Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139887.roa
File: AS139887.roa (raw, json)
Hash identifier: ReKpn/maFtg8plADOv5hzfIXVdMhLxxX+qFAxAMfd84=
Subject key identifier: 6C:70:0A:DB:B7:60:93:B6:FF:BF:13:97:12:39:C6:7C:22:6A:67:3C
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 15AFA327B7A2CAB19781F664EDAD00CB003D8D21
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139887.roa
Signing time: Thu 28 May 2026 16:07:19 +0000
ROA not before: Thu 28 May 2026 16:02:19 +0000
ROA not after: Thu 27 May 2027 16:07:19 +0000
asID: 139887
IP address blocks: 58.58.81.0/24 maxlen: 24
122.5.53.0/24 maxlen: 24
122.5.54.0/24 maxlen: 24
122.5.59.0/24 maxlen: 24
122.5.60.0/24 maxlen: 24
150.138.32.0/20 maxlen: 20
219.146.131.0/24 maxlen: 24
222.173.195.0/24 maxlen: 24
240e:e:d000::/37 maxlen: 37
240e:947::/36 maxlen: 36
240e:947:2000::/40 maxlen: 40
240e:947:3000::/36 maxlen: 36
240e:947:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:af:a3:27:b7:a2:ca:b1:97:81:f6:64:ed:ad:00:cb:00:3d:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 16:02:19 2026 GMT
Not After : May 27 16:07:19 2027 GMT
Subject: CN=6C700ADBB76093B6FFBF13971239C67C226A673C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:3c:17:c1:75:2d:1c:aa:d5:7a:a4:d3:a5:
aa:14:3f:76:f2:91:40:77:e9:92:b7:0a:25:da:32:
74:4e:26:57:ba:31:8d:f4:a9:38:2a:9c:a1:7c:62:
50:13:fc:aa:37:f2:f3:69:57:ff:0d:e6:21:bb:bb:
5e:74:18:f9:c9:e8:5a:ce:fc:e5:35:60:d6:4b:57:
3b:33:36:01:94:64:a6:0f:45:e1:5e:2e:7d:d5:43:
e5:94:4e:61:08:f3:71:ed:02:ee:28:7a:24:a4:97:
2a:bc:55:51:39:e6:c6:ae:48:30:67:91:2a:26:3a:
26:0d:10:3a:5d:8c:87:b4:f8:86:86:96:34:45:ae:
5f:5d:00:3a:05:6f:2d:0c:dd:0b:3f:5f:a5:1d:b7:
60:74:c9:6c:c2:b8:dc:14:53:e5:99:cb:60:b5:9e:
39:83:64:97:22:57:80:df:73:b0:71:70:e1:df:fc:
24:43:70:a6:d2:82:b0:fe:55:d1:40:69:65:d8:03:
a9:92:5e:2d:57:17:29:31:77:95:67:c4:98:66:03:
10:07:b6:15:7e:a4:db:f3:71:1e:da:93:f7:23:bd:
f6:44:65:25:4a:b6:ce:a6:33:9f:f8:d1:fe:e3:bc:
5c:22:21:e7:1f:87:0d:54:5d:fa:55:9a:08:3e:9f:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:0A:DB:B7:60:93:B6:FF:BF:13:97:12:39:C6:7C:22:6A:67:3C
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.58.81.0/24
122.5.53.0-122.5.54.255
122.5.59.0-122.5.60.255
150.138.32.0/20
219.146.131.0/24
222.173.195.0/24
IPv6:
240e:e:d000::/37
240e:947::/36
240e:947:2000::/40
240e:947:3000::/36
240e:947:5000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:05:19:1d:b4:b1:60:af:47:08:92:50:0a:1a:f6:82:31:d9:
d9:a3:80:fb:f8:25:af:42:39:78:93:a6:f8:d6:b0:f0:ef:59:
54:36:37:28:91:de:4e:ca:e6:9a:31:d2:9c:e8:3f:4e:62:7a:
f4:35:ba:ec:20:5d:85:a8:73:b9:70:fc:c7:31:53:b8:77:e4:
cd:dc:b2:60:11:14:01:f3:54:cf:51:27:59:9b:46:0f:3e:22:
61:73:93:bb:6e:2a:00:b6:74:4f:75:90:60:5a:92:71:68:57:
86:d5:d1:80:c2:90:70:74:d8:a7:7a:df:b2:ca:b1:6e:5a:15:
ac:d8:ef:a0:e2:c0:3d:72:99:e1:6a:98:03:93:1f:1d:33:ba:
7c:07:cb:d1:87:2c:20:ef:52:5c:0e:10:94:30:a2:73:c3:53:
88:b4:75:f0:06:67:5b:c5:f2:a1:18:30:6d:49:81:79:c2:68:
5e:3a:fc:43:bc:96:b6:e4:8a:74:00:7e:19:4b:9b:7d:7c:b0:
4a:29:c7:ba:34:0a:3d:31:af:f5:a6:54:16:31:18:29:3c:e2:
d4:b4:84:22:51:12:f0:c8:2c:9f:08:1a:ab:6b:ba:38:b9:bc:
7e:0b:29:43:e1:0f:70:32:6f:a1:af:47:b5:89:a3:dc:dd:5a:
b0:40:73:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFa+jJ7eiyrGXgfZk7a0AywA9jSEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDIxOVoX
DTI3MDUyNzE2MDcxOVowMzExMC8GA1UEAxMoNkM3MDBBREJCNzYwOTNCNkZGQkYx
Mzk3MTIzOUM2N0MyMjZBNjczQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI7HPBfBdS0cqtV6pNOlqhQ/dvKRQHfpkrcKJdoydE4mV7oxjfSpOCqcoXxi
UBP8qjfy82lX/w3mIbu7XnQY+cnoWs785TVg1ktXOzM2AZRkpg9F4V4ufdVD5ZRO
YQjzce0C7ih6JKSXKrxVUTnmxq5IMGeRKiY6Jg0QOl2Mh7T4hoaWNEWuX10AOgVv
LQzdCz9fpR23YHTJbMK43BRT5ZnLYLWeOYNklyJXgN9zsHFw4d/8JENwptKCsP5V
0UBpZdgDqZJeLVcXKTF3lWfEmGYDEAe2FX6k2/NxHtqT9yO99kRlJUq2zqYzn/jR
/uO8XCIh5x+HDVRd+lWaCD6fPmcCAwEAAaOCAkIwggI+MB0GA1UdDgQWBBRscArb
t2CTtv+/E5cSOcZ8ImpnPDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM5ODg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MH0GCCsGAQUFBwEHAQH/BG4wbDA6BAIAATA0AwQAOjpRMAwDBAB6BTUDBAB6BTYw
DAMEAHoFOwMEAHoFPAMEBJaKIAMEANuSgwMEAN6twzAuBAIAAjAoAwYDJA4ADtAD
BgQkDglHAAMGACQOCUcgAwYEJA4JRzADBgQkDglHUDANBgkqhkiG9w0BAQsFAAOC
AQEAjQUZHbSxYK9HCJJQChr2gjHZ2aOA+/glr0I5eJOm+Naw8O9ZVDY3KJHeTsrm
mjHSnOg/TmJ69DW67CBdhahzuXD8xzFTuHfkzdyyYBEUAfNUz1EnWZtGDz4iYXOT
u24qALZ0T3WQYFqScWhXhtXRgMKQcHTYp3rfssqxbloVrNjvoOLAPXKZ4WqYA5Mf
HTO6fAfL0YcsIO9SXA4QlDCic8NTiLR18AZnW8XyoRgwbUmBecJoXjr8Q7yWtuSK
dAB+GUubfXywSinHujQKPTGv9aZUFjEYKTzi1LSEIlES8Mgsnwgaq2u6OLm8fgsp
Q+EPcDJvoa9HtYmj3N1asEBzPw==
-----END CERTIFICATE-----
Generated at Sat May 30 04:14:41 2026 by rpki-client