Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa
File: AS139259.roa (raw, json)
Hash identifier: ElcIVMs6HyUCjqiV5SMTcHguSps9DNasso80fkJEpPc=
Subject key identifier: BD:AF:1A:54:12:78:36:88:DF:B2:4D:B3:24:1E:26:C4:1E:A5:90:DE
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 54D6B532C215D3CE175CD175975B9E3D582E4E04
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa
Signing time: Mon 12 Oct 2026 06:17:52 +0000
ROA not before: Mon 12 Oct 2026 06:12:52 +0000
ROA not after: Mon 11 Oct 2027 06:17:52 +0000
asID: 139259
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.84.0/22 maxlen: 24
45.252.84.0/24 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.100.0/24 maxlen: 24
45.252.101.0/24 maxlen: 24
45.252.102.0/24 maxlen: 24
45.252.103.0/24 maxlen: 24
45.252.144.0/22 maxlen: 24
45.252.144.0/24 maxlen: 24
45.252.145.0/24 maxlen: 24
45.252.146.0/24 maxlen: 24
45.252.147.0/24 maxlen: 24
103.6.108.0/22 maxlen: 24
103.6.108.0/24 maxlen: 24
103.6.109.0/24 maxlen: 24
103.6.110.0/24 maxlen: 24
103.6.111.0/24 maxlen: 24
103.6.228.0/24 maxlen: 24
103.6.229.0/24 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.248.0/24 maxlen: 24
103.220.249.0/24 maxlen: 24
103.220.250.0/24 maxlen: 24
103.220.251.0/24 maxlen: 24
103.220.252.0/22 maxlen: 24
103.220.252.0/24 maxlen: 24
103.220.253.0/24 maxlen: 24
103.220.254.0/24 maxlen: 24
103.220.255.0/24 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.0.0/24 maxlen: 24
103.221.1.0/24 maxlen: 24
103.221.2.0/24 maxlen: 24
103.221.3.0/24 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.4.0/24 maxlen: 24
103.221.5.0/24 maxlen: 24
103.221.6.0/24 maxlen: 24
103.221.7.0/24 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.8.0/24 maxlen: 24
103.221.9.0/24 maxlen: 24
103.221.10.0/24 maxlen: 24
103.221.11.0/24 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.12.0/24 maxlen: 24
103.221.13.0/24 maxlen: 24
103.221.14.0/24 maxlen: 24
103.221.15.0/24 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.16.0/24 maxlen: 24
103.221.17.0/24 maxlen: 24
103.221.18.0/24 maxlen: 24
103.221.19.0/24 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.20.0/24 maxlen: 24
103.221.21.0/24 maxlen: 24
103.221.22.0/24 maxlen: 24
103.221.23.0/24 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.24.0/24 maxlen: 24
103.221.25.0/24 maxlen: 24
103.221.26.0/24 maxlen: 24
103.221.27.0/24 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.28.0/24 maxlen: 24
103.221.29.0/24 maxlen: 24
103.221.30.0/24 maxlen: 24
103.221.31.0/24 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.32.0/24 maxlen: 24
103.221.33.0/24 maxlen: 24
103.221.34.0/24 maxlen: 24
103.221.35.0/24 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.36.0/24 maxlen: 24
103.221.37.0/24 maxlen: 24
103.221.38.0/24 maxlen: 24
103.221.39.0/24 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.40.0/24 maxlen: 24
103.221.41.0/24 maxlen: 24
103.221.42.0/24 maxlen: 24
103.221.43.0/24 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.44.0/24 maxlen: 24
103.221.45.0/24 maxlen: 24
103.221.46.0/24 maxlen: 24
103.221.47.0/24 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.48.0/24 maxlen: 24
103.221.49.0/24 maxlen: 24
103.221.50.0/24 maxlen: 24
103.221.51.0/24 maxlen: 24
103.221.92.0/22 maxlen: 24
103.221.92.0/24 maxlen: 24
103.221.93.0/24 maxlen: 24
103.221.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 17:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d6:b5:32:c2:15:d3:ce:17:5c:d1:75:97:5b:9e:3d:58:2e:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: Oct 12 06:12:52 2026 GMT
Not After : Oct 11 06:17:52 2027 GMT
Subject: CN=BDAF1A5412783688DFB24DB3241E26C41EA590DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:80:d7:6d:c0:14:d2:bc:a9:28:64:20:98:
59:29:8d:b8:d9:6c:54:d5:8a:91:3f:6c:6d:0e:85:
88:41:aa:b9:05:db:7e:70:75:d8:8b:33:5f:99:88:
b3:bb:13:83:b0:bb:5f:ac:44:d6:1f:98:a7:26:17:
a5:ac:12:63:06:3f:60:c7:4b:10:7c:e6:05:63:e1:
d2:10:fc:74:77:10:83:43:e1:42:c1:f5:3d:b4:fc:
5e:a1:5c:7b:38:96:42:cf:1a:1c:4e:5d:08:36:99:
ac:4c:c8:f1:3d:17:a6:a9:7f:63:55:8c:cd:3e:30:
71:c4:6b:c3:b6:d6:7d:39:32:b1:74:b9:9d:93:18:
cd:5f:27:38:65:7d:83:3e:cf:1f:0e:42:ea:4f:d3:
4a:96:3e:46:90:62:be:ca:32:83:c6:e5:e3:d6:7a:
57:78:6f:cb:26:56:23:42:f3:f0:e5:9a:b9:69:51:
c0:b6:f4:a9:c3:cd:20:1f:e3:fd:99:f8:ac:0f:8b:
0c:7d:ce:5a:50:29:ea:1c:7e:99:16:b5:9f:47:4b:
c4:dd:f0:40:0d:91:e7:e9:24:b1:36:59:5c:02:6f:
63:72:3e:7c:71:93:e6:25:07:11:ca:25:8f:e4:cb:
62:58:8f:e1:d0:91:76:3f:02:58:92:40:f1:5e:8a:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AF:1A:54:12:78:36:88:DF:B2:4D:B3:24:1E:26:C4:1E:A5:90:DE
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.84.0/22
45.252.100.0/22
45.252.144.0/22
103.6.108.0/22
103.6.228.0/23
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
73:62:55:ac:f0:d6:e0:7f:8f:c8:aa:21:22:91:f1:23:e7:c8:
8a:a1:52:12:8a:74:3b:d9:15:97:5a:9b:7b:ce:e1:55:75:f5:
dc:0d:8d:54:9b:1f:ec:0b:34:e6:59:cb:f5:bc:07:2e:8b:08:
72:54:ae:b7:de:07:9f:d0:e3:21:23:ef:25:b4:08:51:72:b4:
d3:7c:9f:b7:d7:7b:fa:c4:76:3e:e7:7e:9d:41:cf:81:4a:ca:
51:fb:c2:ab:66:ac:eb:09:05:8f:52:66:6c:3e:23:f6:d5:fa:
fe:00:bb:b6:3d:7d:49:22:d9:91:c1:74:3e:95:40:7c:69:0a:
69:ec:7c:c7:a7:0c:ac:7f:a9:b2:79:6e:68:39:c2:bc:fa:96:
e5:df:ee:15:1e:44:35:a5:4c:7b:fa:de:90:14:b6:28:bc:4f:
f1:f6:00:ef:d1:40:c7:6e:37:97:2c:9e:10:85:a2:4f:dc:c8:
11:10:97:4b:84:89:3b:a7:ce:14:4b:9b:21:da:1d:f1:7e:7c:
70:49:3b:94:41:e9:46:27:ad:d3:a5:51:5c:97:a5:d8:51:f8:
e3:51:98:4b:72:f4:21:d6:3c:88:4c:18:74:d0:0f:04:fb:ee:
a3:d2:c3:48:20:c2:8c:26:c9:c3:21:a7:d5:ed:e8:e4:67:18:
9d:05:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:41 2026 by rpki-client