Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
File: AS58563.roa (raw, json)
Hash identifier: bsQUlKBn2GPMhXIzgFXeiFuMdGcnJtg7Quf5My1Q6Gw=
Subject key identifier: 53:A4:E2:AD:41:57:F1:D7:92:A0:EF:A9:12:1E:DB:0C:E3:17:B6:E4
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5934AFFD95F1A7D16C2FABF50EB709E103D483A8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
Signing time: Thu 04 Jun 2026 16:14:43 +0000
ROA not before: Thu 04 Jun 2026 16:09:43 +0000
ROA not after: Thu 03 Jun 2027 16:14:43 +0000
asID: 58563
IP address blocks: 27.19.220.0/22 maxlen: 22
27.19.248.0/21 maxlen: 21
58.49.144.0/21 maxlen: 21
58.49.152.0/22 maxlen: 22
58.49.156.0/22 maxlen: 22
58.49.160.0/22 maxlen: 22
58.49.192.0/22 maxlen: 22
58.49.196.0/22 maxlen: 22
58.49.212.0/22 maxlen: 22
58.49.216.0/22 maxlen: 22
58.49.220.0/22 maxlen: 22
58.49.224.0/21 maxlen: 21
58.49.232.0/22 maxlen: 22
58.49.236.0/22 maxlen: 22
58.49.240.0/22 maxlen: 22
58.49.244.0/22 maxlen: 22
58.49.248.0/22 maxlen: 22
58.49.252.0/22 maxlen: 22
61.183.164.0/22 maxlen: 22
111.172.0.0/24 maxlen: 24
111.172.208.0/22 maxlen: 22
116.211.68.0/22 maxlen: 22
116.211.72.0/21 maxlen: 21
116.211.76.0/23 maxlen: 23
116.211.80.0/20 maxlen: 20
116.211.96.0/20 maxlen: 20
116.211.112.0/20 maxlen: 20
116.211.128.0/22 maxlen: 22
116.211.132.0/22 maxlen: 22
116.211.136.0/22 maxlen: 22
116.211.140.0/22 maxlen: 22
116.211.144.0/21 maxlen: 21
116.211.152.0/21 maxlen: 21
116.211.160.0/19 maxlen: 19
116.211.185.0/24 maxlen: 24
116.211.192.0/18 maxlen: 18
116.211.192.0/20 maxlen: 20
116.211.216.0/21 maxlen: 21
116.211.224.0/22 maxlen: 22
116.211.228.0/22 maxlen: 22
116.211.232.0/22 maxlen: 22
116.211.232.0/24 maxlen: 24
116.211.236.0/22 maxlen: 22
119.96.0.0/22 maxlen: 22
119.96.4.0/22 maxlen: 22
119.96.8.0/22 maxlen: 22
119.96.12.0/22 maxlen: 22
119.96.16.0/22 maxlen: 22
119.96.20.0/22 maxlen: 22
119.96.23.0/24 maxlen: 24
119.96.24.0/22 maxlen: 22
119.96.25.0/24 maxlen: 24
119.96.26.0/24 maxlen: 24
119.96.27.0/24 maxlen: 24
119.96.28.0/22 maxlen: 22
119.96.28.0/24 maxlen: 24
119.96.29.0/24 maxlen: 24
119.96.30.0/24 maxlen: 24
119.96.31.0/24 maxlen: 24
119.96.32.0/22 maxlen: 22
119.96.36.0/23 maxlen: 23
119.96.44.0/22 maxlen: 22
119.96.48.0/22 maxlen: 22
119.96.52.0/22 maxlen: 22
119.96.53.0/24 maxlen: 24
119.96.56.0/22 maxlen: 22
119.96.60.0/22 maxlen: 22
119.96.64.0/22 maxlen: 22
119.96.68.0/22 maxlen: 22
119.96.72.0/22 maxlen: 22
119.96.76.0/22 maxlen: 22
119.96.80.0/20 maxlen: 20
119.96.80.0/21 maxlen: 21
119.96.88.0/21 maxlen: 21
119.96.96.0/21 maxlen: 21
119.96.104.0/21 maxlen: 21
119.96.112.0/21 maxlen: 21
119.96.120.0/21 maxlen: 21
119.96.128.0/21 maxlen: 21
119.96.136.0/22 maxlen: 22
119.96.140.0/22 maxlen: 22
119.96.144.0/22 maxlen: 22
119.96.148.0/22 maxlen: 22
119.96.152.0/21 maxlen: 21
119.96.160.0/22 maxlen: 22
119.96.164.0/22 maxlen: 22
119.96.168.0/22 maxlen: 22
119.96.169.0/24 maxlen: 24
119.96.172.0/22 maxlen: 22
119.96.172.0/24 maxlen: 24
119.96.176.0/22 maxlen: 22
119.96.180.0/22 maxlen: 22
119.96.184.0/22 maxlen: 22
119.96.188.0/22 maxlen: 22
119.96.191.0/24 maxlen: 24
119.96.192.0/22 maxlen: 22
119.96.193.0/24 maxlen: 24
119.96.196.0/22 maxlen: 22
119.96.200.0/22 maxlen: 22
119.96.204.0/22 maxlen: 22
119.96.208.0/22 maxlen: 22
119.96.208.0/24 maxlen: 24
119.96.212.0/22 maxlen: 22
119.96.216.0/22 maxlen: 22
119.96.220.0/22 maxlen: 22
119.96.224.0/22 maxlen: 22
119.96.228.0/22 maxlen: 22
119.96.230.0/24 maxlen: 24
119.96.232.0/22 maxlen: 22
119.96.236.0/22 maxlen: 22
119.96.240.0/22 maxlen: 22
119.96.240.0/24 maxlen: 24
119.96.242.0/24 maxlen: 24
119.96.243.0/24 maxlen: 24
119.96.244.0/22 maxlen: 22
119.96.248.0/22 maxlen: 22
119.96.252.0/22 maxlen: 22
171.43.130.0/24 maxlen: 24
171.43.131.0/24 maxlen: 24
171.43.132.0/24 maxlen: 24
171.43.133.0/24 maxlen: 24
171.43.134.0/24 maxlen: 24
171.43.135.0/24 maxlen: 24
171.43.138.0/24 maxlen: 24
171.43.141.0/24 maxlen: 24
171.43.146.0/23 maxlen: 23
171.43.146.0/24 maxlen: 24
171.43.155.0/24 maxlen: 24
171.43.156.0/24 maxlen: 24
171.43.157.0/24 maxlen: 24
171.43.162.0/23 maxlen: 23
171.43.164.0/22 maxlen: 22
171.43.168.0/23 maxlen: 23
171.43.170.0/23 maxlen: 23
171.43.173.0/24 maxlen: 24
171.43.192.0/23 maxlen: 23
171.43.194.0/23 maxlen: 23
171.43.196.0/24 maxlen: 24
171.43.197.0/24 maxlen: 24
171.43.198.0/23 maxlen: 23
171.43.200.0/22 maxlen: 22
171.43.204.0/24 maxlen: 24
171.43.205.0/24 maxlen: 24
171.43.208.0/24 maxlen: 24
171.43.214.0/23 maxlen: 23
171.43.220.0/24 maxlen: 24
171.43.226.0/24 maxlen: 24
171.43.228.0/23 maxlen: 23
171.43.240.0/22 maxlen: 22
171.43.246.0/23 maxlen: 23
171.43.248.0/24 maxlen: 24
171.43.249.0/24 maxlen: 24
171.43.250.0/24 maxlen: 24
171.43.251.0/24 maxlen: 24
171.43.252.0/23 maxlen: 23
203.2.66.0/24 maxlen: 24
203.2.67.0/24 maxlen: 24
203.2.70.0/23 maxlen: 23
221.235.252.0/22 maxlen: 22
240e:d:800::/37 maxlen: 37
240e:d:8800::/37 maxlen: 37
240e:d:9000::/37 maxlen: 37
240e:d:9800::/37 maxlen: 37
240e:b6::/36 maxlen: 36
240e:b7:5000::/37 maxlen: 37
240e:b7:5800::/37 maxlen: 37
240e:b7:6000::/36 maxlen: 36
240e:b7:7000::/36 maxlen: 36
240e:105:ee00::/39 maxlen: 39
240e:105:f700::/40 maxlen: 40
240e:108:2b::/48 maxlen: 48
240e:108:95::/48 maxlen: 48
240e:108:1160::/48 maxlen: 48
240e:108:1167::/48 maxlen: 48
240e:25f:a800::/37 maxlen: 37
240e:95c::/36 maxlen: 36
240e:95c:1000::/36 maxlen: 36
240e:95c:2000::/36 maxlen: 36
240e:95c:3000::/36 maxlen: 36
240e:95c:6000::/36 maxlen: 36
240e:980:2b00::/40 maxlen: 40
240e:980:9500::/40 maxlen: 40
240e:982:6000::/40 maxlen: 40
240e:982:6700::/40 maxlen: 40
240e:982:6a00::/40 maxlen: 40
240e:982:6b04::/48 maxlen: 48
240e:982:6c00::/40 maxlen: 40
240e:983:1600::/48 maxlen: 48
240e:983:1601::/48 maxlen: 48
240e:983:1602::/48 maxlen: 48
240e:983:160a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:34:af:fd:95:f1:a7:d1:6c:2f:ab:f5:0e:b7:09:e1:03:d4:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:09:43 2026 GMT
Not After : Jun 3 16:14:43 2027 GMT
Subject: CN=53A4E2AD4157F1D792A0EFA9121EDB0CE317B6E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:e6:18:de:8b:55:32:3d:bf:b4:2d:02:7e:
d2:fb:a6:e5:01:a1:7c:04:5f:f3:d0:5b:ee:c1:5b:
93:0b:b5:d4:38:34:b9:6a:9e:3b:0c:87:24:ee:be:
40:99:52:4c:74:b6:bf:82:8b:3e:84:5f:84:80:f2:
85:96:f1:f0:d3:9b:08:98:ed:a4:99:da:3d:a7:d9:
94:fc:56:b2:50:2b:2a:e8:93:d8:59:13:5c:d7:26:
f6:e5:19:64:01:e3:34:f7:b9:b9:63:fc:2a:d3:60:
89:be:8f:8a:9f:89:a0:47:25:4d:05:49:b2:40:d9:
c6:20:99:26:df:e6:4a:91:eb:68:41:ad:ec:32:54:
cc:6a:0f:fc:98:f9:7a:ac:e8:1c:da:54:36:95:44:
c8:cf:a5:55:3e:d5:30:df:dc:44:db:07:c0:21:3c:
84:26:74:ef:cd:1d:d2:cd:18:1d:4c:8a:4e:e0:4d:
d5:ea:0c:7e:38:5b:1d:65:76:e7:5e:ba:85:2a:a1:
bd:e2:c6:64:87:f0:51:1d:91:37:af:b2:79:84:25:
34:38:b4:18:e7:7d:33:10:e6:10:c5:02:73:4c:c2:
7f:9b:93:df:4e:15:20:56:8c:d8:1b:8c:d4:1e:c8:
fa:6d:d7:b5:50:ab:fb:38:7b:1f:59:6e:3c:79:47:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:E2:AD:41:57:F1:D7:92:A0:EF:A9:12:1E:DB:0C:E3:17:B6:E4
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.19.220.0/22
27.19.248.0/21
58.49.144.0-58.49.163.255
58.49.192.0/21
58.49.212.0-58.49.255.255
61.183.164.0/22
111.172.0.0/24
111.172.208.0/22
116.211.68.0-116.211.255.255
119.96.0.0-119.96.37.255
119.96.44.0-119.96.255.255
171.43.130.0-171.43.135.255
171.43.138.0/24
171.43.141.0/24
171.43.146.0/23
171.43.155.0-171.43.157.255
171.43.162.0-171.43.171.255
171.43.173.0/24
171.43.192.0-171.43.205.255
171.43.208.0/24
171.43.214.0/23
171.43.220.0/24
171.43.226.0/24
171.43.228.0/23
171.43.240.0/22
171.43.246.0-171.43.253.255
203.2.66.0/23
203.2.70.0/23
221.235.252.0/22
IPv6:
240e:d:800::/37
240e:d:8800::-240e:d:9fff:ffff:ffff:ffff:ffff:ffff
240e:b6::/36
240e:b7:5000::-240e:b7:7fff:ffff:ffff:ffff:ffff:ffff
240e:105:ee00::/39
240e:105:f700::/40
240e:108:2b::/48
240e:108:95::/48
240e:108:1160::/48
240e:108:1167::/48
240e:25f:a800::/37
240e:95c::/34
240e:95c:6000::/36
240e:980:2b00::/40
240e:980:9500::/40
240e:982:6000::/40
240e:982:6700::/40
240e:982:6a00::/40
240e:982:6b04::/48
240e:982:6c00::/40
240e:983:1600::-240e:983:1602:ffff:ffff:ffff:ffff:ffff
240e:983:160a::/48
Signature Algorithm: sha256WithRSAEncryption
56:a0:4d:da:55:80:ca:6e:b7:d2:a4:2d:ec:46:bc:e0:99:a5:
e8:a6:70:b2:d1:a8:d9:b6:af:73:96:f2:7e:46:78:e0:57:f3:
2c:54:74:eb:de:b5:30:3b:5f:fb:ca:c4:80:97:ac:99:a4:94:
7c:ba:67:b8:26:70:56:0e:4f:63:52:56:f1:ab:28:e9:81:af:
b1:47:d9:22:9d:27:2e:9e:c8:9f:1e:84:16:6c:48:77:f9:18:
31:51:7b:76:0c:22:e5:b1:60:90:7b:f1:e2:6d:bb:45:85:f6:
c3:90:c8:2b:a5:6a:f8:48:b7:de:80:55:27:d8:a3:8d:35:9d:
0f:5d:be:62:2b:b3:3f:19:73:70:03:92:a5:dd:f1:4b:77:09:
88:57:e8:f4:51:3e:65:83:79:f5:48:a5:63:7c:46:8c:c0:b3:
60:55:8b:b2:fd:bf:b5:4d:98:4e:2c:95:06:5f:e4:74:94:5c:
fe:b4:79:36:8b:68:b0:63:00:d0:b4:1c:b1:63:a9:2e:b7:f5:
f4:37:c3:2f:31:92:b6:fb:be:a7:01:8d:e6:16:ec:68:5d:d4:
4d:60:01:66:47:fe:20:fb:31:14:3b:2f:70:03:76:dc:7e:d4:
a2:ca:cd:5f:f0:93:dd:fe:90:95:7a:fa:94:bc:8e:b8:43:fc:
94:44:9f:38
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIUWTSv/ZXxp9FsL6v1DrcJ4QPUg6gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwNDE2MDk0M1oX
DTI3MDYwMzE2MTQ0M1owMzExMC8GA1UEAxMoNTNBNEUyQUQ0MTU3RjFENzkyQTBF
RkE5MTIxRURCMENFMzE3QjZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrZ5hjei1UyPb+0LQJ+0vum5QGhfARf89Bb7sFbkwu11Dg0uWqeOwyHJO6+
QJlSTHS2v4KLPoRfhIDyhZbx8NObCJjtpJnaPafZlPxWslArKuiT2FkTXNcm9uUZ
ZAHjNPe5uWP8KtNgib6Pip+JoEclTQVJskDZxiCZJt/mSpHraEGt7DJUzGoP/Jj5
eqzoHNpUNpVEyM+lVT7VMN/cRNsHwCE8hCZ0780d0s0YHUyKTuBN1eoMfjhbHWV2
5166hSqhveLGZIfwUR2RN6+yeYQlNDi0GOd9MxDmEMUCc0zCf5uT304VIFaM2BuM
1B7I+m3XtVCr+zh7H1luPHlH0uECAwEAAaOCA78wggO7MB0GA1UdDgQWBBRTpOKt
QVfx15Kg76kSHtsM4xe25DAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTNTg1NjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
ggH5BggrBgEFBQcBBwEB/wSCAegwggHkMIIBAQQCAAEwgfoDBAIbE9wDBAMbE/gw
DAMEBDoxkAMEAjoxoAMEAzoxwDALAwQCOjHUAwMBOjADBAI9t6QDBABvrAADBAJv
rNAwCwMEAnTTRAMDAnTQMAsDAwV3YAMEAXdgJDALAwQCd2AsAwMAd2AwDAMEAasr
ggMEA6srgAMEAKsrigMEAKsrjQMEAasrkjAMAwQAqyubAwQBqyucMAwDBAGrK6ID
BAKrK6gDBACrK60wDAMEBqsrwAMEAasrzAMEAKsr0AMEAasr1gMEAKsr3AMEAKsr
4gMEAasr5AMEAqsr8DAMAwQBqyv2AwQBqyv8AwQBywJCAwQBywJGAwQC3ev8MIHc
BAIAAjCB1QMGAyQOAA0IMBADBgMkDgANiAMGBSQOAA2AAwYEJA4AtgAwEAMGBCQO
ALdQAwYHJA4AtwADBgEkDgEF7gMGACQOAQX3AwcAJA4BCAArAwcAJA4BCACVAwcA
JA4BCBFgAwcAJA4BCBFnAwYDJA4CX6gDBgYkDglcAAMGBCQOCVxgAwYAJA4JgCsD
BgAkDgmAlQMGACQOCYJgAwYAJA4JgmcDBgAkDgmCagMHACQOCYJrBAMGACQOCYJs
MBEDBgEkDgmDFgMHACQOCYMWAgMHACQOCYMWCjANBgkqhkiG9w0BAQsFAAOCAQEA
VqBN2lWAym630qQt7Ea84Jml6KZwstGo2bavc5byfkZ44FfzLFR06961MDtf+8rE
gJesmaSUfLpnuCZwVg5PY1JW8aso6YGvsUfZIp0nLp7Inx6EFmxId/kYMVF7dgwi
5bFgkHvx4m27RYX2w5DIK6Vq+Ei33oBVJ9ijjTWdD12+YiuzPxlzcAOSpd3xS3cJ
iFfo9FE+ZYN59UilY3xGjMCzYFWLsv2/tU2YTiyVBl/kdJRc/rR5NotosGMA0LQc
sWOpLrf19DfDLzGStvu+pwGN5hbsaF3UTWABZkf+IPsxFDsvcAN23H7UosrNX/CT
3f6QlXr6lLyOuEP8lESfOA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:22:25 2026 by rpki-client