Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
File: AS139080.roa (raw, json)
Hash identifier: pW0L+G1KXVHEfGEJUDhd8Sjnk8JGdVqgT34t4eVafog=
Subject key identifier: DF:7D:F0:45:D4:3F:34:8E:BC:26:75:BA:36:7F:FB:8D:57:02:41:2B
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 5965776896EC1A6B9FDEC797466295219D5547CC
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
Signing time: Fri 26 Jun 2026 02:53:46 +0000
ROA not before: Fri 26 Jun 2026 02:48:46 +0000
ROA not after: Fri 25 Jun 2027 02:53:46 +0000
asID: 139080
IP address blocks: 36.140.13.0/24 maxlen: 24
36.140.192.0/24 maxlen: 24
36.140.255.0/24 maxlen: 24
36.170.16.0/22 maxlen: 22
36.170.24.0/21 maxlen: 21
36.170.38.0/23 maxlen: 23
36.170.40.0/22 maxlen: 22
36.170.46.0/23 maxlen: 23
36.170.48.0/21 maxlen: 21
36.170.90.0/23 maxlen: 23
36.170.92.0/22 maxlen: 22
111.9.125.0/24 maxlen: 24
111.9.246.0/23 maxlen: 23
112.18.156.0/22 maxlen: 22
112.18.248.0/21 maxlen: 21
112.19.0.0/20 maxlen: 20
112.19.142.0/24 maxlen: 24
112.19.192.0/21 maxlen: 21
112.19.199.0/24 maxlen: 24
112.19.241.0/24 maxlen: 24
112.19.242.0/24 maxlen: 24
112.45.24.0/21 maxlen: 21
112.45.32.0/20 maxlen: 20
112.45.112.0/20 maxlen: 20
112.45.118.0/24 maxlen: 24
112.45.188.0/22 maxlen: 22
117.139.19.0/24 maxlen: 24
117.139.20.0/24 maxlen: 24
117.139.24.0/23 maxlen: 23
117.139.140.0/22 maxlen: 22
117.172.20.0/22 maxlen: 22
117.174.50.0/23 maxlen: 23
117.174.130.0/23 maxlen: 23
117.174.144.0/23 maxlen: 23
117.174.148.0/23 maxlen: 23
117.174.176.0/21 maxlen: 21
117.174.178.0/24 maxlen: 24
117.175.56.0/22 maxlen: 22
117.175.90.0/23 maxlen: 23
117.175.93.0/24 maxlen: 24
117.175.95.0/24 maxlen: 24
117.175.208.0/21 maxlen: 21
117.177.48.0/21 maxlen: 21
117.177.56.0/23 maxlen: 23
117.177.64.0/21 maxlen: 21
117.177.132.0/22 maxlen: 22
117.177.216.0/23 maxlen: 23
117.177.242.0/24 maxlen: 24
117.177.243.0/24 maxlen: 24
117.177.244.0/23 maxlen: 23
117.177.246.0/24 maxlen: 24
117.177.247.0/24 maxlen: 24
117.177.248.0/23 maxlen: 23
117.177.251.0/24 maxlen: 24
183.220.144.0/21 maxlen: 21
183.220.146.0/24 maxlen: 24
183.220.192.0/21 maxlen: 21
183.221.240.0/23 maxlen: 23
183.221.242.0/24 maxlen: 24
183.221.244.0/22 maxlen: 22
183.222.100.0/23 maxlen: 23
183.222.228.0/23 maxlen: 23
183.222.231.0/24 maxlen: 24
183.222.232.0/23 maxlen: 23
183.223.14.0/23 maxlen: 23
183.223.40.0/22 maxlen: 22
183.223.116.0/22 maxlen: 22
183.223.192.0/21 maxlen: 21
183.223.198.0/24 maxlen: 24
183.223.200.0/23 maxlen: 23
218.205.248.0/23 maxlen: 23
221.182.22.0/23 maxlen: 23
223.85.16.0/21 maxlen: 21
223.85.56.0/22 maxlen: 22
223.85.58.0/24 maxlen: 24
223.85.104.0/21 maxlen: 21
223.85.135.0/24 maxlen: 24
223.86.120.0/21 maxlen: 21
223.87.0.0/24 maxlen: 24
223.87.16.0/23 maxlen: 23
223.87.86.0/23 maxlen: 23
223.87.86.0/24 maxlen: 24
2409:8062:3002::/48 maxlen: 48
2409:8c62:410::/44 maxlen: 44
2409:8c62:e10::/44 maxlen: 44
2409:8c85:6200::/48 maxlen: 48
2409:8c85:6201::/48 maxlen: 48
2409:8c85:6202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 22:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:65:77:68:96:ec:1a:6b:9f:de:c7:97:46:62:95:21:9d:55:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Jun 26 02:48:46 2026 GMT
Not After : Jun 25 02:53:46 2027 GMT
Subject: CN=DF7DF045D43F348EBC2675BA367FFB8D5702412B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:66:33:fc:12:dc:21:58:f1:a2:7a:dc:61:
81:f8:54:97:04:7e:a7:95:4f:c6:26:e6:24:b6:68:
b8:ee:25:51:9f:53:79:65:d3:16:a3:0d:41:34:22:
6d:a2:f6:03:13:7f:af:e7:2b:59:09:76:7d:37:d5:
2e:cf:8f:b5:66:fc:17:7f:22:ed:33:dd:7c:a6:41:
1f:4d:bd:27:76:c9:b2:32:e6:d8:e7:62:30:ee:b9:
79:27:54:a0:b9:ae:68:5d:b8:75:22:12:ee:6d:f8:
44:c8:a7:32:5e:18:f1:e7:a1:c3:c3:4a:ec:d3:49:
a3:3f:85:af:b7:ac:d0:8c:00:0f:e9:43:9d:9d:08:
87:94:b4:0a:97:ba:41:d7:81:14:80:6d:15:bd:7f:
2c:b7:00:a9:81:fe:5b:7f:a6:e6:e8:5b:58:3b:6b:
53:35:6b:ad:ae:c2:05:25:f2:d1:18:44:e0:53:7e:
88:aa:51:ee:16:c0:7e:94:ed:17:4f:6b:c5:dd:b0:
87:93:0f:b4:bd:fc:f8:21:1f:77:9a:5c:aa:23:9a:
68:64:0a:a2:71:e0:16:42:91:28:4f:6b:60:45:5a:
f2:a9:97:bc:ac:3b:21:f4:96:26:09:df:54:de:79:
9c:a2:b5:89:e8:5e:8a:05:69:7e:37:9d:f9:ff:35:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7D:F0:45:D4:3F:34:8E:BC:26:75:BA:36:7F:FB:8D:57:02:41:2B
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.140.13.0/24
36.140.192.0/24
36.140.255.0/24
36.170.16.0/22
36.170.24.0/21
36.170.38.0-36.170.43.255
36.170.46.0-36.170.55.255
36.170.90.0-36.170.95.255
111.9.125.0/24
111.9.246.0/23
112.18.156.0/22
112.18.248.0-112.19.15.255
112.19.142.0/24
112.19.192.0/21
112.19.241.0-112.19.242.255
112.45.24.0-112.45.47.255
112.45.112.0/20
112.45.188.0/22
117.139.19.0-117.139.20.255
117.139.24.0/23
117.139.140.0/22
117.172.20.0/22
117.174.50.0/23
117.174.130.0/23
117.174.144.0/23
117.174.148.0/23
117.174.176.0/21
117.175.56.0/22
117.175.90.0/23
117.175.93.0/24
117.175.95.0/24
117.175.208.0/21
117.177.48.0-117.177.57.255
117.177.64.0/21
117.177.132.0/22
117.177.216.0/23
117.177.242.0-117.177.249.255
117.177.251.0/24
183.220.144.0/21
183.220.192.0/21
183.221.240.0-183.221.242.255
183.221.244.0/22
183.222.100.0/23
183.222.228.0/23
183.222.231.0-183.222.233.255
183.223.14.0/23
183.223.40.0/22
183.223.116.0/22
183.223.192.0-183.223.201.255
218.205.248.0/23
221.182.22.0/23
223.85.16.0/21
223.85.56.0/22
223.85.104.0/21
223.85.135.0/24
223.86.120.0/21
223.87.0.0/24
223.87.16.0/23
223.87.86.0/23
IPv6:
2409:8062:3002::/48
2409:8c62:410::/44
2409:8c62:e10::/44
2409:8c85:6200::-2409:8c85:6202:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:0f:de:cb:f8:81:fb:94:d1:31:bf:2a:a1:77:0a:ec:58:f8:
9e:5c:e5:50:b0:87:02:cb:72:95:1e:6e:00:3c:38:62:fb:95:
04:03:3e:99:bb:61:aa:e3:8e:b5:b2:5f:99:91:d4:91:76:c6:
19:21:23:e7:14:44:80:14:a6:50:99:5c:00:35:3e:d1:da:de:
71:e7:44:2d:5e:9c:3e:56:ce:e5:8a:f9:6c:16:ae:70:09:8d:
8c:f2:b5:63:c0:7f:cc:4b:5b:c0:57:8f:11:0d:bc:90:72:63:
16:7e:01:b7:17:ad:1f:2f:40:46:1b:e8:b5:ec:ba:72:8c:a1:
4f:2f:3d:9b:b8:e5:32:7d:36:bf:8d:11:03:c7:6e:63:dc:d5:
d2:dc:51:90:cd:52:79:b4:f2:1e:90:94:d9:84:c6:0d:60:b3:
e7:71:45:29:f8:55:1d:a9:93:15:08:55:83:20:bc:68:80:79:
f3:c6:3a:e3:b3:32:8a:9c:44:b0:85:b6:49:73:72:5c:0c:e1:
72:35:5d:07:09:93:37:58:35:c6:63:e1:51:aa:ff:6f:42:3f:
e4:25:62:84:79:e6:e0:60:29:f8:7d:26:91:73:2d:84:23:c3:
b4:25:38:22:3b:6a:98:e5:f8:74:35:e4:33:09:ac:dc:48:05:
b4:a1:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:49:51 2026 by rpki-client