Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58519.roa
File: AS58519.roa (raw, json)
Hash identifier: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=
Subject key identifier: 98:F7:58:CB:EF:35:68:6B:88:7C:67:6E:2F:E3:5A:0F:B8:DC:3A:3D
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 2BAC936B4B4CB2EC07CBD73CC521435567AE2205
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58519.roa
Signing time: Tue 16 Jun 2026 17:54:06 +0000
ROA not before: Tue 16 Jun 2026 17:49:06 +0000
ROA not after: Tue 15 Jun 2027 17:54:06 +0000
asID: 58519
IP address blocks: 140.246.0.0/16 maxlen: 16
140.246.4.0/24 maxlen: 24
140.246.13.0/24 maxlen: 24
140.246.33.0/24 maxlen: 24
140.246.34.0/24 maxlen: 24
140.246.36.0/24 maxlen: 24
140.246.44.0/24 maxlen: 24
140.246.46.0/24 maxlen: 24
140.246.59.0/24 maxlen: 24
140.246.65.0/24 maxlen: 24
140.246.81.0/24 maxlen: 24
140.246.83.0/24 maxlen: 24
140.246.87.0/24 maxlen: 24
140.246.89.0/24 maxlen: 24
140.246.94.0/24 maxlen: 24
140.246.96.0/24 maxlen: 24
140.246.98.0/24 maxlen: 24
140.246.101.0/24 maxlen: 24
140.246.103.0/24 maxlen: 24
140.246.106.0/24 maxlen: 24
140.246.114.0/24 maxlen: 24
140.246.117.0/24 maxlen: 24
140.246.128.0/24 maxlen: 24
140.246.150.0/24 maxlen: 24
140.246.163.0/24 maxlen: 24
140.246.166.0/24 maxlen: 24
140.246.181.0/24 maxlen: 24
140.246.182.0/24 maxlen: 24
140.246.213.0/24 maxlen: 24
140.246.214.0/24 maxlen: 24
140.246.218.0/24 maxlen: 24
140.246.222.0/24 maxlen: 24
140.246.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ac:93:6b:4b:4c:b2:ec:07:cb:d7:3c:c5:21:43:55:67:ae:22:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 16 17:49:06 2026 GMT
Not After : Jun 15 17:54:06 2027 GMT
Subject: CN=98F758CBEF35686B887C676E2FE35A0FB8DC3A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:18:40:a7:ee:1a:53:79:ae:ca:1f:44:11:
5e:ed:ff:dc:7e:93:4e:70:ec:eb:12:1c:c9:88:b0:
30:fd:1a:e0:a9:64:0b:fd:59:ed:19:f5:f8:c2:e6:
a5:b1:f6:77:bf:26:a0:f5:3e:71:9d:6f:63:4d:5a:
5a:b1:b2:d2:52:9e:f1:ca:e2:33:1f:11:8b:6d:30:
b4:7f:bb:85:b6:72:fc:49:2a:ed:77:97:16:38:53:
36:7a:61:a9:f3:d8:07:36:55:0d:65:1a:a7:42:16:
7e:91:83:f5:c2:ec:88:de:db:94:54:5d:dc:fd:bf:
1e:d1:d6:a7:22:d8:32:5a:a9:83:5a:de:bc:0a:28:
9d:4a:8f:72:c6:a3:80:0f:94:18:7a:1e:3a:63:23:
0a:67:ed:01:e3:a2:79:7f:f1:ab:b2:21:b5:a3:f0:
c0:e4:04:10:f4:47:1d:c5:1d:27:59:ce:3b:04:07:
a8:a2:c8:31:c4:4c:dd:68:ae:cf:9d:43:ae:9d:ed:
12:65:c3:bb:3e:bf:18:a7:e5:0e:ef:7c:a8:6c:58:
42:14:45:9e:f9:8e:39:fc:05:c3:a6:7e:81:f0:33:
7f:60:c8:0a:a3:9f:22:45:37:80:aa:e9:9c:8c:c5:
5b:92:96:67:d8:bd:b3:e7:69:b4:42:27:6e:dd:0c:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F7:58:CB:EF:35:68:6B:88:7C:67:6E:2F:E3:5A:0F:B8:DC:3A:3D
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58519.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:f1:a7:55:ed:03:02:55:1d:d9:6e:de:7a:6e:43:56:1b:2d:
21:30:0f:00:76:3f:57:bc:73:b7:a9:f1:2f:0c:d9:e8:41:05:
8b:b4:8f:a7:46:ac:73:0e:f2:7e:30:46:00:31:d1:39:3c:b1:
d8:ca:97:05:3a:9e:f2:58:d5:08:0a:b5:41:aa:65:40:4f:f9:
d4:c9:10:d3:5a:ff:db:7f:47:79:72:67:23:17:c5:ae:1f:3c:
87:10:9d:82:cd:52:b7:07:b5:01:03:b4:88:5a:03:5c:4f:a7:
43:11:ca:08:cd:34:ff:a7:3a:ae:56:f1:97:37:c9:f6:58:e0:
ee:c8:19:a9:a7:b4:11:17:48:e7:41:7f:38:81:bb:61:52:b5:
d1:d4:59:47:fa:cc:20:62:3f:cc:eb:26:24:45:17:f9:c9:92:
8e:90:71:b5:cf:23:40:19:af:57:04:42:79:cd:a1:b8:bb:58:
52:e9:71:4b:3a:49:a0:a2:1d:d7:93:38:54:c0:28:23:04:f6:
b5:8b:f0:8e:42:42:a4:7f:a8:87:f2:ff:60:0a:8d:ce:1a:53:
17:30:07:b1:15:b9:c3:16:1d:a3:80:7f:ba:14:e0:61:12:9b:
dd:84:a0:f7:7a:6a:d6:00:55:56:13:3c:6b:96:fb:2c:90:cb:
98:11:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:54:37 2026 by rpki-client