Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
File: AS139080.roa (raw, json)
Hash identifier: IMcFKG359CYR3TSbkMhRlSTtua3koBKcmZZzX8ZsOLs=
Subject key identifier: 5F:B2:2B:88:10:C2:6B:3A:2D:3F:1C:96:9C:67:ED:76:01:E8:88:BB
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 28E7D7C04B5BB02E10E47471A167E41A4DE8058D
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
Signing time: Fri 05 Jun 2026 06:28:04 +0000
ROA not before: Fri 05 Jun 2026 06:23:04 +0000
ROA not after: Fri 04 Jun 2027 06:28:04 +0000
asID: 139080
IP address blocks: 36.140.13.0/24 maxlen: 24
36.140.255.0/24 maxlen: 24
36.170.16.0/22 maxlen: 22
36.170.24.0/21 maxlen: 21
36.170.38.0/23 maxlen: 23
36.170.40.0/22 maxlen: 22
36.170.46.0/23 maxlen: 23
36.170.48.0/21 maxlen: 21
36.170.90.0/23 maxlen: 23
36.170.92.0/22 maxlen: 22
111.9.125.0/24 maxlen: 24
111.9.246.0/23 maxlen: 23
112.18.156.0/22 maxlen: 22
112.18.248.0/21 maxlen: 21
112.19.0.0/20 maxlen: 20
112.19.142.0/24 maxlen: 24
112.19.192.0/21 maxlen: 21
112.19.199.0/24 maxlen: 24
112.19.241.0/24 maxlen: 24
112.19.242.0/24 maxlen: 24
112.45.24.0/21 maxlen: 21
112.45.32.0/20 maxlen: 20
112.45.112.0/20 maxlen: 20
112.45.118.0/24 maxlen: 24
112.45.188.0/22 maxlen: 22
117.139.19.0/24 maxlen: 24
117.139.20.0/24 maxlen: 24
117.139.24.0/23 maxlen: 23
117.139.140.0/22 maxlen: 22
117.172.20.0/22 maxlen: 22
117.174.50.0/23 maxlen: 23
117.174.130.0/23 maxlen: 23
117.174.144.0/23 maxlen: 23
117.174.148.0/23 maxlen: 23
117.174.176.0/21 maxlen: 21
117.174.178.0/24 maxlen: 24
117.175.56.0/22 maxlen: 22
117.175.90.0/23 maxlen: 23
117.175.93.0/24 maxlen: 24
117.175.95.0/24 maxlen: 24
117.175.208.0/21 maxlen: 21
117.177.48.0/21 maxlen: 21
117.177.56.0/23 maxlen: 23
117.177.64.0/21 maxlen: 21
117.177.132.0/22 maxlen: 22
117.177.216.0/23 maxlen: 23
117.177.242.0/24 maxlen: 24
117.177.243.0/24 maxlen: 24
117.177.244.0/23 maxlen: 23
117.177.246.0/24 maxlen: 24
117.177.247.0/24 maxlen: 24
117.177.248.0/23 maxlen: 23
117.177.251.0/24 maxlen: 24
183.220.144.0/21 maxlen: 21
183.220.146.0/24 maxlen: 24
183.220.192.0/21 maxlen: 21
183.221.240.0/23 maxlen: 23
183.221.242.0/24 maxlen: 24
183.221.244.0/22 maxlen: 22
183.222.100.0/23 maxlen: 23
183.222.228.0/23 maxlen: 23
183.222.231.0/24 maxlen: 24
183.222.232.0/23 maxlen: 23
183.223.14.0/23 maxlen: 23
183.223.40.0/22 maxlen: 22
183.223.116.0/22 maxlen: 22
183.223.192.0/21 maxlen: 21
183.223.198.0/24 maxlen: 24
183.223.200.0/23 maxlen: 23
218.205.248.0/23 maxlen: 23
221.182.22.0/23 maxlen: 23
223.85.16.0/21 maxlen: 21
223.85.56.0/22 maxlen: 22
223.85.58.0/24 maxlen: 24
223.85.104.0/21 maxlen: 21
223.85.135.0/24 maxlen: 24
223.86.120.0/21 maxlen: 21
223.87.0.0/24 maxlen: 24
223.87.16.0/23 maxlen: 23
223.87.86.0/23 maxlen: 23
223.87.86.0/24 maxlen: 24
2409:8062:3002::/48 maxlen: 48
2409:8c62:410::/44 maxlen: 44
2409:8c62:e10::/44 maxlen: 44
2409:8c85:6200::/48 maxlen: 48
2409:8c85:6201::/48 maxlen: 48
2409:8c85:6202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 01:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e7:d7:c0:4b:5b:b0:2e:10:e4:74:71:a1:67:e4:1a:4d:e8:05:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Jun 5 06:23:04 2026 GMT
Not After : Jun 4 06:28:04 2027 GMT
Subject: CN=5FB22B8810C26B3A2D3F1C969C67ED7601E888BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:b3:23:5a:e0:80:47:80:c0:31:80:89:41:
f1:1a:ed:54:20:9e:57:aa:91:63:7f:e5:5e:d4:0b:
d1:13:6a:f7:e1:3d:ae:35:00:ba:1b:ac:5f:36:e4:
66:02:0f:1d:4a:c2:74:91:35:53:e1:be:d1:f3:c7:
85:50:95:75:29:7c:80:6f:b4:de:ec:ab:3a:58:0c:
5d:92:7a:57:c0:16:24:51:0f:96:a4:dd:dd:a0:02:
65:ba:ad:26:e9:1e:f1:e3:5a:9b:89:b7:d7:fd:bd:
71:d4:97:e7:22:f7:e2:e0:3e:5c:af:6e:05:14:9f:
3b:60:88:e1:ab:23:7b:7a:82:b2:86:9a:ee:28:82:
67:70:50:28:6a:af:fd:1d:7e:3c:d1:65:25:10:b6:
c8:8b:55:b8:03:35:d7:e3:1c:8e:7a:23:f7:93:92:
fc:cb:50:7c:06:49:65:e7:fe:51:ab:68:6f:85:63:
d3:f4:05:d8:74:fc:c7:57:5e:3d:34:fb:46:28:72:
80:cd:ea:e2:5f:10:98:3a:da:6a:0d:c0:81:9a:91:
52:84:d0:e2:e5:fb:67:94:63:39:3f:24:dc:f9:45:
f7:63:96:12:a9:88:64:81:00:49:b9:58:5d:4c:12:
79:1f:df:f5:28:1b:8e:45:2c:b0:86:69:0a:7e:7f:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:2B:88:10:C2:6B:3A:2D:3F:1C:96:9C:67:ED:76:01:E8:88:BB
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS139080.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.140.13.0/24
36.140.255.0/24
36.170.16.0/22
36.170.24.0/21
36.170.38.0-36.170.43.255
36.170.46.0-36.170.55.255
36.170.90.0-36.170.95.255
111.9.125.0/24
111.9.246.0/23
112.18.156.0/22
112.18.248.0-112.19.15.255
112.19.142.0/24
112.19.192.0/21
112.19.241.0-112.19.242.255
112.45.24.0-112.45.47.255
112.45.112.0/20
112.45.188.0/22
117.139.19.0-117.139.20.255
117.139.24.0/23
117.139.140.0/22
117.172.20.0/22
117.174.50.0/23
117.174.130.0/23
117.174.144.0/23
117.174.148.0/23
117.174.176.0/21
117.175.56.0/22
117.175.90.0/23
117.175.93.0/24
117.175.95.0/24
117.175.208.0/21
117.177.48.0-117.177.57.255
117.177.64.0/21
117.177.132.0/22
117.177.216.0/23
117.177.242.0-117.177.249.255
117.177.251.0/24
183.220.144.0/21
183.220.192.0/21
183.221.240.0-183.221.242.255
183.221.244.0/22
183.222.100.0/23
183.222.228.0/23
183.222.231.0-183.222.233.255
183.223.14.0/23
183.223.40.0/22
183.223.116.0/22
183.223.192.0-183.223.201.255
218.205.248.0/23
221.182.22.0/23
223.85.16.0/21
223.85.56.0/22
223.85.104.0/21
223.85.135.0/24
223.86.120.0/21
223.87.0.0/24
223.87.16.0/23
223.87.86.0/23
IPv6:
2409:8062:3002::/48
2409:8c62:410::/44
2409:8c62:e10::/44
2409:8c85:6200::-2409:8c85:6202:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:09:a1:49:91:8f:8d:a0:17:95:7c:c6:01:78:3b:d9:82:ea:
db:be:a0:19:9b:4d:eb:0c:7a:22:9b:28:c1:98:45:57:0a:18:
24:92:e4:54:49:2e:e1:cc:d8:ec:09:a6:31:1f:65:f9:c0:14:
ca:57:fa:65:91:aa:58:c4:2c:db:9b:b9:4e:e6:6f:76:f6:7b:
66:da:cf:a4:ba:59:c6:5e:60:08:c5:a9:64:8b:4d:ed:1d:e8:
49:4e:2f:9a:f9:ed:3f:10:91:7f:51:8b:1c:86:15:1c:5b:86:
74:fc:f5:b2:e3:c7:08:8d:59:62:97:a8:d2:f1:9a:4e:f3:a4:
53:21:f7:fa:74:37:4a:70:53:c1:ca:1a:c2:64:e2:a5:32:54:
9d:59:b3:b4:6d:3c:2a:a8:40:44:0a:39:e9:7f:17:6e:b6:17:
8e:33:ff:81:1f:9e:c9:2a:9a:cb:18:bd:63:f5:23:77:66:65:
69:7f:89:5e:fb:e9:36:4a:be:6e:f8:bf:c4:e3:29:04:d9:dd:
6f:7c:29:b1:6c:cf:95:5f:dd:6e:36:2c:fd:0f:b1:72:f6:5b:
af:9c:65:8f:85:b9:af:73:b3:eb:48:6b:0a:40:52:78:3e:81:
a7:f4:ac:1c:e2:00:e0:63:26:38:e7:24:b4:cb:e4:bb:70:2c:
dc:9e:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:35 2026 by rpki-client