Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
File: AS24139.roa (raw, json)
Hash identifier: hJcHyjWR1pIcNDPAIlns1S2+qmJeWdk6oWaWD3uXW7s=
Subject key identifier: 02:8A:19:88:8B:93:DE:57:0C:38:FE:8F:9D:FA:00:4D:00:C5:C2:9A
Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Certificate serial: 758428CAFD71A3EAD1FE5DB459D4D6B25B28C620
Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
Signing time: Wed 13 May 2026 01:17:24 +0000
ROA not before: Wed 13 May 2026 01:12:24 +0000
ROA not after: Wed 12 May 2027 01:17:24 +0000
asID: 24139
IP address blocks: 36.255.116.0/22 maxlen: 22
43.247.244.0/22 maxlen: 22
58.100.0.0/16 maxlen: 16
58.100.0.0/19 maxlen: 19
58.100.32.0/19 maxlen: 19
58.100.64.0/19 maxlen: 19
58.100.96.0/19 maxlen: 19
58.100.128.0/19 maxlen: 19
58.100.160.0/19 maxlen: 19
58.100.192.0/19 maxlen: 19
58.100.224.0/19 maxlen: 19
58.101.0.0/16 maxlen: 16
58.101.0.0/19 maxlen: 19
58.101.32.0/19 maxlen: 19
58.101.64.0/19 maxlen: 19
58.101.96.0/19 maxlen: 19
58.101.128.0/19 maxlen: 19
58.101.160.0/19 maxlen: 19
58.101.192.0/19 maxlen: 19
58.101.224.0/19 maxlen: 19
103.209.112.0/22 maxlen: 22
103.238.52.0/22 maxlen: 22
113.214.0.0/16 maxlen: 16
113.214.0.0/19 maxlen: 19
113.214.32.0/19 maxlen: 19
113.214.64.0/19 maxlen: 19
113.214.96.0/19 maxlen: 19
113.214.128.0/19 maxlen: 19
113.214.160.0/19 maxlen: 19
113.214.192.0/19 maxlen: 19
113.214.224.0/19 maxlen: 19
113.215.0.0/16 maxlen: 16
113.215.0.0/19 maxlen: 19
113.215.32.0/19 maxlen: 19
113.215.64.0/19 maxlen: 19
113.215.96.0/19 maxlen: 19
113.215.128.0/19 maxlen: 19
113.215.160.0/19 maxlen: 19
113.215.192.0/19 maxlen: 19
113.215.224.0/19 maxlen: 19
125.210.0.0/16 maxlen: 16
125.210.0.0/19 maxlen: 19
125.210.32.0/19 maxlen: 19
125.210.64.0/19 maxlen: 19
125.210.96.0/19 maxlen: 19
125.210.128.0/19 maxlen: 19
125.210.160.0/19 maxlen: 19
125.210.192.0/19 maxlen: 19
125.210.224.0/19 maxlen: 19
218.108.0.0/16 maxlen: 16
218.108.0.0/19 maxlen: 19
218.108.32.0/19 maxlen: 19
218.108.64.0/19 maxlen: 19
218.108.96.0/19 maxlen: 19
218.108.128.0/19 maxlen: 19
218.108.160.0/19 maxlen: 19
218.108.192.0/19 maxlen: 19
218.108.224.0/19 maxlen: 19
218.109.0.0/16 maxlen: 16
218.109.0.0/19 maxlen: 19
218.109.32.0/19 maxlen: 19
218.109.64.0/19 maxlen: 19
218.109.96.0/19 maxlen: 19
218.109.128.0/19 maxlen: 19
218.109.160.0/19 maxlen: 19
218.109.192.0/19 maxlen: 19
218.109.224.0/19 maxlen: 19
219.82.0.0/16 maxlen: 16
219.82.0.0/19 maxlen: 19
219.82.32.0/19 maxlen: 19
219.82.64.0/19 maxlen: 19
219.82.96.0/19 maxlen: 19
219.82.128.0/19 maxlen: 19
219.82.160.0/19 maxlen: 19
219.82.192.0/19 maxlen: 19
219.82.224.0/19 maxlen: 19
2401:ce00::/32 maxlen: 32
2401:ce00::/38 maxlen: 38
2401:ce00:400::/38 maxlen: 38
2401:ce00:800::/38 maxlen: 38
2401:ce00:c00::/38 maxlen: 38
2401:ce00:1000::/38 maxlen: 38
2401:ce00:1400::/38 maxlen: 38
2401:ce00:1800::/38 maxlen: 38
2401:ce00:1c00::/38 maxlen: 38
2401:ce00:2000::/38 maxlen: 38
2401:ce00:2400::/38 maxlen: 38
2401:ce00:2800::/38 maxlen: 38
2401:ce00:2c00::/38 maxlen: 38
2401:ce00:3000::/38 maxlen: 38
2401:ce00:3400::/38 maxlen: 38
2401:ce00:3800::/38 maxlen: 38
2401:ce00:3c00::/38 maxlen: 38
2401:ce00:4000::/38 maxlen: 38
2401:ce00:4400::/38 maxlen: 38
2401:ce00:4800::/38 maxlen: 38
2401:ce00:4c00::/38 maxlen: 38
2401:ce00:5000::/38 maxlen: 38
2401:ce00:5400::/38 maxlen: 38
2401:ce00:5800::/38 maxlen: 38
2401:ce00:5c00::/38 maxlen: 38
2401:ce00:6000::/38 maxlen: 38
2401:ce00:6400::/38 maxlen: 38
2401:ce00:6800::/38 maxlen: 38
2401:ce00:6c00::/38 maxlen: 38
2401:ce00:7000::/38 maxlen: 38
2401:ce00:7400::/38 maxlen: 38
2401:ce00:7800::/38 maxlen: 38
2401:ce00:7c00::/38 maxlen: 38
2401:ce00:8000::/38 maxlen: 38
2401:ce00:8400::/38 maxlen: 38
2401:ce00:8800::/38 maxlen: 38
2401:ce00:8c00::/38 maxlen: 38
2401:ce00:9000::/38 maxlen: 38
2401:ce00:9400::/38 maxlen: 38
2401:ce00:9800::/38 maxlen: 38
2401:ce00:9c00::/38 maxlen: 38
2401:ce00:a000::/38 maxlen: 38
2401:ce00:a400::/38 maxlen: 38
2401:ce00:a800::/38 maxlen: 38
2401:ce00:ac00::/38 maxlen: 38
2401:ce00:b000::/38 maxlen: 38
2401:ce00:b400::/38 maxlen: 38
2401:ce00:b800::/38 maxlen: 38
2401:ce00:bc00::/38 maxlen: 38
2401:ce00:c000::/38 maxlen: 38
2401:ce00:c400::/38 maxlen: 38
2401:ce00:c800::/38 maxlen: 38
2401:ce00:cc00::/38 maxlen: 38
2401:ce00:d000::/38 maxlen: 38
2401:ce00:d400::/38 maxlen: 38
2401:ce00:d800::/38 maxlen: 38
2401:ce00:dc00::/38 maxlen: 38
2401:ce00:e000::/38 maxlen: 38
2401:ce00:e400::/38 maxlen: 38
2401:ce00:e800::/38 maxlen: 38
2401:ce00:ec00::/38 maxlen: 38
2401:ce00:f000::/38 maxlen: 38
2401:ce00:f400::/38 maxlen: 38
2401:ce00:f800::/38 maxlen: 38
2401:ce00:fc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:84:28:ca:fd:71:a3:ea:d1:fe:5d:b4:59:d4:d6:b2:5b:28:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Validity
Not Before: May 13 01:12:24 2026 GMT
Not After : May 12 01:17:24 2027 GMT
Subject: CN=028A19888B93DE570C38FE8F9DFA004D00C5C29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:d3:d5:c3:f4:e1:de:ca:14:1a:22:0b:a6:
2a:be:44:6b:67:91:16:66:e4:fd:27:5e:e8:b5:f4:
39:4c:23:82:33:2f:ff:3e:8d:d1:6e:35:66:d1:28:
53:b6:da:c2:0d:56:73:b5:d7:74:42:86:49:26:60:
17:42:30:97:83:22:8e:55:0f:9b:29:71:6d:7d:12:
b8:2d:c8:f5:11:a4:7b:4e:80:c0:56:1c:c1:58:45:
1f:90:54:d0:60:9f:3d:b2:8d:c9:b8:32:d6:ac:41:
8d:d6:6d:a3:54:3c:7d:91:82:94:a2:a2:e6:5d:b9:
b0:09:45:b4:f3:95:46:71:78:9e:a7:1b:ad:16:2c:
52:89:79:a7:a2:41:f1:5d:ba:10:7e:4f:d9:43:83:
58:2a:30:c2:cf:3d:a0:49:36:ef:87:f2:ee:12:9d:
0d:3a:82:49:87:ed:2c:c0:90:dc:73:1f:96:58:99:
33:59:79:78:eb:e0:bc:9d:53:44:3b:6f:1a:c4:0d:
f1:de:41:e4:34:ad:66:0b:22:ce:33:d1:34:74:85:
d4:ab:69:1c:71:54:10:b8:22:90:30:c8:4b:9d:c9:
a8:fd:f4:52:da:5a:b6:10:6b:34:af:20:d7:2f:09:
29:b8:3f:4b:b8:f0:86:62:a7:0d:cf:c3:e7:7f:88:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:19:88:8B:93:DE:57:0C:38:FE:8F:9D:FA:00:4D:00:C5:C2:9A
X509v3 Authority Key Identifier:
keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.116.0/22
43.247.244.0/22
58.100.0.0/15
103.209.112.0/22
103.238.52.0/22
113.214.0.0/15
125.210.0.0/16
218.108.0.0/15
219.82.0.0/16
IPv6:
2401:ce00::/32
Signature Algorithm: sha256WithRSAEncryption
60:79:14:f1:e0:a9:57:01:9e:6b:13:68:91:03:e7:c5:8b:0a:
59:9d:e8:5f:95:ff:ba:61:85:49:a2:21:00:86:20:c9:30:e3:
48:ac:07:50:78:dd:1b:1f:35:b0:12:a9:b7:86:f6:1c:e8:09:
c2:57:62:25:67:78:a4:e7:f0:61:f6:17:fe:ad:98:59:92:78:
d2:5c:82:96:f6:7e:cd:a5:0b:4a:00:57:61:d0:8d:5d:a9:a5:
45:5e:69:f7:48:f3:a7:78:d9:2d:3c:b2:76:d4:ec:a8:ee:81:
8c:47:e7:83:d9:40:92:2c:04:a1:e7:d8:6b:31:23:ff:6c:a3:
b4:4e:a5:9f:3b:9d:30:5f:7d:38:3e:65:53:5b:9b:08:35:96:
9c:50:b3:34:8b:99:01:da:83:2a:00:24:4b:35:a3:1a:28:be:
b6:c9:9d:ba:7e:e5:28:c3:bb:f7:17:b3:0e:94:0c:c5:28:c0:
d1:47:f4:06:85:cc:9d:19:70:c2:2a:48:97:13:14:50:aa:c8:
6c:e4:22:56:e1:32:98:d8:f1:4b:ef:32:76:38:5f:90:e4:b6:
09:30:0e:a9:c5:73:1c:1b:97:05:7f:57:ed:b4:4b:bd:86:2a:
43:27:94:0b:fc:a1:5a:b8:2c:00:64:af:50:a8:6a:cc:a6:41:
be:b4:f1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:48:43 2026 by rpki-client