Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4812.roa
File: AS4812.roa (raw, json)
Hash identifier: he0g35yOzeW3YHyPY6RIZwjtLacndzGqf+Fo674CEBA=
Subject key identifier: 2B:BD:7D:04:29:EA:49:E1:A5:01:B3:DB:58:86:2D:18:2D:BC:12:59
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3A64697243C59368806E48241CF632265BE0043E
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4812.roa
Signing time: Wed 20 May 2026 16:47:43 +0000
ROA not before: Wed 20 May 2026 16:42:43 +0000
ROA not after: Wed 19 May 2027 16:47:43 +0000
asID: 4812
IP address blocks: 58.34.26.0/24 maxlen: 24
58.34.164.0/24 maxlen: 24
61.169.58.0/24 maxlen: 24
61.170.0.0/18 maxlen: 18
61.170.64.0/18 maxlen: 18
101.95.144.0/24 maxlen: 24
114.89.0.0/24 maxlen: 24
116.236.6.0/24 maxlen: 24
116.236.69.0/24 maxlen: 24
116.238.252.0/24 maxlen: 24
124.74.52.0/24 maxlen: 24
202.96.194.0/24 maxlen: 24
202.101.0.0/19 maxlen: 19
202.101.32.0/19 maxlen: 19
202.109.0.0/18 maxlen: 18
202.111.244.0/24 maxlen: 24
222.66.23.0/24 maxlen: 24
222.73.236.0/22 maxlen: 22
222.73.242.0/23 maxlen: 23
222.73.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:64:69:72:43:c5:93:68:80:6e:48:24:1c:f6:32:26:5b:e0:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 20 16:42:43 2026 GMT
Not After : May 19 16:47:43 2027 GMT
Subject: CN=2BBD7D0429EA49E1A501B3DB58862D182DBC1259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:be:d5:07:3a:e2:0a:1d:f9:f3:ac:e2:fb:
43:c3:e6:d4:95:ca:a3:84:12:54:4f:8e:30:11:78:
dd:ef:61:2b:18:38:86:51:f7:30:f6:cf:68:f8:3e:
62:d4:ff:47:cb:ac:03:93:61:28:62:72:a8:66:6d:
35:3f:71:4d:c6:39:0d:37:15:d0:9e:af:95:35:52:
56:91:36:53:8d:bd:2b:39:fe:41:8b:55:67:5a:46:
00:4d:fa:ea:db:06:aa:78:9f:7f:01:ad:8a:ec:8e:
7c:5b:18:25:4a:ac:20:70:30:5c:53:3a:75:c4:8a:
d5:76:90:96:51:45:a4:2c:20:78:34:a6:50:c1:37:
28:95:a6:92:36:5a:7b:85:a5:b0:33:61:d2:7b:dc:
da:27:7a:33:b3:fe:7b:3e:e3:ad:fb:bf:ab:9c:33:
b1:0a:33:9a:11:e1:da:1e:50:a4:2e:73:8d:e4:d9:
f5:f6:11:55:2e:33:3b:8c:a1:0f:16:e8:b7:6c:58:
6c:9b:37:d9:c5:46:e8:88:73:2d:41:f7:a7:9c:85:
96:91:99:71:8d:1c:fd:16:9f:bf:69:4b:d3:93:2f:
a5:a3:24:4e:c1:ed:97:bf:4a:37:f3:34:0c:a1:1a:
5d:37:0e:d0:1b:b5:52:fa:2c:17:d4:44:59:66:74:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:7D:04:29:EA:49:E1:A5:01:B3:DB:58:86:2D:18:2D:BC:12:59
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.34.26.0/24
58.34.164.0/24
61.169.58.0/24
61.170.0.0/17
101.95.144.0/24
114.89.0.0/24
116.236.6.0/24
116.236.69.0/24
116.238.252.0/24
124.74.52.0/24
202.96.194.0/24
202.101.0.0/18
202.109.0.0/18
202.111.244.0/24
222.66.23.0/24
222.73.236.0/22
222.73.242.0-222.73.247.255
Signature Algorithm: sha256WithRSAEncryption
8b:2f:bf:3c:7f:8f:e7:4c:cb:69:ca:03:c6:53:43:bb:a8:5b:
f8:9d:2b:07:2c:b5:9b:28:18:b3:8a:68:cc:b0:28:3c:33:30:
17:78:a2:42:4e:ea:e4:04:1d:96:7d:8d:d2:a6:5e:f2:1b:f4:
dc:66:a9:c5:44:3f:f2:96:e6:6b:d0:27:30:a4:38:40:56:74:
ce:2d:ee:6b:ac:0a:d5:0a:85:3f:91:90:4f:ef:86:7a:4b:ae:
c5:4d:d7:9b:1c:8d:10:28:62:28:2b:e3:ce:24:e4:b8:59:d7:
59:8c:00:1e:6b:7c:16:68:e7:75:fa:2e:0f:db:e3:8e:e7:ca:
0e:d0:0b:ab:b5:5c:51:d1:59:f9:9d:7b:65:92:19:43:ca:8c:
60:ac:f7:9e:43:81:a1:f5:65:03:5c:79:78:b1:4a:cb:1a:ae:
1d:6e:45:f4:cb:b1:80:66:b9:9e:36:f0:b4:5d:e4:54:cd:21:
48:16:34:12:c4:52:70:69:87:36:83:bd:8e:3b:cb:d8:30:2b:
eb:37:9a:b3:18:32:3e:c4:ba:67:9a:f3:40:49:17:76:74:33:
54:84:79:c8:a4:69:1f:9a:b5:c3:2f:e3:65:ba:84:4b:37:3d:
d7:f2:bb:e9:b1:2f:4d:bb:67:18:ce:cb:82:dc:b9:fe:5c:96:
4d:39:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:18 2026 by rpki-client