Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
File: AS139080.roa (raw, json)
Hash identifier: Ixaiu3+twhX8iBdxlGpsu4fNXlfx2qPq2Dz6Sj3ApYs=
Subject key identifier: 29:53:AD:07:D2:FE:F4:9D:96:BC:16:3C:1B:65:52:E9:16:10:22:6B
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 243D2466AE2EEEB5C1E63E22F8DCA6BA16FDAF62
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
Signing time: Wed 02 Sep 2026 03:05:50 +0000
ROA not before: Wed 02 Sep 2026 03:00:50 +0000
ROA not after: Wed 01 Sep 2027 03:05:50 +0000
asID: 139080
IP address blocks: 36.140.13.0/24 maxlen: 24
36.140.192.0/24 maxlen: 24
36.140.255.0/24 maxlen: 24
36.170.16.0/22 maxlen: 22
36.170.24.0/21 maxlen: 21
36.170.38.0/23 maxlen: 23
36.170.40.0/22 maxlen: 22
36.170.46.0/23 maxlen: 23
36.170.48.0/21 maxlen: 21
36.170.50.0/24 maxlen: 24
36.170.90.0/23 maxlen: 23
36.170.92.0/22 maxlen: 22
111.9.125.0/24 maxlen: 24
111.9.246.0/23 maxlen: 23
112.18.156.0/22 maxlen: 22
112.18.248.0/21 maxlen: 21
112.19.0.0/20 maxlen: 20
112.19.142.0/24 maxlen: 24
112.19.192.0/21 maxlen: 21
112.19.199.0/24 maxlen: 24
112.19.241.0/24 maxlen: 24
112.19.242.0/24 maxlen: 24
112.45.24.0/21 maxlen: 21
112.45.32.0/20 maxlen: 20
112.45.112.0/20 maxlen: 20
112.45.118.0/24 maxlen: 24
112.45.188.0/22 maxlen: 22
117.139.19.0/24 maxlen: 24
117.139.20.0/24 maxlen: 24
117.139.24.0/23 maxlen: 23
117.139.140.0/22 maxlen: 22
117.172.20.0/22 maxlen: 22
117.174.50.0/23 maxlen: 23
117.174.130.0/23 maxlen: 23
117.174.144.0/23 maxlen: 23
117.174.148.0/23 maxlen: 23
117.174.176.0/21 maxlen: 21
117.174.178.0/24 maxlen: 24
117.175.56.0/22 maxlen: 22
117.175.90.0/23 maxlen: 23
117.175.93.0/24 maxlen: 24
117.175.95.0/24 maxlen: 24
117.175.208.0/21 maxlen: 21
117.177.48.0/21 maxlen: 21
117.177.56.0/23 maxlen: 23
117.177.64.0/21 maxlen: 21
117.177.132.0/22 maxlen: 22
117.177.216.0/23 maxlen: 23
117.177.242.0/24 maxlen: 24
117.177.243.0/24 maxlen: 24
117.177.244.0/23 maxlen: 23
117.177.246.0/24 maxlen: 24
117.177.247.0/24 maxlen: 24
117.177.248.0/23 maxlen: 23
117.177.251.0/24 maxlen: 24
183.220.144.0/21 maxlen: 21
183.220.146.0/24 maxlen: 24
183.220.192.0/21 maxlen: 21
183.221.240.0/23 maxlen: 23
183.221.242.0/24 maxlen: 24
183.221.244.0/22 maxlen: 22
183.222.100.0/23 maxlen: 23
183.222.228.0/23 maxlen: 23
183.222.231.0/24 maxlen: 24
183.222.232.0/23 maxlen: 23
183.223.14.0/23 maxlen: 23
183.223.40.0/22 maxlen: 22
183.223.116.0/22 maxlen: 22
183.223.192.0/21 maxlen: 21
183.223.198.0/24 maxlen: 24
183.223.200.0/23 maxlen: 23
218.205.248.0/23 maxlen: 23
221.182.22.0/23 maxlen: 23
223.85.16.0/21 maxlen: 21
223.85.56.0/22 maxlen: 22
223.85.58.0/24 maxlen: 24
223.85.104.0/21 maxlen: 21
223.85.135.0/24 maxlen: 24
223.86.120.0/21 maxlen: 21
223.87.0.0/24 maxlen: 24
223.87.16.0/23 maxlen: 23
223.87.86.0/23 maxlen: 23
223.87.86.0/24 maxlen: 24
2409:8062:3002::/48 maxlen: 48
2409:8c62:410::/44 maxlen: 44
2409:8c62:e10::/44 maxlen: 44
2409:8c85:6200::/48 maxlen: 48
2409:8c85:6201::/48 maxlen: 48
2409:8c85:6202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 05:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3d:24:66:ae:2e:ee:b5:c1:e6:3e:22:f8:dc:a6:ba:16:fd:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Sep 2 03:00:50 2026 GMT
Not After : Sep 1 03:05:50 2027 GMT
Subject: CN=2953AD07D2FEF49D96BC163C1B6552E91610226B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:7c:02:63:f0:45:38:e4:34:b3:fa:ba:72:
13:95:d2:f4:41:38:11:56:9d:3a:cf:98:35:7b:b4:
bb:9f:a8:25:12:e5:98:d5:5a:5a:aa:16:91:e1:90:
90:60:92:03:c3:e6:78:68:2d:58:2e:af:ed:e2:d9:
87:27:a1:95:76:d2:7f:2b:9e:c9:88:09:da:e8:f5:
59:c6:79:3f:44:a6:db:a8:09:fc:45:77:24:98:d7:
d2:9b:d8:ea:f7:34:eb:e9:b7:41:dc:ec:94:9e:03:
fb:cb:7d:f0:31:62:60:08:22:0b:e9:b5:31:2b:64:
2f:a8:49:3c:12:0a:df:f6:d7:25:b8:ec:ea:16:5e:
9d:a1:6d:19:31:bb:b8:cb:31:08:9e:96:9b:e2:a5:
e9:93:eb:8b:9d:bc:35:19:b4:82:fb:fe:6f:95:f9:
61:38:af:06:92:38:d6:62:e9:64:ee:f9:58:23:bd:
d0:04:e2:b4:0e:66:50:46:32:83:45:1b:6e:58:55:
e9:c3:c2:67:7e:8f:a6:7f:9f:a1:ef:7a:bf:6d:f3:
fd:6d:6e:2a:90:f6:d2:40:b5:99:a4:72:cb:fd:1d:
4b:39:50:2d:55:47:88:28:5c:68:b0:3a:dc:d9:bb:
b2:06:f0:0e:c1:37:e7:c0:e0:4f:dc:02:95:b7:b2:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:AD:07:D2:FE:F4:9D:96:BC:16:3C:1B:65:52:E9:16:10:22:6B
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.140.13.0/24
36.140.192.0/24
36.140.255.0/24
36.170.16.0/22
36.170.24.0/21
36.170.38.0-36.170.43.255
36.170.46.0-36.170.55.255
36.170.90.0-36.170.95.255
111.9.125.0/24
111.9.246.0/23
112.18.156.0/22
112.18.248.0-112.19.15.255
112.19.142.0/24
112.19.192.0/21
112.19.241.0-112.19.242.255
112.45.24.0-112.45.47.255
112.45.112.0/20
112.45.188.0/22
117.139.19.0-117.139.20.255
117.139.24.0/23
117.139.140.0/22
117.172.20.0/22
117.174.50.0/23
117.174.130.0/23
117.174.144.0/23
117.174.148.0/23
117.174.176.0/21
117.175.56.0/22
117.175.90.0/23
117.175.93.0/24
117.175.95.0/24
117.175.208.0/21
117.177.48.0-117.177.57.255
117.177.64.0/21
117.177.132.0/22
117.177.216.0/23
117.177.242.0-117.177.249.255
117.177.251.0/24
183.220.144.0/21
183.220.192.0/21
183.221.240.0-183.221.242.255
183.221.244.0/22
183.222.100.0/23
183.222.228.0/23
183.222.231.0-183.222.233.255
183.223.14.0/23
183.223.40.0/22
183.223.116.0/22
183.223.192.0-183.223.201.255
218.205.248.0/23
221.182.22.0/23
223.85.16.0/21
223.85.56.0/22
223.85.104.0/21
223.85.135.0/24
223.86.120.0/21
223.87.0.0/24
223.87.16.0/23
223.87.86.0/23
IPv6:
2409:8062:3002::/48
2409:8c62:410::/44
2409:8c62:e10::/44
2409:8c85:6200::-2409:8c85:6202:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:26:8e:02:b7:30:ab:02:3d:1b:96:37:a8:2a:05:4b:1f:19:
46:51:0e:46:ee:a4:27:d4:74:45:2f:b8:bf:77:59:64:17:2f:
fa:81:fa:dc:e2:93:61:7b:f1:eb:96:fb:c9:da:22:3d:78:74:
d5:8c:fa:2a:26:33:ae:b0:60:72:94:de:9f:93:a2:9d:54:8e:
e7:b2:59:ef:1e:d9:4d:07:e7:94:4d:47:bc:d0:66:e6:8f:b6:
7d:b1:07:f7:03:64:a7:93:60:d1:b1:1d:92:41:6d:fa:8c:3e:
51:05:e6:91:95:62:5f:3e:2c:79:9f:4d:99:ce:db:e6:e0:87:
60:d1:c0:d9:7b:5d:57:4e:65:69:83:e5:83:08:37:4f:e9:d8:
de:f9:8f:b4:f0:5d:c5:3e:09:62:92:bc:0a:5b:d3:4b:40:79:
af:56:a0:bb:2e:ca:66:f6:e5:42:fc:e5:9d:49:a9:b6:72:66:
5a:17:5d:7d:6b:a9:c1:8c:b1:b1:88:80:ef:e7:30:7c:93:6f:
82:62:5c:66:49:11:04:1a:02:b1:77:9a:7b:e1:81:c9:54:06:
62:83:41:83:92:c1:4c:ba:45:9a:fb:bd:56:67:c8:95:82:4e:
49:cc:77:ae:1e:51:8c:88:dd:11:35:e7:d9:a2:21:cb:ea:a5:
1b:5c:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:04 2026 by rpki-client