Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
File: AS58563.roa (raw, json)
Hash identifier: GbWeF35YFCigCvF7FzrzQvbtPZHFt3prX3FyQatPH4E=
Subject key identifier: F1:7C:A9:44:62:2F:31:4A:F0:78:44:11:A1:BC:DA:CB:0E:58:56:FF
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 43B3F259E7F33CDA60FC682DE084BE76AA104BAB
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
Signing time: Mon 06 Jul 2026 01:27:57 +0000
ROA not before: Mon 06 Jul 2026 01:22:57 +0000
ROA not after: Mon 05 Jul 2027 01:27:57 +0000
asID: 58563
IP address blocks: 27.19.220.0/22 maxlen: 22
27.19.248.0/21 maxlen: 21
58.49.144.0/21 maxlen: 21
58.49.152.0/22 maxlen: 22
58.49.156.0/22 maxlen: 22
58.49.160.0/22 maxlen: 22
58.49.192.0/22 maxlen: 22
58.49.196.0/22 maxlen: 22
58.49.212.0/22 maxlen: 22
58.49.216.0/22 maxlen: 22
58.49.220.0/22 maxlen: 22
58.49.224.0/21 maxlen: 21
58.49.232.0/22 maxlen: 22
58.49.236.0/22 maxlen: 22
58.49.240.0/22 maxlen: 22
58.49.244.0/22 maxlen: 22
58.49.248.0/22 maxlen: 22
58.49.252.0/22 maxlen: 22
61.183.164.0/22 maxlen: 22
111.172.0.0/24 maxlen: 24
111.172.208.0/22 maxlen: 22
116.211.68.0/22 maxlen: 22
116.211.72.0/21 maxlen: 21
116.211.76.0/23 maxlen: 23
116.211.80.0/20 maxlen: 20
116.211.96.0/20 maxlen: 20
116.211.112.0/20 maxlen: 20
116.211.128.0/22 maxlen: 22
116.211.132.0/22 maxlen: 22
116.211.136.0/22 maxlen: 22
116.211.140.0/22 maxlen: 22
116.211.144.0/21 maxlen: 21
116.211.152.0/21 maxlen: 21
116.211.160.0/19 maxlen: 19
116.211.185.0/24 maxlen: 24
116.211.192.0/18 maxlen: 18
116.211.192.0/20 maxlen: 20
116.211.216.0/21 maxlen: 21
116.211.224.0/22 maxlen: 22
116.211.228.0/22 maxlen: 22
116.211.232.0/22 maxlen: 22
116.211.232.0/24 maxlen: 24
116.211.236.0/22 maxlen: 22
119.96.0.0/22 maxlen: 22
119.96.4.0/22 maxlen: 22
119.96.8.0/22 maxlen: 22
119.96.12.0/22 maxlen: 22
119.96.16.0/22 maxlen: 22
119.96.20.0/22 maxlen: 22
119.96.23.0/24 maxlen: 24
119.96.24.0/22 maxlen: 22
119.96.25.0/24 maxlen: 24
119.96.26.0/24 maxlen: 24
119.96.27.0/24 maxlen: 24
119.96.28.0/22 maxlen: 22
119.96.28.0/24 maxlen: 24
119.96.29.0/24 maxlen: 24
119.96.30.0/24 maxlen: 24
119.96.31.0/24 maxlen: 24
119.96.32.0/22 maxlen: 22
119.96.36.0/23 maxlen: 23
119.96.44.0/22 maxlen: 22
119.96.48.0/22 maxlen: 22
119.96.52.0/22 maxlen: 22
119.96.53.0/24 maxlen: 24
119.96.56.0/22 maxlen: 22
119.96.60.0/22 maxlen: 22
119.96.64.0/22 maxlen: 22
119.96.68.0/22 maxlen: 22
119.96.72.0/22 maxlen: 22
119.96.76.0/22 maxlen: 22
119.96.80.0/20 maxlen: 20
119.96.80.0/21 maxlen: 21
119.96.88.0/21 maxlen: 21
119.96.96.0/21 maxlen: 21
119.96.104.0/21 maxlen: 21
119.96.112.0/21 maxlen: 21
119.96.120.0/21 maxlen: 21
119.96.128.0/21 maxlen: 21
119.96.136.0/22 maxlen: 22
119.96.140.0/22 maxlen: 22
119.96.144.0/22 maxlen: 22
119.96.148.0/22 maxlen: 22
119.96.152.0/21 maxlen: 21
119.96.160.0/22 maxlen: 22
119.96.164.0/22 maxlen: 22
119.96.168.0/22 maxlen: 22
119.96.169.0/24 maxlen: 24
119.96.172.0/22 maxlen: 22
119.96.172.0/24 maxlen: 24
119.96.176.0/22 maxlen: 22
119.96.180.0/22 maxlen: 22
119.96.184.0/22 maxlen: 22
119.96.188.0/22 maxlen: 22
119.96.191.0/24 maxlen: 24
119.96.192.0/22 maxlen: 22
119.96.193.0/24 maxlen: 24
119.96.196.0/22 maxlen: 22
119.96.200.0/22 maxlen: 22
119.96.204.0/22 maxlen: 22
119.96.208.0/22 maxlen: 22
119.96.208.0/24 maxlen: 24
119.96.212.0/22 maxlen: 22
119.96.216.0/22 maxlen: 22
119.96.220.0/22 maxlen: 22
119.96.224.0/22 maxlen: 22
119.96.228.0/22 maxlen: 22
119.96.230.0/24 maxlen: 24
119.96.232.0/22 maxlen: 22
119.96.236.0/22 maxlen: 22
119.96.240.0/22 maxlen: 22
119.96.240.0/24 maxlen: 24
119.96.242.0/24 maxlen: 24
119.96.243.0/24 maxlen: 24
119.96.244.0/22 maxlen: 22
119.96.248.0/22 maxlen: 22
119.96.252.0/22 maxlen: 22
171.43.130.0/24 maxlen: 24
171.43.131.0/24 maxlen: 24
171.43.132.0/24 maxlen: 24
171.43.133.0/24 maxlen: 24
171.43.134.0/24 maxlen: 24
171.43.135.0/24 maxlen: 24
171.43.138.0/24 maxlen: 24
171.43.141.0/24 maxlen: 24
171.43.146.0/23 maxlen: 23
171.43.146.0/24 maxlen: 24
171.43.155.0/24 maxlen: 24
171.43.156.0/24 maxlen: 24
171.43.157.0/24 maxlen: 24
171.43.162.0/23 maxlen: 23
171.43.164.0/22 maxlen: 22
171.43.168.0/23 maxlen: 23
171.43.170.0/23 maxlen: 23
171.43.173.0/24 maxlen: 24
171.43.192.0/23 maxlen: 23
171.43.194.0/23 maxlen: 23
171.43.196.0/24 maxlen: 24
171.43.197.0/24 maxlen: 24
171.43.198.0/23 maxlen: 23
171.43.200.0/22 maxlen: 22
171.43.204.0/24 maxlen: 24
171.43.205.0/24 maxlen: 24
171.43.208.0/24 maxlen: 24
171.43.214.0/23 maxlen: 23
171.43.220.0/24 maxlen: 24
171.43.226.0/24 maxlen: 24
171.43.227.0/24 maxlen: 24
171.43.228.0/23 maxlen: 23
171.43.236.0/22 maxlen: 22
171.43.240.0/22 maxlen: 22
171.43.246.0/23 maxlen: 23
171.43.248.0/24 maxlen: 24
171.43.249.0/24 maxlen: 24
171.43.250.0/24 maxlen: 24
171.43.251.0/24 maxlen: 24
171.43.252.0/23 maxlen: 23
203.2.66.0/24 maxlen: 24
203.2.67.0/24 maxlen: 24
203.2.70.0/23 maxlen: 23
221.235.252.0/22 maxlen: 22
240e:d:800::/37 maxlen: 37
240e:d:8800::/37 maxlen: 37
240e:d:9000::/37 maxlen: 37
240e:d:9800::/37 maxlen: 37
240e:b6::/36 maxlen: 36
240e:b7:5000::/37 maxlen: 37
240e:b7:5800::/37 maxlen: 37
240e:b7:6000::/36 maxlen: 36
240e:b7:7000::/36 maxlen: 36
240e:105:ee00::/39 maxlen: 39
240e:105:f700::/40 maxlen: 40
240e:108:2b::/48 maxlen: 48
240e:108:95::/48 maxlen: 48
240e:108:1160::/48 maxlen: 48
240e:108:1167::/48 maxlen: 48
240e:25f:a800::/37 maxlen: 37
240e:95c::/36 maxlen: 36
240e:95c:1000::/36 maxlen: 36
240e:95c:2000::/36 maxlen: 36
240e:95c:3000::/36 maxlen: 36
240e:95c:6000::/36 maxlen: 36
240e:980:2b00::/40 maxlen: 40
240e:980:9500::/40 maxlen: 40
240e:982:6000::/40 maxlen: 40
240e:982:6700::/40 maxlen: 40
240e:982:6a00::/40 maxlen: 40
240e:982:6b04::/48 maxlen: 48
240e:982:6c00::/40 maxlen: 40
240e:983:1600::/48 maxlen: 48
240e:983:1601::/48 maxlen: 48
240e:983:1602::/48 maxlen: 48
240e:983:160a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b3:f2:59:e7:f3:3c:da:60:fc:68:2d:e0:84:be:76:aa:10:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 6 01:22:57 2026 GMT
Not After : Jul 5 01:27:57 2027 GMT
Subject: CN=F17CA944622F314AF0784411A1BCDACB0E5856FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:69:5c:20:db:ad:30:68:a7:9b:6d:14:4f:
08:15:f8:44:e7:04:c8:8a:00:f6:1a:2b:b9:27:17:
66:05:ce:da:33:29:2d:27:bd:63:a2:6b:1f:2e:0a:
2e:f2:6a:21:b0:24:c5:cd:08:06:07:57:02:17:8d:
dc:71:03:12:7c:2e:f5:c9:a3:6d:eb:6a:29:08:a8:
21:8f:9a:00:da:56:83:d5:b0:4d:2f:e5:35:7b:26:
50:d2:9f:05:88:7c:cb:47:c6:09:d1:61:5d:14:e4:
de:b5:5d:0a:22:f5:a9:63:5d:fa:3d:14:90:db:4b:
bb:ae:dd:b4:46:c9:ab:4c:16:0c:ed:71:7e:e1:fb:
9c:9b:88:e5:55:7e:a4:c4:f4:28:6b:5a:1f:d4:28:
87:91:7b:5c:a6:5c:4b:72:18:72:38:2f:a1:5e:62:
14:7d:31:08:4e:a3:c7:4f:d1:45:a9:ee:9b:d3:4f:
90:a3:d1:b2:70:6a:6d:9f:4e:b8:92:7e:b3:f3:11:
ca:05:5c:36:08:ff:9a:6f:21:e0:4e:23:30:cf:0a:
97:a9:d7:f3:06:ac:e8:aa:38:01:9d:91:25:cf:5d:
e0:d1:7c:03:64:52:1f:04:56:26:21:6e:ef:b4:85:
1c:f1:72:19:5a:5b:8f:bb:55:8c:90:71:27:10:46:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:A9:44:62:2F:31:4A:F0:78:44:11:A1:BC:DA:CB:0E:58:56:FF
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.19.220.0/22
27.19.248.0/21
58.49.144.0-58.49.163.255
58.49.192.0/21
58.49.212.0-58.49.255.255
61.183.164.0/22
111.172.0.0/24
111.172.208.0/22
116.211.68.0-116.211.255.255
119.96.0.0-119.96.37.255
119.96.44.0-119.96.255.255
171.43.130.0-171.43.135.255
171.43.138.0/24
171.43.141.0/24
171.43.146.0/23
171.43.155.0-171.43.157.255
171.43.162.0-171.43.171.255
171.43.173.0/24
171.43.192.0-171.43.205.255
171.43.208.0/24
171.43.214.0/23
171.43.220.0/24
171.43.226.0-171.43.229.255
171.43.236.0-171.43.243.255
171.43.246.0-171.43.253.255
203.2.66.0/23
203.2.70.0/23
221.235.252.0/22
IPv6:
240e:d:800::/37
240e:d:8800::-240e:d:9fff:ffff:ffff:ffff:ffff:ffff
240e:b6::/36
240e:b7:5000::-240e:b7:7fff:ffff:ffff:ffff:ffff:ffff
240e:105:ee00::/39
240e:105:f700::/40
240e:108:2b::/48
240e:108:95::/48
240e:108:1160::/48
240e:108:1167::/48
240e:25f:a800::/37
240e:95c::/34
240e:95c:6000::/36
240e:980:2b00::/40
240e:980:9500::/40
240e:982:6000::/40
240e:982:6700::/40
240e:982:6a00::/40
240e:982:6b04::/48
240e:982:6c00::/40
240e:983:1600::-240e:983:1602:ffff:ffff:ffff:ffff:ffff
240e:983:160a::/48
Signature Algorithm: sha256WithRSAEncryption
5b:73:da:18:cf:ed:8e:77:5a:ce:03:66:62:44:4c:44:97:21:
24:9c:9f:4b:d8:33:d4:df:87:e1:ce:7f:10:e1:91:77:3a:24:
ed:f9:88:a9:74:3a:d0:ab:18:2b:83:15:b1:6d:ff:dd:50:41:
c5:18:ab:60:f0:de:60:38:8f:32:af:ab:b3:51:d0:3e:85:b3:
74:24:d7:a6:bb:2d:1e:36:a3:64:c6:47:33:dc:da:3c:9c:1f:
89:3d:22:d1:9b:d6:a6:70:c6:d4:2b:98:b5:2f:ba:09:e4:7a:
a6:9a:45:66:bf:9f:30:96:40:17:d9:82:7c:43:e3:75:96:9b:
40:2d:eb:99:a6:02:90:8a:43:fa:23:23:c3:d9:44:a3:7b:36:
c3:d0:86:2a:be:d8:e3:0f:bd:8f:ac:87:ec:99:f9:93:d3:92:
03:51:e1:07:b2:8a:03:c2:e3:7e:4d:6f:2b:f4:c5:b8:bc:60:
90:8f:1b:43:55:09:37:a6:d5:07:84:c4:02:ce:a3:67:c5:8c:
2a:5c:0d:bc:41:30:5d:01:8f:78:9d:0f:d3:8d:9f:f5:bb:46:
d6:bd:6c:fc:a7:07:5e:2c:74:2c:bb:06:8a:98:c9:76:51:64:
81:a2:ef:4a:30:af:48:02:69:55:bb:8d:e2:36:86:50:bf:00:
ce:0e:51:7f
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgIUQ7PyWefzPNpg/Ggt4IS+dqoQS6swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcwNjAxMjI1N1oX
DTI3MDcwNTAxMjc1N1owMzExMC8GA1UEAxMoRjE3Q0E5NDQ2MjJGMzE0QUYwNzg0
NDExQTFCQ0RBQ0IwRTU4NTZGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALHhaVwg260waKebbRRPCBX4ROcEyIoA9horuScXZgXO2jMpLSe9Y6JrHy4K
LvJqIbAkxc0IBgdXAheN3HEDEnwu9cmjbetqKQioIY+aANpWg9WwTS/lNXsmUNKf
BYh8y0fGCdFhXRTk3rVdCiL1qWNd+j0UkNtLu67dtEbJq0wWDO1xfuH7nJuI5VV+
pMT0KGtaH9Qoh5F7XKZcS3IYcjgvoV5iFH0xCE6jx0/RRanum9NPkKPRsnBqbZ9O
uJJ+s/MRygVcNgj/mm8h4E4jMM8Kl6nX8was6Ko4AZ2RJc9d4NF8A2RSHwRWJiFu
77SFHPFyGVpbj7tVjJBxJxBG3vkCAwEAAaOCA8owggPGMB0GA1UdDgQWBBTxfKlE
Yi8xSvB4RBGhvNrLDlhW/zAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTNTg1NjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
ggIEBggrBgEFBQcBBwEB/wSCAfMwggHvMIIBDAQCAAEwggEEAwQCGxPcAwQDGxP4
MAwDBAQ6MZADBAI6MaADBAM6McAwCwMEAjox1AMDATowAwQCPbekAwQAb6wAAwQC
b6zQMAsDBAJ000QDAwJ00DALAwMFd2ADBAF3YCQwCwMEAndgLAMDAHdgMAwDBAGr
K4IDBAOrK4ADBACrK4oDBACrK40DBAGrK5IwDAMEAKsrmwMEAasrnDAMAwQBqyui
AwQCqyuoAwQAqyutMAwDBAarK8ADBAGrK8wDBACrK9ADBAGrK9YDBACrK9wwDAME
Aasr4gMEAasr5DAMAwQCqyvsAwQCqyvwMAwDBAGrK/YDBAGrK/wDBAHLAkIDBAHL
AkYDBALd6/wwgdwEAgACMIHVAwYDJA4ADQgwEAMGAyQOAA2IAwYFJA4ADYADBgQk
DgC2ADAQAwYEJA4At1ADBgckDgC3AAMGASQOAQXuAwYAJA4BBfcDBwAkDgEIACsD
BwAkDgEIAJUDBwAkDgEIEWADBwAkDgEIEWcDBgMkDgJfqAMGBiQOCVwAAwYEJA4J
XGADBgAkDgmAKwMGACQOCYCVAwYAJA4JgmADBgAkDgmCZwMGACQOCYJqAwcAJA4J
gmsEAwYAJA4JgmwwEQMGASQOCYMWAwcAJA4JgxYCAwcAJA4JgxYKMA0GCSqGSIb3
DQEBCwUAA4IBAQBbc9oYz+2Od1rOA2ZiRExElyEknJ9L2DPU34fhzn8Q4ZF3OiTt
+YipdDrQqxgrgxWxbf/dUEHFGKtg8N5gOI8yr6uzUdA+hbN0JNemuy0eNqNkxkcz
3No8nB+JPSLRm9amcMbUK5i1L7oJ5HqmmkVmv58wlkAX2YJ8Q+N1lptALeuZpgKQ
ikP6IyPD2USjezbD0IYqvtjjD72PrIfsmfmT05IDUeEHsooDwuN+TW8r9MW4vGCQ
jxtDVQk3ptUHhMQCzqNnxYwqXA28QTBdAY94nQ/TjZ/1u0bWvWz8pwdeLHQsuwaK
mMl2UWSBou9KMK9IAmlVu43iNoZQvwDODlF/
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:39 2026 by rpki-client