Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
File: AS24139.roa (raw, json)
Hash identifier: GmhrZ2KWgXpjk9Glz+bNwq3OxfjlVOq5wGnSrVgbbDM=
Subject key identifier: 65:DD:98:E4:9D:01:B2:65:10:56:CF:51:2E:81:DF:29:E6:EF:92:F8
Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Certificate serial: 23AEB3EE967FF0E1555BA0ACBCDA59131091395A
Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
Signing time: Thu 04 Jun 2026 06:06:34 +0000
ROA not before: Thu 04 Jun 2026 06:01:34 +0000
ROA not after: Thu 03 Jun 2027 06:06:34 +0000
asID: 24139
IP address blocks: 36.255.116.0/22 maxlen: 22
43.247.244.0/22 maxlen: 22
58.100.0.0/15 maxlen: 15
58.100.0.0/16 maxlen: 16
58.100.0.0/19 maxlen: 19
58.100.32.0/19 maxlen: 19
58.100.64.0/19 maxlen: 19
58.100.96.0/19 maxlen: 19
58.100.128.0/19 maxlen: 19
58.100.160.0/19 maxlen: 19
58.100.192.0/19 maxlen: 19
58.100.224.0/19 maxlen: 19
58.101.0.0/16 maxlen: 16
58.101.0.0/19 maxlen: 19
58.101.32.0/19 maxlen: 19
58.101.64.0/19 maxlen: 19
58.101.96.0/19 maxlen: 19
58.101.128.0/19 maxlen: 19
58.101.160.0/19 maxlen: 19
58.101.192.0/19 maxlen: 19
58.101.224.0/19 maxlen: 19
58.101.254.0/24 maxlen: 24
58.101.255.0/24 maxlen: 24
103.209.112.0/22 maxlen: 22
103.238.52.0/22 maxlen: 22
113.214.0.0/16 maxlen: 16
113.214.0.0/19 maxlen: 19
113.214.32.0/19 maxlen: 19
113.214.64.0/19 maxlen: 19
113.214.96.0/19 maxlen: 19
113.214.128.0/19 maxlen: 19
113.214.160.0/19 maxlen: 19
113.214.192.0/19 maxlen: 19
113.214.224.0/19 maxlen: 19
113.215.0.0/16 maxlen: 16
113.215.0.0/19 maxlen: 19
113.215.32.0/19 maxlen: 19
113.215.64.0/19 maxlen: 19
113.215.96.0/19 maxlen: 19
113.215.128.0/19 maxlen: 19
113.215.160.0/19 maxlen: 19
113.215.192.0/19 maxlen: 19
113.215.224.0/19 maxlen: 19
125.210.0.0/16 maxlen: 16
125.210.0.0/19 maxlen: 19
125.210.32.0/19 maxlen: 19
125.210.64.0/19 maxlen: 19
125.210.96.0/19 maxlen: 19
125.210.128.0/19 maxlen: 19
125.210.160.0/19 maxlen: 19
125.210.192.0/19 maxlen: 19
125.210.224.0/19 maxlen: 19
218.108.0.0/15 maxlen: 15
218.108.0.0/16 maxlen: 16
218.108.0.0/19 maxlen: 19
218.108.32.0/19 maxlen: 19
218.108.64.0/19 maxlen: 19
218.108.96.0/19 maxlen: 19
218.108.128.0/19 maxlen: 19
218.108.160.0/19 maxlen: 19
218.108.192.0/19 maxlen: 19
218.108.224.0/19 maxlen: 19
218.109.0.0/16 maxlen: 16
218.109.0.0/19 maxlen: 19
218.109.32.0/19 maxlen: 19
218.109.64.0/19 maxlen: 19
218.109.96.0/19 maxlen: 19
218.109.128.0/19 maxlen: 19
218.109.160.0/19 maxlen: 19
218.109.192.0/19 maxlen: 19
218.109.224.0/19 maxlen: 19
219.82.0.0/16 maxlen: 16
219.82.0.0/19 maxlen: 19
219.82.32.0/19 maxlen: 19
219.82.64.0/19 maxlen: 19
219.82.96.0/19 maxlen: 19
219.82.128.0/19 maxlen: 19
219.82.160.0/19 maxlen: 19
219.82.192.0/19 maxlen: 19
219.82.224.0/19 maxlen: 19
2401:ce00::/32 maxlen: 32
2401:ce00::/38 maxlen: 38
2401:ce00:400::/38 maxlen: 38
2401:ce00:800::/38 maxlen: 38
2401:ce00:c00::/38 maxlen: 38
2401:ce00:1000::/38 maxlen: 38
2401:ce00:1400::/38 maxlen: 38
2401:ce00:1800::/38 maxlen: 38
2401:ce00:1c00::/38 maxlen: 38
2401:ce00:2000::/38 maxlen: 38
2401:ce00:2400::/38 maxlen: 38
2401:ce00:2800::/38 maxlen: 38
2401:ce00:2c00::/38 maxlen: 38
2401:ce00:3000::/38 maxlen: 38
2401:ce00:3400::/38 maxlen: 38
2401:ce00:3800::/38 maxlen: 38
2401:ce00:3c00::/38 maxlen: 38
2401:ce00:4000::/38 maxlen: 38
2401:ce00:4400::/38 maxlen: 38
2401:ce00:4800::/38 maxlen: 38
2401:ce00:4c00::/38 maxlen: 38
2401:ce00:5000::/38 maxlen: 38
2401:ce00:5400::/38 maxlen: 38
2401:ce00:5800::/38 maxlen: 38
2401:ce00:5c00::/38 maxlen: 38
2401:ce00:6000::/38 maxlen: 38
2401:ce00:6400::/38 maxlen: 38
2401:ce00:6800::/38 maxlen: 38
2401:ce00:6c00::/38 maxlen: 38
2401:ce00:7000::/38 maxlen: 38
2401:ce00:7400::/38 maxlen: 38
2401:ce00:7800::/38 maxlen: 38
2401:ce00:7c00::/38 maxlen: 38
2401:ce00:8000::/38 maxlen: 38
2401:ce00:8400::/38 maxlen: 38
2401:ce00:8800::/38 maxlen: 38
2401:ce00:8c00::/38 maxlen: 38
2401:ce00:9000::/38 maxlen: 38
2401:ce00:9400::/38 maxlen: 38
2401:ce00:9800::/38 maxlen: 38
2401:ce00:9c00::/38 maxlen: 38
2401:ce00:a000::/38 maxlen: 38
2401:ce00:a400::/38 maxlen: 38
2401:ce00:a800::/38 maxlen: 38
2401:ce00:ac00::/38 maxlen: 38
2401:ce00:b000::/38 maxlen: 38
2401:ce00:b400::/38 maxlen: 38
2401:ce00:b800::/38 maxlen: 38
2401:ce00:bc00::/38 maxlen: 38
2401:ce00:c000::/38 maxlen: 38
2401:ce00:c400::/38 maxlen: 38
2401:ce00:c800::/38 maxlen: 38
2401:ce00:cc00::/38 maxlen: 38
2401:ce00:d000::/38 maxlen: 38
2401:ce00:d400::/38 maxlen: 38
2401:ce00:d800::/38 maxlen: 38
2401:ce00:dc00::/38 maxlen: 38
2401:ce00:e000::/38 maxlen: 38
2401:ce00:e400::/38 maxlen: 38
2401:ce00:e800::/38 maxlen: 38
2401:ce00:ec00::/38 maxlen: 38
2401:ce00:f000::/38 maxlen: 38
2401:ce00:f400::/38 maxlen: 38
2401:ce00:f800::/38 maxlen: 38
2401:ce00:fc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ae:b3:ee:96:7f:f0:e1:55:5b:a0:ac:bc:da:59:13:10:91:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Validity
Not Before: Jun 4 06:01:34 2026 GMT
Not After : Jun 3 06:06:34 2027 GMT
Subject: CN=65DD98E49D01B2651056CF512E81DF29E6EF92F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:7c:0a:6e:e8:e7:12:77:22:12:47:08:a3:
a3:d8:e3:cb:d6:c7:0a:33:ce:ae:d6:e5:b8:74:84:
20:8c:06:d4:d0:6b:c0:fc:e8:a1:df:f0:0c:a1:c0:
3c:d8:1f:24:c2:72:0c:1e:a1:b3:f0:4f:3e:4e:3d:
fc:fd:cf:8b:6e:41:6b:af:b1:de:c0:10:29:20:a2:
a0:07:7f:4d:65:5b:94:87:bf:62:42:55:3d:ef:b5:
52:1c:3f:47:bc:e4:b9:1f:e0:59:1e:3b:15:d5:52:
53:ab:c0:5d:72:22:72:91:cb:d7:16:80:3e:13:25:
63:68:00:6e:f9:e9:7a:69:5c:de:f0:35:d2:28:f3:
61:c6:d4:b9:b0:4c:37:2b:c2:2b:01:a1:3c:f2:4b:
9d:d9:af:f2:41:75:7e:21:64:f7:6f:2c:0d:ad:de:
cb:c8:76:c7:6a:6c:36:d3:e1:cb:42:3c:d6:46:84:
6c:03:e7:5f:e2:f8:16:97:be:10:2b:e3:c2:7f:46:
b1:dc:0e:f5:2e:dc:61:63:4e:52:a9:a9:81:f5:44:
f9:bf:a8:ef:f9:1a:f8:8a:81:c2:7d:58:80:fa:13:
be:82:57:59:ed:2e:67:c5:41:14:c4:fe:8b:1d:6b:
5e:51:c2:54:56:85:2a:a1:43:dc:f1:aa:65:22:6b:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:98:E4:9D:01:B2:65:10:56:CF:51:2E:81:DF:29:E6:EF:92:F8
X509v3 Authority Key Identifier:
keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/AS24139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.116.0/22
43.247.244.0/22
58.100.0.0/15
103.209.112.0/22
103.238.52.0/22
113.214.0.0/15
125.210.0.0/16
218.108.0.0/15
219.82.0.0/16
IPv6:
2401:ce00::/32
Signature Algorithm: sha256WithRSAEncryption
18:94:7d:67:8b:7d:a6:de:ac:82:ba:b2:d4:05:88:f2:9e:fb:
8e:69:da:e6:25:a5:b2:36:40:81:b7:d8:33:b2:48:5b:b5:85:
c8:7e:67:97:8b:c9:cc:d9:cc:8d:78:bf:f1:15:15:33:cd:9d:
ca:d9:8d:93:d0:f0:89:a5:bc:b1:3a:9f:72:84:e7:23:df:a8:
08:0a:6a:d9:f4:f5:6a:ea:6f:85:58:7a:48:09:aa:c9:aa:cb:
72:cb:d0:dd:6e:fd:e3:b6:51:5d:66:26:53:68:9b:f7:a5:55:
60:01:d8:c0:64:71:fa:50:fa:c0:47:c1:a5:7f:20:fd:a6:75:
0b:6d:f7:07:4a:98:aa:8b:4d:44:c8:b7:6a:ef:36:5d:d1:db:
c9:ee:aa:29:c6:5e:a8:36:7e:43:c2:74:da:7c:a9:84:3f:4d:
a9:36:9a:7a:cb:cd:82:df:42:1e:7e:7f:f3:46:ea:8f:60:d6:
76:d4:e5:c5:a2:a3:3b:35:c7:cd:df:dd:50:b0:8c:94:48:16:
79:f4:d2:10:12:50:56:c0:ab:b2:98:bb:97:31:91:44:eb:69:
24:c5:c8:1b:cf:20:e3:7a:09:24:c7:1a:cd:16:ca:6b:4c:80:
48:a6:ae:45:87:87:4d:78:3d:1e:88:1b:01:d9:ce:13:01:6b:
26:9d:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:12 2026 by rpki-client