Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS4808.roa
File: AS4808.roa (raw, json)
Hash identifier: r1YzqYPHhI19/uHpS4NaWQswIOGB+ZeDlJxbRaVxEUY=
Subject key identifier: 1A:CD:9C:12:7D:A1:28:26:4F:B7:CD:6F:B5:B9:C6:BC:7C:C4:21:F9
Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Certificate serial: 747D619899C8D5F499302BEE79DF2F70F375D7B1
Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS4808.roa
Signing time: Wed 10 Jun 2026 18:08:29 +0000
ROA not before: Wed 10 Jun 2026 18:03:29 +0000
ROA not after: Wed 09 Jun 2027 18:08:29 +0000
asID: 4808
IP address blocks: 101.251.192.0/23 maxlen: 23
101.251.194.0/24 maxlen: 24
101.251.196.0/22 maxlen: 22
101.251.200.0/24 maxlen: 24
101.251.201.0/24 maxlen: 24
101.251.203.0/24 maxlen: 24
101.251.204.0/22 maxlen: 22
101.251.208.0/20 maxlen: 20
101.251.224.0/24 maxlen: 24
101.251.225.0/24 maxlen: 24
101.251.226.0/24 maxlen: 24
101.251.228.0/24 maxlen: 24
101.251.230.0/23 maxlen: 23
101.251.233.0/24 maxlen: 24
101.251.234.0/23 maxlen: 23
101.251.237.0/24 maxlen: 24
101.251.238.0/24 maxlen: 24
101.251.241.0/24 maxlen: 24
101.251.243.0/24 maxlen: 24
101.251.246.0/24 maxlen: 24
101.251.249.0/24 maxlen: 24
101.251.250.0/24 maxlen: 24
101.251.252.0/22 maxlen: 22
103.244.232.0/22 maxlen: 22
103.252.36.0/24 maxlen: 24
106.3.128.0/21 maxlen: 21
106.3.136.0/21 maxlen: 21
106.3.139.0/24 maxlen: 24
106.3.144.0/22 maxlen: 22
106.3.148.0/24 maxlen: 24
106.3.149.0/24 maxlen: 24
106.3.151.0/24 maxlen: 24
106.3.152.0/21 maxlen: 21
210.73.208.0/20 maxlen: 20
2400:5280:f803::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7d:61:98:99:c8:d5:f4:99:30:2b:ee:79:df:2f:70:f3:75:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Validity
Not Before: Jun 10 18:03:29 2026 GMT
Not After : Jun 9 18:08:29 2027 GMT
Subject: CN=1ACD9C127DA128264FB7CD6FB5B9C6BC7CC421F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:f3:00:93:75:54:47:94:03:08:d6:c3:5f:
5b:47:2b:2a:81:26:a9:9e:8f:4c:b0:bc:7c:48:03:
f6:2d:03:78:e1:72:00:9f:4f:85:17:3c:28:c8:0f:
e7:d1:92:93:ae:9d:8c:0d:01:81:a2:5e:99:2a:07:
28:eb:75:b1:d9:6f:c6:ac:be:d9:6b:d7:47:da:32:
10:4e:3b:2d:79:88:65:a0:c7:73:96:f1:38:79:fc:
00:ba:50:a7:3c:3b:78:71:1c:a7:8d:37:91:c3:67:
05:56:bf:24:11:60:5a:e6:85:3b:c5:e1:cf:c9:cc:
06:9a:7c:27:67:15:1a:ea:61:c5:36:45:2f:15:e7:
2b:a0:3c:02:44:fa:29:bf:41:05:e8:d6:83:dd:7f:
6f:ad:21:d3:ce:43:6e:1d:29:3e:b2:2f:0e:39:27:
32:ee:de:aa:b8:ec:c9:8c:5d:3f:4d:5c:65:89:ce:
e2:4d:29:14:3b:2e:46:ec:55:c6:b1:ea:e4:35:e4:
d1:95:0a:d1:b7:6f:b3:4d:94:43:19:73:84:75:53:
6a:56:16:b9:b9:fb:51:0b:da:88:f3:12:78:43:da:
c6:c4:45:8c:13:6a:d5:e3:39:6d:1a:90:88:d9:dc:
f1:7e:0e:12:d3:08:4b:c4:e3:f6:e9:f9:b0:a6:8e:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CD:9C:12:7D:A1:28:26:4F:B7:CD:6F:B5:B9:C6:BC:7C:C4:21:F9
X509v3 Authority Key Identifier:
keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS4808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.192.0-101.251.194.255
101.251.196.0-101.251.201.255
101.251.203.0-101.251.226.255
101.251.228.0/24
101.251.230.0/23
101.251.233.0-101.251.235.255
101.251.237.0-101.251.238.255
101.251.241.0/24
101.251.243.0/24
101.251.246.0/24
101.251.249.0-101.251.250.255
101.251.252.0/22
103.244.232.0/22
103.252.36.0/24
106.3.128.0-106.3.149.255
106.3.151.0-106.3.159.255
210.73.208.0/20
IPv6:
2400:5280:f803::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9d:9e:28:e9:6e:64:cd:30:2e:5e:51:8f:5b:4b:65:4d:c9:
11:ba:fd:04:0e:3c:7c:11:a3:f6:6b:fc:7b:65:02:3f:b2:0a:
1e:46:f4:93:13:8a:ca:76:0e:57:c4:2a:51:67:da:4a:ef:d4:
2c:89:89:b8:94:94:b8:27:fa:4d:9a:46:43:10:21:cf:5f:a0:
0c:23:6b:4f:04:d9:98:7d:b3:94:fa:77:37:dc:41:af:a3:a1:
88:26:20:f2:62:73:2f:70:08:17:0e:54:7e:9e:b3:0d:13:c5:
b6:5e:56:d4:bd:b8:bd:e4:f5:4d:3d:d1:e8:25:22:d8:7f:f2:
b4:57:87:0e:9f:5c:42:ab:ac:51:99:af:75:91:95:2d:9c:39:
b6:bc:89:1a:1c:4a:7b:e1:43:73:fe:78:e9:53:41:3c:b5:ef:
fc:31:71:2e:a9:99:56:91:c8:4e:4e:67:25:6d:b5:30:17:b5:
1b:66:1b:36:d0:70:b8:fb:15:3d:13:e6:8a:8c:66:ab:8e:44:
1f:ce:23:ae:b6:78:52:80:dc:5e:db:54:01:62:9c:81:49:e2:
48:e7:b2:de:bd:83:9e:d2:cc:0d:72:51:d3:39:37:e4:1b:1a:
75:a0:8d:47:35:c6:de:10:ba:46:7d:bf:25:3f:42:1d:ef:f2:
55:dd:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client