Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS135061.roa
File: AS135061.roa (raw, json)
Hash identifier: aAOr4zp8LVI+6zhscnheUfOu12efYqxDQrvW/A11q+s=
Subject key identifier: 1E:74:AC:63:42:D1:D3:99:47:93:86:23:8A:C4:24:4B:77:6C:51:5B
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 05ACB76A92E735512972DC73FCBDE126EF5DEBBD
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS135061.roa
Signing time: Thu 06 Aug 2026 09:00:56 +0000
ROA not before: Thu 06 Aug 2026 08:55:56 +0000
ROA not after: Thu 05 Aug 2027 09:00:56 +0000
asID: 135061
IP address blocks: 61.241.0.0/19 maxlen: 19
61.241.0.0/24 maxlen: 24
61.241.1.0/24 maxlen: 24
61.241.2.0/24 maxlen: 24
61.241.3.0/24 maxlen: 24
61.241.4.0/24 maxlen: 24
61.241.5.0/24 maxlen: 24
61.241.6.0/24 maxlen: 24
61.241.7.0/24 maxlen: 24
61.241.8.0/24 maxlen: 24
61.241.9.0/24 maxlen: 24
61.241.10.0/24 maxlen: 24
61.241.11.0/24 maxlen: 24
61.241.12.0/24 maxlen: 24
61.241.13.0/24 maxlen: 24
61.241.14.0/24 maxlen: 24
61.241.16.0/24 maxlen: 24
61.241.17.0/24 maxlen: 24
61.241.18.0/24 maxlen: 24
61.241.19.0/24 maxlen: 24
61.241.20.0/24 maxlen: 24
61.241.21.0/24 maxlen: 24
61.241.22.0/24 maxlen: 24
61.241.23.0/24 maxlen: 24
61.241.24.0/24 maxlen: 24
61.241.25.0/24 maxlen: 24
61.241.26.0/24 maxlen: 24
61.241.27.0/24 maxlen: 24
61.241.28.0/24 maxlen: 24
61.241.29.0/24 maxlen: 24
61.241.30.0/23 maxlen: 23
61.241.32.0/19 maxlen: 19
61.241.32.0/22 maxlen: 22
61.241.36.0/24 maxlen: 24
61.241.37.0/24 maxlen: 24
61.241.38.0/23 maxlen: 23
61.241.40.0/22 maxlen: 22
61.241.44.0/24 maxlen: 24
61.241.45.0/24 maxlen: 24
61.241.46.0/23 maxlen: 23
61.241.48.0/24 maxlen: 24
61.241.49.0/24 maxlen: 24
61.241.50.0/23 maxlen: 23
61.241.52.0/22 maxlen: 22
61.241.56.0/23 maxlen: 23
61.241.58.0/24 maxlen: 24
61.241.59.0/24 maxlen: 24
61.241.60.0/23 maxlen: 23
61.241.63.0/24 maxlen: 24
211.95.128.0/19 maxlen: 19
211.95.130.0/23 maxlen: 23
211.95.133.0/24 maxlen: 24
211.95.136.0/24 maxlen: 24
211.95.138.0/24 maxlen: 24
211.95.139.0/24 maxlen: 24
211.95.141.0/24 maxlen: 24
211.95.142.0/24 maxlen: 24
211.95.144.0/22 maxlen: 22
211.95.150.0/23 maxlen: 23
211.95.152.0/24 maxlen: 24
211.95.154.0/24 maxlen: 24
211.95.155.0/24 maxlen: 24
211.95.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ac:b7:6a:92:e7:35:51:29:72:dc:73:fc:bd:e1:26:ef:5d:eb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Aug 6 08:55:56 2026 GMT
Not After : Aug 5 09:00:56 2027 GMT
Subject: CN=1E74AC6342D1D399479386238AC4244B776C515B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:72:1f:c6:a3:9a:cf:fb:bc:30:fb:b1:ce:
84:9b:f2:f4:f3:42:f9:81:de:11:69:69:48:e8:98:
c6:7f:37:6b:cf:6e:30:49:7d:a8:5e:d6:47:8c:1f:
be:f7:dd:a1:7c:70:98:91:40:f8:77:f5:d4:ed:90:
f4:1a:e7:38:9b:07:ec:f7:c9:c8:61:a6:fb:bd:e9:
d0:30:2c:09:06:6b:9a:80:58:27:ed:bd:27:27:2d:
0f:37:b8:c8:78:34:0d:02:84:2a:d3:f5:9a:82:46:
d5:b1:e6:1e:1f:3b:4d:51:ff:41:ce:d7:84:de:b7:
65:5e:ed:f5:44:82:77:5c:19:bf:1d:fb:f1:40:06:
fc:9a:72:0b:65:de:43:ab:a4:81:72:e6:b4:4d:e8:
21:11:cc:47:24:12:c6:92:39:d2:34:e3:8a:4b:f7:
78:4c:c7:de:e8:7b:e4:91:e5:f9:ac:f2:17:5c:26:
1f:7f:4a:dd:22:f0:8a:ff:ca:07:e3:4a:df:c0:96:
7f:cb:2d:a9:69:53:17:12:e4:a3:82:1a:66:a7:ed:
02:4f:14:df:07:53:63:a2:18:46:fa:5e:25:bc:f2:
37:7d:45:4f:1c:8c:9b:a7:4a:6b:6f:b9:e9:63:ce:
be:6f:03:57:52:49:24:f2:5d:60:4a:29:c0:2f:b3:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:74:AC:63:42:D1:D3:99:47:93:86:23:8A:C4:24:4B:77:6C:51:5B
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS135061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.241.0.0/18
211.95.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:dc:c6:3d:5a:47:71:dd:56:ed:4f:d5:c0:ed:93:a4:02:5f:
c3:5e:d4:9f:59:f9:5e:b8:a7:96:71:40:e0:7f:c0:12:bd:0b:
ea:f0:6a:60:f1:9e:9c:00:7d:f0:3b:e1:c7:9a:b8:45:d6:d9:
2c:78:8f:6f:e2:b6:2e:2b:f9:a9:32:b0:71:9e:82:55:48:9a:
ce:2d:61:71:cb:f2:64:bb:8c:28:da:7e:be:6c:84:ef:c4:ff:
98:38:3d:28:68:23:48:3f:73:13:98:f8:cb:c2:5b:b8:81:87:
93:d1:2f:fb:f0:41:5f:4e:47:fb:54:6a:f1:a6:32:01:17:58:
22:ee:b5:fc:f3:52:8c:46:4c:a9:b6:16:f9:a0:40:e3:f3:e8:
6f:77:5f:38:09:9a:08:b2:22:32:29:b9:6c:5d:b0:c2:53:2d:
13:34:ef:07:59:29:a5:8e:99:15:55:47:d8:e4:6a:ee:15:7d:
1e:92:bf:08:0a:6d:f2:0a:2d:26:a8:48:ee:c7:5d:34:4e:ef:
3d:c4:a6:c0:8c:92:08:7e:5e:07:71:f5:82:c8:6a:45:98:c6:
14:29:1b:d0:fe:5b:98:84:b8:ce:f0:f7:4d:7b:d6:13:cb:eb:
35:2b:3e:f2:33:6d:4b:13:cd:1b:43:8f:95:3c:74:f6:5e:80:
ac:5f:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:10 2026 by rpki-client