Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/AS45090.roa
File: AS45090.roa (raw, json)
Hash identifier: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=
Subject key identifier: C8:1B:9F:17:36:23:72:A5:4A:99:EC:20:47:61:E2:4D:41:B3:D6:42
Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial: 414D6FBD2EC1E520A3FB651FE9503CA6BB39B134
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/AS45090.roa
Signing time: Wed 10 Jun 2026 11:34:54 +0000
ROA not before: Wed 10 Jun 2026 11:29:54 +0000
ROA not after: Wed 09 Jun 2027 11:34:54 +0000
asID: 45090
IP address blocks: 139.155.0.0/16 maxlen: 16
139.155.0.0/20 maxlen: 20
139.155.16.0/20 maxlen: 20
139.155.32.0/20 maxlen: 20
139.155.48.0/20 maxlen: 20
139.155.64.0/20 maxlen: 20
139.155.80.0/20 maxlen: 20
139.155.96.0/20 maxlen: 20
139.155.112.0/20 maxlen: 20
139.155.128.0/20 maxlen: 20
139.155.144.0/20 maxlen: 20
139.155.160.0/20 maxlen: 20
139.155.176.0/20 maxlen: 20
139.155.192.0/20 maxlen: 20
139.155.208.0/20 maxlen: 20
139.155.224.0/20 maxlen: 20
139.155.240.0/20 maxlen: 20
139.186.0.0/16 maxlen: 16
139.186.0.0/20 maxlen: 20
139.186.16.0/20 maxlen: 20
139.186.32.0/20 maxlen: 20
139.186.48.0/20 maxlen: 20
139.186.64.0/20 maxlen: 20
139.186.80.0/20 maxlen: 20
139.186.96.0/20 maxlen: 20
139.186.112.0/20 maxlen: 20
139.186.128.0/20 maxlen: 20
139.186.144.0/20 maxlen: 20
139.186.160.0/20 maxlen: 20
139.186.176.0/20 maxlen: 20
139.186.192.0/20 maxlen: 20
139.186.208.0/20 maxlen: 20
139.186.224.0/20 maxlen: 20
139.186.240.0/20 maxlen: 20
139.199.0.0/16 maxlen: 16
139.199.0.0/23 maxlen: 23
139.199.2.0/23 maxlen: 23
139.199.4.0/23 maxlen: 23
139.199.6.0/23 maxlen: 23
139.199.8.0/23 maxlen: 23
139.199.10.0/23 maxlen: 23
139.199.12.0/23 maxlen: 23
139.199.14.0/23 maxlen: 23
139.199.16.0/23 maxlen: 23
139.199.18.0/23 maxlen: 23
139.199.20.0/22 maxlen: 22
139.199.24.0/21 maxlen: 21
139.199.32.0/21 maxlen: 21
139.199.40.0/23 maxlen: 23
139.199.42.0/23 maxlen: 23
139.199.44.0/22 maxlen: 22
139.199.48.0/23 maxlen: 23
139.199.50.0/23 maxlen: 23
139.199.52.0/24 maxlen: 24
139.199.53.0/24 maxlen: 24
139.199.54.0/23 maxlen: 23
139.199.56.0/23 maxlen: 23
139.199.58.0/23 maxlen: 23
139.199.60.0/23 maxlen: 23
139.199.62.0/23 maxlen: 23
139.199.64.0/23 maxlen: 23
139.199.66.0/23 maxlen: 23
139.199.68.0/23 maxlen: 23
139.199.70.0/23 maxlen: 23
139.199.72.0/23 maxlen: 23
139.199.74.0/23 maxlen: 23
139.199.76.0/23 maxlen: 23
139.199.78.0/23 maxlen: 23
139.199.80.0/23 maxlen: 23
139.199.82.0/23 maxlen: 23
139.199.84.0/23 maxlen: 23
139.199.86.0/23 maxlen: 23
139.199.88.0/23 maxlen: 23
139.199.90.0/23 maxlen: 23
139.199.92.0/23 maxlen: 23
139.199.94.0/23 maxlen: 23
139.199.96.0/20 maxlen: 20
139.199.112.0/20 maxlen: 20
139.199.128.0/21 maxlen: 21
139.199.136.0/23 maxlen: 23
139.199.138.0/23 maxlen: 23
139.199.140.0/23 maxlen: 23
139.199.142.0/23 maxlen: 23
139.199.144.0/23 maxlen: 23
139.199.148.0/23 maxlen: 23
139.199.150.0/23 maxlen: 23
139.199.152.0/23 maxlen: 23
139.199.154.0/23 maxlen: 23
139.199.156.0/23 maxlen: 23
139.199.158.0/23 maxlen: 23
139.199.160.0/23 maxlen: 23
139.199.162.0/23 maxlen: 23
139.199.164.0/23 maxlen: 23
139.199.166.0/23 maxlen: 23
139.199.168.0/23 maxlen: 23
139.199.170.0/23 maxlen: 23
139.199.172.0/23 maxlen: 23
139.199.174.0/23 maxlen: 23
139.199.176.0/23 maxlen: 23
139.199.178.0/23 maxlen: 23
139.199.180.0/23 maxlen: 23
139.199.182.0/23 maxlen: 23
139.199.184.0/23 maxlen: 23
139.199.186.0/23 maxlen: 23
139.199.188.0/23 maxlen: 23
139.199.190.0/23 maxlen: 23
139.199.192.0/23 maxlen: 23
139.199.194.0/23 maxlen: 23
139.199.196.0/23 maxlen: 23
139.199.198.0/23 maxlen: 23
139.199.200.0/23 maxlen: 23
139.199.202.0/23 maxlen: 23
139.199.204.0/23 maxlen: 23
139.199.206.0/23 maxlen: 23
139.199.208.0/23 maxlen: 23
139.199.210.0/23 maxlen: 23
139.199.212.0/23 maxlen: 23
139.199.214.0/23 maxlen: 23
139.199.216.0/23 maxlen: 23
139.199.218.0/23 maxlen: 23
139.199.220.0/23 maxlen: 23
139.199.222.0/23 maxlen: 23
139.199.224.0/23 maxlen: 23
139.199.226.0/23 maxlen: 23
139.199.228.0/23 maxlen: 23
139.199.230.0/23 maxlen: 23
139.199.232.0/23 maxlen: 23
139.199.234.0/23 maxlen: 23
139.199.237.0/24 maxlen: 24
139.199.238.0/23 maxlen: 23
139.199.240.0/23 maxlen: 23
139.199.242.0/23 maxlen: 23
139.199.244.0/23 maxlen: 23
139.199.246.0/23 maxlen: 23
139.199.248.0/23 maxlen: 23
139.199.250.0/23 maxlen: 23
139.199.252.0/22 maxlen: 22
140.143.0.0/16 maxlen: 16
140.143.0.0/20 maxlen: 20
140.143.16.0/20 maxlen: 20
140.143.32.0/20 maxlen: 20
140.143.48.0/20 maxlen: 20
140.143.64.0/20 maxlen: 20
140.143.80.0/23 maxlen: 23
140.143.82.0/23 maxlen: 23
140.143.84.0/22 maxlen: 22
140.143.88.0/22 maxlen: 22
140.143.92.0/22 maxlen: 22
140.143.96.0/22 maxlen: 22
140.143.100.0/23 maxlen: 23
140.143.102.0/23 maxlen: 23
140.143.104.0/22 maxlen: 22
140.143.108.0/23 maxlen: 23
140.143.110.0/23 maxlen: 23
140.143.114.0/23 maxlen: 23
140.143.116.0/22 maxlen: 22
140.143.120.0/22 maxlen: 22
140.143.124.0/22 maxlen: 22
140.143.128.0/22 maxlen: 22
140.143.132.0/22 maxlen: 22
140.143.136.0/22 maxlen: 22
140.143.140.0/22 maxlen: 22
140.143.144.0/22 maxlen: 22
140.143.148.0/22 maxlen: 22
140.143.152.0/22 maxlen: 22
140.143.156.0/22 maxlen: 22
140.143.160.0/22 maxlen: 22
140.143.164.0/22 maxlen: 22
140.143.168.0/22 maxlen: 22
140.143.172.0/22 maxlen: 22
140.143.176.0/22 maxlen: 22
140.143.180.0/22 maxlen: 22
140.143.184.0/22 maxlen: 22
140.143.188.0/22 maxlen: 22
140.143.192.0/22 maxlen: 22
140.143.196.0/22 maxlen: 22
140.143.200.0/22 maxlen: 22
140.143.204.0/22 maxlen: 22
140.143.208.0/22 maxlen: 22
140.143.212.0/22 maxlen: 22
140.143.216.0/22 maxlen: 22
140.143.220.0/22 maxlen: 22
140.143.224.0/22 maxlen: 22
140.143.228.0/22 maxlen: 22
140.143.232.0/22 maxlen: 22
140.143.236.0/22 maxlen: 22
140.143.240.0/22 maxlen: 22
140.143.244.0/22 maxlen: 22
140.143.248.0/22 maxlen: 22
140.143.252.0/23 maxlen: 23
140.143.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4d:6f:bd:2e:c1:e5:20:a3:fb:65:1f:e9:50:3c:a6:bb:39:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Validity
Not Before: Jun 10 11:29:54 2026 GMT
Not After : Jun 9 11:34:54 2027 GMT
Subject: CN=C81B9F17362372A54A99EC204761E24D41B3D642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:b2:e5:3d:fa:4d:33:cd:78:39:fc:e5:64:
13:fc:ca:63:45:ca:e3:5f:9f:54:09:27:a1:65:1e:
13:92:0a:e2:ef:26:c5:bf:ca:b8:3f:45:c1:c7:ab:
53:dc:b5:73:25:f2:2f:e9:49:6f:c6:15:05:b4:65:
d7:49:f6:98:21:b9:44:45:01:35:cc:f8:6b:19:95:
17:c5:e5:52:44:ef:fa:50:a0:d4:29:ad:b0:94:ad:
7e:69:6a:20:a4:e1:e1:90:0d:98:ad:4b:cc:c5:82:
55:26:c1:0b:60:85:5c:08:49:60:d0:d6:8f:db:6e:
82:00:1d:1c:5e:b1:0d:ea:79:a4:b4:69:ce:c7:ee:
f8:3f:76:37:75:bb:2d:55:88:d4:c0:7c:00:9c:6f:
5b:35:37:f0:5c:f2:02:e7:de:e1:1b:3f:4e:3a:b0:
be:eb:be:4d:17:3f:8b:eb:72:09:eb:77:65:02:df:
fd:b8:31:5b:1c:54:04:fa:0c:c8:16:96:10:60:69:
67:75:15:d0:7b:c4:8d:95:23:9a:34:e0:97:a2:af:
30:a5:01:27:79:92:02:a1:e3:a9:2c:64:14:b5:c7:
52:59:db:40:e6:8b:f4:72:bc:f1:80:dc:98:76:d0:
a2:4a:45:73:42:b4:2d:ae:4a:c3:58:f7:0a:33:b1:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:9F:17:36:23:72:A5:4A:99:EC:20:47:61:E2:4D:41:B3:D6:42
X509v3 Authority Key Identifier:
keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/AS45090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.155.0.0/16
139.186.0.0/16
139.199.0.0/16
140.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:d6:ee:38:4e:06:cf:73:37:f2:83:5f:4b:ac:bb:f3:43:32:
1f:df:76:01:d2:fc:db:de:8a:a3:fa:5f:c3:80:5b:a1:b3:9f:
9c:a1:0b:90:d3:0d:6f:36:71:a2:7e:ed:89:6b:d8:be:1d:04:
73:21:e9:8c:d4:d9:1b:64:f1:36:69:c0:99:f5:97:44:4b:0a:
5b:0d:54:a8:6e:c7:23:74:15:26:f3:d6:92:9d:fe:e9:2e:15:
9f:52:ce:06:1d:48:99:c8:75:9c:5b:8f:1e:c7:28:aa:3a:6e:
0f:35:bd:be:d7:e9:c2:c2:65:37:e9:03:0c:59:dd:22:48:5f:
43:d0:6f:5c:ab:ca:cb:c3:7d:7e:f2:a5:cc:ac:87:b9:9d:9f:
bf:95:23:0f:31:fb:c2:e7:2e:2c:48:97:db:20:a9:7e:f0:b1:
70:a1:b7:66:68:3d:26:dd:6f:a3:87:c5:ab:5a:a2:ea:1e:6d:
ea:83:15:ca:75:0f:cc:2e:6e:a4:d7:bb:fc:f4:f7:01:31:8d:
21:06:84:33:2a:70:b1:e9:c5:40:65:3a:49:db:e4:41:a5:f5:
cd:21:10:99:08:0b:47:4b:69:98:4e:e3:d8:3c:29:d4:17:3a:
c8:19:bd:87:d4:6f:58:b1:de:24:52:38:3f:72:b9:8f:6f:7e:
3c:9c:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:04:04 2026 by rpki-client