Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS59078.roa
File: AS59078.roa (raw, json)
Hash identifier: 2B8pJIuSClUXLdMmKtN1iToF3wMArM1B9t1OGhORpHA=
Subject key identifier: BC:3E:0A:8D:80:13:E0:7F:ED:79:44:CE:B8:8E:B2:E1:A5:41:38:C0
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 0F2ED9F38DC332154049D0790C59155D3E0DFD78
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS59078.roa
Signing time: Sun 10 May 2026 07:49:48 +0000
ROA not before: Sun 10 May 2026 07:44:48 +0000
ROA not after: Sun 09 May 2027 07:49:48 +0000
asID: 59078
IP address blocks: 139.198.0.0/16 maxlen: 16
139.198.0.0/17 maxlen: 17
139.198.0.0/20 maxlen: 20
139.198.0.0/24 maxlen: 24
139.198.1.0/24 maxlen: 24
139.198.2.0/24 maxlen: 24
139.198.3.0/24 maxlen: 24
139.198.4.0/24 maxlen: 24
139.198.5.0/24 maxlen: 24
139.198.6.0/24 maxlen: 24
139.198.7.0/24 maxlen: 24
139.198.8.0/24 maxlen: 24
139.198.9.0/24 maxlen: 24
139.198.10.0/24 maxlen: 24
139.198.11.0/24 maxlen: 24
139.198.12.0/24 maxlen: 24
139.198.13.0/24 maxlen: 24
139.198.14.0/24 maxlen: 24
139.198.15.0/24 maxlen: 24
139.198.16.0/21 maxlen: 21
139.198.16.0/24 maxlen: 24
139.198.17.0/24 maxlen: 24
139.198.18.0/24 maxlen: 24
139.198.19.0/24 maxlen: 24
139.198.20.0/24 maxlen: 24
139.198.21.0/24 maxlen: 24
139.198.22.0/24 maxlen: 24
139.198.23.0/24 maxlen: 24
139.198.24.0/21 maxlen: 21
139.198.24.0/24 maxlen: 24
139.198.25.0/24 maxlen: 24
139.198.26.0/24 maxlen: 24
139.198.27.0/24 maxlen: 24
139.198.28.0/24 maxlen: 24
139.198.29.0/24 maxlen: 24
139.198.30.0/24 maxlen: 24
139.198.31.0/24 maxlen: 24
139.198.32.0/21 maxlen: 21
139.198.32.0/24 maxlen: 24
139.198.33.0/24 maxlen: 24
139.198.34.0/24 maxlen: 24
139.198.35.0/24 maxlen: 24
139.198.36.0/24 maxlen: 24
139.198.37.0/24 maxlen: 24
139.198.38.0/24 maxlen: 24
139.198.39.0/24 maxlen: 24
139.198.40.0/21 maxlen: 21
139.198.40.0/24 maxlen: 24
139.198.41.0/24 maxlen: 24
139.198.42.0/24 maxlen: 24
139.198.43.0/24 maxlen: 24
139.198.104.0/22 maxlen: 22
139.198.108.0/22 maxlen: 22
139.198.108.0/24 maxlen: 24
139.198.109.0/24 maxlen: 24
139.198.112.0/24 maxlen: 24
139.198.113.0/24 maxlen: 24
139.198.114.0/24 maxlen: 24
139.198.115.0/24 maxlen: 24
139.198.116.0/24 maxlen: 24
139.198.117.0/24 maxlen: 24
139.198.118.0/24 maxlen: 24
139.198.119.0/24 maxlen: 24
139.198.120.0/24 maxlen: 24
139.198.121.0/24 maxlen: 24
139.198.122.0/24 maxlen: 24
139.198.123.0/24 maxlen: 24
139.198.124.0/24 maxlen: 24
139.198.125.0/24 maxlen: 24
139.198.126.0/24 maxlen: 24
139.198.127.0/24 maxlen: 24
139.198.128.0/17 maxlen: 17
139.198.152.0/21 maxlen: 21
139.198.160.0/21 maxlen: 21
139.198.168.0/21 maxlen: 21
139.198.176.0/21 maxlen: 21
139.198.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2e:d9:f3:8d:c3:32:15:40:49:d0:79:0c:59:15:5d:3e:0d:fd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: May 10 07:44:48 2026 GMT
Not After : May 9 07:49:48 2027 GMT
Subject: CN=BC3E0A8D8013E07FED7944CEB88EB2E1A54138C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:6a:05:47:58:7a:0b:55:f9:02:63:e8:ae:
8d:e6:15:63:cd:fa:8b:91:cf:97:75:fd:0b:88:77:
aa:2f:9d:6e:9a:23:6c:d0:85:09:ec:5b:c9:c0:b3:
22:f7:6c:33:27:a7:c6:96:48:45:48:af:bc:58:e2:
83:1e:f6:9a:7d:fa:0a:1c:1c:cf:fa:6a:08:6b:f2:
a6:0a:d6:2f:c0:ec:1a:3f:0d:a7:7b:d5:c5:cf:fd:
a4:7f:74:19:d9:cf:00:5c:4a:db:e7:33:8e:01:01:
a0:f0:fe:74:a6:76:ca:dd:d4:5b:03:eb:ba:3f:36:
ca:26:8e:df:27:36:52:85:a8:c5:54:9a:2c:9b:7c:
60:82:03:cb:85:0c:b6:ea:a5:68:01:6c:d7:eb:c5:
7c:9f:3d:bd:31:5d:ff:ce:7d:37:7d:49:43:09:ac:
0e:b2:29:76:9a:5f:86:76:d8:8c:8a:e3:38:90:33:
53:f6:87:e4:6e:38:cf:22:e6:b2:6a:d4:e6:20:b8:
07:e4:2c:b1:56:f6:01:8c:13:2c:b0:17:ad:64:13:
de:23:02:40:00:78:4a:e4:77:05:ab:2e:5f:2f:84:
93:fe:c9:49:7b:18:7f:6b:3b:e7:e1:8c:56:af:ab:
1e:33:4b:92:a5:97:1a:fb:6a:31:c6:26:0d:94:af:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:0A:8D:80:13:E0:7F:ED:79:44:CE:B8:8E:B2:E1:A5:41:38:C0
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS59078.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:ae:74:73:6c:6c:d8:51:2d:45:09:c0:26:dc:02:2d:7c:ae:
a6:8b:89:08:ce:a4:62:60:5e:f9:c2:d3:5a:4c:23:17:b9:84:
2c:1d:d7:a5:be:76:94:5d:db:67:74:c3:c9:71:7c:f4:25:d2:
71:01:48:62:5b:73:54:1a:ae:fd:bc:41:34:6c:6c:ff:09:0e:
ec:94:37:e4:fc:1f:0f:72:c1:a8:ee:b7:58:49:e6:23:88:7c:
39:08:c3:cd:e7:34:61:d0:d9:3d:c7:d2:91:86:29:f3:e3:40:
88:69:b6:ac:6b:cb:b7:55:a2:3e:f3:73:32:ef:99:bf:2e:44:
4d:3c:f1:cc:d4:3a:78:41:42:d1:d5:3a:75:e4:48:9f:4b:1d:
da:00:fb:0d:04:4b:66:5a:a6:dd:69:b1:9e:bf:c2:00:b9:3a:
f2:29:c8:26:57:8e:83:f6:18:db:82:ab:2b:d0:38:38:fc:59:
cb:c4:5e:11:f9:a8:5c:6f:e6:53:ff:03:06:45:b3:ad:4f:14:
8c:ab:61:4c:6e:31:29:92:50:76:e5:16:0c:23:62:fe:a4:8b:
a0:e7:af:11:4a:fb:e6:83:f8:89:78:30:eb:f6:3e:44:c3:25:
46:de:da:b8:36:2d:e0:64:5e:c1:01:66:0a:c3:fc:c2:ed:82:
3e:07:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:28 2026 by rpki-client