Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4811.roa
File: AS4811.roa (raw, json)
Hash identifier: tOgXPdkc4vojliZLRFzh1l2XJvQRfxjErd6BbYitfuo=
Subject key identifier: 14:D9:59:AC:DD:E0:A7:BC:D8:0F:11:70:40:2E:51:52:D2:9C:34:87
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 58918CB2B51A7B3AEF370F2D33B2B703988E7C5D
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4811.roa
Signing time: Wed 01 Jul 2026 13:08:39 +0000
ROA not before: Wed 01 Jul 2026 13:03:39 +0000
ROA not after: Wed 30 Jun 2027 13:08:39 +0000
asID: 4811
IP address blocks: 1.93.0.0/16 maxlen: 24
14.103.0.0/16 maxlen: 24
14.103.0.0/21 maxlen: 24
14.103.8.0/21 maxlen: 24
14.103.16.0/21 maxlen: 24
14.103.24.0/21 maxlen: 24
14.103.32.0/21 maxlen: 24
14.103.40.0/21 maxlen: 24
14.103.48.0/21 maxlen: 24
14.103.56.0/21 maxlen: 24
14.103.64.0/21 maxlen: 24
14.103.72.0/21 maxlen: 24
14.103.72.0/23 maxlen: 24
14.103.80.0/21 maxlen: 24
14.103.88.0/21 maxlen: 24
14.103.96.0/21 maxlen: 24
14.103.104.0/21 maxlen: 24
59.109.0.0/16 maxlen: 24
101.96.192.0/18 maxlen: 24
101.126.0.0/16 maxlen: 24
115.47.0.0/16 maxlen: 24
115.100.0.0/15 maxlen: 24
115.172.64.0/19 maxlen: 24
115.172.192.0/18 maxlen: 24
115.173.128.0/17 maxlen: 24
115.190.0.0/15 maxlen: 24
118.145.32.0/19 maxlen: 24
118.145.64.0/18 maxlen: 24
118.145.128.0/17 maxlen: 24
118.196.0.0/15 maxlen: 24
118.199.0.0/16 maxlen: 24
119.16.0.0/16 maxlen: 24
119.27.64.0/18 maxlen: 24
120.130.0.0/16 maxlen: 24
124.6.64.0/18 maxlen: 24
124.15.192.0/18 maxlen: 24
124.174.0.0/16 maxlen: 24
124.175.0.0/16 maxlen: 24
180.184.0.0/16 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.168.0/21 maxlen: 24
180.184.176.0/21 maxlen: 24
180.184.184.0/22 maxlen: 24
182.238.0.0/16 maxlen: 24
182.239.0.0/19 maxlen: 24
203.100.96.0/19 maxlen: 24
210.78.96.0/19 maxlen: 24
220.112.64.0/18 maxlen: 24
2406:d440:110::/44 maxlen: 48
2406:d440:210::/44 maxlen: 48
2406:d440:310::/44 maxlen: 48
2406:d440:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:91:8c:b2:b5:1a:7b:3a:ef:37:0f:2d:33:b2:b7:03:98:8e:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jul 1 13:03:39 2026 GMT
Not After : Jun 30 13:08:39 2027 GMT
Subject: CN=14D959ACDDE0A7BCD80F1170402E5152D29C3487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:66:4b:56:2f:dc:08:3f:b4:79:57:f5:2c:
1b:75:54:3b:70:83:15:b3:69:60:32:ed:95:77:1a:
7b:ef:64:96:d6:a4:1f:c0:0e:f5:fd:8e:9d:dc:b2:
50:62:6f:79:c3:53:07:58:ce:9b:33:48:aa:c7:83:
48:78:13:9f:98:01:59:1f:03:97:c6:b7:1e:c8:e3:
49:f1:b8:49:a5:39:ba:a2:f7:bc:22:f4:51:bc:2e:
dd:bb:1d:a2:3c:3a:33:62:0f:0c:be:51:c1:56:23:
c9:2a:75:90:61:bb:4c:bf:e2:85:69:84:15:9e:77:
70:f8:65:ee:cc:04:4c:14:cb:26:ef:90:00:da:d1:
d0:e7:3d:46:30:54:f3:2e:26:47:85:32:0b:7a:4f:
9e:e4:d4:a1:0b:18:61:51:c3:be:b8:0e:94:c1:f0:
68:ff:f6:0e:af:cc:34:fa:22:4d:05:c9:fc:38:89:
56:8e:ca:4f:fe:7c:e0:9e:2b:55:d3:78:06:e0:eb:
6d:56:fd:f1:2c:af:aa:be:b8:0b:51:02:85:85:64:
9f:48:49:4e:6c:76:73:08:30:67:93:e0:52:a0:fa:
29:6d:31:36:2c:66:26:5c:ea:eb:3b:a6:e2:49:93:
9f:b3:09:8f:85:cf:c6:1d:74:9e:51:1e:bd:32:23:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:59:AC:DD:E0:A7:BC:D8:0F:11:70:40:2E:51:52:D2:9C:34:87
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.93.0.0/16
14.103.0.0/16
59.109.0.0/16
101.96.192.0/18
101.126.0.0/16
115.47.0.0/16
115.100.0.0/15
115.172.64.0/19
115.172.192.0/18
115.173.128.0/17
115.190.0.0/15
118.145.32.0-118.145.255.255
118.196.0.0/15
118.199.0.0/16
119.16.0.0/16
119.27.64.0/18
120.130.0.0/16
124.6.64.0/18
124.15.192.0/18
124.174.0.0/15
180.184.0.0/16
182.238.0.0-182.239.31.255
203.100.96.0/19
210.78.96.0/19
220.112.64.0/18
IPv6:
2406:d440:110::/44
2406:d440:210::/44
2406:d440:310::/44
2406:d440:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
24:d6:03:7b:45:08:03:99:62:16:86:fa:26:18:6a:27:c8:91:
f7:63:29:de:81:49:9b:1b:57:8d:7d:53:6c:c7:03:c1:59:fd:
73:ac:b4:94:41:83:73:c6:02:a0:c2:93:38:dd:6f:b0:8f:54:
21:af:ca:ca:19:66:60:9c:60:03:a9:b5:ec:72:a6:2d:45:da:
c6:4d:31:5c:11:f7:c2:3f:38:5c:8d:65:67:18:04:6f:11:cd:
5c:7b:6d:1b:19:39:d8:3b:08:41:45:c3:22:fa:14:22:30:5f:
70:33:ed:cc:f0:45:19:51:da:d6:00:e4:0c:9a:52:f2:84:42:
92:68:60:2b:a9:17:8c:47:9b:bf:c3:58:57:10:26:dd:81:d0:
ed:88:18:22:71:66:1d:82:7a:ac:12:68:1f:ad:2c:10:47:2b:
e1:e9:f5:9d:9e:39:db:04:75:05:c5:3b:58:3e:35:ce:fc:67:
10:3a:d6:42:16:b1:1e:5e:9b:ad:cc:4e:b8:8e:ea:80:d0:e1:
dd:c3:b9:56:7a:0e:5d:ee:a8:fa:a8:9b:07:b2:cc:25:df:83:
b4:1f:16:db:0f:07:01:d2:24:58:4c:81:2d:b6:60:62:cc:f4:
55:2f:ca:0d:6c:ed:f7:18:59:18:59:ff:fc:ae:69:8f:0e:d6:
ea:be:63:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 23:35:39 2026 by rpki-client