Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58540.roa
File: AS58540.roa (raw, json)
Hash identifier: j1K0inf+0u/eNZkoUOf9LfeFBGdd9Mxh7xT5y8Bmhbo=
Subject key identifier: 9C:EF:07:08:9E:0D:0E:DA:CC:1D:35:01:50:53:94:FA:35:B5:C2:05
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 04183221360441E4263A2BCAA65C3717E745F7D6
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58540.roa
Signing time: Wed 16 Sep 2026 19:08:09 +0000
ROA not before: Wed 16 Sep 2026 19:03:09 +0000
ROA not after: Wed 15 Sep 2027 19:08:09 +0000
asID: 58540
IP address blocks: 58.56.9.0/24 maxlen: 24
58.56.66.0/24 maxlen: 24
58.56.108.0/24 maxlen: 24
58.56.110.0/24 maxlen: 24
58.56.111.0/24 maxlen: 24
58.57.102.0/24 maxlen: 24
58.57.117.0/24 maxlen: 24
58.57.119.0/24 maxlen: 24
58.57.120.0/24 maxlen: 24
58.58.110.0/24 maxlen: 24
58.59.1.0/24 maxlen: 24
58.59.8.0/24 maxlen: 24
58.59.18.0/24 maxlen: 24
150.138.192.0/19 maxlen: 19
150.138.224.0/19 maxlen: 19
150.139.224.0/19 maxlen: 19
150.139.250.0/24 maxlen: 24
182.40.16.0/20 maxlen: 20
182.40.48.0/20 maxlen: 20
182.40.64.0/20 maxlen: 20
182.40.88.0/21 maxlen: 21
182.40.112.0/20 maxlen: 20
182.40.128.0/20 maxlen: 20
182.40.144.0/20 maxlen: 20
182.40.168.0/21 maxlen: 21
182.40.176.0/21 maxlen: 21
182.40.224.0/20 maxlen: 20
222.173.50.0/24 maxlen: 24
222.173.51.0/24 maxlen: 24
222.173.52.0/24 maxlen: 24
222.175.101.0/24 maxlen: 24
222.175.102.0/24 maxlen: 24
222.175.136.0/23 maxlen: 23
240e:945:4000::/40 maxlen: 40
240e:945:4100::/40 maxlen: 40
240e:945:4200::/40 maxlen: 40
240e:945:4300::/40 maxlen: 40
240e:946::/33 maxlen: 33
240e:946:1::/48 maxlen: 48
240e:946:2::/48 maxlen: 48
240e:946:5::/48 maxlen: 48
240e:946:3000::/48 maxlen: 48
240e:946:3002::/48 maxlen: 48
240e:946:3003::/48 maxlen: 48
240e:946:3004::/48 maxlen: 48
240e:946:3006::/48 maxlen: 48
240e:946:300a::/48 maxlen: 48
240e:946:300b::/48 maxlen: 48
240e:946:300e::/48 maxlen: 48
240e:946:300f::/48 maxlen: 48
240e:946:3010::/48 maxlen: 48
240e:946:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 22:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:18:32:21:36:04:41:e4:26:3a:2b:ca:a6:5c:37:17:e7:45:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 16 19:03:09 2026 GMT
Not After : Sep 15 19:08:09 2027 GMT
Subject: CN=9CEF07089E0D0EDACC1D3501505394FA35B5C205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:94:bf:ad:5a:c5:3d:75:30:c1:9c:87:d3:
4d:04:d1:50:81:d2:a5:69:52:88:02:81:0e:08:19:
10:46:8d:8c:1f:38:08:85:d5:37:c2:3e:4c:37:43:
ed:9f:af:0e:9a:99:ee:6c:77:af:8b:8a:b8:b4:a6:
61:47:1e:10:aa:41:89:da:f7:1f:78:e1:93:5d:22:
4a:c2:e4:4d:ba:b0:b1:fa:ee:8e:eb:a2:7e:58:30:
de:06:2d:72:bb:2d:e9:c5:7d:14:9e:54:d2:3b:30:
93:ca:b9:5a:cd:4b:07:47:5f:71:98:7d:2d:30:7e:
34:1f:5f:9a:f5:91:dc:11:e6:a7:96:23:47:31:45:
2a:41:58:dc:0e:04:11:35:96:9c:69:71:c5:1d:2f:
ed:d1:fc:3e:c2:87:1f:29:e9:f7:66:e3:3e:63:dc:
50:8c:35:8a:88:9c:26:15:03:06:b3:47:78:95:0e:
5d:27:76:10:6b:f1:98:57:75:f5:34:34:c4:81:24:
8a:03:9f:2e:b5:9f:2b:e1:b9:c0:25:cf:d1:ac:38:
52:d7:3f:f3:38:09:50:24:c1:2f:5c:53:20:20:34:
a1:5a:eb:df:7c:48:bf:4d:e3:1c:d1:3a:18:ab:ee:
23:ae:d0:da:74:e0:e6:69:c1:96:60:b3:ea:4d:72:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EF:07:08:9E:0D:0E:DA:CC:1D:35:01:50:53:94:FA:35:B5:C2:05
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.56.9.0/24
58.56.66.0/24
58.56.108.0/24
58.56.110.0/23
58.57.102.0/24
58.57.117.0/24
58.57.119.0-58.57.120.255
58.58.110.0/24
58.59.1.0/24
58.59.8.0/24
58.59.18.0/24
150.138.192.0/18
150.139.224.0/19
182.40.16.0/20
182.40.48.0-182.40.79.255
182.40.88.0/21
182.40.112.0-182.40.159.255
182.40.168.0-182.40.183.255
182.40.224.0/20
222.173.50.0-222.173.52.255
222.175.101.0-222.175.102.255
222.175.136.0/23
IPv6:
240e:945:4000::/38
240e:946::/32
Signature Algorithm: sha256WithRSAEncryption
37:ce:1e:70:a7:c6:d8:47:f4:58:55:05:53:c3:0b:11:ed:ab:
fd:cf:bd:b3:83:54:af:c5:39:55:32:47:09:a4:77:62:b3:c2:
54:b9:10:df:b4:fc:68:44:38:3c:a2:66:db:32:39:4a:1b:0d:
aa:b8:be:9f:da:6c:d7:5a:9d:39:d3:a5:53:d4:ee:4f:26:62:
55:cb:d9:62:22:97:5b:3a:42:81:bf:8c:06:cc:92:cc:ec:4d:
d8:51:c0:88:99:e4:55:b8:e0:72:9b:37:4f:08:59:53:78:a0:
85:6e:86:b2:0a:f5:81:d1:6f:e0:9a:bf:e2:a2:19:11:a3:79:
88:78:48:03:e8:d7:38:12:19:b0:90:f6:a6:7f:86:de:6a:aa:
8b:78:ab:34:9b:2a:7f:ef:e4:0a:e9:86:3a:20:b4:a4:bd:f1:
90:45:e4:96:4d:10:87:ab:91:6e:f1:d8:ce:1b:22:fa:cc:3a:
b4:dc:7a:63:d0:69:73:26:f5:0a:b3:b3:6c:9e:9a:0d:fc:53:
e9:38:84:ae:ab:2c:c9:81:db:dd:41:af:dc:77:f4:53:46:21:
6e:bf:4e:7e:0d:44:86:31:4a:5e:37:22:d3:2d:73:57:98:24:
c1:0b:f5:ca:f9:b1:0a:1e:b1:9b:5d:c0:89:65:f8:06:2e:cc:
c2:39:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:40:52 2026 by rpki-client