Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4837.roa
File:                     AS4837.roa (raw, json)
Hash identifier:          O5REkJMhJXnJwtmel3Rpou72IJ5IG5cp8x6VCPZ5WNY=
Subject key identifier:   EF:16:BA:BC:C2:1E:0D:86:53:72:6C:7D:DE:A8:71:0E:73:0F:32:D3
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       3747CAD71998D76D090C27550803B618599C61E7
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4837.roa
Signing time:             Mon 08 Jun 2026 09:03:46 +0000
ROA not before:           Mon 08 Jun 2026 08:58:46 +0000
ROA not after:            Mon 07 Jun 2027 09:03:46 +0000
asID:                     4837
IP address blocks:        106.3.208.0/21 maxlen: 21
                          116.255.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:47:ca:d7:19:98:d7:6d:09:0c:27:55:08:03:b6:18:59:9c:61:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  8 08:58:46 2026 GMT
            Not After : Jun  7 09:03:46 2027 GMT
        Subject: CN=EF16BABCC21E0D8653726C7DDEA8710E730F32D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:a6:12:ea:4d:01:cc:a6:30:54:50:83:f6:
                    9f:ab:8f:1f:a2:e5:91:08:62:d3:83:76:ec:78:34:
                    a3:20:60:46:6f:38:9a:58:08:d0:37:d6:b1:8e:2b:
                    da:64:33:e2:b8:3f:ce:1e:36:e0:32:18:af:73:ec:
                    b6:84:92:ba:f0:26:98:9c:0a:6f:c3:2b:00:9d:42:
                    12:2c:6a:2b:72:d9:94:65:cd:8b:03:c6:83:6a:77:
                    c7:da:92:e4:9a:9e:02:f9:ba:27:76:db:3d:84:da:
                    d8:ae:c2:ae:80:df:5c:e9:1d:f6:57:31:06:5a:7f:
                    af:b1:6d:63:4e:b8:0d:f9:d0:c1:9c:35:ed:3f:63:
                    f9:3d:36:29:3a:bc:8a:f2:39:56:d8:9b:0f:68:70:
                    73:e8:27:a6:ab:5d:27:5a:81:52:f1:a5:95:3c:39:
                    f2:21:be:d1:9b:b6:b8:0c:b1:bf:1b:fe:5e:79:1c:
                    95:33:77:4d:8e:3e:49:bb:14:1e:b0:78:94:40:c0:
                    69:b5:3a:ae:d4:b0:bf:84:3e:f7:78:62:c2:36:24:
                    33:be:5c:41:22:7c:4d:d6:95:53:a5:4d:ab:c7:e2:
                    27:82:6a:73:09:22:84:e0:37:5b:3a:f3:81:59:33:
                    65:b4:69:20:3a:34:44:28:95:9b:4a:43:fb:61:8a:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:16:BA:BC:C2:1E:0D:86:53:72:6C:7D:DE:A8:71:0E:73:0F:32:D3
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.3.208.0/21
                  116.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:ff:85:2a:28:67:ea:7c:ac:1e:70:24:bb:b0:7c:c0:1c:
         3d:83:c8:ed:1d:00:9f:a5:05:60:ab:69:a3:52:42:a8:1c:db:
         13:0f:2a:07:56:10:69:b6:83:88:ea:c5:6d:d4:6f:d5:e9:dc:
         9e:c6:0e:5b:6c:6a:4d:70:46:9a:e9:5b:1a:1e:51:a0:5d:31:
         d9:4a:28:a1:5c:99:43:f7:06:9f:91:a4:08:5f:ad:36:c0:0f:
         24:47:b1:ba:09:c4:35:de:c1:94:e6:02:41:b5:2b:48:9a:5f:
         5b:70:45:dd:4f:7d:f7:bf:85:65:c6:b2:d5:fa:0c:e1:e9:2f:
         9a:15:8d:48:bb:58:52:72:3e:03:35:c6:32:fe:d5:f8:58:3e:
         cc:c1:e1:38:e3:c8:3d:dc:7e:35:6e:31:95:79:50:29:4f:5d:
         58:3a:39:e3:e8:2e:fb:7a:98:40:56:43:bc:56:0c:45:45:aa:
         da:a0:59:02:ba:34:40:39:e9:26:41:66:fa:90:14:9e:be:9a:
         14:53:89:e9:40:f0:3e:33:24:2b:cd:ec:9c:3b:34:3b:55:1d:
         08:21:12:bf:ef:c0:bf:0a:a3:12:f8:c4:ce:af:b9:4c:d9:82:
         73:03:82:c8:d1:b0:d6:87:1c:d9:0d:96:4f:1c:cf:e2:ea:b0:
         50:21:f2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:24 2026 by rpki-client