Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138950.roa
File: AS138950.roa (raw, json)
Hash identifier: xYCen3PO2Fky7bK3OCjdBN2ZOc2TeDqu+v/MShwLbJM=
Subject key identifier: 4D:D9:6B:89:89:E8:4C:AB:15:5D:11:8C:82:5C:5F:08:6B:EA:E5:EB
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: B2559EDAB576318A2D02A5EDD54E3D61042CCD
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138950.roa
Signing time: Tue 26 May 2026 16:55:41 +0000
ROA not before: Tue 26 May 2026 16:50:41 +0000
ROA not after: Tue 25 May 2027 16:55:41 +0000
asID: 138950
IP address blocks: 58.215.15.0/24 maxlen: 24
58.215.34.0/24 maxlen: 24
58.215.35.0/24 maxlen: 24
58.215.36.0/24 maxlen: 24
58.215.39.0/24 maxlen: 24
58.215.40.0/22 maxlen: 22
58.215.44.0/23 maxlen: 23
58.215.46.0/24 maxlen: 24
58.215.48.0/21 maxlen: 21
58.215.136.0/21 maxlen: 21
58.215.160.0/21 maxlen: 21
58.215.168.0/21 maxlen: 21
58.215.176.0/20 maxlen: 20
58.215.209.0/24 maxlen: 24
58.215.210.0/24 maxlen: 24
58.215.211.0/24 maxlen: 24
58.215.231.0/24 maxlen: 24
58.223.184.0/21 maxlen: 21
61.147.181.0/24 maxlen: 24
61.147.182.0/23 maxlen: 23
61.147.184.0/22 maxlen: 22
61.147.188.0/24 maxlen: 24
61.160.35.0/24 maxlen: 24
61.160.36.0/24 maxlen: 24
61.160.40.0/22 maxlen: 22
61.160.47.0/24 maxlen: 24
61.160.61.0/24 maxlen: 24
61.177.107.0/24 maxlen: 24
117.85.64.0/21 maxlen: 21
180.101.189.0/24 maxlen: 24
180.101.190.0/24 maxlen: 24
180.101.191.0/24 maxlen: 24
180.101.192.0/24 maxlen: 24
180.101.193.0/24 maxlen: 24
180.101.194.0/24 maxlen: 24
180.101.195.0/24 maxlen: 24
180.101.196.0/24 maxlen: 24
180.112.12.0/24 maxlen: 24
180.112.23.0/24 maxlen: 24
180.112.45.0/24 maxlen: 24
180.112.46.0/24 maxlen: 24
180.112.48.0/22 maxlen: 22
180.113.2.0/24 maxlen: 24
221.228.72.0/21 maxlen: 21
221.228.80.0/21 maxlen: 21
221.228.88.0/21 maxlen: 21
221.228.97.0/24 maxlen: 24
221.228.98.0/23 maxlen: 23
221.228.100.0/22 maxlen: 22
221.228.104.0/24 maxlen: 24
221.228.105.0/24 maxlen: 24
221.228.106.0/23 maxlen: 23
221.228.108.0/22 maxlen: 22
221.228.112.0/24 maxlen: 24
221.228.192.0/20 maxlen: 20
221.228.208.0/21 maxlen: 21
240e:1a:30::/44 maxlen: 44
240e:e9:5000::/37 maxlen: 37
240e:979:f00::/40 maxlen: 40
240e:982:dc1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b2:55:9e:da:b5:76:31:8a:2d:02:a5:ed:d5:4e:3d:61:04:2c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 16:50:41 2026 GMT
Not After : May 25 16:55:41 2027 GMT
Subject: CN=4DD96B8989E84CAB155D118C825C5F086BEAE5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:4b:69:ef:da:2a:57:c8:e9:f8:b9:a0:88:
e8:d6:18:97:73:8e:72:c8:11:87:42:88:f5:ca:8b:
5c:52:8b:8c:c8:b2:09:7d:1c:13:b4:47:30:aa:89:
4e:54:cc:a5:11:ca:8f:cd:d5:1a:46:5d:ba:5b:74:
e6:31:f5:f1:08:8d:3a:96:ba:05:1c:f9:c4:95:e0:
68:c4:56:3c:26:f9:b0:e3:40:0f:5f:4a:56:50:d8:
33:c4:b4:9d:bf:b9:9d:d7:65:03:6a:4f:94:97:b4:
fb:b0:e4:bd:dc:30:9d:9d:e2:1f:7b:6d:15:45:2e:
5c:61:32:99:be:33:95:d5:f1:de:02:93:7f:62:94:
ab:34:a8:37:79:9f:93:71:c6:49:64:17:fd:49:9d:
d7:17:55:16:2f:c1:72:d9:d2:31:24:97:d4:42:39:
3d:0e:c7:5e:74:bd:11:ac:af:e2:97:53:9a:fa:fa:
bf:5e:8a:54:19:9d:27:db:a1:50:b1:26:88:42:79:
84:e5:61:0b:11:f4:62:fd:66:50:6a:57:99:d3:be:
11:26:b2:1e:52:cc:40:9d:9a:91:b4:56:62:83:b1:
c1:fe:1e:b9:22:86:79:0c:dd:59:5a:99:9b:28:2f:
dc:df:c5:c7:bf:3f:09:13:8c:88:70:c1:de:2d:63:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:6B:89:89:E8:4C:AB:15:5D:11:8C:82:5C:5F:08:6B:EA:E5:EB
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.215.15.0/24
58.215.34.0-58.215.36.255
58.215.39.0-58.215.46.255
58.215.48.0/21
58.215.136.0/21
58.215.160.0/19
58.215.209.0-58.215.211.255
58.215.231.0/24
58.223.184.0/21
61.147.181.0-61.147.188.255
61.160.35.0-61.160.36.255
61.160.40.0/22
61.160.47.0/24
61.160.61.0/24
61.177.107.0/24
117.85.64.0/21
180.101.189.0-180.101.196.255
180.112.12.0/24
180.112.23.0/24
180.112.45.0-180.112.46.255
180.112.48.0/22
180.113.2.0/24
221.228.72.0-221.228.95.255
221.228.97.0-221.228.112.255
221.228.192.0-221.228.215.255
IPv6:
240e:1a:30::/44
240e:e9:5000::/37
240e:979:f00::/40
240e:982:dc1f::/48
Signature Algorithm: sha256WithRSAEncryption
49:4b:7e:64:fd:51:04:fb:af:d9:29:34:f8:80:cb:c6:e6:3f:
71:4e:a6:e1:20:13:1a:40:07:0e:fb:20:a8:20:6a:c7:f6:1d:
7b:4d:9d:29:18:bd:16:4a:9b:b2:c7:7b:67:1a:02:8c:4e:eb:
be:a7:88:78:21:1c:ff:64:0a:e5:a7:2e:11:0c:cc:64:6e:fc:
53:24:8a:2e:ee:70:c4:f8:96:f4:14:66:8e:f0:75:12:8b:e4:
c1:15:49:60:37:5a:33:51:c9:14:6a:8b:79:cd:33:ac:ea:c3:
92:5f:65:8c:72:4f:78:1e:0d:60:d4:34:c5:6a:28:24:b9:53:
dc:33:74:24:c6:02:24:af:a4:f4:7c:41:de:ef:92:d4:21:85:
b8:f7:6e:40:da:bd:46:14:51:48:ea:b6:ce:08:d3:65:3e:eb:
2d:af:69:06:d5:92:21:d8:b5:83:45:98:90:c7:77:ea:78:e3:
52:98:c2:04:98:6c:6b:69:96:28:fb:61:17:b7:9f:2d:9b:5e:
91:11:cb:d7:43:5b:c8:79:5c:38:34:19:9a:c2:cb:0b:a5:48:
0e:4e:bb:0c:5d:82:64:94:04:92:7c:42:51:95:90:0c:2c:c2:
c5:cf:14:81:92:a5:8a:fa:12:2e:d8:18:58:60:7f:a4:fe:7a:
1e:2a:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:23 2026 by rpki-client