Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa
File: AS139259.roa (raw, json)
Hash identifier: xYaDcFVM2Y/8RZa9QIohRwpFU7DW5BfYeUk92/go1D4=
Subject key identifier: 94:4F:B5:4C:5D:79:CB:3D:25:8D:97:05:C7:39:1F:08:B7:05:37:B6
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 44A4EA610989EE6A2E052968DC9AB25A7E4763C6
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa
Signing time: Thu 28 May 2026 08:31:00 +0000
ROA not before: Thu 28 May 2026 08:26:00 +0000
ROA not after: Thu 27 May 2027 08:31:00 +0000
asID: 139259
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.84.0/22 maxlen: 24
45.252.84.0/24 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.100.0/24 maxlen: 24
45.252.101.0/24 maxlen: 24
45.252.102.0/24 maxlen: 24
45.252.103.0/24 maxlen: 24
45.252.144.0/22 maxlen: 24
45.252.144.0/24 maxlen: 24
45.252.145.0/24 maxlen: 24
45.252.146.0/24 maxlen: 24
45.252.147.0/24 maxlen: 24
103.6.108.0/22 maxlen: 24
103.6.108.0/24 maxlen: 24
103.6.109.0/24 maxlen: 24
103.6.110.0/24 maxlen: 24
103.6.111.0/24 maxlen: 24
103.6.228.0/24 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.248.0/24 maxlen: 24
103.220.249.0/24 maxlen: 24
103.220.250.0/24 maxlen: 24
103.220.251.0/24 maxlen: 24
103.220.252.0/22 maxlen: 24
103.220.252.0/24 maxlen: 24
103.220.253.0/24 maxlen: 24
103.220.254.0/24 maxlen: 24
103.220.255.0/24 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.0.0/24 maxlen: 24
103.221.1.0/24 maxlen: 24
103.221.2.0/24 maxlen: 24
103.221.3.0/24 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.4.0/24 maxlen: 24
103.221.5.0/24 maxlen: 24
103.221.6.0/24 maxlen: 24
103.221.7.0/24 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.8.0/24 maxlen: 24
103.221.9.0/24 maxlen: 24
103.221.10.0/24 maxlen: 24
103.221.11.0/24 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.12.0/24 maxlen: 24
103.221.13.0/24 maxlen: 24
103.221.14.0/24 maxlen: 24
103.221.15.0/24 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.16.0/24 maxlen: 24
103.221.17.0/24 maxlen: 24
103.221.18.0/24 maxlen: 24
103.221.19.0/24 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.20.0/24 maxlen: 24
103.221.21.0/24 maxlen: 24
103.221.22.0/24 maxlen: 24
103.221.23.0/24 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.24.0/24 maxlen: 24
103.221.25.0/24 maxlen: 24
103.221.26.0/24 maxlen: 24
103.221.27.0/24 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.28.0/24 maxlen: 24
103.221.29.0/24 maxlen: 24
103.221.30.0/24 maxlen: 24
103.221.31.0/24 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.32.0/24 maxlen: 24
103.221.33.0/24 maxlen: 24
103.221.34.0/24 maxlen: 24
103.221.35.0/24 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.36.0/24 maxlen: 24
103.221.37.0/24 maxlen: 24
103.221.38.0/24 maxlen: 24
103.221.39.0/24 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.40.0/24 maxlen: 24
103.221.41.0/24 maxlen: 24
103.221.42.0/24 maxlen: 24
103.221.43.0/24 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.44.0/24 maxlen: 24
103.221.45.0/24 maxlen: 24
103.221.46.0/24 maxlen: 24
103.221.47.0/24 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.48.0/24 maxlen: 24
103.221.49.0/24 maxlen: 24
103.221.50.0/24 maxlen: 24
103.221.51.0/24 maxlen: 24
103.221.92.0/22 maxlen: 24
103.221.92.0/24 maxlen: 24
103.221.93.0/24 maxlen: 24
103.221.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a4:ea:61:09:89:ee:6a:2e:05:29:68:dc:9a:b2:5a:7e:47:63:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: May 28 08:26:00 2026 GMT
Not After : May 27 08:31:00 2027 GMT
Subject: CN=944FB54C5D79CB3D258D9705C7391F08B70537B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:68:ac:4a:66:26:0f:33:3c:a2:18:61:c3:
84:da:17:7d:33:47:c3:39:6c:94:bb:3c:e5:d7:75:
56:9b:83:5e:5a:e3:1a:2d:30:1b:ac:b3:d8:78:e3:
10:dd:f7:4b:6f:2f:96:73:71:19:4e:b6:f0:15:44:
3e:79:5d:00:cd:45:e3:9e:c2:68:74:08:77:15:af:
c5:86:ce:f3:e9:52:a8:b4:25:40:23:1b:31:04:f9:
c5:36:84:65:37:db:e1:6e:e4:4f:17:87:f8:28:8e:
7e:b4:48:38:4d:e1:7d:60:f5:57:f6:02:72:d6:ef:
78:e4:71:63:4b:ea:04:46:a4:e7:49:51:20:fb:4b:
ee:2b:19:3b:5b:52:f3:4c:64:99:6f:19:b3:90:8a:
a6:d7:f4:04:b4:4c:a8:00:6f:de:79:b7:d8:55:08:
82:01:90:c1:19:34:e4:72:81:1c:ef:7e:b0:96:4d:
6c:a5:89:1e:5b:22:90:0a:f8:42:0d:84:70:7d:2d:
cc:1d:44:2d:47:15:e9:b9:47:26:6f:c4:b3:88:76:
46:39:b8:04:1d:f5:23:d3:3d:d3:7c:0d:db:b0:78:
ba:53:4f:e2:23:81:da:3a:40:81:c2:05:7b:90:a4:
b0:df:e0:1e:f5:71:c1:a5:9f:ab:22:fd:4e:fc:e5:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:B5:4C:5D:79:CB:3D:25:8D:97:05:C7:39:1F:08:B7:05:37:B6
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.84.0/22
45.252.100.0/22
45.252.144.0/22
103.6.108.0/22
103.6.228.0/24
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6a:4b:8a:6e:8a:f8:df:e3:00:60:fc:1f:76:76:75:24:ba:
2f:7f:b8:cd:71:e2:f8:9e:95:75:17:0d:86:74:6b:18:92:a9:
d1:de:1d:9b:b3:de:f8:19:a0:c7:0b:7a:a7:64:04:68:4c:20:
b6:3a:9b:78:84:18:ac:61:f5:b4:9e:ee:58:43:e5:9c:e0:b1:
9f:5b:46:59:4e:34:f0:6d:05:87:4b:03:79:b5:fd:3d:3f:8c:
3f:aa:ad:45:3c:d0:31:6d:c8:10:c6:3b:7e:ad:42:3a:83:7c:
34:0d:f1:1b:ef:e8:fb:f1:8a:41:2a:cd:17:79:af:b1:47:ba:
cd:6f:cc:e0:f7:e3:a9:ac:03:8d:59:ef:cd:ba:81:cd:bc:eb:
66:81:e4:d3:27:1f:33:02:0a:b4:87:f8:a8:7e:aa:45:2e:59:
2e:a2:b4:b3:50:ac:90:e6:90:fd:ac:db:04:41:c1:18:02:cf:
33:5f:5d:5a:cc:51:01:37:a1:99:55:8e:53:93:7c:f8:46:4f:
3b:22:4f:7c:52:ce:fc:a9:cf:fa:33:4f:80:6d:0b:8e:40:d6:
dc:b9:b2:9f:c9:92:ca:61:37:60:49:e0:ff:96:1d:93:5a:3e:
7d:04:0f:25:19:17:cd:24:d8:19:8f:fe:80:62:3e:d2:dd:79:
61:0b:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:09:44 2026 by rpki-client