Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58541.roa
File: AS58541.roa (raw, json)
Hash identifier: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=
Subject key identifier: E5:0F:E3:31:19:F1:3E:95:67:D7:EF:26:B4:11:2C:B5:2C:57:46:D4
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 4C1482AFB3E63E877D1898B7D825C05CBB5F4117
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58541.roa
Signing time: Tue 16 Jun 2026 17:54:05 +0000
ROA not before: Tue 16 Jun 2026 17:49:05 +0000
ROA not after: Tue 15 Jun 2027 17:54:05 +0000
asID: 58541
IP address blocks: 140.249.0.0/20 maxlen: 20
140.249.16.0/21 maxlen: 21
140.249.18.0/24 maxlen: 24
140.249.19.0/24 maxlen: 24
140.249.20.0/24 maxlen: 24
140.249.21.0/24 maxlen: 24
140.249.22.0/24 maxlen: 24
140.249.23.0/24 maxlen: 24
140.249.24.0/22 maxlen: 22
140.249.30.0/23 maxlen: 23
140.249.32.0/19 maxlen: 19
140.249.48.0/22 maxlen: 22
140.249.52.0/22 maxlen: 22
140.249.160.0/20 maxlen: 20
140.249.176.0/20 maxlen: 20
140.249.192.0/21 maxlen: 21
140.249.200.0/21 maxlen: 21
140.249.208.0/22 maxlen: 22
140.249.212.0/22 maxlen: 22
140.249.216.0/22 maxlen: 22
140.249.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:14:82:af:b3:e6:3e:87:7d:18:98:b7:d8:25:c0:5c:bb:5f:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 16 17:49:05 2026 GMT
Not After : Jun 15 17:54:05 2027 GMT
Subject: CN=E50FE33119F13E9567D7EF26B4112CB52C5746D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:22:ff:03:94:98:b8:eb:b5:f2:5c:aa:33:
ab:6b:b8:72:b6:0e:c7:45:16:c2:1b:88:57:c8:72:
6e:b7:b3:19:52:3f:0b:ac:9a:84:2c:2d:9b:03:31:
84:89:8b:06:bf:15:32:9a:b0:29:97:fd:df:b6:30:
d2:54:d4:79:ae:90:96:66:91:02:98:76:11:c4:a9:
83:77:dd:06:b7:45:7e:d6:76:9e:f1:01:28:5f:aa:
4d:53:e3:9b:bb:47:ba:e0:89:6d:d2:e2:13:ea:5e:
da:6a:a2:d7:f6:bc:82:47:d8:34:92:24:1e:27:3a:
ec:74:d7:2b:87:c5:91:11:00:e4:4c:56:34:3f:70:
22:a8:b2:92:90:4c:1d:7a:ef:1c:63:43:f8:e5:0e:
bd:ce:63:47:4c:09:7f:64:8f:f7:6a:09:6c:bc:16:
41:15:1d:06:8c:e1:c5:26:06:dc:76:bb:d5:d5:d7:
ad:70:dd:51:38:20:a0:9d:05:7c:9a:77:e5:e0:ed:
ab:b5:6e:a7:8f:e5:51:b7:89:06:86:d4:f0:8b:e4:
4f:f2:2e:af:7a:16:fc:1e:7d:66:19:f4:51:98:35:
72:d8:cd:d9:62:e9:90:48:06:52:5e:d3:17:d8:d4:
13:f7:fb:92:1a:67:55:34:09:f2:25:8f:7d:7e:6f:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:E3:31:19:F1:3E:95:67:D7:EF:26:B4:11:2C:B5:2C:57:46:D4
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58541.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.249.0.0-140.249.27.255
140.249.30.0-140.249.63.255
140.249.160.0-140.249.223.255
Signature Algorithm: sha256WithRSAEncryption
da:d7:8e:15:64:08:1c:fd:31:5b:5d:53:39:50:f2:49:d7:50:
ab:dd:ef:67:0a:45:98:92:b4:d1:2e:b4:d7:49:cf:27:6e:84:
79:93:5d:cf:b5:2f:0a:e3:ac:e6:24:dc:1e:10:52:33:c1:bb:
62:7c:2f:61:4d:e6:22:56:a5:4c:17:09:f7:a3:9d:72:74:a1:
50:24:74:69:54:7b:32:7a:5e:5f:ed:22:1e:b7:91:5f:7d:2b:
8d:a6:57:e8:53:35:d0:c5:7c:b9:1e:3b:77:8d:99:8a:7d:3f:
68:c2:7c:20:94:10:3e:f2:69:ba:f4:a2:d3:85:f3:5d:4d:5f:
e4:4a:db:91:1d:97:85:6f:72:5d:d5:5e:79:0a:b2:87:9d:ad:
88:d3:ef:4c:85:67:c0:3b:76:64:80:4f:dd:2f:d4:8a:f6:c3:
9c:ad:a2:2c:df:04:a6:95:e1:c1:50:41:80:18:c5:c2:4a:2e:
c2:92:be:c7:61:a9:1c:5d:3e:68:29:66:a9:61:70:e2:fc:ad:
d6:d3:09:f9:c0:a1:04:5c:90:da:75:b3:96:63:1f:82:d7:4a:
76:41:3b:d4:24:81:55:e1:c7:b8:19:d3:be:85:ac:df:c8:a9:
95:8e:b1:a5:71:c3:4b:7a:99:be:15:6d:6c:d4:d0:d7:17:7b:
c1:e4:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:54:37 2026 by rpki-client