Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63835.roa
File: AS63835.roa (raw, json)
Hash identifier: We1Yi4gGj0m9fGazuJD/4ln6hd54/RLMLiLdCRV22WA=
Subject key identifier: AD:A2:F5:2A:4F:8C:65:49:FF:9A:0A:B7:BE:7C:00:BD:C0:56:C3:38
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 33054870F6951FB19132F8C80F4D217E9CF68ABB
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63835.roa
Signing time: Thu 21 May 2026 16:22:19 +0000
ROA not before: Thu 21 May 2026 16:17:19 +0000
ROA not after: Thu 20 May 2027 16:22:19 +0000
asID: 63835
IP address blocks: 240e:10:800::/37 maxlen: 37
240e:c0:1800::/37 maxlen: 37
240e:c2:1800::/37 maxlen: 37
240e:108:2a::/48 maxlen: 48
240e:108:43::/48 maxlen: 48
240e:108:84::/48 maxlen: 48
240e:108:1191::/48 maxlen: 48
240e:108:1192::/48 maxlen: 48
240e:108:1193::/48 maxlen: 48
240e:108:1194::/48 maxlen: 48
240e:968:2ff0::/48 maxlen: 48
240e:96a:5203::/48 maxlen: 48
240e:980:2a00::/40 maxlen: 40
240e:980:4300::/40 maxlen: 40
240e:980:8400::/40 maxlen: 40
240e:982:9000::/40 maxlen: 40
240e:982:9100::/40 maxlen: 40
240e:982:9200::/40 maxlen: 40
240e:982:9300::/40 maxlen: 40
240e:982:9a00::/40 maxlen: 40
240e:982:9a00::/41 maxlen: 41
240e:982:9a80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:05:48:70:f6:95:1f:b1:91:32:f8:c8:0f:4d:21:7e:9c:f6:8a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:17:19 2026 GMT
Not After : May 20 16:22:19 2027 GMT
Subject: CN=ADA2F52A4F8C6549FF9A0AB7BE7C00BDC056C338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:65:3a:e2:3f:c4:4c:4b:ab:4d:17:4c:e0:
3b:4f:a1:bd:75:0d:ed:47:c3:3b:b2:8a:83:87:53:
73:ba:d9:c1:89:6a:cc:8e:5e:75:75:7e:cf:9c:e5:
e7:e4:d5:7c:cf:6e:66:14:c8:93:a2:16:45:56:f0:
e6:53:56:92:79:56:b7:01:80:ad:03:73:72:0e:b3:
a2:cd:2a:f4:b4:eb:10:78:85:c9:1d:ce:f6:12:f4:
ec:45:eb:7b:6d:5d:c9:49:bd:37:28:a4:a7:5e:54:
24:db:e4:cf:54:26:ea:0d:fe:db:47:68:ea:bd:4f:
d6:2f:d8:26:a3:72:b2:86:93:ca:ef:2e:f3:25:e3:
6b:33:3e:c2:5b:24:5c:61:ec:53:e8:d4:22:52:9e:
a8:9e:14:af:a2:47:d6:c0:9b:e1:23:f0:ee:bb:42:
40:d3:e8:ac:80:44:1e:46:88:e7:77:c5:01:66:cf:
0b:f1:56:b4:e4:9e:8b:f7:84:db:e2:ba:23:fb:1a:
66:62:bf:01:0d:fb:55:f2:e7:1a:dd:05:23:e3:e1:
8a:6f:25:02:b8:21:14:c7:b5:fb:d2:8a:e2:2b:2a:
a6:5d:d5:1e:fb:7d:8f:c2:00:a5:5b:5a:75:e7:7b:
f2:e5:3c:e9:32:49:9a:f2:a2:36:25:b0:14:73:3e:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:F5:2A:4F:8C:65:49:FF:9A:0A:B7:BE:7C:00:BD:C0:56:C3:38
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:10:800::/37
240e:c0:1800::/37
240e:c2:1800::/37
240e:108:2a::/48
240e:108:43::/48
240e:108:84::/48
240e:108:1191::-240e:108:1194:ffff:ffff:ffff:ffff:ffff
240e:968:2ff0::/48
240e:96a:5203::/48
240e:980:2a00::/40
240e:980:4300::/40
240e:980:8400::/40
240e:982:9000::/38
240e:982:9a00::/40
Signature Algorithm: sha256WithRSAEncryption
48:7b:9b:55:82:ea:f1:8d:bc:c8:1c:01:7f:9f:d8:35:5d:66:
4c:69:a7:4c:7f:59:8b:4b:19:f6:3e:23:1a:19:cb:dc:db:0c:
f4:4b:a2:4a:3e:82:e9:1a:81:32:d5:ef:e1:64:fd:52:81:83:
92:46:65:a5:e0:03:70:64:6a:04:cb:ad:61:10:23:7f:ff:e1:
4e:dd:1d:34:82:b9:01:1a:e2:ce:29:08:d4:e6:ce:95:fb:bf:
db:3d:96:70:75:57:5c:ab:0f:27:9d:e6:b3:c9:94:7e:42:b9:
01:7d:51:23:b1:8b:05:f5:53:a5:60:e2:7d:62:00:3f:68:76:
fe:fc:14:fa:48:91:90:bc:61:e3:39:4d:7e:6f:02:20:af:ed:
8e:52:6b:10:58:2d:4e:7e:cb:ca:8b:ca:29:74:ec:9c:f5:69:
48:9f:d8:eb:f4:4e:aa:13:5f:41:06:77:3c:3c:0c:d4:1d:1f:
71:41:c9:20:6d:32:dd:54:9d:ca:ff:77:b4:77:93:87:40:35:
ea:b6:8e:51:5a:0f:86:e4:0a:ae:bc:01:41:a1:9c:a2:72:f6:
21:a0:b6:2c:ac:b5:75:1b:cd:62:5c:8b:8e:19:ca:bd:f9:5f:
b1:e3:31:bc:99:65:2a:53:68:f8:63:02:0c:8b:18:49:f5:5c:
29:41:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:13 2026 by rpki-client