Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: ce8LPQi8kcK4f8Nvb0naMRWkLvqqt0iKi7eUX25rl0w=
Subject key identifier: FB:40:CF:05:26:ED:D1:65:6B:9C:3F:65:10:53:64:FA:A6:44:90:BA
Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial: 0F4CBABB5D9AC5E20A852CFE139BF9F0416C0907
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS0.roa
Signing time: Fri 31 Jul 2026 03:08:31 +0000
ROA not before: Fri 31 Jul 2026 03:03:31 +0000
ROA not after: Fri 30 Jul 2027 03:08:31 +0000
asID: 0
IP address blocks: 101.36.84.0/22 maxlen: 22
118.26.66.0/23 maxlen: 23
118.26.70.0/23 maxlen: 23
118.188.128.0/17 maxlen: 17
118.193.48.0/21 maxlen: 21
118.194.128.0/19 maxlen: 19
118.194.128.0/19 maxlen: 24
118.194.160.0/19 maxlen: 19
122.10.192.0/22 maxlen: 22
122.10.200.0/21 maxlen: 21
122.10.200.0/21 maxlen: 24
122.10.208.0/21 maxlen: 21
122.10.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 10:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4c:ba:bb:5d:9a:c5:e2:0a:85:2c:fe:13:9b:f9:f0:41:6c:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Validity
Not Before: Jul 31 03:03:31 2026 GMT
Not After : Jul 30 03:08:31 2027 GMT
Subject: CN=FB40CF0526EDD1656B9C3F65105364FAA64490BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:43:0d:c6:e7:c5:82:41:07:53:77:5c:af:
4a:8e:c4:ee:4c:e5:4a:25:24:7b:1e:c6:ab:67:0c:
50:14:a3:25:2b:18:d4:6c:b2:49:71:de:8d:df:ac:
58:a5:d5:75:7b:1b:94:7d:94:5d:a2:d3:26:e1:6c:
99:16:bb:55:8e:27:01:b4:72:27:8f:72:75:b5:38:
c6:8a:dc:93:fb:96:94:72:bc:b6:a7:6f:d1:4a:37:
c6:35:b5:ae:74:60:e5:31:26:21:8a:47:e6:d7:cd:
88:60:fb:c7:11:f6:ce:47:a6:58:7d:f5:99:5b:2e:
db:32:e4:f3:c2:f3:f5:37:fe:80:e1:13:0d:3b:b0:
11:a2:e2:e3:6a:73:61:95:eb:f2:68:fa:12:aa:21:
58:cc:10:4b:62:2c:4f:3b:67:5c:fa:e8:ad:be:41:
37:f7:ed:af:91:44:f1:95:b3:51:ee:5d:5e:32:7a:
49:aa:c6:bb:d6:89:d0:4b:7b:a3:36:89:df:68:41:
1b:64:26:f6:f0:d7:81:6c:ad:eb:0e:ea:ab:6f:d9:
7e:2b:05:33:c1:24:45:71:01:3d:ce:b1:90:f2:d0:
f6:46:00:71:df:45:b9:c9:1a:19:87:a2:e7:3c:a1:
a7:dd:f6:5b:bf:75:a0:97:96:83:4c:e7:54:37:a6:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:40:CF:05:26:ED:D1:65:6B:9C:3F:65:10:53:64:FA:A6:44:90:BA
X509v3 Authority Key Identifier:
keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.84.0/22
118.26.66.0/23
118.26.70.0/23
118.188.128.0/17
118.193.48.0/21
118.194.128.0/18
122.10.192.0/22
122.10.200.0-122.10.215.255
Signature Algorithm: sha256WithRSAEncryption
ba:43:f4:a0:0a:99:46:ef:79:3e:ce:7c:4f:bd:b2:36:f4:18:
b4:eb:25:6b:81:d9:28:66:0a:d2:5c:a2:da:b0:45:a4:77:1b:
ba:ac:fa:19:de:d1:56:6a:3c:14:83:21:5c:36:34:5e:00:4a:
72:67:3f:41:4d:84:d2:c2:d3:96:08:75:60:6d:e5:25:08:f6:
cc:0f:7a:10:a4:c4:5f:a5:8a:81:62:9b:2b:39:46:ad:2e:cb:
c7:d2:fa:2d:02:d8:bd:e4:da:2f:97:4f:51:ca:dc:b7:e9:11:
9b:ec:ab:cb:d8:6d:01:6d:9a:af:df:1f:88:04:67:5a:d2:f9:
b5:a3:3a:b0:26:b3:19:c3:13:54:07:6b:4c:73:5d:49:2f:13:
66:7b:e0:e4:4a:7f:eb:5d:b8:a7:e8:93:e1:16:02:2c:ff:f6:
9e:69:28:43:de:66:25:25:bf:bd:1a:5b:10:1e:2e:9b:97:fc:
d9:32:d0:24:89:05:b8:fd:3e:1b:e0:11:34:b1:ac:2b:fa:33:
12:b6:b9:65:20:74:67:24:64:ec:49:a2:4f:90:f9:b2:f9:71:
06:0e:49:e5:89:85:be:8c:9f:b9:28:1d:71:84:62:70:e4:75:
2a:b1:20:6d:b9:8e:cd:fe:d5:ae:3d:36:bf:7d:e7:da:12:52:
5f:1e:14:17
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUD0y6u12axeIKhSz+E5v58EFsCQcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD
NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDczMTAzMDMzMVoX
DTI3MDczMDAzMDgzMVowMzExMC8GA1UEAxMoRkI0MENGMDUyNkVERDE2NTZCOUMz
RjY1MTA1MzY0RkFBNjQ0OTBCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOEaQw3G58WCQQdTd1yvSo7E7kzlSiUkex7Gq2cMUBSjJSsY1GyySXHejd+s
WKXVdXsblH2UXaLTJuFsmRa7VY4nAbRyJ49ydbU4xorck/uWlHK8tqdv0Uo3xjW1
rnRg5TEmIYpH5tfNiGD7xxH2zkemWH31mVsu2zLk88Lz9Tf+gOETDTuwEaLi42pz
YZXr8mj6EqohWMwQS2IsTztnXProrb5BN/ftr5FE8ZWzUe5dXjJ6SarGu9aJ0Et7
ozaJ32hBG2Qm9vDXgWyt6w7qq2/ZfisFM8EkRXEBPc6xkPLQ9kYAcd9FuckaGYei
5zyhp932W791oJeWg0znVDemSx8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBT7QM8F
Ju3RZWucP2UQU2T6pkSQujAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7
uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0
Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ
ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBZBggrBgEFBQcBCwRNMEswSQYIKwYBBQUH
MAuGPXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2
NDQyMjE2My8wL0FTMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBRBggr
BgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAmUkVAMEAXYaQgMEAXYaRgMEB3a8gAME
A3bBMAMEBnbCgAMEAnoKwDAMAwQDegrIAwQDegrQMA0GCSqGSIb3DQEBCwUAA4IB
AQC6Q/SgCplG73k+znxPvbI29Bi06yVrgdkoZgrSXKLasEWkdxu6rPoZ3tFWajwU
gyFcNjReAEpyZz9BTYTSwtOWCHVgbeUlCPbMD3oQpMRfpYqBYpsrOUatLsvH0vot
Ati95Novl09Ryty36RGb7KvL2G0BbZqv3x+IBGda0vm1ozqwJrMZwxNUB2tMc11J
LxNme+DkSn/rXbin6JPhFgIs//aeaShD3mYlJb+9GlsQHi6bl/zZMtAkiQW4/T4b
4BE0sawr+jMStrllIHRnJGTsSaJPkPmy+XEGDknliYW+jJ+5KB1xhGJw5HUqsSBt
uY7N/tWuPTa/fefaElJfHhQX
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:57:21 2026 by rpki-client