Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS55361.roa
File: AS55361.roa (raw, json)
Hash identifier: +oWtgqnjg43g1oXNFqnYPkkKJqbjYIRprL0CCmWrbwQ=
Subject key identifier: DD:CD:5B:17:F7:73:99:54:52:75:B1:89:0B:E6:A3:37:E3:F7:15:12
Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial: 4A04C382E99DF11687AF1C3DFB2E85F7E7327B14
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS55361.roa
Signing time: Mon 08 Jun 2026 06:54:11 +0000
ROA not before: Mon 08 Jun 2026 06:49:11 +0000
ROA not after: Mon 07 Jun 2027 06:54:11 +0000
asID: 55361
IP address blocks: 122.8.1.0/24 maxlen: 24
122.8.2.0/24 maxlen: 24
122.8.3.0/24 maxlen: 24
122.8.4.0/24 maxlen: 24
122.8.5.0/24 maxlen: 24
122.8.6.0/24 maxlen: 24
122.8.7.0/24 maxlen: 24
122.8.8.0/24 maxlen: 24
122.8.10.0/24 maxlen: 24
122.8.11.0/24 maxlen: 24
122.8.12.0/24 maxlen: 24
122.8.13.0/24 maxlen: 24
122.8.14.0/24 maxlen: 24
122.8.15.0/24 maxlen: 24
122.8.16.0/24 maxlen: 24
122.8.17.0/24 maxlen: 24
122.8.56.0/24 maxlen: 24
122.8.62.0/24 maxlen: 24
122.8.82.0/24 maxlen: 24
122.8.83.0/24 maxlen: 24
122.8.84.0/24 maxlen: 24
122.8.85.0/24 maxlen: 24
122.8.86.0/24 maxlen: 24
122.8.87.0/24 maxlen: 24
122.8.88.0/24 maxlen: 24
122.8.89.0/24 maxlen: 24
122.8.90.0/24 maxlen: 24
122.8.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:04:c3:82:e9:9d:f1:16:87:af:1c:3d:fb:2e:85:f7:e7:32:7b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Validity
Not Before: Jun 8 06:49:11 2026 GMT
Not After : Jun 7 06:54:11 2027 GMT
Subject: CN=DDCD5B17F77399545275B1890BE6A337E3F71512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:a4:c7:b3:4e:aa:d8:3a:96:cf:6c:b1:02:
d0:c8:41:94:24:52:44:aa:80:a3:d5:e2:e8:b0:a5:
33:ed:1f:af:af:f4:ae:cf:74:5e:73:7a:dc:33:4e:
d3:7f:3e:ef:3d:c6:33:46:46:64:55:7f:1f:28:46:
a5:ce:53:84:8e:62:b4:ef:88:1f:f6:d7:19:76:95:
83:93:a7:de:9a:cf:71:91:43:9f:63:3a:ce:60:ec:
21:e0:a0:7f:10:2a:e4:e7:73:e8:7b:f8:1c:c7:d9:
2d:a1:7e:34:08:05:04:46:cb:9c:67:17:bc:f5:74:
65:c3:68:af:42:66:ed:3b:95:5c:75:4d:ca:28:82:
36:01:03:6d:8d:82:60:5f:25:81:6f:8a:04:12:74:
47:73:9d:38:3e:0d:e3:83:8d:d4:f6:6e:c8:1e:2a:
5f:6b:39:6f:06:73:24:b5:22:b8:3e:fc:65:82:e2:
32:19:0e:db:83:62:6c:ab:b5:51:a7:01:5d:8f:55:
44:97:3f:9c:94:e8:51:72:b3:6d:63:23:5f:b7:fa:
29:49:09:cc:7e:a1:f3:e2:4b:13:04:d0:8d:fb:50:
7a:cb:04:96:ba:62:a1:d1:6a:f9:d0:08:19:9d:df:
34:69:df:28:ec:ae:9f:f7:27:4a:75:4a:0c:6f:2e:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:5B:17:F7:73:99:54:52:75:B1:89:0B:E6:A3:37:E3:F7:15:12
X509v3 Authority Key Identifier:
keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS55361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.8.1.0-122.8.8.255
122.8.10.0-122.8.17.255
122.8.56.0/24
122.8.62.0/24
122.8.82.0-122.8.91.255
Signature Algorithm: sha256WithRSAEncryption
4d:ab:40:c1:9f:4a:6b:c5:88:83:25:20:7f:70:4a:c8:45:71:
f2:1e:fd:21:f1:46:99:57:36:6a:80:38:34:6d:20:14:8b:38:
a1:52:3a:1e:5f:4c:07:d3:62:bf:a3:1f:46:06:e0:ef:03:83:
69:fe:2f:60:72:ce:f9:6c:10:de:5c:93:a3:49:30:8d:9c:44:
b8:28:1d:bf:3f:2e:c5:9f:49:40:99:e5:48:52:04:67:42:3f:
68:26:4b:13:55:2b:89:2e:7a:a5:12:ef:4c:8b:67:18:49:0b:
ba:04:86:95:7f:fd:17:f3:96:e0:08:b0:f9:32:92:81:d5:a1:
50:41:b1:dd:cf:b2:48:f9:b1:02:c9:2f:ae:0b:11:68:13:29:
43:41:65:64:74:fa:37:ee:63:58:58:1a:59:40:f3:72:dd:ee:
38:d1:6c:45:9f:b1:39:90:ca:f3:05:63:1f:d5:f3:7a:22:b5:
10:36:1d:3f:0e:d0:b2:3d:b0:3e:8a:1c:ba:a7:60:ed:e2:8a:
92:b0:f3:06:e4:cd:80:1a:1f:a7:25:05:ba:fd:dd:5d:61:9c:
d7:be:bb:73:26:61:0a:bf:17:6a:bb:c3:ce:a2:a2:bc:4a:a8:
28:46:5c:ee:d1:0a:70:c4:9e:e4:ba:8c:bc:76:70:51:45:69:
a2:a3:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:39 2026 by rpki-client