Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
File: AS139587.roa (raw, json)
Hash identifier: uxgG+q3Z8Hhl/9MZt9VNVxr2W9ePfv4SAMrPu5tI1Ns=
Subject key identifier: 7E:D0:F0:34:2D:03:BD:AB:AD:14:3A:19:9A:E4:4A:92:AE:BA:46:58
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3DD347AA8657E872FB9F941A15E520501939AD22
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
Signing time: Fri 19 Jun 2026 16:01:29 +0000
ROA not before: Fri 19 Jun 2026 15:56:29 +0000
ROA not after: Fri 18 Jun 2027 16:01:29 +0000
asID: 139587
IP address blocks: 1.193.188.0/24 maxlen: 24
1.193.212.0/24 maxlen: 24
1.193.219.0/24 maxlen: 24
1.194.24.0/21 maxlen: 21
1.194.114.0/23 maxlen: 23
1.194.160.0/20 maxlen: 20
1.194.160.0/24 maxlen: 24
1.194.161.0/24 maxlen: 24
1.194.162.0/23 maxlen: 23
1.194.166.0/24 maxlen: 24
1.194.167.0/24 maxlen: 24
1.194.172.0/24 maxlen: 24
1.194.173.0/24 maxlen: 24
1.194.174.0/23 maxlen: 23
1.194.192.0/20 maxlen: 20
1.194.192.0/22 maxlen: 22
1.194.196.0/24 maxlen: 24
1.194.199.0/24 maxlen: 24
1.194.200.0/24 maxlen: 24
1.194.205.0/24 maxlen: 24
1.194.206.0/24 maxlen: 24
1.194.207.0/24 maxlen: 24
1.194.208.0/22 maxlen: 22
1.194.208.0/24 maxlen: 24
1.194.210.0/23 maxlen: 23
1.194.216.0/21 maxlen: 21
1.194.216.0/23 maxlen: 23
1.194.218.0/23 maxlen: 23
1.194.220.0/24 maxlen: 24
1.194.221.0/24 maxlen: 24
1.194.222.0/24 maxlen: 24
1.194.223.0/24 maxlen: 24
1.195.200.0/21 maxlen: 21
1.195.200.0/24 maxlen: 24
1.195.201.0/24 maxlen: 24
1.195.202.0/24 maxlen: 24
1.195.204.0/24 maxlen: 24
1.195.206.0/24 maxlen: 24
1.195.208.0/20 maxlen: 20
1.195.209.0/24 maxlen: 24
36.99.112.0/24 maxlen: 24
123.54.192.0/23 maxlen: 23
123.54.196.0/23 maxlen: 23
123.54.199.0/24 maxlen: 24
123.54.202.0/23 maxlen: 23
123.54.204.0/24 maxlen: 24
123.54.208.0/23 maxlen: 23
123.54.210.0/24 maxlen: 24
123.54.212.0/24 maxlen: 24
123.54.214.0/23 maxlen: 23
123.54.216.0/24 maxlen: 24
123.149.169.0/24 maxlen: 24
240e:b:e000::/40 maxlen: 40
240e:23d::/36 maxlen: 36
240e:23d:1000::/36 maxlen: 36
240e:23d:2000::/36 maxlen: 36
240e:23d:3000::/36 maxlen: 36
240e:93c:1000::/36 maxlen: 36
240e:93c:1207::/48 maxlen: 48
240e:981:e300::/40 maxlen: 40
240e:981:e400::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d3:47:aa:86:57:e8:72:fb:9f:94:1a:15:e5:20:50:19:39:ad:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 19 15:56:29 2026 GMT
Not After : Jun 18 16:01:29 2027 GMT
Subject: CN=7ED0F0342D03BDABAD143A199AE44A92AEBA4658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:80:fa:b8:7f:c6:46:45:96:77:40:e4:dd:
b6:9e:84:6f:21:a5:c4:74:bb:02:89:aa:00:7f:1d:
82:f6:49:98:14:9e:b5:bd:0b:c2:62:94:e1:82:93:
e7:88:10:8a:14:9b:48:9e:ee:ae:53:1d:b9:5e:94:
72:34:93:e3:24:f7:33:a9:98:05:1c:d6:ee:73:3a:
58:51:50:7b:b3:10:93:9b:23:de:c4:f2:62:b7:60:
e8:cf:00:21:06:cb:bd:61:8d:f0:12:ce:70:60:59:
a3:17:8f:79:d4:a9:78:df:d1:b1:22:94:68:b9:e7:
5d:33:21:71:06:52:5a:f2:27:f6:83:f1:9d:bb:1a:
02:27:ab:33:64:dc:f2:6e:c6:40:2e:8d:53:f5:64:
33:0f:1a:f9:07:a1:c5:7a:d4:56:be:c6:8b:11:f0:
fb:c7:2b:b2:ef:2b:8f:28:fe:ed:96:a6:65:f2:8e:
59:50:3b:15:b8:ac:2c:9c:f8:e8:08:6e:f4:f6:d4:
9e:ab:12:cb:1e:57:b8:89:16:3b:d8:20:5a:26:73:
d6:82:90:38:c6:5a:23:9f:97:10:91:c7:cf:aa:46:
7c:dd:81:64:c7:97:59:98:ef:db:22:32:e9:b8:62:
95:2d:9b:09:d1:b9:3c:d0:c5:e8:2b:57:58:c1:56:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:F0:34:2D:03:BD:AB:AD:14:3A:19:9A:E4:4A:92:AE:BA:46:58
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.193.188.0/24
1.193.212.0/24
1.193.219.0/24
1.194.24.0/21
1.194.114.0/23
1.194.160.0/20
1.194.192.0-1.194.211.255
1.194.216.0/21
1.195.200.0-1.195.223.255
36.99.112.0/24
123.54.192.0/23
123.54.196.0/23
123.54.199.0/24
123.54.202.0-123.54.204.255
123.54.208.0-123.54.210.255
123.54.212.0/24
123.54.214.0-123.54.216.255
123.149.169.0/24
IPv6:
240e:b:e000::/40
240e:23d::/34
240e:93c:1000::/36
240e:981:e300::-240e:981:e401:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:0c:ef:e8:2b:48:b9:b2:4f:91:0f:56:da:25:d9:4e:f4:d7:
07:ea:12:b8:0a:33:15:24:72:05:b4:7d:74:fe:08:db:5d:48:
3e:a8:4a:17:e3:f7:08:2d:67:8e:4d:7b:b9:59:59:21:5e:d5:
8b:26:cd:c4:e8:95:35:8d:7d:d6:e5:5a:5a:d2:dd:ce:70:23:
07:1e:7f:21:81:f3:11:56:02:c4:e8:d3:fa:59:ff:66:86:5f:
ce:34:b4:eb:b6:93:c2:ef:d0:a0:92:b0:60:cc:e0:56:4d:72:
00:34:76:71:77:27:2e:0d:4b:5b:f4:3b:bf:10:a1:c3:f7:d3:
ae:60:88:23:f9:63:6d:c3:0f:26:95:09:06:b7:af:0e:82:59:
2d:27:7f:6c:24:8a:43:af:17:3c:cd:48:22:35:06:6a:03:47:
d4:40:46:d8:01:e8:1c:d6:77:02:38:77:7c:20:0d:dd:34:33:
8b:8f:54:75:4c:95:e9:db:0f:49:ce:5d:cf:c0:1d:6e:1b:76:
c6:cb:72:fa:28:47:7f:1e:cc:f1:54:ef:da:a2:b7:28:64:9a:
cf:86:b5:bb:db:fb:8f:98:1d:05:5e:73:6a:09:e3:24:84:34:
f6:c1:d2:d1:62:7d:a1:0d:ff:50:56:b0:cd:3f:97:b6:a7:0d:
38:e2:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:48:54 2026 by rpki-client