Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
File: AS58543.roa (raw, json)
Hash identifier: P33z0s0VRR8UX2+hHP4ZwvuoZ31VWO0z8HG/MVPYsHw=
Subject key identifier: FE:B4:6A:EE:7A:5B:8B:62:ED:54:D1:E9:01:61:35:3A:B2:7E:F5:96
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7262B5CE98FBC4B9E26E31C7DB9FA8FBD70E4277
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
Signing time: Thu 21 May 2026 16:28:17 +0000
ROA not before: Thu 21 May 2026 16:23:17 +0000
ROA not after: Thu 20 May 2027 16:28:17 +0000
asID: 58543
IP address blocks: 240e:1f:8000::/36 maxlen: 36
240e:1f:8001::/48 maxlen: 48
240e:1f:9000::/36 maxlen: 36
240e:1f:9100::/40 maxlen: 40
240e:1f:9200::/40 maxlen: 40
240e:1f:9400::/40 maxlen: 40
240e:1f:9500::/40 maxlen: 40
240e:1f:9600::/40 maxlen: 40
240e:1f:9700::/40 maxlen: 40
240e:1f:9800::/40 maxlen: 40
240e:1f:9900::/40 maxlen: 40
240e:1f:9b00::/40 maxlen: 40
240e:1f:9c00::/40 maxlen: 40
240e:ff:d000::/36 maxlen: 36
240e:ff:d200::/41 maxlen: 41
240e:ff:d280::/41 maxlen: 41
240e:ff:d380::/41 maxlen: 41
240e:ff:d400::/41 maxlen: 41
240e:ff:d480::/41 maxlen: 41
240e:ff:d500::/41 maxlen: 41
240e:ff:d580::/41 maxlen: 41
240e:ff:d600::/41 maxlen: 41
240e:ff:d680::/41 maxlen: 41
240e:ff:d780::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:62:b5:ce:98:fb:c4:b9:e2:6e:31:c7:db:9f:a8:fb:d7:0e:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 21 16:23:17 2026 GMT
Not After : May 20 16:28:17 2027 GMT
Subject: CN=FEB46AEE7A5B8B62ED54D1E90161353AB27EF596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:dc:c3:35:e3:6c:ed:8c:1e:de:5d:62:2e:
2f:fd:c5:cc:b2:d2:fe:79:8b:d9:fd:34:e2:3d:89:
cc:8e:25:9d:8e:ec:d7:08:13:c8:67:d2:10:28:cb:
00:61:69:56:f0:04:ab:75:1a:ef:ed:b8:35:8a:c6:
1e:e2:bf:4e:10:b3:e0:f0:c8:d4:38:34:fb:ce:0b:
a5:a5:d4:6e:99:b1:7c:1b:2e:b5:ec:9f:cb:41:7a:
fb:22:0c:72:54:07:a0:63:72:8f:b9:1e:b6:62:f5:
a7:39:5d:49:2f:ea:b5:b6:6b:f2:9e:4c:2c:54:2b:
39:65:f5:52:22:04:7f:86:97:b3:31:ff:74:84:85:
7c:f2:f4:d5:fb:80:3e:22:b1:93:af:cd:90:63:7f:
c2:e2:ba:e5:c1:03:ac:6d:cf:c0:ad:77:05:8c:97:
80:e4:f9:fb:a8:67:88:64:d2:77:34:2e:6a:67:5d:
ff:aa:3b:f0:96:0f:d6:b2:41:7b:73:ad:4e:ab:ed:
3a:12:f6:d8:60:7f:d6:5a:9e:23:34:6e:91:d7:75:
71:ba:88:f6:d5:d5:ce:99:0a:85:b8:60:13:2a:43:
96:8b:98:51:0b:5e:3c:71:98:7a:29:e0:03:1f:04:
ce:e6:9e:3a:93:23:08:b7:d4:50:43:d5:e8:3e:96:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B4:6A:EE:7A:5B:8B:62:ED:54:D1:E9:01:61:35:3A:B2:7E:F5:96
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:1f:8000::/35
240e:ff:d000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:25:c7:b6:eb:cf:6f:65:b6:13:e1:3c:cd:2a:50:de:ef:63:
ec:ce:cc:48:3f:05:96:7d:eb:c5:da:43:a1:cc:f4:a0:39:e7:
42:c6:90:b7:eb:ac:04:44:e8:3e:2e:e1:be:2c:c5:a8:10:71:
2f:37:c0:cb:ac:b4:45:85:47:5a:78:6e:19:b0:56:fb:d1:55:
69:2c:11:05:b9:39:5a:4c:d2:bd:2d:dc:27:35:c1:e9:86:6f:
87:47:77:90:ea:be:ee:20:b9:aa:f0:1d:fc:30:15:02:01:cc:
2c:85:1a:63:68:51:87:2b:dc:ce:7d:84:87:4a:34:48:6e:40:
37:49:fc:87:83:82:a0:57:0a:1a:59:ec:9f:cf:2c:0a:9f:87:
32:d1:38:b2:e0:5b:61:d8:64:ad:53:00:45:0a:46:85:3b:3a:
97:cb:81:07:8b:b6:2f:e4:31:ae:79:7b:f4:ed:ee:bf:a7:58:
3b:0a:f9:d1:3a:25:8d:99:2e:6b:e5:7f:2d:d0:e0:5e:45:fd:
b5:e4:d7:c2:52:0e:43:60:c4:fb:e1:f8:b9:d2:e7:7d:8c:d5:
70:25:81:04:7f:a3:3d:c8:db:c6:b1:3f:06:d4:84:c3:fc:da:
0c:b3:25:a0:6a:8b:90:52:47:d3:98:3e:a2:64:8f:c5:95:c2:
dc:35:79:7a
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUcmK1zpj7xLnibjHH25+o+9cOQncwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE2MjMxN1oX
DTI3MDUyMDE2MjgxN1owMzExMC8GA1UEAxMoRkVCNDZBRUU3QTVCOEI2MkVENTRE
MUU5MDE2MTM1M0FCMjdFRjU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALEd3MM142ztjB7eXWIuL/3FzLLS/nmL2f004j2JzI4lnY7s1wgTyGfSECjL
AGFpVvAEq3Ua7+24NYrGHuK/ThCz4PDI1Dg0+84LpaXUbpmxfBsuteyfy0F6+yIM
clQHoGNyj7ketmL1pzldSS/qtbZr8p5MLFQrOWX1UiIEf4aXszH/dISFfPL01fuA
PiKxk6/NkGN/wuK65cEDrG3PwK13BYyXgOT5+6hniGTSdzQuamdd/6o78JYP1rJB
e3OtTqvtOhL22GB/1lqeIzRukdd1cbqI9tXVzpkKhbhgEypDlouYUQtePHGYeing
Ax8EzuaeOpMjCLfUUEPV6D6WyMkCAwEAAaOCAe0wggHpMB0GA1UdDgQWBBT+tGru
eluLYu1U0ekBYTU6sn71ljAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTNTg1NDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgUkDgAfgAMGBCQOAP/QMA0GCSqG
SIb3DQEBCwUAA4IBAQCLJce2689vZbYT4TzNKlDe72PszsxIPwWWfevF2kOhzPSg
OedCxpC366wEROg+LuG+LMWoEHEvN8DLrLRFhUdaeG4ZsFb70VVpLBEFuTlaTNK9
LdwnNcHphm+HR3eQ6r7uILmq8B38MBUCAcwshRpjaFGHK9zOfYSHSjRIbkA3SfyH
g4KgVwoaWeyfzywKn4cy0Tiy4Fth2GStUwBFCkaFOzqXy4EHi7Yv5DGueXv07e6/
p1g7CvnROiWNmS5r5X8t0OBeRf215NfCUg5DYMT74fi50ud9jNVwJYEEf6M9yNvG
sT8G1ITD/NoMsyWgaouQUkfTmD6iZI/FlcLcNXl6
-----END CERTIFICATE-----
Generated at Sat May 23 07:08:17 2026 by rpki-client