Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58777.roa
File:                     AS58777.roa (raw, json)
Hash identifier:          nQ7MOFZDPkTfSAuhkGJM7ds6zhu5C0kzoxmVkuXfvoQ=
Subject key identifier:   55:84:7A:AA:73:60:B9:EC:4A:70:F9:52:99:9C:9F:FF:21:B8:8B:37
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       2CF6058D3C5A69B37EC1B01CD9F6B409E7AB887C
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58777.roa
Signing time:             Mon 01 Jun 2026 14:57:11 +0000
ROA not before:           Mon 01 Jun 2026 14:52:11 +0000
ROA not after:            Mon 31 May 2027 14:57:11 +0000
asID:                     58777
IP address blocks:        42.122.63.0/24 maxlen: 24
                          59.47.246.0/23 maxlen: 23
                          59.52.138.0/24 maxlen: 24
                          61.133.162.0/24 maxlen: 24
                          61.151.144.0/23 maxlen: 23
                          106.91.120.0/24 maxlen: 24
                          113.240.205.0/24 maxlen: 24
                          117.25.105.0/24 maxlen: 24
                          125.93.28.0/23 maxlen: 23
                          171.221.53.0/24 maxlen: 24
                          182.36.0.0/24 maxlen: 24
                          182.36.12.0/24 maxlen: 24
                          220.171.147.0/24 maxlen: 24
                          221.226.225.0/24 maxlen: 24
                          221.235.40.0/24 maxlen: 24
                          221.237.65.0/24 maxlen: 24
                          240e:108:4000::/48 maxlen: 48
                          240e:108:4001::/48 maxlen: 48
                          240e:108:4020::/48 maxlen: 48
                          240e:108:4025::/48 maxlen: 48
                          240e:108:4040::/48 maxlen: 48
                          240e:108:4047::/48 maxlen: 48
                          240e:108:4059::/48 maxlen: 48
                          240e:108:4060::/48 maxlen: 48
                          240e:108:4080::/48 maxlen: 48
                          240e:108:40a0::/48 maxlen: 48
                          240e:108:40e0::/48 maxlen: 48
                          240e:108:40ec::/48 maxlen: 48
                          240e:108:4120::/48 maxlen: 48
                          240e:108:4140::/48 maxlen: 48
                          240e:108:4160::/48 maxlen: 48
                          240e:108:41c0::/48 maxlen: 48
                          240e:108:41e0::/48 maxlen: 48
                          240e:108:4200::/48 maxlen: 48
                          240e:108:4220::/48 maxlen: 48
                          240e:108:4240::/48 maxlen: 48
                          240e:108:4260::/48 maxlen: 48
                          240e:108:4280::/48 maxlen: 48
                          240e:108:42a0::/48 maxlen: 48
                          240e:108:42c0::/48 maxlen: 48
                          240e:108:42e0::/48 maxlen: 48
                          240e:108:4300::/48 maxlen: 48
                          240e:108:4320::/48 maxlen: 48
                          240e:108:4340::/48 maxlen: 48
                          240e:108:4360::/48 maxlen: 48
                          240e:108:4380::/48 maxlen: 48
                          240e:108:438c::/48 maxlen: 48
                          240e:108:43a0::/48 maxlen: 48
                          240e:108:43c0::/48 maxlen: 48
                          240e:108:4800::/48 maxlen: 48
                          240e:108:4801::/48 maxlen: 48
                          240e:108:4820::/48 maxlen: 48
                          240e:108:4825::/48 maxlen: 48
                          240e:108:4840::/48 maxlen: 48
                          240e:108:4847::/48 maxlen: 48
                          240e:108:4859::/48 maxlen: 48
                          240e:108:4860::/48 maxlen: 48
                          240e:108:4880::/48 maxlen: 48
                          240e:108:48a0::/48 maxlen: 48
                          240e:108:48e0::/48 maxlen: 48
                          240e:108:48ec::/48 maxlen: 48
                          240e:108:4920::/48 maxlen: 48
                          240e:108:4940::/48 maxlen: 48
                          240e:108:4960::/48 maxlen: 48
                          240e:108:49c0::/48 maxlen: 48
                          240e:108:49e0::/48 maxlen: 48
                          240e:108:4a00::/48 maxlen: 48
                          240e:108:4a20::/48 maxlen: 48
                          240e:108:4a40::/48 maxlen: 48
                          240e:108:4a60::/48 maxlen: 48
                          240e:108:4a80::/48 maxlen: 48
                          240e:108:4aa0::/48 maxlen: 48
                          240e:108:4ac0::/48 maxlen: 48
                          240e:108:4ae0::/48 maxlen: 48
                          240e:108:4b00::/48 maxlen: 48
                          240e:108:4b20::/48 maxlen: 48
                          240e:108:4b40::/48 maxlen: 48
                          240e:108:4b60::/48 maxlen: 48
                          240e:108:4b80::/48 maxlen: 48
                          240e:108:4b8c::/48 maxlen: 48
                          240e:108:4ba0::/48 maxlen: 48
                          240e:108:4bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:05:8d:3c:5a:69:b3:7e:c1:b0:1c:d9:f6:b4:09:e7:ab:88:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: Jun  1 14:52:11 2026 GMT
            Not After : May 31 14:57:11 2027 GMT
        Subject: CN=55847AAA7360B9EC4A70F952999C9FFF21B88B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:60:e2:94:bd:4d:bf:99:20:89:f4:3b:df:
                    b7:7b:ca:4c:ab:e5:e6:6a:f1:86:a0:a9:86:ee:14:
                    a6:ab:d3:d2:da:85:f3:62:c4:c3:53:cd:a1:15:b4:
                    6e:64:e4:86:4c:22:a5:a0:93:7c:30:5e:16:76:0e:
                    70:97:bc:e9:c7:8c:54:0c:09:19:8c:26:d1:12:f4:
                    81:d2:2a:3b:d7:ad:80:c8:33:f8:ff:02:da:d7:d3:
                    52:3b:61:ef:68:e9:18:8d:29:3c:83:56:17:22:8e:
                    50:ab:5e:1f:84:98:08:9d:b2:ec:e6:99:71:26:f7:
                    3a:e5:26:5b:e4:b3:43:18:4a:cc:6a:70:13:0b:f5:
                    37:04:08:b4:d5:73:39:70:af:56:b7:c0:dc:9d:32:
                    49:62:73:89:98:30:be:df:1f:9f:96:c5:d6:54:b6:
                    41:8d:78:3a:12:13:71:43:7f:ea:1d:fb:26:48:29:
                    54:1f:ea:45:aa:01:9d:8b:20:70:dd:4c:da:72:83:
                    a4:b2:d2:4a:74:39:dc:8b:b4:23:e3:75:6f:f9:84:
                    30:9e:92:8b:e8:3b:44:02:4e:ff:15:1b:39:dd:6a:
                    fa:b7:94:04:ec:e3:a1:ba:05:20:db:15:47:66:0c:
                    8e:80:53:fb:67:3b:a8:64:e8:9b:b7:82:b4:09:f0:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:7A:AA:73:60:B9:EC:4A:70:F9:52:99:9C:9F:FF:21:B8:8B:37
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58777.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.122.63.0/24
                  59.47.246.0/23
                  59.52.138.0/24
                  61.133.162.0/24
                  61.151.144.0/23
                  106.91.120.0/24
                  113.240.205.0/24
                  117.25.105.0/24
                  125.93.28.0/23
                  171.221.53.0/24
                  182.36.0.0/24
                  182.36.12.0/24
                  220.171.147.0/24
                  221.226.225.0/24
                  221.235.40.0/24
                  221.237.65.0/24
                IPv6:
                  240e:108:4000::/47
                  240e:108:4020::/48
                  240e:108:4025::/48
                  240e:108:4040::/48
                  240e:108:4047::/48
                  240e:108:4059::/48
                  240e:108:4060::/48
                  240e:108:4080::/48
                  240e:108:40a0::/48
                  240e:108:40e0::/48
                  240e:108:40ec::/48
                  240e:108:4120::/48
                  240e:108:4140::/48
                  240e:108:4160::/48
                  240e:108:41c0::/48
                  240e:108:41e0::/48
                  240e:108:4200::/48
                  240e:108:4220::/48
                  240e:108:4240::/48
                  240e:108:4260::/48
                  240e:108:4280::/48
                  240e:108:42a0::/48
                  240e:108:42c0::/48
                  240e:108:42e0::/48
                  240e:108:4300::/48
                  240e:108:4320::/48
                  240e:108:4340::/48
                  240e:108:4360::/48
                  240e:108:4380::/48
                  240e:108:438c::/48
                  240e:108:43a0::/48
                  240e:108:43c0::/48
                  240e:108:4800::/47
                  240e:108:4820::/48
                  240e:108:4825::/48
                  240e:108:4840::/48
                  240e:108:4847::/48
                  240e:108:4859::/48
                  240e:108:4860::/48
                  240e:108:4880::/48
                  240e:108:48a0::/48
                  240e:108:48e0::/48
                  240e:108:48ec::/48
                  240e:108:4920::/48
                  240e:108:4940::/48
                  240e:108:4960::/48
                  240e:108:49c0::/48
                  240e:108:49e0::/48
                  240e:108:4a00::/48
                  240e:108:4a20::/48
                  240e:108:4a40::/48
                  240e:108:4a60::/48
                  240e:108:4a80::/48
                  240e:108:4aa0::/48
                  240e:108:4ac0::/48
                  240e:108:4ae0::/48
                  240e:108:4b00::/48
                  240e:108:4b20::/48
                  240e:108:4b40::/48
                  240e:108:4b60::/48
                  240e:108:4b80::/48
                  240e:108:4b8c::/48
                  240e:108:4ba0::/48
                  240e:108:4bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:33:8b:d2:a1:58:7e:6e:69:bb:25:c2:40:b9:4d:78:21:
         ff:6b:50:f8:fd:6b:53:c6:aa:43:65:6b:46:a4:ab:2e:3c:a0:
         f4:0b:ef:ba:6c:09:a6:84:c1:7c:d0:07:5f:9e:50:21:4e:f8:
         5b:7b:ca:22:d5:d6:a3:e0:92:32:10:98:15:0c:11:5f:3f:b6:
         91:e1:30:f1:ff:9d:9b:09:70:3f:10:fd:7c:12:25:5b:28:a3:
         75:91:79:8a:a0:44:ff:92:0a:24:66:29:7c:7b:ae:9c:66:cb:
         2e:61:2f:b4:ea:d5:82:d0:54:58:8c:7d:e5:f6:83:71:8f:a5:
         da:97:e8:b0:1c:9c:d8:30:57:80:42:38:54:bb:f3:a8:0b:50:
         82:66:5e:05:cd:a3:e3:ca:06:99:e8:19:86:73:0c:52:1a:88:
         ff:ed:52:0c:eb:fe:a4:9d:c4:b9:78:67:19:67:6a:82:67:d4:
         1e:45:48:7f:4b:69:1d:68:e6:c4:48:76:1a:5a:80:26:6b:d8:
         87:05:79:1b:19:92:97:6b:88:58:87:e3:0c:c5:c4:82:60:7d:
         e1:d1:8d:66:21:53:4e:76:d5:11:79:6d:da:0b:50:5b:89:75:
         5e:bd:26:30:40:30:11:1b:16:9c:fd:7e:4c:a0:a2:00:36:ca:
         97:e2:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:42 2026 by rpki-client