Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/AS4816.roa
File: AS4816.roa (raw, json)
Hash identifier: BywVrOa/rTx2XRV6nlK+Ut0SECxpAnA1y0+uKoNgzks=
Subject key identifier: 8D:AE:3E:CE:53:86:9F:C1:24:B4:63:4E:34:65:29:AF:1C:A6:E4:18
Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Certificate serial: 7114B1EC1C73B7BB5BC50FCF401960454646C5E2
Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/AS4816.roa
Signing time: Thu 09 Apr 2026 07:40:38 +0000
ROA not before: Thu 09 Apr 2026 07:35:38 +0000
ROA not after: Thu 08 Apr 2027 07:40:38 +0000
asID: 4816
IP address blocks: 103.39.208.0/24 maxlen: 24
103.39.209.0/24 maxlen: 24
103.39.210.0/24 maxlen: 24
103.39.211.0/24 maxlen: 24
103.39.212.0/24 maxlen: 24
103.39.213.0/24 maxlen: 24
103.39.214.0/24 maxlen: 24
103.39.215.0/24 maxlen: 24
103.39.216.0/24 maxlen: 24
103.39.217.0/24 maxlen: 24
103.39.218.0/24 maxlen: 24
103.39.219.0/24 maxlen: 24
103.39.220.0/24 maxlen: 24
103.39.221.0/24 maxlen: 24
103.39.222.0/24 maxlen: 24
103.39.223.0/24 maxlen: 24
103.39.224.0/24 maxlen: 24
103.39.225.0/24 maxlen: 24
103.39.226.0/24 maxlen: 24
103.39.227.0/24 maxlen: 24
103.39.228.0/24 maxlen: 24
103.39.229.0/24 maxlen: 24
103.39.230.0/24 maxlen: 24
103.39.231.0/24 maxlen: 24
103.39.232.0/24 maxlen: 24
103.39.233.0/24 maxlen: 24
103.39.234.0/24 maxlen: 24
103.39.235.0/24 maxlen: 24
103.40.240.0/24 maxlen: 24
103.40.241.0/24 maxlen: 24
103.40.242.0/24 maxlen: 24
103.40.243.0/24 maxlen: 24
103.40.244.0/24 maxlen: 24
103.40.245.0/24 maxlen: 24
103.40.246.0/24 maxlen: 24
103.40.247.0/24 maxlen: 24
103.40.248.0/24 maxlen: 24
103.40.249.0/24 maxlen: 24
103.40.250.0/24 maxlen: 24
103.40.251.0/24 maxlen: 24
103.40.252.0/24 maxlen: 24
103.40.253.0/24 maxlen: 24
103.40.254.0/24 maxlen: 24
103.40.255.0/24 maxlen: 24
103.44.236.0/24 maxlen: 24
103.44.237.0/24 maxlen: 24
103.44.238.0/24 maxlen: 24
103.44.239.0/24 maxlen: 24
103.44.240.0/24 maxlen: 24
103.44.241.0/24 maxlen: 24
103.44.242.0/24 maxlen: 24
103.44.243.0/24 maxlen: 24
103.44.244.0/24 maxlen: 24
103.44.245.0/24 maxlen: 24
103.44.246.0/24 maxlen: 24
103.44.247.0/24 maxlen: 24
103.44.248.0/24 maxlen: 24
103.44.249.0/24 maxlen: 24
103.44.250.0/24 maxlen: 24
103.44.251.0/24 maxlen: 24
103.44.252.0/24 maxlen: 24
103.44.253.0/24 maxlen: 24
103.44.254.0/24 maxlen: 24
103.44.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 02:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:14:b1:ec:1c:73:b7:bb:5b:c5:0f:cf:40:19:60:45:46:46:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Validity
Not Before: Apr 9 07:35:38 2026 GMT
Not After : Apr 8 07:40:38 2027 GMT
Subject: CN=8DAE3ECE53869FC124B4634E346529AF1CA6E418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:3b:58:33:1a:a1:c3:1b:2e:40:24:13:ad:
5d:f6:04:fa:d3:78:29:62:b2:83:c8:59:76:1d:48:
00:c6:56:ab:a6:d4:14:0f:91:94:ef:06:a8:4f:28:
0b:30:a8:0c:d3:a6:2a:33:e6:e6:7b:27:da:8a:d4:
15:cf:cd:42:83:44:76:46:a7:6d:f1:b8:4f:24:14:
00:47:16:3c:de:1c:8b:95:0b:f6:6c:27:81:2e:3f:
70:39:1e:38:c0:a5:19:20:7b:6a:61:12:07:8c:04:
46:c0:69:71:e2:4d:14:7f:f9:9a:04:68:0f:1c:31:
d9:69:e7:80:08:4c:ae:69:9b:3e:63:b7:89:22:cf:
59:83:09:a1:03:74:3d:fe:44:a8:82:ae:be:6c:cd:
47:4b:2d:4f:93:3b:ab:49:6e:13:ee:9d:48:21:1d:
88:c3:eb:42:74:6d:cd:2f:c4:e7:5e:e9:f6:ce:97:
1d:f0:cb:fa:bf:a3:b9:ae:e4:02:db:8d:7f:a8:af:
06:19:72:88:6f:bb:b3:7a:1c:de:41:f5:6b:a0:93:
4f:8a:00:8f:b4:97:44:4b:dd:90:b2:cd:54:6d:49:
c3:79:a4:05:a1:1a:60:a0:74:ca:59:31:ae:94:fe:
b0:56:24:fd:a1:20:6d:ef:f2:d5:80:04:d1:88:68:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:3E:CE:53:86:9F:C1:24:B4:63:4E:34:65:29:AF:1C:A6:E4:18
X509v3 Authority Key Identifier:
keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/AS4816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.208.0-103.39.235.255
103.40.240.0/20
103.44.236.0-103.44.255.255
Signature Algorithm: sha256WithRSAEncryption
2d:ac:67:8b:28:bc:3e:81:51:ce:22:58:69:76:35:0e:eb:07:
71:b2:4a:f5:9e:0f:b3:03:de:69:63:1a:8e:d3:b2:8b:14:ee:
56:55:1d:11:05:eb:60:55:97:3a:51:c7:73:a4:44:09:b5:09:
bc:8f:b7:08:ea:f5:4c:0f:34:71:61:83:85:98:88:09:8a:10:
17:49:4c:68:79:0d:89:6f:fa:8a:46:96:ca:48:be:a8:c0:97:
ab:15:85:98:75:16:68:aa:21:35:92:7b:bd:62:15:0e:b2:9e:
38:4c:76:e8:67:ca:f0:86:c6:01:76:c7:ed:e0:e4:e5:f7:94:
fb:7f:47:63:e0:3b:f9:ca:b9:d8:36:ec:19:9d:a9:f9:c0:59:
28:3a:06:ce:3e:11:cc:d0:d2:f8:75:4e:dd:36:bd:0c:db:57:
f9:13:0a:c0:57:bd:10:50:90:50:58:c6:59:91:53:8f:33:9e:
23:9b:41:da:f0:ea:bb:a4:b8:74:1d:ee:49:07:eb:9a:4a:26:
5a:a7:c8:42:ed:1a:a9:b2:db:fd:aa:6f:fd:af:19:4b:57:7e:
18:a2:33:d4:6a:05:a0:96:47:04:58:68:6f:a7:10:eb:bc:bf:
7c:65:89:ba:9c:c0:3c:1d:1f:88:15:85:fa:88:89:30:57:75:
ba:e5:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:35 2026 by rpki-client