Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139201.roa
File: AS139201.roa (raw, json)
Hash identifier: IK5z0fCC7JoMz8UCn3/nCTVYXgqsE5lsouYHibO3ZAE=
Subject key identifier: B2:AA:38:85:79:38:21:E0:68:A2:16:F8:B5:B4:D8:7D:F8:BA:00:E5
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4DA9534F5AEE44A0B38F606BAE5F27B3E9CDBF65
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139201.roa
Signing time: Tue 26 May 2026 16:07:05 +0000
ROA not before: Tue 26 May 2026 16:02:05 +0000
ROA not after: Tue 25 May 2027 16:07:05 +0000
asID: 139201
IP address blocks: 59.53.86.0/23 maxlen: 23
59.53.88.0/24 maxlen: 24
59.54.54.0/24 maxlen: 24
106.225.160.0/21 maxlen: 21
106.225.163.0/24 maxlen: 24
106.225.168.0/21 maxlen: 21
106.225.176.0/23 maxlen: 23
106.225.177.0/24 maxlen: 24
106.225.178.0/23 maxlen: 23
106.225.180.0/22 maxlen: 22
106.225.184.0/22 maxlen: 22
106.225.188.0/22 maxlen: 22
106.226.240.0/22 maxlen: 22
106.226.244.0/23 maxlen: 23
106.227.12.0/22 maxlen: 22
106.227.40.0/22 maxlen: 22
106.227.42.0/24 maxlen: 24
106.227.44.0/22 maxlen: 22
106.227.48.0/22 maxlen: 22
106.227.52.0/22 maxlen: 22
106.227.200.0/22 maxlen: 22
111.74.120.0/24 maxlen: 24
111.74.121.0/24 maxlen: 24
111.74.122.0/24 maxlen: 24
111.74.123.0/24 maxlen: 24
117.21.178.0/23 maxlen: 23
117.21.178.0/24 maxlen: 24
117.21.180.0/23 maxlen: 23
117.21.182.0/23 maxlen: 23
117.21.184.0/24 maxlen: 24
117.21.185.0/24 maxlen: 24
117.21.186.0/24 maxlen: 24
117.21.187.0/24 maxlen: 24
117.21.188.0/24 maxlen: 24
117.21.189.0/24 maxlen: 24
117.21.216.0/24 maxlen: 24
117.21.217.0/24 maxlen: 24
117.21.218.0/23 maxlen: 23
117.21.219.0/24 maxlen: 24
117.21.232.0/22 maxlen: 22
117.40.144.0/22 maxlen: 22
117.40.148.0/23 maxlen: 23
117.40.150.0/23 maxlen: 23
182.106.136.0/22 maxlen: 22
182.106.136.0/24 maxlen: 24
182.106.148.0/22 maxlen: 22
182.106.152.0/21 maxlen: 21
182.106.182.0/23 maxlen: 23
218.95.37.0/24 maxlen: 24
218.95.38.0/23 maxlen: 23
218.95.39.0/24 maxlen: 24
220.177.22.0/24 maxlen: 24
240e:13:7000::/37 maxlen: 37
240e:13:7800::/37 maxlen: 37
240e:cf:9000::/36 maxlen: 36
240e:108:1171::/48 maxlen: 48
240e:108:1172::/48 maxlen: 48
240e:960:3600::/40 maxlen: 40
240e:982:7100::/40 maxlen: 40
240e:982:7200::/40 maxlen: 40
240e:982:7300::/40 maxlen: 40
240e:982:7401::/48 maxlen: 48
240e:983:1700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a9:53:4f:5a:ee:44:a0:b3:8f:60:6b:ae:5f:27:b3:e9:cd:bf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 16:02:05 2026 GMT
Not After : May 25 16:07:05 2027 GMT
Subject: CN=B2AA3885793821E068A216F8B5B4D87DF8BA00E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:8a:2e:23:ce:02:45:58:33:5a:ad:06:ad:
51:2f:f0:61:4c:ff:7b:d6:2e:66:03:82:c3:28:eb:
b2:28:a6:91:5f:1c:34:36:64:ac:22:c5:52:37:0b:
27:6d:73:aa:7b:c8:e9:e0:e3:3d:2d:1a:40:f7:ec:
f9:2e:42:ae:89:ca:55:14:a3:63:da:8e:46:8a:65:
28:ef:1d:77:79:86:2f:f7:70:b5:e8:8b:4d:0b:df:
0f:d1:7f:99:8b:d1:d4:10:aa:18:f2:0c:ba:4e:68:
7a:88:71:60:52:85:61:41:fc:70:18:32:eb:ff:9b:
fd:8b:f2:c9:f8:8e:b7:71:dd:ea:83:7b:66:4a:ff:
b4:b4:f8:5d:e9:5c:85:b7:90:fa:38:98:2d:9f:ed:
fc:58:5c:52:9c:f8:de:1f:0b:10:f2:04:ed:a2:cf:
10:76:d0:18:21:73:08:bc:01:70:6c:e7:d0:78:6d:
d2:d0:24:fb:ef:d3:fd:42:8f:81:b0:17:8b:a1:82:
a7:b9:37:68:93:65:6c:55:9b:6d:d8:b9:75:8a:82:
9f:c4:40:79:09:5c:99:f6:79:90:64:a4:e3:2f:7d:
9b:85:0b:ad:c2:e9:eb:eb:4f:18:69:60:06:80:11:
43:8f:6c:03:9f:ec:b8:32:1b:87:1b:10:ae:da:3a:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:38:85:79:38:21:E0:68:A2:16:F8:B5:B4:D8:7D:F8:BA:00:E5
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.53.86.0-59.53.88.255
59.54.54.0/24
106.225.160.0/19
106.226.240.0-106.226.245.255
106.227.12.0/22
106.227.40.0-106.227.55.255
106.227.200.0/22
111.74.120.0/22
117.21.178.0-117.21.189.255
117.21.216.0/22
117.21.232.0/22
117.40.144.0/21
182.106.136.0/22
182.106.148.0-182.106.159.255
182.106.182.0/23
218.95.37.0-218.95.39.255
220.177.22.0/24
IPv6:
240e:13:7000::/36
240e:cf:9000::/36
240e:108:1171::-240e:108:1172:ffff:ffff:ffff:ffff:ffff
240e:960:3600::/40
240e:982:7100::-240e:982:73ff:ffff:ffff:ffff:ffff:ffff
240e:982:7401::/48
240e:983:1700::/48
Signature Algorithm: sha256WithRSAEncryption
b1:9d:40:1a:91:b3:77:ab:75:f5:c1:13:ab:3f:d6:fc:1d:7d:
1b:ed:c8:e8:5f:e9:f2:ae:5a:2b:1c:49:26:78:e9:36:17:05:
fc:02:1e:6b:dc:8f:2c:83:a5:35:44:5c:05:83:45:86:ed:4a:
7e:03:0f:e4:3a:cd:6b:46:91:77:e4:11:ed:ef:12:9e:69:9d:
d8:b8:8d:8e:f2:ab:ce:69:9e:25:d9:f6:b3:ee:7b:b8:f0:41:
ae:74:19:cc:21:46:1a:93:1b:c5:d2:13:c9:57:31:a9:7d:5b:
d8:72:53:4f:1c:83:07:85:20:c6:9b:b2:55:32:73:d4:8e:2e:
e5:5a:00:b1:30:f4:91:53:38:d0:ac:52:68:3a:ae:85:32:a6:
f3:c0:b1:15:95:5d:c2:58:05:91:c0:46:9e:c7:10:86:49:bb:
25:93:6f:89:ed:42:2f:33:72:e3:bc:de:fa:04:b2:a9:b7:3b:
24:db:5a:14:d9:22:58:ad:40:2a:a2:3d:81:be:45:96:16:4f:
b0:fe:a8:1e:fb:37:d9:81:a6:b8:bc:1e:0b:1e:27:96:77:6a:
0f:b4:d7:7c:3d:e8:8f:e8:b4:51:05:32:88:40:92:a6:14:c3:
da:9c:4a:37:db:de:e2:05:43:96:26:5c:1d:3c:f3:98:6f:c2:
21:c5:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:37 2026 by rpki-client