Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 53F7zcaBKsYPWyz9QrbhS5i6eEVjVdDzof6J0urqcLc=
Subject key identifier: 9B:30:C1:8E:22:70:8A:6A:BB:C6:CE:3C:4B:B0:6A:85:36:CE:45:90
Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial: 77A8719F5596492CC2A71D98B68AFC0937116587
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS0.roa
Signing time: Wed 10 Jun 2026 09:02:22 +0000
ROA not before: Wed 10 Jun 2026 08:57:22 +0000
ROA not after: Wed 09 Jun 2027 09:02:22 +0000
asID: 0
IP address blocks: 101.36.84.0/22 maxlen: 22
118.26.66.0/23 maxlen: 23
118.26.70.0/23 maxlen: 23
118.188.128.0/17 maxlen: 17
118.193.48.0/21 maxlen: 21
118.194.128.0/19 maxlen: 19
118.194.160.0/19 maxlen: 19
122.10.192.0/22 maxlen: 22
122.10.200.0/21 maxlen: 21
122.10.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:71:9f:55:96:49:2c:c2:a7:1d:98:b6:8a:fc:09:37:11:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Validity
Not Before: Jun 10 08:57:22 2026 GMT
Not After : Jun 9 09:02:22 2027 GMT
Subject: CN=9B30C18E22708A6ABBC6CE3C4BB06A8536CE4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:2a:e6:eb:9b:e1:7b:44:bc:54:99:a4:e7:
48:38:40:91:ce:00:5d:29:35:be:63:b1:d7:f8:b2:
c6:47:af:b3:44:43:99:5a:95:36:34:75:db:b9:25:
b5:14:c4:0e:26:42:4a:08:ad:fb:32:23:20:54:61:
98:e5:e1:3c:fb:ae:fc:f8:fc:9c:35:b5:fe:34:f6:
75:ac:a2:b3:ef:16:e9:39:c0:52:45:ff:0c:8b:41:
8a:45:31:3e:76:4c:49:d9:62:09:f4:45:30:13:63:
71:52:25:6b:28:2f:30:2f:ac:d0:1a:86:dc:f1:bf:
44:4d:7d:92:88:49:91:3a:19:7e:a2:e2:36:3f:46:
41:f4:92:e1:03:e8:23:01:b8:82:e9:51:a2:bb:37:
66:4a:91:c2:f5:79:46:24:04:bc:d5:0b:be:39:e5:
c9:6e:16:a9:f5:e5:75:7e:26:51:dc:d6:ed:00:0f:
25:9f:55:35:dd:c0:2b:e9:1e:e1:c3:2b:a5:01:98:
ff:90:0e:71:53:46:fb:69:e2:fa:22:32:89:cd:5d:
54:dc:55:d0:19:5f:90:e4:e8:b8:52:45:9a:92:35:
18:d9:53:22:e6:b1:6b:ab:46:c2:10:a2:a7:77:07:
63:ca:27:60:bf:97:73:b3:75:04:12:d7:82:53:75:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:C1:8E:22:70:8A:6A:BB:C6:CE:3C:4B:B0:6A:85:36:CE:45:90
X509v3 Authority Key Identifier:
keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.84.0/22
118.26.66.0/23
118.26.70.0/23
118.188.128.0/17
118.193.48.0/21
118.194.128.0/18
122.10.192.0/22
122.10.200.0-122.10.215.255
Signature Algorithm: sha256WithRSAEncryption
88:aa:eb:17:2e:05:23:da:5b:e0:7a:70:6f:20:7e:1a:43:a6:
0a:bd:bb:81:75:5b:b6:2b:b6:ca:b4:f2:74:25:a3:88:2a:62:
5b:e8:e1:9d:b7:49:c1:5b:e3:5e:45:11:70:ac:73:7d:ef:24:
af:a9:9b:45:0e:b9:6c:10:b5:13:b3:06:0b:ed:31:bf:67:4d:
c2:92:a1:18:21:d8:27:ca:49:dc:0a:8b:61:0a:1e:68:51:ff:
6b:14:98:41:66:a1:8d:2e:19:14:93:66:bb:6a:b6:9f:04:28:
2a:c4:e2:9e:a3:01:87:98:60:2b:60:35:65:e4:98:ea:8e:b3:
8a:c1:74:71:53:26:b1:8e:db:a5:2a:d4:ec:54:e2:10:f1:cd:
10:42:b6:36:a6:14:55:37:a3:65:bb:3d:67:8c:33:c8:fa:46:
d0:a9:2a:90:ce:a8:df:97:27:b3:06:1c:79:7f:e9:85:bf:74:
23:12:b7:b5:43:5e:0d:11:d2:bc:9e:c4:b3:19:95:89:a2:27:
cb:10:60:87:34:ad:01:f7:24:e3:7c:fa:6d:2d:0c:35:50:17:
8a:3f:9a:d0:a4:09:a2:24:65:4a:c2:4b:da:64:c4:dc:dd:d6:
4d:a3:03:3e:9a:3d:41:28:db:b2:77:9d:f9:e2:b8:5b:0c:7d:
f8:17:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:41 2026 by rpki-client