2c:6c:b9:f8:54:7f:c7:69:66:0c:5b:73:92:
1f:5b:f7:1f:6c:8c:df:11:98:df:3d:db:2a:5d:d1:e9:cd:d9:
64:75:a8:d1:46:c3:55:4d:cf:b4:d2:cf:74:91:25:be:70:25:
fa:24:d0:a1:ca:67:eb:ce:28:db:03:8f:5d:1d:65:46:f8:26:
97:25:cd:ab:57:7d:ec:d9:ac:cf:d5:e1:9a:5d:2d:35:5a:51:
a9:97:37:d9:a6:4a:40:97:44:7e:f9:0e:ea:da:bb:e7:59:0b:
d2:32:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:44 2026 by rpki-client