Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58777.roa
File: AS58777.roa (raw, json)
Hash identifier: X1M4pCzwlGvaSQn0q95n0yPLvuqe16YMM4glrqRtzm8=
Subject key identifier: 4A:84:45:CC:81:24:18:EA:F9:27:4F:77:E0:47:19:23:FE:73:E6:67
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 589271E1CF3FB8769CB33DB7ECF130F9B50D4ADE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58777.roa
Signing time: Tue 23 Jun 2026 11:48:40 +0000
ROA not before: Tue 23 Jun 2026 11:43:40 +0000
ROA not after: Tue 22 Jun 2027 11:48:40 +0000
asID: 58777
IP address blocks: 42.122.63.0/24 maxlen: 24
59.47.246.0/23 maxlen: 23
59.47.246.0/24 maxlen: 24
59.52.138.0/24 maxlen: 24
61.133.162.0/24 maxlen: 24
61.151.144.0/23 maxlen: 23
61.151.144.0/24 maxlen: 24
61.151.145.0/24 maxlen: 24
106.91.120.0/24 maxlen: 24
113.240.205.0/24 maxlen: 24
117.25.105.0/24 maxlen: 24
125.93.28.0/23 maxlen: 23
125.93.29.0/24 maxlen: 24
171.221.53.0/24 maxlen: 24
182.36.0.0/24 maxlen: 24
182.36.12.0/24 maxlen: 24
203.33.67.0/24 maxlen: 24
220.171.147.0/24 maxlen: 24
221.226.225.0/24 maxlen: 24
221.235.40.0/24 maxlen: 24
221.237.65.0/24 maxlen: 24
240e:108:4000::/48 maxlen: 48
240e:108:4001::/48 maxlen: 48
240e:108:4020::/48 maxlen: 48
240e:108:4025::/48 maxlen: 48
240e:108:4040::/48 maxlen: 48
240e:108:4047::/48 maxlen: 48
240e:108:4059::/48 maxlen: 48
240e:108:4060::/48 maxlen: 48
240e:108:4080::/48 maxlen: 48
240e:108:40a0::/48 maxlen: 48
240e:108:40e0::/48 maxlen: 48
240e:108:40ec::/48 maxlen: 48
240e:108:4120::/48 maxlen: 48
240e:108:4140::/48 maxlen: 48
240e:108:4160::/48 maxlen: 48
240e:108:41c0::/48 maxlen: 48
240e:108:41e0::/48 maxlen: 48
240e:108:4200::/48 maxlen: 48
240e:108:4220::/48 maxlen: 48
240e:108:4240::/48 maxlen: 48
240e:108:4260::/48 maxlen: 48
240e:108:4280::/48 maxlen: 48
240e:108:42a0::/48 maxlen: 48
240e:108:42c0::/48 maxlen: 48
240e:108:42e0::/48 maxlen: 48
240e:108:4300::/48 maxlen: 48
240e:108:4320::/48 maxlen: 48
240e:108:4340::/48 maxlen: 48
240e:108:4360::/48 maxlen: 48
240e:108:4380::/48 maxlen: 48
240e:108:438c::/48 maxlen: 48
240e:108:43a0::/48 maxlen: 48
240e:108:43c0::/48 maxlen: 48
240e:108:4800::/48 maxlen: 48
240e:108:4801::/48 maxlen: 48
240e:108:4820::/48 maxlen: 48
240e:108:4825::/48 maxlen: 48
240e:108:4840::/48 maxlen: 48
240e:108:4847::/48 maxlen: 48
240e:108:4859::/48 maxlen: 48
240e:108:4860::/48 maxlen: 48
240e:108:4880::/48 maxlen: 48
240e:108:48a0::/48 maxlen: 48
240e:108:48e0::/48 maxlen: 48
240e:108:48ec::/48 maxlen: 48
240e:108:4920::/48 maxlen: 48
240e:108:4940::/48 maxlen: 48
240e:108:4960::/48 maxlen: 48
240e:108:49c0::/48 maxlen: 48
240e:108:49e0::/48 maxlen: 48
240e:108:4a00::/48 maxlen: 48
240e:108:4a20::/48 maxlen: 48
240e:108:4a40::/48 maxlen: 48
240e:108:4a60::/48 maxlen: 48
240e:108:4a80::/48 maxlen: 48
240e:108:4aa0::/48 maxlen: 48
240e:108:4ac0::/48 maxlen: 48
240e:108:4ae0::/48 maxlen: 48
240e:108:4b00::/48 maxlen: 48
240e:108:4b20::/48 maxlen: 48
240e:108:4b40::/48 maxlen: 48
240e:108:4b60::/48 maxlen: 48
240e:108:4b80::/48 maxlen: 48
240e:108:4b8c::/48 maxlen: 48
240e:108:4ba0::/48 maxlen: 48
240e:108:4bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:92:71:e1:cf:3f:b8:76:9c:b3:3d:b7:ec:f1:30:f9:b5:0d:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 23 11:43:40 2026 GMT
Not After : Jun 22 11:48:40 2027 GMT
Subject: CN=4A8445CC812418EAF9274F77E0471923FE73E667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:c8:cd:5e:0c:fc:38:30:9c:fe:f0:31:c5:
ea:ff:3a:55:72:d1:47:36:b2:a2:90:3f:37:22:d9:
34:39:b7:55:9b:0f:bf:d5:d9:42:ff:1e:6e:2c:80:
0a:39:5d:d5:0d:be:57:dd:11:e4:31:5c:99:1c:9c:
f3:c2:54:7f:96:8f:aa:96:fa:9f:a7:ce:ce:3e:33:
cc:91:99:18:cf:4e:a5:fd:96:45:42:d4:13:b5:3f:
76:86:3a:95:7a:ed:66:19:f4:1e:2f:25:f6:dd:ba:
19:42:d2:16:2a:0e:15:13:7e:b4:fb:75:69:79:f5:
1b:f2:38:66:a9:e7:6b:5c:14:21:17:49:37:cf:f4:
08:8c:e7:d9:c1:ff:41:78:ed:40:31:bc:59:02:f3:
d7:52:ce:28:7c:c9:46:88:60:86:a6:ad:0b:78:7a:
a5:87:62:7b:4f:c2:72:41:88:f1:d5:54:d1:9e:55:
dc:46:ec:51:41:73:3c:e1:83:fb:5f:61:8d:52:9b:
a7:a4:de:bd:c4:98:eb:25:16:30:dd:db:85:c3:bb:
fa:b6:f9:b2:92:e9:cc:13:b4:cd:a1:f1:ea:f5:a5:
ed:f0:9b:b0:2d:e2:29:04:99:0c:ff:df:c3:00:0a:
9c:44:46:91:0c:37:7a:f3:7b:8f:07:82:56:cb:06:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:45:CC:81:24:18:EA:F9:27:4F:77:E0:47:19:23:FE:73:E6:67
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58777.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.122.63.0/24
59.47.246.0/23
59.52.138.0/24
61.133.162.0/24
61.151.144.0/23
106.91.120.0/24
113.240.205.0/24
117.25.105.0/24
125.93.28.0/23
171.221.53.0/24
182.36.0.0/24
182.36.12.0/24
203.33.67.0/24
220.171.147.0/24
221.226.225.0/24
221.235.40.0/24
221.237.65.0/24
IPv6:
240e:108:4000::/47
240e:108:4020::/48
240e:108:4025::/48
240e:108:4040::/48
240e:108:4047::/48
240e:108:4059::/48
240e:108:4060::/48
240e:108:4080::/48
240e:108:40a0::/48
240e:108:40e0::/48
240e:108:40ec::/48
240e:108:4120::/48
240e:108:4140::/48
240e:108:4160::/48
240e:108:41c0::/48
240e:108:41e0::/48
240e:108:4200::/48
240e:108:4220::/48
240e:108:4240::/48
240e:108:4260::/48
240e:108:4280::/48
240e:108:42a0::/48
240e:108:42c0::/48
240e:108:42e0::/48
240e:108:4300::/48
240e:108:4320::/48
240e:108:4340::/48
240e:108:4360::/48
240e:108:4380::/48
240e:108:438c::/48
240e:108:43a0::/48
240e:108:43c0::/48
240e:108:4800::/47
240e:108:4820::/48
240e:108:4825::/48
240e:108:4840::/48
240e:108:4847::/48
240e:108:4859::/48
240e:108:4860::/48
240e:108:4880::/48
240e:108:48a0::/48
240e:108:48e0::/48
240e:108:48ec::/48
240e:108:4920::/48
240e:108:4940::/48
240e:108:4960::/48
240e:108:49c0::/48
240e:108:49e0::/48
240e:108:4a00::/48
240e:108:4a20::/48
240e:108:4a40::/48
240e:108:4a60::/48
240e:108:4a80::/48
240e:108:4aa0::/48
240e:108:4ac0::/48
240e:108:4ae0::/48
240e:108:4b00::/48
240e:108:4b20::/48
240e:108:4b40::/48
240e:108:4b60::/48
240e:108:4b80::/48
240e:108:4b8c::/48
240e:108:4ba0::/48
240e:108:4bc0::/48
Signature Algorithm: sha256WithRSAEncryption
01:ea:63:17:85:54:79:e9:7f:5d:36:e2:f4:a4:c3:4c:0a:41:
c6:a6:84:ac:39:d0:2a:5b:4a:d9:f8:a1:52:86:07:da:be:00:
a4:da:1f:e3:1a:e8:22:96:3b:89:ee:a2:ac:69:8b:ea:e0:b0:
6e:5d:54:fa:11:c7:20:33:33:ce:6b:6d:30:c1:89:b4:17:09:
7b:23:c6:4e:9c:cc:d5:44:1b:51:13:c1:ee:56:ca:91:df:ab:
37:29:fb:05:99:1a:f5:21:a5:8b:7a:63:72:5b:1a:ff:b9:a5:
2d:2e:6a:98:12:ba:d1:51:d1:e7:4e:83:68:01:c6:a4:00:d1:
b7:c9:32:d3:64:f4:38:fe:d6:91:0f:7f:d4:f8:6a:04:27:45:
b8:ac:70:b8:b5:3c:2c:a1:32:2e:d1:ef:10:8b:9e:f3:1d:cb:
77:d6:f7:e5:cf:6d:37:0c:b3:6d:45:b0:7c:a1:85:98:bd:54:
93:4b:a1:c8:ef:ef:ee:1d:b0:6b:ac:77:ed:f4:f9:f4:3d:fa:
21:4e:0e:fa:c5:6d:b1:95:f6:e1:4b:0c:f4:af:02:23:ba:e7:
2c:b5:6e:0b:fa:50:3b:5a:51:b2:bf:ee:c1:6c:70:d5:5c:92:
7e:00:d9:78:72:52:96:75:55:87:b8:97:f4:17:e9:c4:10:73:
95:ad:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:00 2026 by rpki-client