Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS137280.roa
File: AS137280.roa (raw, json)
Hash identifier: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=
Subject key identifier: 96:07:97:B2:04:9A:D3:17:0D:13:BA:25:D2:C1:B3:E8:21:E1:19:B6
Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Certificate serial: 40BFFA4B1696DECD3825F54DB7CCA8B1A0CD51FB
Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS137280.roa
Signing time: Fri 05 Jun 2026 06:10:01 +0000
ROA not before: Fri 05 Jun 2026 06:05:01 +0000
ROA not after: Fri 04 Jun 2027 06:10:01 +0000
asID: 137280
IP address blocks: 110.43.64.0/20 maxlen: 20
120.92.0.0/23 maxlen: 23
120.92.2.0/23 maxlen: 23
120.92.4.0/23 maxlen: 23
120.92.6.0/23 maxlen: 23
120.92.8.0/23 maxlen: 23
120.92.10.0/23 maxlen: 23
120.92.14.0/23 maxlen: 23
120.92.16.0/21 maxlen: 21
120.92.24.0/21 maxlen: 21
120.92.32.0/21 maxlen: 21
120.92.40.0/21 maxlen: 21
120.92.48.0/21 maxlen: 21
120.92.56.0/21 maxlen: 21
120.92.64.0/21 maxlen: 21
120.92.72.0/21 maxlen: 21
120.92.80.0/21 maxlen: 21
120.92.88.0/21 maxlen: 21
120.92.96.0/21 maxlen: 21
120.92.112.0/21 maxlen: 21
120.92.120.0/21 maxlen: 21
120.92.128.0/21 maxlen: 21
120.92.136.0/21 maxlen: 21
120.92.144.0/21 maxlen: 21
120.92.152.0/21 maxlen: 21
120.92.160.0/21 maxlen: 21
120.92.168.0/21 maxlen: 21
120.92.176.0/21 maxlen: 21
120.92.184.0/21 maxlen: 21
120.92.184.0/23 maxlen: 23
120.92.186.0/23 maxlen: 23
120.92.192.0/24 maxlen: 24
120.92.193.0/24 maxlen: 24
120.92.194.0/23 maxlen: 23
120.92.200.0/21 maxlen: 21
120.92.208.0/20 maxlen: 20
120.92.224.0/23 maxlen: 23
120.92.226.0/23 maxlen: 23
120.92.228.0/23 maxlen: 23
120.92.230.0/23 maxlen: 23
120.92.232.0/23 maxlen: 23
120.92.234.0/23 maxlen: 23
120.92.236.0/23 maxlen: 23
120.92.238.0/23 maxlen: 23
120.131.2.0/23 maxlen: 23
120.131.4.0/23 maxlen: 23
120.131.6.0/23 maxlen: 23
120.131.8.0/23 maxlen: 23
120.131.10.0/23 maxlen: 23
120.131.12.0/23 maxlen: 23
120.131.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bf:fa:4b:16:96:de:cd:38:25:f5:4d:b7:cc:a8:b1:a0:cd:51:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Validity
Not Before: Jun 5 06:05:01 2026 GMT
Not After : Jun 4 06:10:01 2027 GMT
Subject: CN=960797B2049AD3170D13BA25D2C1B3E821E119B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:d9:35:55:43:e4:38:14:bb:fd:7c:92:19:
00:6b:df:5e:c3:f8:7f:ba:bf:00:ed:ca:0f:97:0c:
ef:52:25:af:1a:ce:5c:2b:c7:40:04:73:32:2e:1c:
4b:62:2d:5a:00:78:79:89:d0:cb:15:14:ce:83:a1:
bf:53:6d:cd:7e:ca:39:f8:06:a7:14:9e:a8:63:22:
ac:58:69:d6:7f:ed:e1:73:5d:8b:0b:e4:d5:c2:6d:
2e:65:97:8f:78:bb:3f:04:bc:23:69:89:97:99:d0:
bb:b0:0e:0e:5b:e5:86:59:5c:a6:3d:8a:cd:1a:f1:
9e:ae:9e:e6:d4:32:31:17:9e:ff:e7:e7:d8:e4:45:
5a:88:8a:ad:1c:e5:54:40:0d:68:dd:e8:42:cb:b9:
8e:9c:e3:da:5e:16:6b:b7:c7:d2:ac:7c:88:5b:93:
d5:fc:f3:0b:45:51:27:d4:a9:e3:d2:64:93:c1:49:
e5:f6:b9:42:9d:b7:b0:1a:bb:b4:8d:8e:43:24:3d:
46:31:ad:8f:1a:8a:19:87:88:b5:fb:75:06:4b:3f:
65:4a:3a:b3:6a:85:d2:90:35:c9:18:8a:64:64:a1:
4c:1b:f7:81:5c:ee:54:f6:de:0d:df:6a:52:b5:e8:
61:d6:da:3f:c8:8f:4d:8e:a0:73:55:a4:4d:0a:34:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:97:B2:04:9A:D3:17:0D:13:BA:25:D2:C1:B3:E8:21:E1:19:B6
X509v3 Authority Key Identifier:
keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS137280.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.43.64.0/20
120.92.0.0-120.92.11.255
120.92.14.0-120.92.103.255
120.92.112.0-120.92.195.255
120.92.200.0-120.92.239.255
120.131.2.0-120.131.15.255
Signature Algorithm: sha256WithRSAEncryption
8a:1f:e4:f0:2b:34:5c:81:8d:88:62:54:46:60:21:76:9c:00:
5b:69:59:2b:24:82:23:71:0f:e1:0e:4a:77:52:e4:e2:0e:fd:
be:e1:d3:5a:e6:ee:96:81:2a:c3:4b:81:b0:58:e4:e9:7f:e8:
4d:8f:43:a0:61:3a:27:0c:20:b5:ed:0f:7b:13:4d:60:25:9b:
f6:e5:0a:1d:5e:df:cf:0d:2c:69:ff:3f:d5:a3:73:34:69:57:
6a:c2:3e:ed:a6:cc:fd:8e:6d:58:5f:96:40:3d:16:26:d2:e3:
e1:a5:ab:ae:c3:e4:eb:e9:31:90:20:8b:ad:ca:cd:c6:5a:29:
68:95:29:7c:c5:65:7b:d5:ea:55:f0:37:81:69:c4:d9:bf:a4:
62:44:30:95:f4:5f:9d:5b:50:e0:d6:e4:fa:d9:9f:10:61:de:
59:cf:a1:de:f1:7b:5a:b3:64:5d:21:2f:12:4e:26:97:ec:66:
35:69:0c:53:86:d0:87:e3:25:b2:5f:ec:8e:a7:1d:36:78:20:
5c:6d:6f:83:51:2b:a8:fe:36:b8:64:2d:94:4e:4b:fa:24:c1:
3b:bb:33:d4:ef:fa:f4:b4:65:ff:b1:6d:0a:ab:a1:10:6b:ba:
4e:31:1c:91:5b:42:8c:0a:80:63:0a:32:57:c6:e1:3b:e3:15:
5c:27:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:23:13 2026 by rpki-client