Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58466.roa
File: AS58466.roa (raw, json)
Hash identifier: /rsqldN+WzugbNP2KGDu9LGM5sqizovHiArfOvpV+AY=
Subject key identifier: B1:2E:80:18:92:63:5F:9B:A6:A9:03:D5:87:2F:A6:B6:86:F6:C5:A6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 6BEA8DDF09CADD60C58C62EA07639ABCCECFA4E4
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58466.roa
Signing time: Thu 16 Jul 2026 16:02:11 +0000
ROA not before: Thu 16 Jul 2026 15:57:11 +0000
ROA not after: Thu 15 Jul 2027 16:02:11 +0000
asID: 58466
IP address blocks: 14.18.32.0/19 maxlen: 19
14.18.64.0/20 maxlen: 20
14.18.80.0/21 maxlen: 21
14.18.88.0/23 maxlen: 23
14.18.90.0/23 maxlen: 23
14.18.92.0/22 maxlen: 22
14.18.96.0/21 maxlen: 21
14.18.104.0/21 maxlen: 21
14.18.112.0/22 maxlen: 22
14.18.116.0/22 maxlen: 22
14.18.120.0/24 maxlen: 24
14.18.121.0/24 maxlen: 24
14.22.70.0/24 maxlen: 24
14.22.71.0/24 maxlen: 24
14.22.80.0/22 maxlen: 22
14.22.84.0/22 maxlen: 22
14.22.118.0/24 maxlen: 24
14.22.119.0/24 maxlen: 24
14.22.120.0/23 maxlen: 23
14.22.122.0/23 maxlen: 23
14.116.192.0/24 maxlen: 24
14.116.193.0/24 maxlen: 24
14.116.194.0/24 maxlen: 24
14.116.195.0/24 maxlen: 24
14.116.196.0/24 maxlen: 24
14.116.197.0/24 maxlen: 24
14.116.198.0/24 maxlen: 24
14.116.199.0/24 maxlen: 24
14.116.200.0/24 maxlen: 24
14.116.201.0/24 maxlen: 24
14.116.202.0/24 maxlen: 24
14.116.203.0/24 maxlen: 24
14.116.204.0/24 maxlen: 24
14.116.205.0/24 maxlen: 24
14.116.206.0/24 maxlen: 24
14.116.207.0/24 maxlen: 24
14.116.208.0/24 maxlen: 24
14.116.209.0/24 maxlen: 24
14.116.210.0/23 maxlen: 23
14.116.212.0/22 maxlen: 22
14.116.216.0/22 maxlen: 22
14.116.220.0/23 maxlen: 23
14.116.222.0/23 maxlen: 23
14.116.250.0/24 maxlen: 24
14.116.251.0/24 maxlen: 24
14.116.252.0/24 maxlen: 24
14.116.253.0/24 maxlen: 24
14.116.254.0/24 maxlen: 24
14.116.255.0/24 maxlen: 24
14.215.44.0/24 maxlen: 24
14.215.45.0/24 maxlen: 24
14.215.46.0/24 maxlen: 24
14.215.47.0/24 maxlen: 24
14.215.48.0/24 maxlen: 24
14.215.49.0/24 maxlen: 24
14.215.50.0/24 maxlen: 24
14.215.51.0/24 maxlen: 24
36.111.32.0/23 maxlen: 23
36.111.34.0/23 maxlen: 23
113.96.190.0/24 maxlen: 24
113.96.191.0/24 maxlen: 24
113.108.217.0/24 maxlen: 24
125.88.204.0/23 maxlen: 23
125.88.206.0/23 maxlen: 23
125.88.208.0/22 maxlen: 22
125.88.212.0/22 maxlen: 22
125.88.216.0/22 maxlen: 22
125.88.220.0/22 maxlen: 22
125.88.224.0/22 maxlen: 22
125.88.228.0/23 maxlen: 23
125.88.230.0/23 maxlen: 23
125.88.232.0/21 maxlen: 21
125.88.240.0/22 maxlen: 22
125.88.244.0/22 maxlen: 22
183.56.192.0/19 maxlen: 19
183.56.224.0/20 maxlen: 20
183.56.240.0/21 maxlen: 21
183.56.248.0/23 maxlen: 23
203.32.68.0/24 maxlen: 24
203.32.69.0/24 maxlen: 24
203.32.84.0/24 maxlen: 24
203.32.85.0/24 maxlen: 24
203.32.204.0/23 maxlen: 23
203.33.158.0/24 maxlen: 24
203.33.159.0/24 maxlen: 24
240e:1f:5000::/36 maxlen: 36
240e:ff:e000::/36 maxlen: 36
240e:108:22::/48 maxlen: 48
240e:108:42::/48 maxlen: 48
240e:108:9a::/48 maxlen: 48
240e:108:11e0::/48 maxlen: 48
240e:108:4045::/48 maxlen: 48
240e:108:4845::/48 maxlen: 48
240e:109:8022::/48 maxlen: 48
240e:109:8042::/48 maxlen: 48
240e:698:2200::/40 maxlen: 40
240e:698:4200::/40 maxlen: 40
240e:97c::/36 maxlen: 36
240e:980:2200::/40 maxlen: 40
240e:980:4200::/40 maxlen: 40
240e:980:9a00::/44 maxlen: 44
240e:980:9a10::/44 maxlen: 44
240e:980:9a20::/44 maxlen: 44
240e:980:9a30::/44 maxlen: 44
240e:982:e000::/40 maxlen: 40
240e:983:1e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ea:8d:df:09:ca:dd:60:c5:8c:62:ea:07:63:9a:bc:ce:cf:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 16 15:57:11 2026 GMT
Not After : Jul 15 16:02:11 2027 GMT
Subject: CN=B12E801892635F9BA6A903D5872FA6B686F6C5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:73:e3:d1:6b:ba:9c:1a:b2:4e:16:e4:d3:
8d:0d:e4:e7:68:01:12:e5:30:39:df:e2:45:4a:17:
10:fd:ec:44:53:60:0a:fc:e8:4a:6f:5d:79:fe:8b:
5a:2d:02:38:ca:72:e0:49:fe:80:c8:52:03:a8:6e:
ce:c2:62:e3:1f:04:10:9c:64:55:91:06:55:0c:d3:
6e:af:ce:e8:fa:82:08:61:85:12:c4:24:f3:7e:89:
4f:4e:23:7b:01:f5:01:72:f5:e0:75:ac:d6:8b:66:
f9:f7:77:a4:26:1f:6d:75:21:a6:83:72:ff:8b:79:
d0:e9:27:69:a8:ca:bb:3a:e1:ee:8b:16:d4:00:54:
00:bf:3a:fd:10:ef:bc:be:af:ea:03:48:b0:c6:88:
7c:cd:ff:cc:fe:e2:3a:db:09:9e:3c:39:79:1f:f5:
5f:fc:eb:31:52:74:37:44:54:d4:02:a0:ed:d1:1a:
f4:70:f1:a2:92:7d:15:ef:91:77:aa:25:5a:76:41:
13:12:fd:28:6e:22:83:e8:47:fe:5d:41:d1:fd:0b:
54:37:64:36:89:a0:67:16:1c:b6:6f:16:e4:c4:a3:
08:63:3f:23:10:70:4a:cc:0a:ca:f4:5e:6f:4e:51:
23:1c:93:59:c5:75:65:96:34:f8:98:71:2a:24:44:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:80:18:92:63:5F:9B:A6:A9:03:D5:87:2F:A6:B6:86:F6:C5:A6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.18.32.0-14.18.121.255
14.22.70.0/23
14.22.80.0/21
14.22.118.0-14.22.123.255
14.116.192.0/19
14.116.250.0-14.116.255.255
14.215.44.0-14.215.51.255
36.111.32.0/22
113.96.190.0/23
113.108.217.0/24
125.88.204.0-125.88.247.255
183.56.192.0-183.56.249.255
203.32.68.0/23
203.32.84.0/23
203.32.204.0/23
203.33.158.0/23
IPv6:
240e:1f:5000::/36
240e:ff:e000::/36
240e:108:22::/48
240e:108:42::/48
240e:108:9a::/48
240e:108:11e0::/48
240e:108:4045::/48
240e:108:4845::/48
240e:109:8022::/48
240e:109:8042::/48
240e:698:2200::/40
240e:698:4200::/40
240e:97c::/36
240e:980:2200::/40
240e:980:4200::/40
240e:980:9a00::/42
240e:982:e000::/40
240e:983:1e00::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ff:fd:18:3a:da:1f:88:a2:e9:2f:84:6b:ae:28:fe:72:b5:
68:02:7e:1d:28:b2:eb:9b:88:ae:a4:f0:74:e6:9f:c9:38:24:
e1:76:94:90:ab:8c:7b:2f:43:b6:ce:8d:3b:fc:9a:ff:5d:e9:
ee:c4:9e:19:ae:a9:9a:d9:b0:30:c1:63:d3:06:84:fb:90:f9:
49:16:02:b6:50:13:ab:a0:34:6e:3e:d3:45:ce:54:1a:b8:71:
4b:f3:6b:74:3c:93:f2:75:38:b6:ff:b4:0a:84:31:5e:8c:cb:
7e:39:d7:0d:50:12:e1:27:c9:77:e2:dd:9b:5b:f5:0c:8c:ea:
2d:d4:c4:c1:40:d6:cf:5c:15:9c:08:22:92:ce:a0:b4:f9:00:
03:3f:1d:2f:e8:cf:2c:a3:aa:c1:1a:e5:9a:d8:57:83:fb:8e:
86:9f:8d:77:65:8c:a9:f4:37:3f:43:83:68:51:33:12:d1:54:
54:74:1b:48:3a:60:e3:a2:5b:b6:68:e5:10:c3:2c:cf:1b:9c:
ee:a1:dd:e8:72:f3:ba:2c:d1:a3:8f:a4:2e:7f:9b:9a:48:64:
7e:41:7a:0f:22:07:45:e6:78:66:91:07:6d:2a:ec:50:6d:15:
db:73:dd:a1:d0:e8:48:b2:13:65:09:db:cb:e2:99:3c:fd:76:
1e:7d:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:28 2026 by rpki-client