Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4816.roa
File: AS4816.roa (raw, json)
Hash identifier: 18zQr2B41BkfJqd7OAveLpAZTAA2qdDPxo9CLT1Lmms=
Subject key identifier: 89:57:E7:C1:B2:EC:C1:9D:31:64:EC:15:58:3B:7B:0D:28:A4:09:9F
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7C6CA2AF4E5C78793804C6286534F6E37783B0F0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4816.roa
Signing time: Tue 26 May 2026 17:54:05 +0000
ROA not before: Tue 26 May 2026 17:49:05 +0000
ROA not after: Tue 25 May 2027 17:54:05 +0000
asID: 4816
IP address blocks: 113.108.72.0/24 maxlen: 24
240e:1f:6000::/36 maxlen: 36
240e:ff:f000::/36 maxlen: 36
240e:108:2c::/48 maxlen: 48
240e:108:99::/48 maxlen: 48
240e:108:11e2::/48 maxlen: 48
240e:108:4048::/48 maxlen: 48
240e:108:4848::/48 maxlen: 48
240e:97c:4000::/36 maxlen: 36
240e:980:2c00::/48 maxlen: 48
240e:980:9900::/40 maxlen: 40
240e:982:e200::/40 maxlen: 40
240e:983:1e06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6c:a2:af:4e:5c:78:79:38:04:c6:28:65:34:f6:e3:77:83:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 17:49:05 2026 GMT
Not After : May 25 17:54:05 2027 GMT
Subject: CN=8957E7C1B2ECC19D3164EC15583B7B0D28A4099F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:ad:cd:03:ba:6f:2d:ab:04:67:80:13:2e:
d7:d7:7a:6b:90:22:31:9d:5a:d4:da:84:1d:e5:2b:
e6:65:e2:c8:5a:c1:ac:39:2b:64:2b:d3:43:94:4a:
8c:bd:0a:24:44:54:74:d8:04:5f:59:c0:e2:91:25:
e8:13:f6:49:ff:35:ec:2b:83:d5:a1:7e:c9:03:04:
c6:03:87:eb:db:76:bd:28:6e:85:0c:8b:8b:9a:24:
b8:77:16:03:23:aa:d6:6c:61:0f:e3:f7:5a:2e:25:
9a:ce:11:4a:f4:16:dd:71:b7:d5:72:d7:24:9a:dc:
ac:0d:84:5d:7d:6e:12:74:95:64:52:a8:90:ad:0e:
3a:2e:58:dd:58:ec:df:97:71:7b:6d:0c:80:cd:c2:
4c:50:b3:87:e9:8e:5e:1d:1c:4d:e0:28:55:28:b3:
ea:55:a2:6d:69:99:6f:f1:e9:ed:24:4c:ef:f7:00:
b3:e4:cd:5c:0f:fa:c6:e9:be:d8:45:0d:62:05:3d:
7d:6e:bb:c8:a8:25:d7:3f:82:cd:4b:42:cc:1f:a0:
87:f6:15:6d:8b:c9:6f:8a:fe:15:98:96:39:7c:18:
4b:4e:35:3c:9d:23:0a:c5:99:f3:ef:d7:d5:ab:3e:
dc:df:1a:2a:bc:09:c8:53:b8:4f:f2:07:a9:fe:fc:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:E7:C1:B2:EC:C1:9D:31:64:EC:15:58:3B:7B:0D:28:A4:09:9F
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.108.72.0/24
IPv6:
240e:1f:6000::/36
240e:ff:f000::/36
240e:108:2c::/48
240e:108:99::/48
240e:108:11e2::/48
240e:108:4048::/48
240e:108:4848::/48
240e:97c:4000::/36
240e:980:2c00::/48
240e:980:9900::/40
240e:982:e200::/40
240e:983:1e06::/48
Signature Algorithm: sha256WithRSAEncryption
2e:47:bc:c5:e6:11:f9:85:bc:3c:29:44:a1:38:d7:ff:c6:66:
96:b7:ac:55:49:9c:c0:e1:ee:f0:fa:4e:22:76:b1:0b:a9:18:
09:0a:d6:60:88:56:e3:ff:07:07:87:a6:b0:89:ac:c9:80:05:
b7:da:e6:3e:1f:e9:59:6c:36:2c:57:ba:e0:72:b0:dd:ae:6f:
ac:a3:c4:4f:1b:f3:12:9a:43:41:72:50:91:38:cb:f8:ad:19:
ad:6f:7b:ba:24:74:9a:81:58:d2:14:fb:d1:01:96:aa:2f:73:
58:a2:bb:69:1e:0c:f4:a9:00:5e:cc:3a:96:f4:c5:2b:a3:74:
75:0d:0e:fe:10:36:86:3c:29:24:22:46:36:a0:e1:4b:ef:df:
e6:42:0c:08:b9:3d:45:15:fc:f1:7f:7c:a9:75:02:55:92:aa:
55:d9:26:00:2b:9a:bf:1a:c2:e3:9e:7b:77:17:c2:84:93:86:
19:39:d3:98:0e:64:8d:09:75:c9:48:86:42:79:c5:06:f4:49:
cf:ae:b9:7a:be:29:ae:0f:c2:5b:9f:b5:c7:05:4b:34:ae:62:
d4:f9:73:aa:19:6d:6c:70:91:74:c3:e0:aa:82:6a:30:7c:b1:
b6:e5:21:3e:26:e0:53:21:24:02:bd:80:36:f0:96:29:4e:88:
9f:ad:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client