Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS4808.roa
File:                     AS4808.roa (raw, json)
Hash identifier:          CU0EgGGd2SKEp5zm8x3SKcQQoRSeVVhTtAN6N71pbEo=
Subject key identifier:   F3:4B:77:0B:FD:5A:8D:23:62:75:B8:FC:11:4D:83:0C:F4:B4:20:52
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       4DB19D7389CBE6BFC7759E80E9767B7CB39FD8EE
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS4808.roa
Signing time:             Thu 21 May 2026 07:42:47 +0000
ROA not before:           Thu 21 May 2026 07:37:47 +0000
ROA not after:            Thu 20 May 2027 07:42:47 +0000
asID:                     4808
IP address blocks:        115.182.0.0/21 maxlen: 21
                          115.182.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 15:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b1:9d:73:89:cb:e6:bf:c7:75:9e:80:e9:76:7b:7c:b3:9f:d8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: May 21 07:37:47 2026 GMT
            Not After : May 20 07:42:47 2027 GMT
        Subject: CN=F34B770BFD5A8D236275B8FC114D830CF4B42052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:ad:46:89:f2:7f:f0:fe:ba:61:39:bb:83:
                    01:3b:37:b6:12:c8:da:3f:8b:cb:63:2a:d7:44:9d:
                    ce:54:ed:61:d5:81:01:da:08:c0:b8:3b:17:51:b3:
                    ca:42:fe:6f:a8:09:5c:05:0f:13:d5:eb:87:22:21:
                    7d:8b:52:df:3a:63:95:a1:7f:2c:f3:8d:b9:79:9b:
                    38:29:5a:a8:e3:d6:d3:dd:c4:07:34:b3:b5:9e:c5:
                    db:9e:2c:48:30:14:d0:a7:11:61:59:4e:0a:5b:3a:
                    26:84:a6:f7:66:32:4a:92:af:fa:e2:3a:24:24:3f:
                    a5:8a:7c:07:e3:0f:75:7e:f1:3f:c3:83:08:ec:47:
                    59:b6:2f:45:93:da:0e:23:5a:5a:87:2d:06:d4:74:
                    97:5d:55:40:bc:ea:1b:5a:a1:d8:98:6c:a8:df:87:
                    58:8e:aa:f8:a7:f5:7b:b9:87:f2:ed:d3:eb:b0:17:
                    02:91:13:e7:ae:25:e6:08:42:f9:b5:5b:5f:92:c7:
                    cc:da:77:fc:2f:eb:e9:58:c2:fe:18:36:3f:17:8f:
                    67:5e:ec:a5:41:a1:7f:aa:a5:e0:b6:b8:b1:04:60:
                    15:07:b4:5d:cc:74:6f:ce:66:a8:25:97:10:bb:fd:
                    1d:43:96:39:01:72:c9:b7:b4:7e:31:5a:fd:cc:cd:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:77:0B:FD:5A:8D:23:62:75:B8:FC:11:4D:83:0C:F4:B4:20:52
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS4808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.0.0/21
                  115.182.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:e6:12:e4:bd:2a:56:26:5c:a5:fa:10:85:f8:8f:75:8b:42:
         e9:c0:d5:b2:20:a0:ed:ed:16:01:8b:54:e7:5f:41:57:d4:b8:
         d3:0b:25:de:16:1f:9c:73:0c:e0:e0:1c:53:b4:63:b6:4e:00:
         2c:3b:af:f0:c3:8b:7d:19:79:18:ae:e8:9e:18:5d:36:6a:2c:
         0d:36:12:b4:71:c1:dd:0a:0c:23:77:63:33:7f:70:5c:0c:bf:
         51:18:19:6b:fd:2f:d1:1f:50:d9:9c:ae:6b:c4:53:4d:53:76:
         04:69:e4:2a:ef:14:c4:a7:dd:22:76:f0:fa:29:fa:bd:b9:b0:
         02:9a:0a:ce:ef:fc:12:6c:78:11:de:6d:84:5a:26:6c:bd:74:
         fb:1b:2e:16:90:28:88:86:c7:5b:e0:a1:9b:41:4f:79:fc:5e:
         26:6f:43:17:2a:69:17:5c:aa:25:eb:03:16:78:8a:da:da:d6:
         16:49:5c:e9:c7:f9:ac:c9:4c:48:1c:17:c2:8e:a7:ca:c0:7c:
         dc:f1:a8:06:f0:64:0a:70:98:53:e2:08:2e:34:c3:ca:99:0e:
         05:82:bc:ff:79:21:18:28:1b:86:6c:c3:d6:27:96:b6:3d:51:
         d0:6f:e6:2b:b5:e5:37:4c:f9:70:88:46:2d:e1:e1:95:0d:0c:
         1a:32:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:35 2026 by rpki-client