Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: XZhFlrWasRx8dblrzseFEDcarTCAJflYYPm8e+FilyA=
Subject key identifier: 37:55:47:52:E0:19:FF:68:F2:E1:F2:42:5A:E9:E0:C4:15:48:8E:2C
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 62273B643909926F99880600D5E73C4D1916ACAD
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4847.roa
Signing time: Wed 10 Jun 2026 07:28:39 +0000
ROA not before: Wed 10 Jun 2026 07:23:39 +0000
ROA not after: Wed 09 Jun 2027 07:28:39 +0000
asID: 4847
IP address blocks: 114.113.144.0/20 maxlen: 24
116.90.80.0/20 maxlen: 24
119.57.0.0/21 maxlen: 21
119.57.8.0/23 maxlen: 23
119.57.12.0/24 maxlen: 24
119.57.16.0/21 maxlen: 21
119.57.25.0/24 maxlen: 24
119.57.28.0/22 maxlen: 22
119.57.32.0/22 maxlen: 22
119.57.36.0/22 maxlen: 22
119.57.44.0/22 maxlen: 22
119.57.51.0/24 maxlen: 24
119.57.52.0/22 maxlen: 22
119.57.56.0/21 maxlen: 21
119.57.64.0/20 maxlen: 20
119.57.80.0/20 maxlen: 20
119.57.96.0/22 maxlen: 22
119.57.100.0/23 maxlen: 23
119.57.102.0/24 maxlen: 24
119.57.132.0/22 maxlen: 22
119.57.136.0/22 maxlen: 22
119.57.140.0/22 maxlen: 22
119.57.160.0/20 maxlen: 20
119.57.190.0/23 maxlen: 23
119.57.246.0/23 maxlen: 23
119.57.248.0/21 maxlen: 21
121.52.208.0/20 maxlen: 24
121.58.156.0/22 maxlen: 22
121.58.156.0/23 maxlen: 23
122.49.8.0/21 maxlen: 21
122.49.16.0/20 maxlen: 20
122.49.32.0/20 maxlen: 20
122.112.0.0/22 maxlen: 24
122.200.104.0/22 maxlen: 22
122.200.120.0/22 maxlen: 22
210.74.0.0/20 maxlen: 20
218.241.16.0/21 maxlen: 21
218.245.0.0/19 maxlen: 24
218.245.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 11:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:27:3b:64:39:09:92:6f:99:88:06:00:d5:e7:3c:4d:19:16:ac:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 10 07:23:39 2026 GMT
Not After : Jun 9 07:28:39 2027 GMT
Subject: CN=37554752E019FF68F2E1F2425AE9E0C415488E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:d3:9d:b3:02:57:7c:cc:b4:15:53:9b:8a:
e5:09:09:0c:5b:68:91:96:0e:a3:72:ee:33:3c:26:
e9:1f:a7:c1:5f:3b:f7:09:d2:55:e5:1b:94:46:01:
ec:fb:d0:26:12:47:df:06:e6:e1:91:8c:c9:fc:fe:
cd:72:05:2a:28:2d:ff:c4:b7:9f:18:71:a5:26:43:
88:df:e0:da:e6:c0:ad:04:d7:91:8d:af:59:86:64:
2c:06:16:66:f4:11:60:d3:d7:77:41:a8:76:02:31:
2c:3e:55:e3:dd:0e:67:52:ab:2f:65:d6:9f:39:a8:
b2:c7:f3:0b:7a:8c:ad:fa:40:21:8d:17:7e:d4:b1:
23:d2:98:0b:a8:cd:61:2c:a8:de:56:63:a9:16:f0:
7c:15:89:6f:71:d3:c6:e7:86:4e:c3:3b:e2:1b:31:
5e:6d:1c:71:23:fb:c4:41:27:62:94:2c:d3:ff:bf:
40:ec:ee:df:26:92:84:31:b1:a9:dd:56:cc:31:5f:
68:bc:de:eb:18:de:1c:fa:b2:02:e4:20:b0:42:2a:
87:aa:2f:e3:39:bd:b9:e7:40:37:07:66:96:25:b7:
c1:9c:4d:33:bd:89:36:e8:00:83:f1:9e:03:5b:a1:
98:74:d6:b9:b4:b1:47:14:8c:60:40:16:f6:4f:b2:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:47:52:E0:19:FF:68:F2:E1:F2:42:5A:E9:E0:C4:15:48:8E:2C
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.144.0/20
116.90.80.0/20
119.57.0.0-119.57.9.255
119.57.12.0/24
119.57.16.0/21
119.57.25.0/24
119.57.28.0-119.57.39.255
119.57.44.0/22
119.57.51.0-119.57.102.255
119.57.132.0-119.57.143.255
119.57.160.0/20
119.57.190.0/23
119.57.246.0-119.57.255.255
121.52.208.0/20
121.58.156.0/22
122.49.8.0-122.49.47.255
122.112.0.0/22
122.200.104.0/22
122.200.120.0/22
210.74.0.0/20
218.241.16.0/21
218.245.0.0-218.245.47.255
Signature Algorithm: sha256WithRSAEncryption
69:af:93:3b:a2:fc:98:85:7c:8c:89:4d:72:5d:dc:4d:ef:a7:
b4:31:e5:97:04:76:1a:47:fd:51:62:fb:51:61:2c:d4:f8:1d:
af:c7:91:f4:e3:e1:fb:ff:5d:82:49:4e:dc:0f:d9:91:84:81:
2e:3b:e4:8a:e0:d7:ac:32:c6:91:76:88:4e:83:f5:42:8d:13:
39:3d:f6:df:1e:90:79:5f:1b:25:d7:48:a3:7b:74:8d:39:21:
dc:9f:f6:70:a4:e0:3d:16:ef:38:85:5f:41:f8:8b:42:4b:96:
1a:8b:ea:19:97:12:d5:8b:f6:0c:a9:d2:e6:e9:7a:0b:51:6c:
c0:a9:92:74:fd:9e:05:4a:a3:aa:8c:13:cc:f7:8b:d4:99:c5:
97:d7:d0:db:4e:24:c6:6a:00:cb:a8:13:db:76:eb:c2:24:00:
cc:53:77:b8:45:a7:ce:ef:e9:2a:e4:82:8a:29:39:ff:62:af:
07:af:6a:a6:9f:72:66:77:58:19:8b:c7:00:bf:52:94:66:1f:
2e:d8:d3:5d:e0:1a:0a:3d:8d:e1:44:bc:71:79:fa:b7:28:fe:
6d:29:e6:8c:f3:d5:ef:96:f4:0e:12:39:3b:9e:6c:0e:63:d8:
3e:60:d7:09:d1:36:50:89:c0:ca:a7:b6:63:a0:18:0b:bb:3f:
ee:ba:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:44 2026 by rpki-client