Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
File: AS58543.roa (raw, json)
Hash identifier: 5Ug87ZuN6rsNP6w4PwQHkIkrLrk0c2OGHvB7ueiJE9Q=
Subject key identifier: CF:CD:CC:D2:86:FA:6B:A5:B0:43:62:73:79:01:DC:CE:6B:74:5E:E2
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 680A18A57907A446679140D341734F12547DFFD8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
Signing time: Thu 09 Jul 2026 16:00:35 +0000
ROA not before: Thu 09 Jul 2026 15:55:35 +0000
ROA not after: Thu 08 Jul 2027 16:00:35 +0000
asID: 58543
IP address blocks: 113.107.44.0/23 maxlen: 23
240e:1f:1::/48 maxlen: 48
240e:1f:8000::/36 maxlen: 36
240e:1f:8001::/48 maxlen: 48
240e:1f:9000::/36 maxlen: 36
240e:1f:9100::/40 maxlen: 40
240e:1f:9200::/40 maxlen: 40
240e:1f:9400::/40 maxlen: 40
240e:1f:9500::/40 maxlen: 40
240e:1f:9600::/40 maxlen: 40
240e:1f:9700::/40 maxlen: 40
240e:1f:9800::/40 maxlen: 40
240e:1f:9900::/40 maxlen: 40
240e:1f:9b00::/40 maxlen: 40
240e:1f:9c00::/40 maxlen: 40
240e:1f:a000::/37 maxlen: 37
240e:1f:a800::/37 maxlen: 37
240e:5e:4004::/48 maxlen: 48
240e:5e:4005::/48 maxlen: 48
240e:ff:d000::/36 maxlen: 36
240e:ff:d200::/41 maxlen: 41
240e:ff:d280::/41 maxlen: 41
240e:ff:d380::/41 maxlen: 41
240e:ff:d400::/41 maxlen: 41
240e:ff:d480::/41 maxlen: 41
240e:ff:d500::/41 maxlen: 41
240e:ff:d580::/41 maxlen: 41
240e:ff:d600::/41 maxlen: 41
240e:ff:d680::/41 maxlen: 41
240e:ff:d780::/41 maxlen: 41
240e:97d:4000::/34 maxlen: 34
240e:97d:4000::/36 maxlen: 36
240e:97d:5000::/36 maxlen: 36
240e:97d:7000::/36 maxlen: 36
240e:97e::/33 maxlen: 33
240e:97e:3000::/36 maxlen: 36
240e:97e:4000::/36 maxlen: 36
240e:97e:5000::/36 maxlen: 36
240e:97e:6000::/36 maxlen: 36
240e:97e:7000::/36 maxlen: 36
240e:97f::/34 maxlen: 34
240e:97f::/36 maxlen: 36
240e:97f:2000::/36 maxlen: 36
240e:97f:4000::/36 maxlen: 36
240e:983:1e03::/48 maxlen: 48
240e:983:1e04::/48 maxlen: 48
240e:983:1e05::/48 maxlen: 48
240e:983:1e07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0a:18:a5:79:07:a4:46:67:91:40:d3:41:73:4f:12:54:7d:ff:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 9 15:55:35 2026 GMT
Not After : Jul 8 16:00:35 2027 GMT
Subject: CN=CFCDCCD286FA6BA5B04362737901DCCE6B745EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:10:7b:39:4d:7b:0f:b1:81:3d:d5:c6:cf:
75:6d:76:55:21:80:e5:96:ee:b6:41:31:1b:e2:79:
6d:9c:9a:3f:4f:56:b7:33:60:40:e1:70:e2:a6:32:
9c:23:9e:22:1c:75:e4:88:bd:2c:ca:fa:23:07:c0:
8b:8a:42:80:e4:b5:cf:11:ea:1a:b3:28:92:c2:1a:
6e:1b:8c:d2:af:90:1d:f9:89:9c:19:ca:94:06:73:
48:92:41:63:d2:f2:17:83:90:b0:f8:ad:3e:5c:89:
4f:43:22:71:4d:1f:26:8b:60:e4:25:71:b2:e5:ec:
3f:e1:47:44:d9:5a:93:95:71:e4:6b:11:dd:fc:13:
81:c1:b3:06:5a:40:e1:c7:36:16:cb:bb:94:a1:78:
e6:e1:b2:3c:f3:a0:c4:dc:c4:84:ac:71:3e:10:e5:
06:ae:3e:86:3d:e1:6e:02:09:63:86:c8:4e:02:03:
65:4a:b5:69:af:e0:f1:e6:77:f7:7f:4b:0a:28:1c:
11:06:ca:5e:36:86:55:cc:f3:5a:1f:61:77:d5:48:
c5:2a:43:0a:20:80:0b:e2:ad:7d:e2:df:f9:cf:04:
4f:01:90:4a:2f:f9:49:81:14:b9:bc:b7:b4:c7:e2:
93:72:7b:e7:9a:54:3f:97:c1:b5:99:7a:9e:aa:a6:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:CC:D2:86:FA:6B:A5:B0:43:62:73:79:01:DC:CE:6B:74:5E:E2
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.107.44.0/23
IPv6:
240e:1f:1::/48
240e:1f:8000::-240e:1f:afff:ffff:ffff:ffff:ffff:ffff
240e:5e:4004::/47
240e:ff:d000::/36
240e:97d:4000::/34
240e:97e::/33
240e:97f::-240e:97f:4fff:ffff:ffff:ffff:ffff:ffff
240e:983:1e03::-240e:983:1e05:ffff:ffff:ffff:ffff:ffff
240e:983:1e07::/48
Signature Algorithm: sha256WithRSAEncryption
43:96:a2:f0:69:75:f2:04:0b:b0:1c:df:78:b0:92:f5:7a:f0:
29:3d:5d:cd:4f:de:f7:c7:38:93:31:27:21:cf:5d:03:b9:15:
7e:c1:60:68:f2:1c:59:c3:a4:c7:06:33:b6:83:c9:69:79:cf:
cd:7e:1a:f6:61:f3:ce:b7:58:35:b3:fc:15:cf:39:a3:3b:1c:
04:82:87:80:85:21:d6:4b:3c:4e:99:ae:16:7e:ab:8b:74:e6:
7e:95:7a:9e:54:23:fe:e9:29:48:b7:1d:1c:87:27:89:64:cc:
f6:5e:98:6b:d9:3e:dc:dd:b6:5f:74:fd:dc:89:49:cd:fb:ca:
94:67:d2:8f:26:bd:a5:e5:d2:38:d2:59:b9:e2:5e:fd:c4:2e:
02:87:1e:2d:c5:c2:80:9c:68:57:d1:af:44:6d:b2:4a:f3:7a:
12:dc:b3:3d:52:18:10:f4:61:7f:62:6a:4e:69:c5:fd:f1:e2:
b5:07:9a:6d:f4:76:22:dd:30:73:4a:07:c8:bf:e0:42:44:9f:
c1:02:95:e1:c5:2c:f0:9e:f0:58:0f:23:2a:ce:c5:8d:66:21:
62:07:59:4f:99:08:b2:b6:c0:f1:68:5a:2e:a5:d3:75:49:dd:
bd:9e:38:b0:5c:67:ac:c9:4e:71:02:04:52:ba:d0:ea:74:c6:
3c:dd:e3:a3
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUaAoYpXkHpEZnkUDTQXNPElR9/9gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcwOTE1NTUzNVoX
DTI3MDcwODE2MDAzNVowMzExMC8GA1UEAxMoQ0ZDRENDRDI4NkZBNkJBNUIwNDM2
MjczNzkwMURDQ0U2Qjc0NUVFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKfFEHs5TXsPsYE91cbPdW12VSGA5ZbutkExG+J5bZyaP09WtzNgQOFw4qYy
nCOeIhx15Ii9LMr6IwfAi4pCgOS1zxHqGrMoksIabhuM0q+QHfmJnBnKlAZzSJJB
Y9LyF4OQsPitPlyJT0MicU0fJotg5CVxsuXsP+FHRNlak5Vx5GsR3fwTgcGzBlpA
4cc2Fsu7lKF45uGyPPOgxNzEhKxxPhDlBq4+hj3hbgIJY4bITgIDZUq1aa/g8eZ3
939LCigcEQbKXjaGVczzWh9hd9VIxSpDCiCAC+KtfeLf+c8ETwGQSi/5SYEUuby3
tMfik3J755pUP5fBtZl6nqqmKw8CAwEAAaOCAlgwggJUMB0GA1UdDgQWBBTPzczS
hvprpbBDYnN5AdzOa3Re4jAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTNTg1NDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
gZMGCCsGAQUFBwEHAQH/BIGDMIGAMAwEAgABMAYDBAFxaywwcAQCAAIwagMHACQO
AB8AATAQAwYHJA4AH4ADBgQkDgAfoAMHASQOAF5ABAMGBCQOAP/QAwYGJA4JfUAD
BgckDgl+ADAPAwUAJA4JfwMGBCQOCX9AMBIDBwAkDgmDHgMDBwEkDgmDHgQDBwAk
DgmDHgcwDQYJKoZIhvcNAQELBQADggEBAEOWovBpdfIEC7Ac33iwkvV68Ck9Xc1P
3vfHOJMxJyHPXQO5FX7BYGjyHFnDpMcGM7aDyWl5z81+GvZh8863WDWz/BXPOaM7
HASCh4CFIdZLPE6ZrhZ+q4t05n6Vep5UI/7pKUi3HRyHJ4lkzPZemGvZPtzdtl90
/dyJSc37ypRn0o8mvaXl0jjSWbniXv3ELgKHHi3FwoCcaFfRr0RtskrzehLcsz1S
GBD0YX9iak5pxf3x4rUHmm30diLdMHNKB8i/4EJEn8ECleHFLPCe8FgPIyrOxY1m
IWIHWU+ZCLK2wPFoWi6l03VJ3b2eOLBcZ6zJTnECBFK60Op0xjzd46M=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:38 2026 by rpki-client