Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
File: AS24139.roa (raw, json)
Hash identifier: qdYkjvhQ+XXRS0M+IDlpLknRxmi951UHbBDsRT0lR9I=
Subject key identifier: 20:33:B2:BE:6B:E1:9A:11:3E:E6:1B:16:32:6F:DE:50:81:9F:91:5D
Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Certificate serial: 19F0FB6CD966AFA62E326A543815AC27AA289267
Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
Signing time: Wed 17 Jun 2026 02:40:35 +0000
ROA not before: Wed 17 Jun 2026 02:35:35 +0000
ROA not after: Wed 16 Jun 2027 02:40:35 +0000
asID: 24139
IP address blocks: 36.255.116.0/22 maxlen: 22
43.247.244.0/22 maxlen: 22
58.100.0.0/15 maxlen: 15
58.100.0.0/16 maxlen: 16
58.100.0.0/19 maxlen: 19
58.100.32.0/19 maxlen: 19
58.100.64.0/19 maxlen: 19
58.100.96.0/19 maxlen: 19
58.100.128.0/19 maxlen: 19
58.100.160.0/19 maxlen: 19
58.100.192.0/19 maxlen: 19
58.100.224.0/19 maxlen: 19
58.101.0.0/16 maxlen: 16
58.101.0.0/19 maxlen: 19
58.101.32.0/19 maxlen: 19
58.101.64.0/19 maxlen: 19
58.101.96.0/19 maxlen: 19
58.101.128.0/19 maxlen: 19
58.101.160.0/19 maxlen: 19
58.101.192.0/19 maxlen: 19
58.101.224.0/19 maxlen: 19
58.101.254.0/24 maxlen: 24
58.101.255.0/24 maxlen: 24
103.209.112.0/22 maxlen: 22
103.238.52.0/22 maxlen: 22
113.214.0.0/15 maxlen: 15
113.214.0.0/16 maxlen: 16
113.214.0.0/19 maxlen: 19
113.214.32.0/19 maxlen: 19
113.214.64.0/19 maxlen: 19
113.214.96.0/19 maxlen: 19
113.214.128.0/19 maxlen: 19
113.214.160.0/19 maxlen: 19
113.214.192.0/19 maxlen: 19
113.214.224.0/19 maxlen: 19
113.215.0.0/16 maxlen: 16
113.215.0.0/19 maxlen: 19
113.215.32.0/19 maxlen: 19
113.215.64.0/19 maxlen: 19
113.215.96.0/19 maxlen: 19
113.215.128.0/19 maxlen: 19
113.215.160.0/19 maxlen: 19
113.215.192.0/19 maxlen: 19
113.215.224.0/19 maxlen: 19
125.210.0.0/16 maxlen: 16
125.210.0.0/19 maxlen: 19
125.210.32.0/19 maxlen: 19
125.210.64.0/19 maxlen: 19
125.210.96.0/19 maxlen: 19
125.210.128.0/19 maxlen: 19
125.210.160.0/19 maxlen: 19
125.210.192.0/19 maxlen: 19
125.210.224.0/19 maxlen: 19
218.108.0.0/15 maxlen: 15
218.108.0.0/16 maxlen: 16
218.108.0.0/19 maxlen: 19
218.108.32.0/19 maxlen: 19
218.108.64.0/19 maxlen: 19
218.108.96.0/19 maxlen: 19
218.108.128.0/19 maxlen: 19
218.108.160.0/19 maxlen: 19
218.108.192.0/19 maxlen: 19
218.108.224.0/19 maxlen: 19
218.109.0.0/16 maxlen: 16
218.109.0.0/19 maxlen: 19
218.109.32.0/19 maxlen: 19
218.109.64.0/19 maxlen: 19
218.109.96.0/19 maxlen: 19
218.109.128.0/19 maxlen: 19
218.109.160.0/19 maxlen: 19
218.109.192.0/19 maxlen: 19
218.109.224.0/19 maxlen: 19
219.82.0.0/16 maxlen: 16
219.82.0.0/19 maxlen: 19
219.82.32.0/19 maxlen: 19
219.82.64.0/19 maxlen: 19
219.82.96.0/19 maxlen: 19
219.82.128.0/19 maxlen: 19
219.82.160.0/19 maxlen: 19
219.82.192.0/19 maxlen: 19
219.82.224.0/19 maxlen: 19
2401:ce00::/32 maxlen: 32
2401:ce00::/38 maxlen: 38
2401:ce00:400::/38 maxlen: 38
2401:ce00:800::/38 maxlen: 38
2401:ce00:c00::/38 maxlen: 38
2401:ce00:1000::/38 maxlen: 38
2401:ce00:1400::/38 maxlen: 38
2401:ce00:1800::/38 maxlen: 38
2401:ce00:1c00::/38 maxlen: 38
2401:ce00:2000::/38 maxlen: 38
2401:ce00:2400::/38 maxlen: 38
2401:ce00:2800::/38 maxlen: 38
2401:ce00:2c00::/38 maxlen: 38
2401:ce00:3000::/38 maxlen: 38
2401:ce00:3400::/38 maxlen: 38
2401:ce00:3800::/38 maxlen: 38
2401:ce00:3c00::/38 maxlen: 38
2401:ce00:4000::/38 maxlen: 38
2401:ce00:4400::/38 maxlen: 38
2401:ce00:4800::/38 maxlen: 38
2401:ce00:4c00::/38 maxlen: 38
2401:ce00:5000::/38 maxlen: 38
2401:ce00:5400::/38 maxlen: 38
2401:ce00:5800::/38 maxlen: 38
2401:ce00:5c00::/38 maxlen: 38
2401:ce00:6000::/38 maxlen: 38
2401:ce00:6400::/38 maxlen: 38
2401:ce00:6800::/38 maxlen: 38
2401:ce00:6c00::/38 maxlen: 38
2401:ce00:7000::/38 maxlen: 38
2401:ce00:7400::/38 maxlen: 38
2401:ce00:7800::/38 maxlen: 38
2401:ce00:7c00::/38 maxlen: 38
2401:ce00:8000::/38 maxlen: 38
2401:ce00:8400::/38 maxlen: 38
2401:ce00:8800::/38 maxlen: 38
2401:ce00:8c00::/38 maxlen: 38
2401:ce00:9000::/38 maxlen: 38
2401:ce00:9400::/38 maxlen: 38
2401:ce00:9800::/38 maxlen: 38
2401:ce00:9c00::/38 maxlen: 38
2401:ce00:a000::/38 maxlen: 38
2401:ce00:a400::/38 maxlen: 38
2401:ce00:a800::/38 maxlen: 38
2401:ce00:ac00::/38 maxlen: 38
2401:ce00:b000::/38 maxlen: 38
2401:ce00:b400::/38 maxlen: 38
2401:ce00:b800::/38 maxlen: 38
2401:ce00:bc00::/38 maxlen: 38
2401:ce00:c000::/38 maxlen: 38
2401:ce00:c400::/38 maxlen: 38
2401:ce00:c800::/38 maxlen: 38
2401:ce00:cc00::/38 maxlen: 38
2401:ce00:d000::/38 maxlen: 38
2401:ce00:d400::/38 maxlen: 38
2401:ce00:d800::/38 maxlen: 38
2401:ce00:dc00::/38 maxlen: 38
2401:ce00:e000::/38 maxlen: 38
2401:ce00:e400::/38 maxlen: 38
2401:ce00:e800::/38 maxlen: 38
2401:ce00:ec00::/38 maxlen: 38
2401:ce00:f000::/38 maxlen: 38
2401:ce00:f400::/38 maxlen: 38
2401:ce00:f800::/38 maxlen: 38
2401:ce00:fc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f0:fb:6c:d9:66:af:a6:2e:32:6a:54:38:15:ac:27:aa:28:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Validity
Not Before: Jun 17 02:35:35 2026 GMT
Not After : Jun 16 02:40:35 2027 GMT
Subject: CN=2033B2BE6BE19A113EE61B16326FDE50819F915D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:1e:61:14:22:62:90:5f:f3:53:ff:7f:fa:
2d:77:39:60:3d:4a:63:eb:5b:ef:73:ce:d5:bb:6b:
00:21:84:14:40:b0:5d:a2:d8:5d:c1:97:4b:4f:85:
f7:aa:90:24:13:b5:8a:24:0e:6e:c2:2c:fb:71:8f:
1d:77:6e:61:d3:c6:72:59:07:79:9e:d1:fd:f4:71:
25:41:d3:eb:05:6f:2d:68:1e:69:a7:27:3e:61:44:
5b:b2:bd:ff:87:fc:6e:02:fe:0d:61:fa:91:89:a2:
28:50:b9:32:15:be:8d:95:ab:c6:47:f4:a2:7b:19:
41:cb:6d:e8:af:ed:75:17:a0:a7:45:f7:c7:8d:bf:
0d:78:2b:4c:cf:8e:bb:9d:fc:b1:5c:1a:4e:57:4e:
06:15:b8:71:a5:69:89:47:ab:51:67:5e:3b:f7:83:
6a:5b:00:25:06:66:90:ac:b5:4f:2e:d6:ab:8f:a0:
23:17:6a:1f:68:41:e5:7c:cd:f9:c1:ef:81:f3:2d:
32:96:89:59:83:ed:37:49:79:76:3d:34:d0:74:45:
a7:a1:7f:23:ef:ae:da:79:25:e5:e9:26:aa:fc:7b:
20:d2:a5:e3:01:12:66:d7:92:bc:8d:1e:32:e8:9f:
34:ce:fb:72:8a:77:82:6d:0d:ec:1f:62:04:20:39:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:33:B2:BE:6B:E1:9A:11:3E:E6:1B:16:32:6F:DE:50:81:9F:91:5D
X509v3 Authority Key Identifier:
keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.116.0/22
43.247.244.0/22
58.100.0.0/15
103.209.112.0/22
103.238.52.0/22
113.214.0.0/15
125.210.0.0/16
218.108.0.0/15
219.82.0.0/16
IPv6:
2401:ce00::/32
Signature Algorithm: sha256WithRSAEncryption
73:21:96:9c:cb:5b:87:ef:79:77:8d:53:31:2c:84:37:49:22:
f2:b1:7a:67:da:27:28:0e:3d:09:c1:2b:ef:21:fc:01:2a:a1:
c5:7c:8d:8f:c8:85:eb:3a:fb:5d:32:42:4c:9a:a2:b6:6f:b1:
21:e7:86:00:86:bf:41:8d:fa:95:c6:92:5e:c5:15:85:d8:ef:
0f:4a:8a:7d:a8:bc:a3:e3:c6:12:61:17:e0:3f:72:73:e7:a6:
c8:e3:94:75:29:64:74:ec:14:75:bc:98:be:23:ee:24:8f:a5:
14:1e:72:34:18:07:d6:53:ea:67:86:0c:84:86:f4:61:ce:27:
68:2d:01:c0:84:e0:4f:72:bb:99:04:fe:c0:95:52:7d:31:2a:
95:1c:2b:da:1a:15:4d:fd:3f:ca:b5:66:59:bc:0d:61:cd:d5:
87:3a:e6:10:eb:7c:a6:46:54:97:bb:cd:1e:67:3c:e6:64:17:
fe:a2:51:e8:97:26:8c:62:37:3b:87:ba:b9:a7:cf:dc:58:57:
b1:64:fb:69:6f:cb:53:a5:ab:b8:3d:f2:7a:ee:f0:2a:c5:54:
8a:36:36:dc:0e:50:01:80:d2:70:a4:fc:18:35:89:10:23:69:
9d:0d:a8:33:28:d1:11:15:6b:68:e7:9d:e9:ec:e8:7b:fe:90:
bb:fa:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:59:54 2026 by rpki-client