Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58542.roa
File: AS58542.roa (raw, json)
Hash identifier: Bbgo+Q7L0EA96QBATujXPbBIE+jqdZOkj+zIkBOAZPY=
Subject key identifier: 02:D7:7C:72:6B:E6:83:6D:B1:F1:6A:B0:10:72:EB:57:48:C4:6A:7B
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7504514A743DE5163406558C2FE1B3AFA8334020
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58542.roa
Signing time: Mon 15 Jun 2026 16:00:32 +0000
ROA not before: Mon 15 Jun 2026 15:55:32 +0000
ROA not after: Mon 14 Jun 2027 16:00:32 +0000
asID: 58542
IP address blocks: 42.81.0.0/16 maxlen: 16
42.81.138.0/24 maxlen: 24
42.81.168.0/24 maxlen: 24
42.81.169.0/24 maxlen: 24
42.81.170.0/24 maxlen: 24
42.81.171.0/24 maxlen: 24
42.81.172.0/24 maxlen: 24
42.81.173.0/24 maxlen: 24
123.150.70.0/23 maxlen: 23
123.150.72.0/23 maxlen: 23
123.150.76.0/22 maxlen: 22
123.150.174.0/24 maxlen: 24
123.150.208.0/24 maxlen: 24
123.151.8.0/24 maxlen: 24
123.151.9.0/24 maxlen: 24
123.151.10.0/23 maxlen: 23
123.151.12.0/22 maxlen: 22
123.151.26.0/23 maxlen: 23
123.151.39.0/24 maxlen: 24
123.151.40.0/24 maxlen: 24
123.151.42.0/24 maxlen: 24
123.151.46.0/24 maxlen: 24
123.151.47.0/24 maxlen: 24
123.151.48.0/20 maxlen: 20
123.151.64.0/21 maxlen: 21
123.151.72.0/22 maxlen: 22
123.151.76.0/22 maxlen: 22
123.151.92.0/22 maxlen: 22
123.151.96.0/20 maxlen: 20
123.151.137.0/24 maxlen: 24
123.151.138.0/24 maxlen: 24
123.151.139.0/24 maxlen: 24
123.151.144.0/24 maxlen: 24
123.151.148.0/22 maxlen: 22
123.151.152.0/22 maxlen: 22
123.151.156.0/23 maxlen: 23
123.151.158.0/24 maxlen: 24
123.151.176.0/22 maxlen: 22
123.151.180.0/24 maxlen: 24
123.151.181.0/24 maxlen: 24
123.151.182.0/24 maxlen: 24
123.151.183.0/24 maxlen: 24
123.151.190.0/24 maxlen: 24
180.213.48.0/20 maxlen: 20
180.213.52.0/22 maxlen: 22
180.213.56.0/21 maxlen: 21
180.213.64.0/22 maxlen: 22
180.213.100.0/22 maxlen: 22
180.213.112.0/20 maxlen: 20
180.213.240.0/20 maxlen: 20
221.238.34.0/24 maxlen: 24
221.238.35.0/24 maxlen: 24
221.238.41.0/24 maxlen: 24
221.238.70.0/24 maxlen: 24
221.238.73.0/24 maxlen: 24
221.238.92.0/24 maxlen: 24
221.238.94.0/24 maxlen: 24
240e:5:2000::/35 maxlen: 35
240e:95:8001::/48 maxlen: 48
240e:108:1090::/48 maxlen: 48
240e:928::/32 maxlen: 32
240e:928:400::/48 maxlen: 48
240e:928:1400::/40 maxlen: 40
240e:92a::/32 maxlen: 32
240e:92b::/32 maxlen: 32
240e:980:9600::/40 maxlen: 40
240e:981:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:04:51:4a:74:3d:e5:16:34:06:55:8c:2f:e1:b3:af:a8:33:40:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 15 15:55:32 2026 GMT
Not After : Jun 14 16:00:32 2027 GMT
Subject: CN=02D77C726BE6836DB1F16AB01072EB5748C46A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:65:1b:9d:5d:f6:61:cc:7d:d1:47:2f:7c:
3b:41:b2:95:53:d0:24:3f:8a:fa:f3:73:f7:4e:75:
f5:83:a7:13:d9:47:6c:25:0b:59:03:3b:b1:aa:9d:
38:e7:84:7c:27:9a:85:e3:3a:5c:8e:29:f7:e0:65:
ec:18:49:b3:4f:44:8b:20:fb:0c:94:11:8a:21:7f:
40:f1:14:e4:d8:11:cf:a8:34:6f:c1:df:d2:9b:3f:
6e:c5:69:08:ab:cd:f1:bf:ea:b8:14:47:30:7f:3d:
1f:a9:52:10:f3:a5:1e:ec:4b:2a:79:92:c7:43:70:
82:da:08:25:d5:13:cb:d0:e5:43:9a:b1:ec:84:6d:
7b:55:69:91:17:85:64:fc:3d:02:08:a3:95:c0:5e:
ba:26:80:ba:87:c7:c2:4a:7a:db:11:e0:32:4c:27:
a4:2c:e1:bc:e4:93:b3:6a:9d:d0:f8:5d:bf:87:23:
7a:72:fe:eb:40:2b:c7:b5:65:32:27:d6:d0:6a:15:
e6:a3:ef:d0:62:d9:4d:57:5a:6e:48:1e:1d:79:20:
93:51:79:66:48:ef:0b:f5:8a:92:eb:50:77:e5:08:
3a:76:02:18:aa:69:10:29:40:7d:d3:32:c2:f2:57:
87:00:ed:52:d2:53:ea:d5:a1:23:f2:a0:5b:b7:0f:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:7C:72:6B:E6:83:6D:B1:F1:6A:B0:10:72:EB:57:48:C4:6A:7B
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.81.0.0/16
123.150.70.0-123.150.73.255
123.150.76.0/22
123.150.174.0/24
123.150.208.0/24
123.151.8.0/21
123.151.26.0/23
123.151.39.0-123.151.40.255
123.151.42.0/24
123.151.46.0-123.151.79.255
123.151.92.0-123.151.111.255
123.151.137.0-123.151.139.255
123.151.144.0/24
123.151.148.0-123.151.158.255
123.151.176.0/21
123.151.190.0/24
180.213.48.0-180.213.67.255
180.213.100.0/22
180.213.112.0/20
180.213.240.0/20
221.238.34.0/23
221.238.41.0/24
221.238.70.0/24
221.238.73.0/24
221.238.92.0/24
221.238.94.0/24
IPv6:
240e:5:2000::/35
240e:95:8001::/48
240e:108:1090::/48
240e:928::/32
240e:92a::/31
240e:980:9600::/40
240e:981:9000::/40
Signature Algorithm: sha256WithRSAEncryption
45:f0:94:db:d6:5c:e8:c2:58:bc:9b:9a:0c:f9:83:1d:01:37:
2b:4c:ae:73:c6:ce:b2:c1:4c:87:1c:91:d6:db:ff:a2:e5:49:
a6:f9:eb:54:27:cd:7c:db:95:f0:a8:b8:34:fd:66:c3:60:97:
76:84:6e:22:57:00:76:fd:b3:95:fd:26:97:47:7a:75:1f:6a:
ee:0d:32:2c:4b:b2:1d:6f:a9:68:37:b3:e6:8a:e5:9d:9c:74:
3d:b0:1a:77:7c:03:90:12:2a:33:e1:9c:c4:34:d4:49:f9:d1:
56:de:c8:53:55:4d:18:16:c3:26:f3:3e:15:7e:dc:8d:b8:bc:
f5:57:c5:1b:c0:b0:a6:24:c4:8f:46:04:c0:ba:77:d4:04:32:
79:b7:af:07:59:ee:45:a0:bc:86:08:d7:70:3e:2a:fd:0d:b0:
bb:83:17:a7:9f:d9:cb:88:55:34:8c:f7:6c:25:b2:fc:84:df:
1e:38:ae:c3:17:b5:69:81:13:49:ca:7a:1c:4b:6f:29:27:e1:
31:17:bc:4b:2f:71:a0:11:8b:27:8d:0e:35:f2:5f:aa:30:f9:
b4:61:eb:75:30:80:bc:27:a4:5c:56:0f:99:52:ac:29:ca:67:
d3:9f:45:7a:17:5f:0a:c2:91:b2:e8:3e:19:9b:1b:35:d0:d6:
bb:13:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:47 2026 by rpki-client