Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
File: AS58543.roa (raw, json)
Hash identifier: Tym6nOC8MV5SImuNM+47Wo9Pex017R1Pj1pLJte2mko=
Subject key identifier: C2:6C:F5:FC:A7:68:5F:02:BC:D2:B3:45:D8:9B:12:B2:6D:06:96:C0
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 332CD75F2CB5CBF72367A684505C808EE8D8C90B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
Signing time: Tue 26 May 2026 18:09:33 +0000
ROA not before: Tue 26 May 2026 18:04:33 +0000
ROA not after: Tue 25 May 2027 18:09:33 +0000
asID: 58543
IP address blocks: 240e:1f:1::/48 maxlen: 48
240e:1f:8000::/36 maxlen: 36
240e:1f:8001::/48 maxlen: 48
240e:1f:9000::/36 maxlen: 36
240e:1f:9100::/40 maxlen: 40
240e:1f:9200::/40 maxlen: 40
240e:1f:9400::/40 maxlen: 40
240e:1f:9500::/40 maxlen: 40
240e:1f:9600::/40 maxlen: 40
240e:1f:9700::/40 maxlen: 40
240e:1f:9800::/40 maxlen: 40
240e:1f:9900::/40 maxlen: 40
240e:1f:9b00::/40 maxlen: 40
240e:1f:9c00::/40 maxlen: 40
240e:1f:a000::/37 maxlen: 37
240e:1f:a800::/37 maxlen: 37
240e:5e:4004::/48 maxlen: 48
240e:5e:4005::/48 maxlen: 48
240e:ff:d000::/36 maxlen: 36
240e:ff:d200::/41 maxlen: 41
240e:ff:d280::/41 maxlen: 41
240e:ff:d380::/41 maxlen: 41
240e:ff:d400::/41 maxlen: 41
240e:ff:d480::/41 maxlen: 41
240e:ff:d500::/41 maxlen: 41
240e:ff:d580::/41 maxlen: 41
240e:ff:d600::/41 maxlen: 41
240e:ff:d680::/41 maxlen: 41
240e:ff:d780::/41 maxlen: 41
240e:97d:4000::/34 maxlen: 34
240e:97d:4000::/36 maxlen: 36
240e:97d:5000::/36 maxlen: 36
240e:97d:7000::/36 maxlen: 36
240e:97e::/33 maxlen: 33
240e:97e:3000::/36 maxlen: 36
240e:97e:4000::/36 maxlen: 36
240e:97e:5000::/36 maxlen: 36
240e:97e:6000::/36 maxlen: 36
240e:97e:7000::/36 maxlen: 36
240e:97f::/34 maxlen: 34
240e:97f::/36 maxlen: 36
240e:97f:2000::/36 maxlen: 36
240e:97f:4000::/36 maxlen: 36
240e:983:1e03::/48 maxlen: 48
240e:983:1e04::/48 maxlen: 48
240e:983:1e05::/48 maxlen: 48
240e:983:1e07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2c:d7:5f:2c:b5:cb:f7:23:67:a6:84:50:5c:80:8e:e8:d8:c9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 18:04:33 2026 GMT
Not After : May 25 18:09:33 2027 GMT
Subject: CN=C26CF5FCA7685F02BCD2B345D89B12B26D0696C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:f0:88:f7:ef:08:8f:0a:db:d9:44:1d:c7:
dc:25:a0:f8:c5:b1:84:5e:03:cb:86:a9:b4:71:fb:
e7:70:db:b8:07:86:fc:e1:fb:5e:b5:06:80:4a:49:
32:21:e0:f2:0c:0b:2a:91:2f:a6:12:c3:57:e9:03:
a0:29:5d:6e:da:8e:42:00:6d:fe:d0:ee:77:b6:05:
98:51:53:bf:e8:92:5a:4a:35:db:b4:23:f9:16:84:
55:95:e7:d5:ba:9a:d8:07:b8:f9:e5:7c:3c:47:56:
66:2e:9f:27:e1:c5:72:7d:4b:d2:03:e8:c5:f3:5b:
e1:4a:1e:06:f9:99:6f:e0:c3:ec:55:14:dd:98:8a:
c1:7b:f4:c4:a0:25:80:57:d9:dc:f5:fa:73:80:50:
bd:39:52:3b:3c:1f:b8:2b:66:b8:f9:3f:1a:12:06:
ff:e1:39:2a:7c:90:51:54:fb:2b:22:f4:05:8a:a3:
ae:ae:14:fd:12:d4:2e:13:4e:6a:dc:75:1f:96:d9:
3d:db:6f:24:e4:9b:06:09:d3:c3:95:d4:20:00:d8:
ae:18:9a:45:3f:4f:05:17:80:9c:fe:86:8c:19:17:
ef:5c:96:39:a9:55:e4:9a:6c:13:0d:f9:06:22:d7:
b3:e3:9e:d2:d3:d7:78:14:3a:05:48:4c:39:7a:53:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:F5:FC:A7:68:5F:02:BC:D2:B3:45:D8:9B:12:B2:6D:06:96:C0
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS58543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:1f:1::/48
240e:1f:8000::-240e:1f:afff:ffff:ffff:ffff:ffff:ffff
240e:5e:4004::/47
240e:ff:d000::/36
240e:97d:4000::/34
240e:97e::/33
240e:97f::-240e:97f:4fff:ffff:ffff:ffff:ffff:ffff
240e:983:1e03::-240e:983:1e05:ffff:ffff:ffff:ffff:ffff
240e:983:1e07::/48
Signature Algorithm: sha256WithRSAEncryption
88:4d:ef:dd:57:46:f0:e3:8a:e4:92:ce:a7:88:ca:f6:5a:3c:
13:0e:3b:cf:67:1e:86:9d:e1:4d:5c:18:91:4b:68:20:09:99:
9c:16:5a:5f:e4:85:ca:b8:6c:70:a7:9c:0a:cb:07:75:2f:11:
c1:d8:b9:81:70:6f:96:b6:71:18:5f:03:bd:8d:a1:f4:03:ad:
a5:11:bd:40:3e:8b:a4:6c:0a:df:d2:61:51:29:de:8f:6e:0d:
e3:d5:cb:df:44:35:6a:86:5e:a9:69:f9:cd:2a:c1:71:a6:b2:
a1:55:ca:9b:b1:6f:20:a0:60:b1:c3:70:b4:e6:12:9e:16:7d:
5f:a7:72:63:f2:64:7d:10:81:5c:87:0c:90:61:0f:e7:ee:3f:
21:99:7a:48:a6:0a:09:07:aa:fb:db:95:9e:13:1a:84:4d:b9:
80:63:60:e3:75:4d:9d:4b:49:41:c7:d2:b2:06:9f:21:27:3f:
3f:93:22:7e:a2:f9:c0:55:19:95:0f:64:36:f8:48:05:71:b3:
1f:8d:6e:35:e1:28:da:2a:ff:3b:b9:79:8e:07:b9:3f:d9:74:
1f:df:c3:3f:49:79:8b:61:43:42:17:5d:f2:17:01:f2:8d:42:
85:99:eb:96:e9:b4:b5:11:16:9e:61:59:1d:58:80:ba:3c:2c:
ca:c2:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:14 2026 by rpki-client