Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63646.roa
File: AS63646.roa (raw, json)
Hash identifier: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=
Subject key identifier: B5:0B:3A:99:27:03:DD:C7:1F:21:31:6D:B4:E5:FE:0D:9B:9D:70:9A
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 18ED94C9941A32D60456AAE0FD5A983728610A9D
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63646.roa
Signing time: Wed 20 May 2026 07:08:46 +0000
ROA not before: Wed 20 May 2026 07:03:46 +0000
ROA not after: Wed 19 May 2027 07:08:46 +0000
asID: 63646
IP address blocks: 103.73.48.0/22 maxlen: 22
103.73.48.0/24 maxlen: 24
103.73.49.0/24 maxlen: 24
103.73.50.0/24 maxlen: 24
103.73.51.0/24 maxlen: 24
116.85.0.0/16 maxlen: 16
116.85.0.0/18 maxlen: 18
116.85.0.0/24 maxlen: 24
116.85.1.0/24 maxlen: 24
116.85.2.0/24 maxlen: 24
116.85.3.0/24 maxlen: 24
116.85.4.0/24 maxlen: 24
116.85.5.0/24 maxlen: 24
116.85.6.0/24 maxlen: 24
116.85.7.0/24 maxlen: 24
116.85.8.0/24 maxlen: 24
116.85.9.0/24 maxlen: 24
116.85.10.0/24 maxlen: 24
116.85.11.0/24 maxlen: 24
116.85.12.0/24 maxlen: 24
116.85.13.0/24 maxlen: 24
116.85.14.0/24 maxlen: 24
116.85.15.0/24 maxlen: 24
116.85.16.0/24 maxlen: 24
116.85.17.0/24 maxlen: 24
116.85.18.0/24 maxlen: 24
116.85.19.0/24 maxlen: 24
116.85.20.0/24 maxlen: 24
116.85.21.0/24 maxlen: 24
116.85.22.0/24 maxlen: 24
116.85.23.0/24 maxlen: 24
116.85.64.0/20 maxlen: 20
116.85.240.0/20 maxlen: 20
116.85.248.0/24 maxlen: 24
116.85.249.0/24 maxlen: 24
116.85.250.0/24 maxlen: 24
116.85.251.0/24 maxlen: 24
116.85.252.0/24 maxlen: 24
116.85.253.0/24 maxlen: 24
116.85.254.0/24 maxlen: 24
116.85.255.0/24 maxlen: 24
117.51.128.0/19 maxlen: 19
117.51.128.0/24 maxlen: 24
117.51.129.0/24 maxlen: 24
117.51.130.0/24 maxlen: 24
117.51.131.0/24 maxlen: 24
117.51.132.0/24 maxlen: 24
117.51.133.0/24 maxlen: 24
117.51.134.0/24 maxlen: 24
117.51.135.0/24 maxlen: 24
117.51.136.0/24 maxlen: 24
117.51.137.0/24 maxlen: 24
117.51.138.0/24 maxlen: 24
117.51.139.0/24 maxlen: 24
117.51.140.0/24 maxlen: 24
117.51.141.0/24 maxlen: 24
117.51.142.0/24 maxlen: 24
117.51.143.0/24 maxlen: 24
117.51.157.0/24 maxlen: 24
2402:840::/32 maxlen: 32
2402:840:d000::/46 maxlen: 46
2402:840:d000::/48 maxlen: 48
2402:840:d001::/48 maxlen: 48
2402:840:d002::/48 maxlen: 48
2402:840:d003::/48 maxlen: 48
2402:840:e000::/46 maxlen: 46
2402:840:e000::/48 maxlen: 48
2402:840:e001::/48 maxlen: 48
2402:840:e002::/48 maxlen: 48
2402:840:e003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ed:94:c9:94:1a:32:d6:04:56:aa:e0:fd:5a:98:37:28:61:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 20 07:03:46 2026 GMT
Not After : May 19 07:08:46 2027 GMT
Subject: CN=B50B3A992703DDC71F21316DB4E5FE0D9B9D709A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:7d:30:69:ac:0b:bd:23:54:b4:36:c7:39:
39:19:ab:2f:86:80:2d:26:f2:c9:12:35:9d:fc:71:
1f:01:06:b3:2e:91:69:5d:ac:e2:c6:d9:f1:ea:d3:
3e:1b:9e:02:10:b2:f0:88:47:a0:7d:ad:15:96:bb:
0d:16:78:a4:a9:85:f9:3d:f9:db:85:1e:13:67:b6:
89:08:72:70:2c:59:f0:e2:b4:c5:be:36:1e:3e:6b:
74:ca:f5:70:ac:b0:0b:d9:28:a3:89:17:2c:58:e1:
9c:75:15:c8:54:1b:d9:58:fc:23:e5:8c:41:a6:82:
52:e0:d5:53:2d:84:4f:fc:18:d2:fa:b0:4e:28:eb:
b9:95:2d:60:c4:3a:93:ce:a6:84:c0:b1:a8:77:2f:
44:40:07:31:e1:7e:dd:9d:03:ac:fc:fa:d8:0a:b5:
a4:d2:c7:a5:d4:dc:d9:24:72:08:bf:ad:a7:cf:38:
3a:19:f1:a6:86:2c:fe:ef:ab:04:81:b4:9e:17:11:
dd:37:db:b8:5f:5c:52:34:63:17:3f:3d:9b:69:4f:
d9:3d:90:a4:b6:d1:a3:12:38:fc:f8:29:02:bb:88:
12:75:66:25:6b:1b:b6:d3:e2:be:b8:7c:54:ca:3f:
b8:38:8d:7c:80:90:1e:78:5f:21:44:42:d4:8c:6b:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:3A:99:27:03:DD:C7:1F:21:31:6D:B4:E5:FE:0D:9B:9D:70:9A
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.48.0/22
116.85.0.0/16
117.51.128.0/19
IPv6:
2402:840::/32
Signature Algorithm: sha256WithRSAEncryption
a5:2e:fe:ff:eb:80:3b:74:d3:8a:57:fa:5e:b6:e4:6f:d3:fa:
57:c8:ce:4d:ac:7a:8e:60:be:55:4e:d4:3a:c3:c4:6e:7c:e2:
d3:64:f9:09:8a:6c:6c:a7:a3:c7:54:0e:64:de:82:15:42:66:
84:6c:28:9a:54:04:44:7e:7f:fe:8d:8f:28:2c:df:2a:7e:80:
e8:3b:f8:f6:25:c2:a3:6d:88:98:32:a8:c6:98:86:17:54:83:
64:a0:69:2c:c0:bc:88:dd:e0:99:87:b8:3c:4b:84:02:13:29:
4a:ea:d2:59:15:4d:38:6b:26:a5:c4:9d:76:d4:a1:4d:cd:75:
3f:f1:4c:b5:8c:73:84:48:b8:44:af:75:36:ad:ef:f9:1c:5d:
2d:55:cb:9a:88:29:62:ed:c5:2e:db:e3:45:ee:8e:d3:35:57:
06:e7:40:63:8b:15:9a:78:c0:e3:9f:26:74:5b:70:11:0b:22:
c4:06:d2:07:5f:9f:b7:89:60:13:78:14:52:26:ec:d6:80:31:
9d:05:0b:7c:27:9f:76:d4:fd:3e:41:8f:5e:02:81:8c:1d:29:
50:a1:c5:8f:62:67:62:54:f0:2b:1f:13:ce:d2:c9:30:8b:c6:
52:21:68:94:b1:7c:6e:34:89:04:89:56:37:eb:b5:58:f5:48:
74:9c:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:07:16 2026 by rpki-client