Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139019.roa
File: AS139019.roa (raw, json)
Hash identifier: etkICKBpW//5a5PWUpM7YPP3md1jCAOYWUmmt1Oh0uw=
Subject key identifier: 5A:19:12:58:AB:61:30:E4:AA:61:05:41:D9:30:67:0C:3B:59:5C:0F
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7D70D55D325339B10C7E3D5B0B9D30F9F57F1ABA
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139019.roa
Signing time: Thu 21 May 2026 16:31:58 +0000
ROA not before: Thu 21 May 2026 16:26:58 +0000
ROA not after: Thu 20 May 2027 16:31:58 +0000
asID: 139019
IP address blocks: 171.13.152.0/24 maxlen: 24
171.13.153.0/24 maxlen: 24
171.13.154.0/24 maxlen: 24
222.89.92.0/24 maxlen: 24
222.89.93.0/24 maxlen: 24
222.89.94.0/24 maxlen: 24
240e:63d:600d::/48 maxlen: 48
240e:63d:600e::/48 maxlen: 48
240e:63d:6200::/40 maxlen: 40
240e:63d:6300::/40 maxlen: 40
240e:63d:6400::/40 maxlen: 40
240e:63d:6f00::/40 maxlen: 40
240e:93e::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:70:d5:5d:32:53:39:b1:0c:7e:3d:5b:0b:9d:30:f9:f5:7f:1a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:26:58 2026 GMT
Not After : May 20 16:31:58 2027 GMT
Subject: CN=5A191258AB6130E4AA610541D930670C3B595C0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:68:15:af:99:50:e3:cb:ac:6e:8f:ed:c1:
3a:44:d3:94:54:d9:37:57:52:06:6c:e5:13:f0:9b:
f1:ea:7f:93:11:49:49:45:10:13:a0:d7:e9:e2:f1:
19:6a:c1:aa:d4:51:0d:9b:dd:a6:74:02:fb:b2:63:
ab:77:d5:ff:db:52:0b:cd:c1:8b:28:e0:97:6a:a5:
7f:46:03:72:0a:1e:8d:f4:ae:0b:98:5f:26:53:c1:
ee:f3:c5:76:be:f5:6f:36:49:ad:90:f0:44:fc:95:
ae:ad:ad:b8:38:7d:67:15:1f:48:5d:01:c1:07:8d:
9e:5a:10:8a:be:ff:4d:91:38:f0:73:b7:32:49:9d:
68:38:8a:83:3c:7f:12:51:12:cf:b2:33:d4:f4:9f:
20:2a:fe:db:c8:f9:33:b4:86:68:58:a8:eb:77:16:
52:d0:6a:bb:8a:aa:75:88:d6:8c:6d:fe:3e:1f:82:
77:3c:f5:b7:5d:13:53:07:07:b4:0c:ee:a2:21:15:
cf:7f:b5:0d:2e:f4:bd:f7:19:e1:1d:99:64:b2:65:
4c:ba:41:97:fc:cd:26:2d:0a:1f:14:9b:44:3d:1b:
d2:ba:e6:65:80:18:2b:bf:d3:47:74:09:83:27:b7:
bb:34:30:e3:73:39:af:fd:91:fb:32:a1:f5:c1:32:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:19:12:58:AB:61:30:E4:AA:61:05:41:D9:30:67:0C:3B:59:5C:0F
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.13.152.0-171.13.154.255
222.89.92.0-222.89.94.255
IPv6:
240e:63d:600d::-240e:63d:600e:ffff:ffff:ffff:ffff:ffff
240e:63d:6200::-240e:63d:64ff:ffff:ffff:ffff:ffff:ffff
240e:63d:6f00::/40
240e:93e::/40
Signature Algorithm: sha256WithRSAEncryption
15:6d:9e:6a:53:02:1e:1d:2a:9c:1a:18:17:7e:f7:df:a5:22:
28:47:5b:2b:1d:f5:38:ee:fc:aa:2b:0a:6b:bf:0c:e6:32:16:
67:92:65:4c:70:db:6c:6c:ef:30:35:f4:34:9e:14:54:b0:ba:
02:ae:09:e5:82:11:0e:ce:cb:a0:a8:83:a7:2b:5c:3b:ce:64:
71:57:52:35:fb:0e:cc:45:b5:fc:9f:65:ee:c4:97:62:34:87:
90:f7:61:0a:b9:81:31:2b:33:ee:71:fc:30:ba:bc:eb:30:f7:
51:0b:95:b8:56:cd:2d:97:93:60:3a:3f:de:fd:48:b1:86:c0:
13:a4:5e:3b:16:75:0b:e5:ce:05:d3:47:98:6d:11:f2:df:96:
b2:1b:74:63:e7:04:cc:ef:fe:f5:ef:a3:b3:00:4d:c2:87:4a:
6b:58:54:75:ba:9b:88:88:1d:de:4c:b5:1f:21:06:dc:03:91:
c6:20:38:c5:6d:6d:97:4c:f9:d3:c2:55:f5:fe:fd:37:3e:5f:
49:28:96:db:d6:ef:25:da:63:90:98:b3:ca:f9:4e:74:ba:2a:
29:d9:f8:b5:9e:d0:3c:38:02:f2:0a:24:ee:6e:59:8e:27:d0:
48:a0:97:ce:c1:53:9f:7b:3e:47:87:93:08:54:5c:49:2c:75:
c0:b3:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:24 2026 by rpki-client