Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/AS132203.roa
File: AS132203.roa (raw, json)
Hash identifier: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=
Subject key identifier: A9:00:60:CA:61:BE:45:A5:C7:CB:0D:34:3C:81:22:59:FA:FF:2B:B4
Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Certificate serial: 15C0EA469182CCB23A31DE2885DF722D5D34E011
Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/AS132203.roa
Signing time: Tue 30 Jun 2026 10:20:16 +0000
ROA not before: Tue 30 Jun 2026 10:15:16 +0000
ROA not after: Tue 29 Jun 2027 10:20:16 +0000
asID: 132203
IP address blocks: 45.40.216.0/22 maxlen: 22
45.40.220.0/22 maxlen: 22
161.120.192.0/19 maxlen: 19
161.120.224.0/19 maxlen: 19
162.14.0.0/22 maxlen: 22
162.14.4.0/22 maxlen: 22
162.14.6.247/32 maxlen: 32
162.14.8.0/22 maxlen: 22
162.14.12.0/22 maxlen: 22
162.14.16.0/22 maxlen: 22
162.14.20.0/22 maxlen: 22
162.14.24.0/22 maxlen: 22
162.14.28.0/22 maxlen: 22
162.14.32.0/22 maxlen: 22
162.14.36.0/22 maxlen: 22
162.14.48.0/22 maxlen: 22
162.14.48.0/23 maxlen: 23
162.14.48.0/24 maxlen: 24
162.14.50.0/23 maxlen: 23
162.14.50.0/24 maxlen: 24
162.14.52.0/22 maxlen: 22
162.14.56.0/22 maxlen: 22
162.14.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 03:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c0:ea:46:91:82:cc:b2:3a:31:de:28:85:df:72:2d:5d:34:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Validity
Not Before: Jun 30 10:15:16 2026 GMT
Not After : Jun 29 10:20:16 2027 GMT
Subject: CN=A90060CA61BE45A5C7CB0D343C812259FAFF2BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:10:cf:e6:c7:d5:20:26:42:f7:32:bb:d8:
78:a8:df:31:4c:6a:f4:0d:86:de:e7:00:9a:c7:7a:
54:6f:ba:aa:ad:6f:18:47:9f:31:e4:62:22:ca:9c:
c5:aa:f3:02:3d:45:aa:13:f8:e5:d8:df:63:73:a1:
d6:60:55:70:f9:ad:ce:dc:0e:e3:5d:e0:b7:0d:69:
34:6d:e6:e5:13:aa:a6:e2:e8:20:a3:02:0e:8d:4e:
b5:92:f1:5e:4d:3b:54:67:db:4b:cb:7b:3f:b2:d8:
50:23:94:e5:86:72:c3:1b:bf:3d:43:72:32:0d:a6:
b5:68:5c:42:f6:ee:1b:8f:ca:27:61:38:9b:01:ea:
fa:e0:9b:76:52:5b:4d:4d:fc:ea:00:40:54:62:e8:
53:79:55:38:4d:8d:80:31:8c:c6:50:89:bf:5a:c5:
57:8c:d3:63:39:33:5b:ca:b7:e6:f4:b1:dd:ba:e4:
da:29:71:80:71:c1:72:f1:22:b8:00:6e:9e:bc:a0:
35:5a:d3:7d:bd:09:e7:c0:63:59:71:f7:c6:a7:bb:
9d:8b:e9:2a:80:d9:4e:e3:35:9a:cd:24:0e:eb:8b:
75:37:6f:a9:ab:1e:5d:8f:10:bb:be:e8:f4:d5:c4:
26:8e:10:94:48:e3:8e:b3:6d:b3:fa:ba:bb:ff:9d:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:00:60:CA:61:BE:45:A5:C7:CB:0D:34:3C:81:22:59:FA:FF:2B:B4
X509v3 Authority Key Identifier:
keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/AS132203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.40.216.0/21
161.120.192.0/18
162.14.0.0-162.14.39.255
162.14.48.0/20
Signature Algorithm: sha256WithRSAEncryption
06:ea:bd:d6:f7:59:7f:cc:29:81:e7:9c:6e:a8:a5:50:9f:56:
a6:c6:f6:3c:6d:83:2a:10:2d:08:06:53:68:31:2a:89:e0:d6:
73:c7:7f:f9:d5:69:91:2c:65:2d:c8:38:42:26:dc:37:6a:38:
50:e6:6f:49:e6:85:cd:2a:6e:4a:d1:c4:e9:9f:25:13:7e:1d:
eb:cb:02:99:4a:18:34:28:86:5d:84:37:f8:1f:80:61:5f:73:
ce:df:12:50:17:96:3d:2c:de:21:eb:d0:08:b6:f9:0f:a4:13:
27:6f:fe:22:5e:7f:1b:0c:4b:dc:a3:ca:2e:af:a8:df:a8:30:
b0:28:77:ea:97:5d:fc:3f:d4:b1:48:40:d7:f5:94:af:30:65:
cd:c2:d7:fb:c8:76:a4:95:f2:8d:03:07:03:8e:32:ff:95:6f:
f9:8f:69:34:c1:b3:f4:ca:b0:65:d4:6b:5e:1f:c0:65:80:c1:
f4:02:d4:7f:d1:f3:20:d3:9d:6b:e1:4c:3f:ef:35:c0:57:1f:
17:64:38:07:b8:6c:9d:93:c8:6d:45:0e:80:69:67:99:18:41:
1f:74:ba:2b:08:fb:99:ff:75:f4:27:f6:f5:c5:ae:e9:fe:47:
45:32:61:50:cd:24:67:25:bb:0f:a8:0f:c2:7f:4d:af:dc:e1:
7b:18:bb:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:13 2026 by rpki-client