Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS135061.roa
File: AS135061.roa (raw, json)
Hash identifier: fZHLKQDFG9illPNNYkbrjBjOYDu2ExT5qQshvpsM3QU=
Subject key identifier: 59:85:AB:E0:A7:EF:DD:69:79:6D:CE:95:ED:3D:59:37:F2:D4:04:B7
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 0C15835E1E2D4087048D9B9D8DA7B58F4E797842
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS135061.roa
Signing time: Wed 03 Jun 2026 14:42:22 +0000
ROA not before: Wed 03 Jun 2026 14:37:22 +0000
ROA not after: Wed 02 Jun 2027 14:42:22 +0000
asID: 135061
IP address blocks: 61.241.0.0/24 maxlen: 24
61.241.1.0/24 maxlen: 24
61.241.2.0/24 maxlen: 24
61.241.3.0/24 maxlen: 24
61.241.4.0/24 maxlen: 24
61.241.5.0/24 maxlen: 24
61.241.6.0/24 maxlen: 24
61.241.7.0/24 maxlen: 24
61.241.8.0/24 maxlen: 24
61.241.9.0/24 maxlen: 24
61.241.10.0/24 maxlen: 24
61.241.11.0/24 maxlen: 24
61.241.12.0/24 maxlen: 24
61.241.13.0/24 maxlen: 24
61.241.14.0/24 maxlen: 24
61.241.16.0/24 maxlen: 24
61.241.17.0/24 maxlen: 24
61.241.18.0/24 maxlen: 24
61.241.19.0/24 maxlen: 24
61.241.20.0/24 maxlen: 24
61.241.21.0/24 maxlen: 24
61.241.22.0/24 maxlen: 24
61.241.23.0/24 maxlen: 24
61.241.24.0/24 maxlen: 24
61.241.25.0/24 maxlen: 24
61.241.26.0/24 maxlen: 24
61.241.27.0/24 maxlen: 24
61.241.28.0/24 maxlen: 24
61.241.29.0/24 maxlen: 24
61.241.36.0/24 maxlen: 24
61.241.37.0/24 maxlen: 24
61.241.44.0/24 maxlen: 24
61.241.45.0/24 maxlen: 24
61.241.48.0/24 maxlen: 24
61.241.49.0/24 maxlen: 24
61.241.58.0/24 maxlen: 24
61.241.59.0/24 maxlen: 24
61.241.63.0/24 maxlen: 24
211.95.133.0/24 maxlen: 24
211.95.136.0/24 maxlen: 24
211.95.138.0/24 maxlen: 24
211.95.139.0/24 maxlen: 24
211.95.141.0/24 maxlen: 24
211.95.142.0/24 maxlen: 24
211.95.152.0/24 maxlen: 24
211.95.154.0/24 maxlen: 24
211.95.155.0/24 maxlen: 24
211.95.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:15:83:5e:1e:2d:40:87:04:8d:9b:9d:8d:a7:b5:8f:4e:79:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Jun 3 14:37:22 2026 GMT
Not After : Jun 2 14:42:22 2027 GMT
Subject: CN=5985ABE0A7EFDD69796DCE95ED3D5937F2D404B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:9c:29:d5:14:de:3a:d6:bc:09:85:8c:20:
ec:7b:31:67:70:ea:7e:07:d4:fb:3f:f4:ec:d6:72:
4c:db:4d:78:d2:f9:a8:94:f7:67:32:1c:9b:61:d3:
d5:00:3a:ad:e0:20:61:f6:62:0a:53:7e:27:53:4e:
ca:b5:48:0d:9b:eb:c2:cf:68:54:48:10:69:f2:32:
d0:ac:bb:4d:2c:ec:9b:3d:e4:3d:9f:32:f1:38:56:
e4:e8:35:6a:60:fd:f1:1f:ac:54:30:b8:e1:af:53:
d8:21:e0:8d:6b:a9:c7:ac:ae:f8:19:bc:0b:16:2f:
53:37:f8:09:1c:20:80:ba:57:e3:e3:43:8b:79:89:
54:e5:17:a4:fa:a8:b1:43:79:e8:3f:9b:30:31:50:
20:78:d0:ff:e0:74:82:74:dc:cf:29:7c:77:56:48:
5e:02:49:7e:21:15:af:1b:ae:fb:c4:63:63:8b:87:
f9:4c:61:c0:fc:b6:9f:78:31:1a:e3:14:96:76:d3:
7b:95:5a:09:b0:ad:ff:d6:27:27:f0:4a:26:d3:71:
85:26:f3:7d:11:51:62:11:cd:16:b7:b3:75:bb:fd:
dc:e2:99:73:e5:23:0f:e9:1b:f7:d3:d3:93:59:85:
5e:64:41:67:62:59:d0:7c:25:52:50:97:ae:ea:2b:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:AB:E0:A7:EF:DD:69:79:6D:CE:95:ED:3D:59:37:F2:D4:04:B7
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS135061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.241.0.0-61.241.14.255
61.241.16.0-61.241.29.255
61.241.36.0/23
61.241.44.0/23
61.241.48.0/23
61.241.58.0/23
61.241.63.0/24
211.95.133.0/24
211.95.136.0/24
211.95.138.0/23
211.95.141.0-211.95.142.255
211.95.152.0/24
211.95.154.0-211.95.156.255
Signature Algorithm: sha256WithRSAEncryption
c9:c9:57:ee:e3:18:65:54:38:6e:ed:f4:89:63:55:e0:a6:f0:
2d:96:e1:7a:89:77:8b:4c:d9:dd:bc:09:5f:55:b2:70:e4:39:
57:f1:15:13:c8:32:30:f8:ea:a6:3a:03:52:c1:1a:b8:4b:86:
17:77:a1:cb:a1:05:66:3b:85:80:5d:e9:9c:99:bb:66:52:e0:
37:a3:2e:63:fb:f0:2a:95:82:83:fb:6e:b1:08:4a:e1:65:86:
a8:45:a0:36:e7:22:94:af:8b:52:a1:92:e4:9d:49:55:78:ff:
2b:4c:04:0c:7f:19:95:27:01:3a:d4:46:75:cf:5e:7e:05:76:
58:fb:77:8a:f4:5f:25:87:ff:7d:ac:12:9b:1e:e9:ff:40:f0:
d4:18:73:fd:69:19:ee:c5:b3:e6:42:45:8d:23:f7:96:ae:1f:
d5:bf:5a:c5:82:f6:e6:d0:b8:30:1a:f4:28:92:43:1e:21:90:
8c:d1:78:41:d4:f7:bd:91:89:8d:33:87:ca:bc:f2:00:da:16:
e8:21:cd:f5:ab:c3:ed:6d:b3:ae:ab:57:94:00:57:cd:e5:9b:
e5:20:65:e4:62:e3:75:b0:cb:1f:bf:f5:51:8e:9c:02:0f:aa:
f7:92:b9:d0:a1:9b:d1:71:90:71:de:d7:a7:ad:65:8a:9a:4f:
38:e5:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:33 2026 by rpki-client