Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS138421.roa
File: AS138421.roa (raw, json)
Hash identifier: +2a938K7/9xt1CQHblBDN7U/GrPxwsQgk8jTZwFAz6g=
Subject key identifier: 6A:C0:7F:7A:3F:A9:E7:3E:2C:B1:76:40:D4:D8:46:B6:8F:E0:C2:41
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 5BF9999839368D8C95ED37EBA07E94F07FB6F907
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS138421.roa
Signing time: Thu 06 Aug 2026 05:15:32 +0000
ROA not before: Thu 06 Aug 2026 05:10:32 +0000
ROA not after: Thu 05 Aug 2027 05:15:32 +0000
asID: 138421
IP address blocks: 116.128.149.0/24 maxlen: 24
116.128.189.0/24 maxlen: 24
116.128.190.0/23 maxlen: 23
116.128.190.0/24 maxlen: 24
116.128.191.0/24 maxlen: 24
211.95.22.0/24 maxlen: 24
211.95.54.0/24 maxlen: 24
211.95.55.0/24 maxlen: 24
211.95.60.0/24 maxlen: 24
211.95.73.0/24 maxlen: 24
211.95.75.0/24 maxlen: 24
211.95.76.0/24 maxlen: 24
211.95.79.0/24 maxlen: 24
220.196.42.0/24 maxlen: 24
220.196.53.0/24 maxlen: 24
220.196.58.0/24 maxlen: 24
220.196.88.0/24 maxlen: 24
220.196.89.0/24 maxlen: 24
220.196.90.0/24 maxlen: 24
220.196.91.0/24 maxlen: 24
220.196.92.0/22 maxlen: 22
220.196.92.0/24 maxlen: 24
220.196.93.0/24 maxlen: 24
220.196.94.0/24 maxlen: 24
220.196.95.0/24 maxlen: 24
220.196.164.0/22 maxlen: 22
220.196.168.0/22 maxlen: 22
220.196.172.0/22 maxlen: 22
220.196.180.0/22 maxlen: 22
220.196.184.0/24 maxlen: 24
220.196.185.0/24 maxlen: 24
220.196.186.0/23 maxlen: 23
220.196.186.0/24 maxlen: 24
220.196.187.0/24 maxlen: 24
220.196.188.0/24 maxlen: 24
220.196.189.0/24 maxlen: 24
220.196.190.0/23 maxlen: 23
220.196.224.0/19 maxlen: 19
220.196.240.0/21 maxlen: 21
220.196.240.0/24 maxlen: 24
220.196.241.0/24 maxlen: 24
220.196.242.0/24 maxlen: 24
220.196.243.0/24 maxlen: 24
220.196.244.0/24 maxlen: 24
220.196.245.0/24 maxlen: 24
220.196.246.0/24 maxlen: 24
220.196.247.0/24 maxlen: 24
220.196.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f9:99:98:39:36:8d:8c:95:ed:37:eb:a0:7e:94:f0:7f:b6:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Aug 6 05:10:32 2026 GMT
Not After : Aug 5 05:15:32 2027 GMT
Subject: CN=6AC07F7A3FA9E73E2CB17640D4D846B68FE0C241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:15:79:1a:4c:7d:11:f0:d2:08:38:3a:ad:
75:20:20:e0:87:18:36:1d:4b:5c:2a:27:3d:21:3c:
6d:4f:13:e8:69:31:43:61:30:07:19:f9:87:da:7b:
c5:75:c8:ed:78:bd:00:5b:08:d0:f6:dd:78:7a:4d:
43:39:6d:35:4f:d5:40:76:a3:10:b0:ce:4a:98:69:
c6:17:80:24:8b:1c:ec:d4:fc:55:7f:b9:6f:81:d5:
22:8e:49:80:4d:af:67:bc:06:c0:87:80:de:7a:f5:
e4:1c:e4:65:d0:b8:02:fa:14:b9:e5:fd:d2:2a:94:
cb:6d:b7:89:d9:8c:ff:6d:07:50:a4:4d:4f:60:d8:
4b:97:22:9b:4f:f0:78:ae:8e:31:71:95:79:20:5e:
92:2d:3a:ce:4d:13:91:cc:b2:c8:98:4f:f5:27:bf:
e7:c0:2d:fd:a6:0c:06:fe:9d:4f:c6:7e:c3:0f:57:
dd:6f:d3:c7:d8:41:37:ac:f7:78:02:f2:20:88:e8:
b7:1d:cf:b9:64:64:33:de:78:13:43:63:2f:96:ab:
a8:27:94:35:c2:eb:ca:fc:d3:92:ea:eb:b5:c0:d2:
16:f9:6f:1b:67:ee:f9:21:3a:a4:be:f9:25:c8:c7:
4c:20:a8:aa:79:ef:a7:27:24:de:f3:78:e4:1b:74:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:7F:7A:3F:A9:E7:3E:2C:B1:76:40:D4:D8:46:B6:8F:E0:C2:41
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS138421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.128.149.0/24
116.128.189.0-116.128.191.255
211.95.22.0/24
211.95.54.0/23
211.95.60.0/24
211.95.73.0/24
211.95.75.0-211.95.76.255
211.95.79.0/24
220.196.42.0/24
220.196.53.0/24
220.196.58.0/24
220.196.88.0/21
220.196.164.0-220.196.175.255
220.196.180.0-220.196.191.255
220.196.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:69:38:ce:7d:73:00:6b:04:d3:1f:d9:ed:03:5b:53:17:67:
e9:ff:b8:4b:8b:e6:7e:51:60:d9:37:75:82:b7:c2:b8:df:d5:
9f:b3:5f:43:3d:59:39:3f:36:24:7b:22:40:aa:30:bd:70:76:
5a:c8:5b:5e:1a:9b:ae:7d:e0:d2:c5:8a:67:9a:80:ec:56:f7:
81:44:3f:b4:fd:62:3a:a8:7e:d7:65:e4:04:eb:a9:b7:66:1e:
1d:16:05:9b:68:ec:86:cc:51:d0:d2:ef:5c:b5:3f:f6:c1:df:
ff:df:c0:09:bb:81:c3:1e:49:36:2a:c4:78:aa:84:80:5d:21:
5c:a3:7e:c3:07:0f:c6:29:ce:b7:ee:f4:0c:d0:40:9e:32:7a:
df:28:29:69:a3:4e:1f:4e:dd:09:97:ab:ef:75:7b:de:94:56:
d8:39:f6:5e:5a:a7:5d:fa:ae:ee:71:e4:48:11:a5:e1:b7:72:
15:77:10:f5:ce:27:18:aa:88:ab:f1:9a:6f:9c:a0:03:79:b1:
5d:04:01:14:e5:2a:8d:4e:c3:83:5c:dd:05:71:cf:db:c4:d1:
40:49:18:a0:71:40:47:1d:88:62:c4:34:38:f3:e8:34:32:fe:
71:cb:98:fb:b4:08:9f:2c:21:5c:ba:85:c2:15:b0:3c:84:5e:
7b:a1:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:59:46 2026 by rpki-client