Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
File: AS139587.roa (raw, json)
Hash identifier: prrQ+OtKE4s7QLbBgFBCysz928NLuorYK29ikjwJW7Q=
Subject key identifier: ED:4D:25:56:F2:F3:DD:BD:B1:D1:7B:FB:DB:13:38:A6:56:4B:07:5C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1178F8B211BEF23CEDA7CEEEFF93921753D5E0FF
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
Signing time: Thu 21 May 2026 16:31:58 +0000
ROA not before: Thu 21 May 2026 16:26:58 +0000
ROA not after: Thu 20 May 2027 16:31:58 +0000
asID: 139587
IP address blocks: 1.193.188.0/24 maxlen: 24
1.193.219.0/24 maxlen: 24
1.194.173.0/24 maxlen: 24
1.194.174.0/23 maxlen: 23
1.195.202.0/24 maxlen: 24
1.195.204.0/24 maxlen: 24
1.195.206.0/24 maxlen: 24
36.99.112.0/24 maxlen: 24
123.54.204.0/24 maxlen: 24
123.149.169.0/24 maxlen: 24
240e:93c:1000::/36 maxlen: 36
240e:981:e300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:78:f8:b2:11:be:f2:3c:ed:a7:ce:ee:ff:93:92:17:53:d5:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:26:58 2026 GMT
Not After : May 20 16:31:58 2027 GMT
Subject: CN=ED4D2556F2F3DDBDB1D17BFBDB1338A6564B075C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:57:fe:f6:17:82:c2:c2:08:23:ca:4a:68:
58:ac:ab:18:b8:c0:94:8d:a7:69:99:9d:45:f2:41:
a4:78:9d:bd:f9:57:90:bb:10:02:70:08:db:0b:f6:
16:55:5e:a3:96:df:7d:f2:81:48:ad:8e:b9:a1:5f:
96:af:8a:64:dc:ac:14:5f:61:b8:b9:cb:d7:c7:ca:
1a:66:34:a8:8f:bc:cb:1b:9e:1d:55:7a:3e:d3:57:
ce:38:ab:ae:2d:c6:eb:cd:ba:f8:d4:66:2c:b6:ae:
9d:17:3d:12:75:75:cf:2f:c8:64:99:a6:42:08:18:
52:2d:96:5f:4b:7f:75:3a:be:0b:41:9b:8b:97:c7:
a9:d3:fc:d9:49:9d:cc:f7:2f:3f:a4:87:77:ca:c9:
90:58:3e:d5:a5:f8:5c:79:48:64:6e:aa:70:67:35:
ba:20:bb:4c:64:e3:2d:db:da:59:33:bc:0b:10:25:
b4:92:33:53:38:14:ba:77:d7:84:20:c9:df:e6:91:
63:ef:4e:f2:0b:9f:92:ca:32:39:9c:99:35:64:09:
9a:90:36:20:e0:de:96:70:38:45:bf:5d:cd:a0:61:
1d:1f:a1:ef:5a:bc:2b:69:ef:88:19:13:40:15:25:
08:6b:09:54:61:9e:4e:ec:76:41:f9:81:ee:8d:36:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:25:56:F2:F3:DD:BD:B1:D1:7B:FB:DB:13:38:A6:56:4B:07:5C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.193.188.0/24
1.193.219.0/24
1.194.173.0-1.194.175.255
1.195.202.0/24
1.195.204.0/24
1.195.206.0/24
36.99.112.0/24
123.54.204.0/24
123.149.169.0/24
IPv6:
240e:93c:1000::/36
240e:981:e300::/40
Signature Algorithm: sha256WithRSAEncryption
1b:f1:48:d1:38:ae:44:74:7c:d1:f6:cb:19:a0:cd:56:de:13:
f1:ed:65:1f:a0:1e:42:c6:d9:94:28:96:f9:4d:7c:43:e9:81:
58:2f:5c:d3:0b:0c:a4:64:fe:66:13:ed:76:91:b7:ed:6c:ba:
82:d2:bf:a8:a2:ab:63:a0:98:95:ed:b8:90:8c:13:e9:7a:cf:
7d:34:d2:63:5b:f5:d5:ef:c2:d5:fe:59:29:7c:ce:fa:54:e1:
97:d0:a0:88:01:b3:d3:f2:56:04:2d:f9:79:7b:84:60:08:10:
bd:bc:3a:98:50:5a:ff:79:0b:22:53:9f:be:00:fe:dd:bf:30:
f9:65:40:c6:80:78:2d:c1:40:65:50:ad:1b:94:38:81:6c:d5:
5c:0c:23:f9:88:57:24:2c:dd:91:5f:9a:36:e0:2e:f6:21:86:
5e:ce:da:07:ef:fa:7f:7d:d7:af:56:3b:d3:44:49:b5:04:6e:
31:ab:c4:1c:e2:f0:a5:8b:e1:b2:33:6f:9f:61:39:01:42:cd:
26:bf:af:a4:fe:38:87:8d:a5:b3:cf:cf:38:67:e5:d7:fc:5b:
99:20:cf:5b:bc:28:14:9e:82:d8:2d:bf:4c:bb:23:49:02:4b:
b0:c8:7c:86:bf:b5:6e:9e:1f:0b:bb:13:10:e2:2a:ad:b7:f2:
87:5a:19:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:11 2026 by rpki-client