Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
File: AS58563.roa (raw, json)
Hash identifier: ez2l+BH5QXK2brRmAh0269y/kkRnyTRhPRTV9SFATFI=
Subject key identifier: 5E:0D:67:E3:35:48:DC:4D:8D:8E:75:8E:02:27:BE:64:21:ED:1F:C9
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 64F1C84F2A2D35B60590CF1F2BE01091E2A0E06B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
Signing time: Tue 13 Oct 2026 08:32:09 +0000
ROA not before: Tue 13 Oct 2026 08:27:09 +0000
ROA not after: Tue 12 Oct 2027 08:32:09 +0000
asID: 58563
IP address blocks: 27.18.12.0/24 maxlen: 24
27.18.13.0/24 maxlen: 24
27.19.220.0/22 maxlen: 22
27.19.248.0/21 maxlen: 21
58.49.144.0/21 maxlen: 21
58.49.152.0/22 maxlen: 22
58.49.156.0/22 maxlen: 22
58.49.157.0/24 maxlen: 24
58.49.160.0/22 maxlen: 22
58.49.184.0/21 maxlen: 21
58.49.192.0/22 maxlen: 22
58.49.196.0/22 maxlen: 22
58.49.212.0/22 maxlen: 22
58.49.216.0/22 maxlen: 22
58.49.220.0/22 maxlen: 22
58.49.224.0/21 maxlen: 21
58.49.232.0/22 maxlen: 22
58.49.236.0/22 maxlen: 22
58.49.240.0/22 maxlen: 22
58.49.244.0/22 maxlen: 22
58.49.248.0/22 maxlen: 22
58.49.252.0/22 maxlen: 22
61.183.64.0/24 maxlen: 24
61.183.65.0/24 maxlen: 24
61.183.164.0/22 maxlen: 22
111.172.0.0/24 maxlen: 24
111.172.208.0/22 maxlen: 22
116.211.68.0/22 maxlen: 22
116.211.72.0/21 maxlen: 21
116.211.76.0/23 maxlen: 23
116.211.80.0/20 maxlen: 20
116.211.96.0/20 maxlen: 20
116.211.112.0/20 maxlen: 20
116.211.128.0/22 maxlen: 22
116.211.132.0/22 maxlen: 22
116.211.136.0/22 maxlen: 22
116.211.140.0/22 maxlen: 22
116.211.144.0/21 maxlen: 21
116.211.152.0/21 maxlen: 21
116.211.160.0/19 maxlen: 19
116.211.185.0/24 maxlen: 24
116.211.192.0/18 maxlen: 18
116.211.192.0/20 maxlen: 20
116.211.216.0/21 maxlen: 21
116.211.224.0/22 maxlen: 22
116.211.228.0/22 maxlen: 22
116.211.232.0/22 maxlen: 22
116.211.232.0/24 maxlen: 24
116.211.236.0/22 maxlen: 22
119.96.0.0/22 maxlen: 22
119.96.4.0/22 maxlen: 22
119.96.8.0/22 maxlen: 22
119.96.12.0/22 maxlen: 22
119.96.16.0/22 maxlen: 22
119.96.20.0/22 maxlen: 22
119.96.23.0/24 maxlen: 24
119.96.24.0/22 maxlen: 22
119.96.25.0/24 maxlen: 24
119.96.26.0/24 maxlen: 24
119.96.27.0/24 maxlen: 24
119.96.28.0/22 maxlen: 22
119.96.28.0/24 maxlen: 24
119.96.29.0/24 maxlen: 24
119.96.30.0/24 maxlen: 24
119.96.31.0/24 maxlen: 24
119.96.32.0/22 maxlen: 22
119.96.36.0/23 maxlen: 23
119.96.44.0/22 maxlen: 22
119.96.48.0/22 maxlen: 22
119.96.52.0/22 maxlen: 22
119.96.53.0/24 maxlen: 24
119.96.56.0/22 maxlen: 22
119.96.60.0/22 maxlen: 22
119.96.64.0/22 maxlen: 22
119.96.68.0/22 maxlen: 22
119.96.72.0/22 maxlen: 22
119.96.76.0/22 maxlen: 22
119.96.80.0/20 maxlen: 20
119.96.80.0/21 maxlen: 21
119.96.88.0/21 maxlen: 21
119.96.96.0/21 maxlen: 21
119.96.104.0/21 maxlen: 21
119.96.112.0/21 maxlen: 21
119.96.120.0/21 maxlen: 21
119.96.128.0/21 maxlen: 21
119.96.136.0/22 maxlen: 22
119.96.140.0/22 maxlen: 22
119.96.144.0/22 maxlen: 22
119.96.148.0/22 maxlen: 22
119.96.152.0/21 maxlen: 21
119.96.160.0/22 maxlen: 22
119.96.164.0/22 maxlen: 22
119.96.168.0/22 maxlen: 22
119.96.169.0/24 maxlen: 24
119.96.172.0/22 maxlen: 22
119.96.172.0/24 maxlen: 24
119.96.176.0/22 maxlen: 22
119.96.180.0/22 maxlen: 22
119.96.184.0/22 maxlen: 22
119.96.188.0/22 maxlen: 22
119.96.191.0/24 maxlen: 24
119.96.192.0/22 maxlen: 22
119.96.193.0/24 maxlen: 24
119.96.196.0/22 maxlen: 22
119.96.200.0/22 maxlen: 22
119.96.204.0/22 maxlen: 22
119.96.208.0/22 maxlen: 22
119.96.208.0/24 maxlen: 24
119.96.212.0/22 maxlen: 22
119.96.216.0/22 maxlen: 22
119.96.220.0/22 maxlen: 22
119.96.224.0/22 maxlen: 22
119.96.228.0/22 maxlen: 22
119.96.230.0/24 maxlen: 24
119.96.232.0/22 maxlen: 22
119.96.236.0/22 maxlen: 22
119.96.240.0/22 maxlen: 22
119.96.240.0/24 maxlen: 24
119.96.242.0/24 maxlen: 24
119.96.243.0/24 maxlen: 24
119.96.244.0/22 maxlen: 22
119.96.248.0/22 maxlen: 22
119.96.252.0/22 maxlen: 22
171.43.130.0/24 maxlen: 24
171.43.131.0/24 maxlen: 24
171.43.132.0/24 maxlen: 24
171.43.133.0/24 maxlen: 24
171.43.134.0/24 maxlen: 24
171.43.135.0/24 maxlen: 24
171.43.138.0/24 maxlen: 24
171.43.141.0/24 maxlen: 24
171.43.146.0/23 maxlen: 23
171.43.146.0/24 maxlen: 24
171.43.155.0/24 maxlen: 24
171.43.156.0/24 maxlen: 24
171.43.157.0/24 maxlen: 24
171.43.162.0/23 maxlen: 23
171.43.164.0/22 maxlen: 22
171.43.168.0/23 maxlen: 23
171.43.170.0/23 maxlen: 23
171.43.173.0/24 maxlen: 24
171.43.192.0/23 maxlen: 23
171.43.194.0/23 maxlen: 23
171.43.196.0/24 maxlen: 24
171.43.197.0/24 maxlen: 24
171.43.198.0/23 maxlen: 23
171.43.200.0/22 maxlen: 22
171.43.204.0/24 maxlen: 24
171.43.205.0/24 maxlen: 24
171.43.208.0/24 maxlen: 24
171.43.214.0/23 maxlen: 23
171.43.220.0/24 maxlen: 24
171.43.226.0/24 maxlen: 24
171.43.227.0/24 maxlen: 24
171.43.228.0/23 maxlen: 23
171.43.236.0/22 maxlen: 22
171.43.240.0/22 maxlen: 22
171.43.246.0/23 maxlen: 23
171.43.248.0/24 maxlen: 24
171.43.249.0/24 maxlen: 24
171.43.250.0/24 maxlen: 24
171.43.251.0/24 maxlen: 24
171.43.252.0/23 maxlen: 23
203.2.66.0/24 maxlen: 24
203.2.67.0/24 maxlen: 24
203.2.70.0/23 maxlen: 23
221.235.252.0/22 maxlen: 22
240e:d:800::/37 maxlen: 37
240e:d:8800::/37 maxlen: 37
240e:d:9000::/37 maxlen: 37
240e:d:9800::/37 maxlen: 37
240e:b6::/36 maxlen: 36
240e:b7:5000::/37 maxlen: 37
240e:b7:5800::/37 maxlen: 37
240e:b7:6000::/36 maxlen: 36
240e:b7:7000::/36 maxlen: 36
240e:105:ee00::/39 maxlen: 39
240e:105:f700::/40 maxlen: 40
240e:108:2b::/48 maxlen: 48
240e:108:95::/48 maxlen: 48
240e:108:1160::/48 maxlen: 48
240e:108:1167::/48 maxlen: 48
240e:25f:a800::/37 maxlen: 37
240e:95c::/36 maxlen: 36
240e:95c:1000::/36 maxlen: 36
240e:95c:2000::/36 maxlen: 36
240e:95c:3000::/36 maxlen: 36
240e:95c:6000::/36 maxlen: 36
240e:980:2b00::/40 maxlen: 40
240e:980:9500::/40 maxlen: 40
240e:982:6000::/40 maxlen: 40
240e:982:6700::/40 maxlen: 40
240e:982:6a00::/40 maxlen: 40
240e:982:6b04::/48 maxlen: 48
240e:982:6c00::/40 maxlen: 40
240e:983:1600::/48 maxlen: 48
240e:983:1601::/48 maxlen: 48
240e:983:1602::/48 maxlen: 48
240e:983:160a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f1:c8:4f:2a:2d:35:b6:05:90:cf:1f:2b:e0:10:91:e2:a0:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Oct 13 08:27:09 2026 GMT
Not After : Oct 12 08:32:09 2027 GMT
Subject: CN=5E0D67E33548DC4D8D8E758E0227BE6421ED1FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:a8:ac:7b:54:04:15:e6:d3:01:10:51:bb:
17:7d:99:85:25:4f:60:82:f8:b7:2c:ac:62:19:f5:
94:82:74:10:4a:7c:6b:ec:cc:90:38:f7:86:55:52:
71:44:3d:22:b6:da:9c:8e:2e:7e:7a:0f:33:e5:d7:
50:59:df:d5:27:3b:94:36:85:4f:64:0d:67:4b:28:
03:be:38:b6:9f:26:b5:fb:23:73:bf:04:9e:ab:a7:
b6:82:61:b1:0d:80:9a:ab:74:fc:f1:36:9a:31:7c:
02:e1:cb:b5:97:91:16:e5:8b:55:e2:3c:39:3f:50:
05:0e:0b:61:eb:01:88:70:34:5e:fa:9e:01:0f:52:
ee:e6:5e:28:1f:b8:a4:62:99:63:25:e2:74:13:da:
6e:6e:ab:ab:b6:4e:9f:8a:06:9a:6e:66:e9:99:1b:
19:c5:8e:c3:0a:ef:91:05:35:d3:ca:28:e3:52:db:
6f:05:d9:e0:7b:a4:bf:b7:84:9c:54:bf:24:55:ea:
fa:c9:bd:a1:5c:5a:be:f1:2b:5e:bf:7b:74:18:62:
2a:25:af:9b:1b:50:97:7b:b5:66:eb:af:ac:b7:52:
c6:c3:6e:93:26:4e:e4:46:d6:45:4b:e5:c4:df:f8:
33:4c:6d:bd:ee:e5:65:3c:26:b8:29:5d:e8:ab:d7:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0D:67:E3:35:48:DC:4D:8D:8E:75:8E:02:27:BE:64:21:ED:1F:C9
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.18.12.0/23
27.19.220.0/22
27.19.248.0/21
58.49.144.0-58.49.163.255
58.49.184.0-58.49.199.255
58.49.212.0-58.49.255.255
61.183.64.0/23
61.183.164.0/22
111.172.0.0/24
111.172.208.0/22
116.211.68.0-116.211.255.255
119.96.0.0-119.96.37.255
119.96.44.0-119.96.255.255
171.43.130.0-171.43.135.255
171.43.138.0/24
171.43.141.0/24
171.43.146.0/23
171.43.155.0-171.43.157.255
171.43.162.0-171.43.171.255
171.43.173.0/24
171.43.192.0-171.43.205.255
171.43.208.0/24
171.43.214.0/23
171.43.220.0/24
171.43.226.0-171.43.229.255
171.43.236.0-171.43.243.255
171.43.246.0-171.43.253.255
203.2.66.0/23
203.2.70.0/23
221.235.252.0/22
IPv6:
240e:d:800::/37
240e:d:8800::-240e:d:9fff:ffff:ffff:ffff:ffff:ffff
240e:b6::/36
240e:b7:5000::-240e:b7:7fff:ffff:ffff:ffff:ffff:ffff
240e:105:ee00::/39
240e:105:f700::/40
240e:108:2b::/48
240e:108:95::/48
240e:108:1160::/48
240e:108:1167::/48
240e:25f:a800::/37
240e:95c::/34
240e:95c:6000::/36
240e:980:2b00::/40
240e:980:9500::/40
240e:982:6000::/40
240e:982:6700::/40
240e:982:6a00::/40
240e:982:6b04::/48
240e:982:6c00::/40
240e:983:1600::-240e:983:1602:ffff:ffff:ffff:ffff:ffff
240e:983:160a::/48
Signature Algorithm: sha256WithRSAEncryption
1d:fc:f5:1b:e0:0b:75:4d:8a:b2:2e:b1:fa:1f:df:1a:f2:23:
f8:89:b0:e5:f9:96:9d:85:86:18:3f:eb:f5:d8:f9:ff:37:5b:
d1:11:f7:08:2b:a7:a2:34:c3:7b:de:5f:6b:fd:58:c7:9f:84:
be:3d:40:87:7b:cf:3f:7d:3f:5d:92:0f:70:0d:f7:d1:fb:85:
93:03:70:fb:b4:6c:5b:64:26:01:d1:3c:25:f8:8f:df:cc:96:
6f:63:d6:7c:cd:c9:9d:a9:ea:a4:bb:b3:78:fc:7a:6b:32:34:
29:52:58:e3:ee:bd:a1:0b:28:fe:ca:c4:cb:8f:73:72:3d:ef:
39:6d:2e:c9:9c:99:bf:52:80:c5:e3:89:90:ad:be:ae:26:a1:
74:a4:8e:cc:af:8e:c5:fc:c2:7e:82:9a:78:88:15:dc:8d:31:
77:a2:11:5b:7b:a7:f4:25:f4:6f:5c:d8:72:94:39:af:70:80:
8a:42:55:c1:97:dd:d5:21:b9:fb:cd:30:f7:10:9e:e3:2d:6c:
7b:9b:12:d6:19:2a:32:b0:49:64:d0:15:a9:ac:26:b9:02:74:
fe:21:bf:ea:ef:7e:35:88:28:a4:47:f8:35:60:b9:fb:3e:c7:
27:61:33:f8:ba:e6:72:80:f3:92:62:c2:a4:5a:bb:4e:bd:2f:
ed:41:fb:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:16:05 2026 by rpki-client