Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58466.roa
File: AS58466.roa (raw, json)
Hash identifier: ACCIwnY2pr9mBzkokVZs6k6NbST43F9P6dWY0fFLIsY=
Subject key identifier: D1:B8:E0:ED:7C:94:ED:04:D7:E9:5A:F2:6F:81:EF:44:73:5E:6F:48
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4B3B7119A9EAE77E0CFC6A242D4C75FB48D6EA53
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58466.roa
Signing time: Tue 16 Jun 2026 16:16:09 +0000
ROA not before: Tue 16 Jun 2026 16:11:09 +0000
ROA not after: Tue 15 Jun 2027 16:16:09 +0000
asID: 58466
IP address blocks: 14.18.32.0/19 maxlen: 19
14.18.64.0/20 maxlen: 20
14.18.80.0/21 maxlen: 21
14.18.88.0/23 maxlen: 23
14.18.92.0/22 maxlen: 22
14.18.96.0/21 maxlen: 21
14.18.104.0/21 maxlen: 21
14.18.112.0/22 maxlen: 22
14.18.116.0/22 maxlen: 22
14.18.120.0/24 maxlen: 24
14.18.121.0/24 maxlen: 24
14.22.118.0/24 maxlen: 24
14.22.119.0/24 maxlen: 24
14.22.120.0/23 maxlen: 23
14.22.122.0/23 maxlen: 23
14.116.192.0/24 maxlen: 24
14.116.193.0/24 maxlen: 24
14.116.194.0/24 maxlen: 24
14.116.195.0/24 maxlen: 24
14.116.196.0/24 maxlen: 24
14.116.197.0/24 maxlen: 24
14.116.198.0/24 maxlen: 24
14.116.199.0/24 maxlen: 24
14.116.200.0/24 maxlen: 24
14.116.201.0/24 maxlen: 24
14.116.202.0/24 maxlen: 24
14.116.203.0/24 maxlen: 24
14.116.204.0/24 maxlen: 24
14.116.205.0/24 maxlen: 24
14.116.206.0/24 maxlen: 24
14.116.207.0/24 maxlen: 24
14.116.208.0/24 maxlen: 24
14.116.209.0/24 maxlen: 24
14.116.210.0/23 maxlen: 23
14.116.212.0/22 maxlen: 22
14.116.216.0/22 maxlen: 22
14.116.220.0/23 maxlen: 23
14.116.222.0/23 maxlen: 23
14.116.250.0/24 maxlen: 24
14.116.251.0/24 maxlen: 24
14.116.252.0/24 maxlen: 24
14.116.253.0/24 maxlen: 24
14.116.254.0/24 maxlen: 24
14.116.255.0/24 maxlen: 24
14.215.44.0/24 maxlen: 24
14.215.45.0/24 maxlen: 24
14.215.46.0/24 maxlen: 24
14.215.47.0/24 maxlen: 24
14.215.48.0/24 maxlen: 24
14.215.49.0/24 maxlen: 24
14.215.50.0/24 maxlen: 24
14.215.51.0/24 maxlen: 24
36.111.32.0/23 maxlen: 23
36.111.34.0/23 maxlen: 23
113.108.217.0/24 maxlen: 24
125.88.204.0/23 maxlen: 23
125.88.206.0/23 maxlen: 23
125.88.208.0/22 maxlen: 22
125.88.212.0/22 maxlen: 22
125.88.216.0/22 maxlen: 22
125.88.220.0/22 maxlen: 22
125.88.224.0/22 maxlen: 22
125.88.228.0/23 maxlen: 23
125.88.230.0/23 maxlen: 23
125.88.232.0/21 maxlen: 21
125.88.240.0/22 maxlen: 22
125.88.244.0/22 maxlen: 22
183.56.192.0/19 maxlen: 19
183.56.224.0/20 maxlen: 20
183.56.240.0/21 maxlen: 21
183.56.248.0/23 maxlen: 23
203.32.68.0/24 maxlen: 24
203.32.69.0/24 maxlen: 24
203.32.84.0/24 maxlen: 24
203.32.85.0/24 maxlen: 24
203.32.204.0/23 maxlen: 23
203.33.158.0/24 maxlen: 24
203.33.159.0/24 maxlen: 24
240e:1f:5000::/36 maxlen: 36
240e:ff:e000::/36 maxlen: 36
240e:108:22::/48 maxlen: 48
240e:108:42::/48 maxlen: 48
240e:108:9a::/48 maxlen: 48
240e:108:11e0::/48 maxlen: 48
240e:108:4045::/48 maxlen: 48
240e:108:4845::/48 maxlen: 48
240e:109:8022::/48 maxlen: 48
240e:109:8042::/48 maxlen: 48
240e:97c::/36 maxlen: 36
240e:980:2200::/40 maxlen: 40
240e:980:4200::/40 maxlen: 40
240e:980:9a00::/44 maxlen: 44
240e:980:9a10::/44 maxlen: 44
240e:980:9a20::/44 maxlen: 44
240e:980:9a30::/44 maxlen: 44
240e:982:e000::/40 maxlen: 40
240e:983:1e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3b:71:19:a9:ea:e7:7e:0c:fc:6a:24:2d:4c:75:fb:48:d6:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 16:11:09 2026 GMT
Not After : Jun 15 16:16:09 2027 GMT
Subject: CN=D1B8E0ED7C94ED04D7E95AF26F81EF44735E6F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:7a:19:f8:36:55:72:aa:89:3e:ff:25:b6:
ef:23:73:57:eb:c6:10:3e:8b:da:39:ff:65:b6:0c:
47:ac:4e:e2:0f:6f:1d:f4:c5:b4:a5:8d:62:44:94:
b6:c9:60:86:4f:0b:b4:01:98:0c:bf:a9:6d:17:a2:
04:47:e9:24:46:cf:f8:ae:fc:1d:69:3a:62:db:75:
92:44:42:05:68:c4:79:72:7f:4e:47:27:fe:e9:e5:
36:a7:d3:45:49:a7:28:6a:2f:12:5e:ea:ec:44:d9:
13:e7:ff:3b:d4:22:9d:94:54:1d:f2:eb:b9:c9:40:
36:cf:29:07:b5:3a:bf:07:7c:00:b2:24:9d:bd:38:
30:68:93:a5:f5:00:b8:bc:be:cf:0d:93:9f:47:82:
4c:af:3c:06:56:90:ea:22:59:46:e8:6c:12:8e:89:
26:87:25:fc:3f:83:b2:02:3b:3d:80:ef:3b:6f:ba:
0c:e6:cb:29:a3:89:95:3d:41:0a:74:1c:f3:3a:03:
c4:ca:3b:68:58:8c:8b:09:04:67:e4:dc:c1:6e:53:
7f:3b:fe:b5:5f:1c:de:d6:ef:1e:94:ab:da:be:92:
63:ab:8b:f3:4f:93:89:d9:92:d2:a2:8c:4a:49:d5:
38:d5:a4:81:63:ea:fd:d3:0a:0a:11:a2:59:51:9f:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:E0:ED:7C:94:ED:04:D7:E9:5A:F2:6F:81:EF:44:73:5E:6F:48
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.18.32.0-14.18.89.255
14.18.92.0-14.18.121.255
14.22.118.0-14.22.123.255
14.116.192.0/19
14.116.250.0-14.116.255.255
14.215.44.0-14.215.51.255
36.111.32.0/22
113.108.217.0/24
125.88.204.0-125.88.247.255
183.56.192.0-183.56.249.255
203.32.68.0/23
203.32.84.0/23
203.32.204.0/23
203.33.158.0/23
IPv6:
240e:1f:5000::/36
240e:ff:e000::/36
240e:108:22::/48
240e:108:42::/48
240e:108:9a::/48
240e:108:11e0::/48
240e:108:4045::/48
240e:108:4845::/48
240e:109:8022::/48
240e:109:8042::/48
240e:97c::/36
240e:980:2200::/40
240e:980:4200::/40
240e:980:9a00::/42
240e:982:e000::/40
240e:983:1e00::/48
Signature Algorithm: sha256WithRSAEncryption
62:03:05:bc:1b:7c:87:c9:f9:66:b0:10:a8:de:3f:9a:ab:5d:
6c:e7:d3:91:19:47:d5:43:07:41:0c:a1:c0:b6:cf:61:d0:a1:
11:3e:ec:9e:f9:54:51:96:64:da:ee:35:83:af:63:ba:2f:9f:
3a:2b:5c:31:d1:d3:59:f7:ca:11:d9:5a:07:37:46:ed:3c:eb:
c4:cb:c2:f3:ef:d0:d5:8f:a5:1a:b1:01:fd:a5:f6:a8:37:45:
ae:37:7a:8b:28:c5:4c:5e:a8:ef:57:fd:a2:cc:1a:ea:83:53:
30:f4:1f:4b:2a:86:f4:98:14:7c:e3:bb:c0:90:6b:b6:7e:f2:
66:75:51:d2:8a:01:68:1a:9c:54:cb:02:28:75:57:4b:8b:66:
f0:a1:98:18:b5:16:c5:04:41:98:06:1b:2a:5e:4a:fa:2e:82:
4d:8f:fc:dd:82:05:9f:d5:c9:1c:10:c3:d7:e1:f9:72:5a:10:
42:82:06:33:2c:e6:85:81:1a:0a:52:25:50:5b:75:57:b9:b9:
04:2c:78:83:db:4e:d2:18:f2:7a:d0:97:cf:cf:60:61:af:bf:
9e:f2:d8:51:47:71:8a:5e:ab:68:05:3d:2c:00:10:5a:5d:c3:
f4:7e:c8:0d:b5:12:b8:f0:8b:31:a8:61:66:39:89:b0:22:4b:
83:f3:05:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 16:01:01 2026 by rpki-client