Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: dNJ7LCcfEziMF198WSgTQrz6LuK9qfv4uf8oPIc8h1k=
Subject key identifier: B3:EA:C2:29:3B:DC:AE:34:C8:14:9F:5B:10:0A:B1:D5:B9:12:44:30
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 3546714E40E291DEB35A03E45952F43440ED6AE5
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
Signing time: Thu 03 Sep 2026 03:13:41 +0000
ROA not before: Thu 03 Sep 2026 03:08:41 +0000
ROA not after: Thu 02 Sep 2027 03:13:41 +0000
asID: 4847
IP address blocks: 1.202.0.0/17 maxlen: 17
1.202.128.0/17 maxlen: 17
1.202.143.0/24 maxlen: 24
1.202.217.0/24 maxlen: 24
1.202.224.0/24 maxlen: 24
1.202.228.0/24 maxlen: 24
1.202.231.0/24 maxlen: 24
1.202.237.0/24 maxlen: 24
1.203.0.0/16 maxlen: 16
1.203.0.0/18 maxlen: 18
1.203.90.0/24 maxlen: 24
1.203.91.0/24 maxlen: 24
1.203.96.0/24 maxlen: 24
1.203.105.0/24 maxlen: 24
1.203.128.0/20 maxlen: 20
36.110.0.0/17 maxlen: 17
36.110.14.0/24 maxlen: 24
36.110.24.0/24 maxlen: 24
36.110.28.0/24 maxlen: 24
36.110.38.0/24 maxlen: 24
36.110.60.0/24 maxlen: 24
36.110.69.0/24 maxlen: 24
36.110.82.0/24 maxlen: 24
36.110.112.0/24 maxlen: 24
36.110.114.0/24 maxlen: 24
36.110.118.0/24 maxlen: 24
36.110.119.0/24 maxlen: 24
36.110.120.0/24 maxlen: 24
36.110.121.0/24 maxlen: 24
36.112.0.0/16 maxlen: 16
36.112.3.0/24 maxlen: 24
36.112.20.0/24 maxlen: 24
36.112.22.0/24 maxlen: 24
36.112.27.0/24 maxlen: 24
36.112.30.0/24 maxlen: 24
36.112.31.0/24 maxlen: 24
36.112.39.0/24 maxlen: 24
36.112.48.0/22 maxlen: 22
36.112.56.0/24 maxlen: 24
36.112.63.0/24 maxlen: 24
36.112.89.0/24 maxlen: 24
36.112.97.0/24 maxlen: 24
36.112.101.0/24 maxlen: 24
36.112.107.0/24 maxlen: 24
36.112.113.0/24 maxlen: 24
36.112.115.0/24 maxlen: 24
36.112.120.0/24 maxlen: 24
36.112.121.0/24 maxlen: 24
36.112.122.0/24 maxlen: 24
36.112.140.0/23 maxlen: 23
36.112.151.0/24 maxlen: 24
36.112.152.0/24 maxlen: 24
36.112.162.0/24 maxlen: 24
36.112.166.0/24 maxlen: 24
36.112.228.0/24 maxlen: 24
36.112.232.0/24 maxlen: 24
36.112.248.0/24 maxlen: 24
106.37.0.0/16 maxlen: 16
106.37.239.0/24 maxlen: 24
106.38.0.0/16 maxlen: 16
106.38.0.0/19 maxlen: 19
106.38.57.0/24 maxlen: 24
106.39.0.0/16 maxlen: 16
106.39.90.0/24 maxlen: 24
106.39.91.0/24 maxlen: 24
106.39.103.0/24 maxlen: 24
106.120.0.0/19 maxlen: 19
106.120.32.0/19 maxlen: 19
106.120.64.0/19 maxlen: 19
106.120.96.0/19 maxlen: 19
106.120.101.0/24 maxlen: 24
106.120.128.0/20 maxlen: 20
106.120.192.0/19 maxlen: 19
106.120.213.0/24 maxlen: 24
106.120.224.0/19 maxlen: 19
106.121.0.0/16 maxlen: 16
115.168.1.0/24 maxlen: 24
115.168.64.0/24 maxlen: 24
115.171.0.0/16 maxlen: 16
115.171.0.0/18 maxlen: 18
115.171.64.0/18 maxlen: 18
115.171.128.0/18 maxlen: 18
115.171.192.0/18 maxlen: 18
202.111.240.0/24 maxlen: 24
218.30.179.0/24 maxlen: 24
218.30.180.0/24 maxlen: 24
218.30.181.0/24 maxlen: 24
218.30.182.0/24 maxlen: 24
219.141.128.0/17 maxlen: 17
219.141.150.0/24 maxlen: 24
219.141.187.0/24 maxlen: 24
219.141.224.0/24 maxlen: 24
219.141.239.0/24 maxlen: 24
219.142.0.0/16 maxlen: 16
219.142.0.0/17 maxlen: 17
219.142.34.0/24 maxlen: 24
219.142.43.0/24 maxlen: 24
219.142.51.0/24 maxlen: 24
219.142.70.0/24 maxlen: 24
219.142.91.0/24 maxlen: 24
219.142.128.0/18 maxlen: 18
219.142.192.0/18 maxlen: 18
219.142.210.0/24 maxlen: 24
219.142.211.0/24 maxlen: 24
219.143.0.0/16 maxlen: 16
219.143.8.0/24 maxlen: 24
219.143.18.0/24 maxlen: 24
219.143.37.0/24 maxlen: 24
219.143.76.0/24 maxlen: 24
219.143.80.0/21 maxlen: 21
219.143.88.0/21 maxlen: 21
219.143.96.0/22 maxlen: 22
219.143.101.0/24 maxlen: 24
219.143.144.0/24 maxlen: 24
219.143.240.0/20 maxlen: 20
220.181.176.0/24 maxlen: 24
220.181.190.0/24 maxlen: 24
240e:83:8000::/48 maxlen: 48
240e:604:111::/48 maxlen: 48
240e:604:20f::/48 maxlen: 48
240e:604:784::/48 maxlen: 48
240e:604:900::/40 maxlen: 40
240e:b04::/32 maxlen: 32
240e:b05::/32 maxlen: 32
240e:b06::/32 maxlen: 32
240e:b07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 20:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:46:71:4e:40:e2:91:de:b3:5a:03:e4:59:52:f4:34:40:ed:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 3 03:08:41 2026 GMT
Not After : Sep 2 03:13:41 2027 GMT
Subject: CN=B3EAC2293BDCAE34C8149F5B100AB1D5B9124430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:bc:00:f7:24:8b:bd:dc:b8:e7:35:c7:6b:
52:79:aa:59:79:51:0e:e9:a1:de:2d:8c:0a:7e:9d:
32:99:ec:0d:ee:39:0e:61:c8:c1:d7:46:74:e1:4a:
33:15:11:90:79:62:b4:e0:e6:00:b0:f3:95:96:bf:
ab:e3:69:f1:11:1f:2a:f5:3f:2f:24:fe:a9:3e:0e:
ec:6e:eb:59:1f:18:e4:ef:db:44:5d:2d:5c:14:3e:
25:76:03:ad:9f:c4:f0:9c:0f:e5:e2:d0:1d:79:18:
51:41:40:42:ab:3c:c8:d0:18:47:2f:a7:57:61:75:
78:93:15:12:fa:5e:7d:7e:69:79:cb:0a:e6:ce:61:
ab:13:82:ac:30:32:64:ba:6c:99:de:bb:71:d1:d6:
84:9b:fb:ee:59:cf:fc:4b:66:b7:70:48:4f:3b:2f:
8a:c5:a0:a4:69:9c:91:ed:9d:6c:58:53:1d:7a:eb:
3c:b1:5f:ce:29:aa:c3:f1:e6:c2:d1:bf:cf:22:21:
ad:4a:b3:b6:27:85:f8:33:66:cd:9b:59:7f:b2:b2:
c6:be:20:9c:32:c9:71:be:c2:f0:61:bf:78:cb:92:
7b:23:0c:1f:12:11:62:a3:83:8a:ca:95:49:6f:97:
1f:fd:c3:9e:ab:b0:db:1e:90:6c:63:d2:24:b7:f5:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:C2:29:3B:DC:AE:34:C8:14:9F:5B:10:0A:B1:D5:B9:12:44:30
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.202.0.0/15
36.110.0.0/17
36.112.0.0/16
106.37.0.0-106.39.255.255
106.120.0.0-106.120.143.255
106.120.192.0-106.121.255.255
115.168.1.0/24
115.168.64.0/24
115.171.0.0/16
202.111.240.0/24
218.30.179.0-218.30.182.255
219.141.128.0-219.143.255.255
220.181.176.0/24
220.181.190.0/24
IPv6:
240e:83:8000::/48
240e:604:111::/48
240e:604:20f::/48
240e:604:784::/48
240e:604:900::/40
240e:b04::/30
Signature Algorithm: sha256WithRSAEncryption
53:1a:f7:9e:d9:b8:da:38:64:ea:01:ae:70:d0:ea:ee:2a:1c:
c4:e9:61:b2:4b:a8:a9:4b:72:8f:9c:01:3f:eb:ed:00:f1:26:
62:c2:58:d9:d9:69:fb:de:85:f8:db:1c:8a:92:26:d6:00:16:
50:13:23:4b:3a:02:f5:66:30:f7:c5:15:88:da:fa:cf:af:af:
6b:fc:0c:ec:eb:a4:ee:c3:6b:30:e3:a8:4c:8a:05:d8:25:28:
92:f2:2d:db:56:df:28:cf:3e:80:2f:31:8b:01:f9:94:07:c1:
2f:6f:b6:3d:9d:ed:ff:04:ad:ed:46:6b:9f:ed:f8:b9:8e:d8:
e7:6b:b1:2d:76:b1:32:8b:85:d9:ad:c5:13:12:cb:c4:79:3c:
79:cd:d5:7d:3b:f1:fa:7a:4b:ce:db:3f:2e:39:f3:21:38:95:
63:77:15:b2:5d:65:d8:63:ba:98:11:42:0e:65:50:0a:13:6c:
c3:25:9e:8a:d1:ca:36:33:98:17:94:2e:c6:7f:80:a4:78:13:
c1:2c:6a:6e:3e:88:55:a1:d5:c8:8f:ed:00:07:34:17:df:a8:
7f:d9:b2:93:5d:53:eb:27:3e:3a:a2:d6:73:f6:9f:10:f0:11:
d8:c2:6d:bd:8b:c0:57:d8:57:f2:4a:7c:5f:11:cc:28:8b:b9:
a9:00:4e:6f
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUNUZxTkDikd6zWgPkWVL0NEDtauUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDkwMzAzMDg0MVoX
DTI3MDkwMjAzMTM0MVowMzExMC8GA1UEAxMoQjNFQUMyMjkzQkRDQUUzNEM4MTQ5
RjVCMTAwQUIxRDVCOTEyNDQzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOFrvAD3JIu93LjnNcdrUnmqWXlRDumh3i2MCn6dMpnsDe45DmHIwddGdOFK
MxURkHlitODmALDzlZa/q+Np8REfKvU/LyT+qT4O7G7rWR8Y5O/bRF0tXBQ+JXYD
rZ/E8JwP5eLQHXkYUUFAQqs8yNAYRy+nV2F1eJMVEvpefX5pecsK5s5hqxOCrDAy
ZLpsmd67cdHWhJv77lnP/Etmt3BITzsvisWgpGmcke2dbFhTHXrrPLFfzimqw/Hm
wtG/zyIhrUqztieF+DNmzZtZf7Kyxr4gnDLJcb7C8GG/eMuSeyMMHxIRYqODisqV
SW+XH/3Dnquw2x6QbGPSJLf1NdcCAwEAAaOCAo4wggKKMB0GA1UdDgQWBBSz6sIp
O9yuNMgUn1sQCrHVuRJEMDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH
MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTNDg0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ygYIKwYBBQUHAQcBAf8EgbowgbcwegQCAAEwdAMDAQHKAwQHJG4AAwMAJHAwCgMD
AGolAwMDaiAwCwMDA2p4AwQEaniAMAsDBAZqeMADAwFqeAMEAHOoAQMEAHOoQAMD
AHOrAwQAym/wMAwDBADaHrMDBADaHrYwCwMEB9uNgAMDBNuAAwQA3LWwAwQA3LW+
MDkEAgACMDMDBwAkDgCDgAADBwAkDgYEAREDBwAkDgYEAg8DBwAkDgYEB4QDBgAk
DgYECQMFAiQOCwQwDQYJKoZIhvcNAQELBQADggEBAFMa957ZuNo4ZOoBrnDQ6u4q
HMTpYbJLqKlLco+cAT/r7QDxJmLCWNnZafvehfjbHIqSJtYAFlATI0s6AvVmMPfF
FYja+s+vr2v8DOzrpO7DazDjqEyKBdglKJLyLdtW3yjPPoAvMYsB+ZQHwS9vtj2d
7f8Ere1Ga5/t+LmO2OdrsS12sTKLhdmtxRMSy8R5PHnN1X078fp6S87bPy458yE4
lWN3FbJdZdhjupgRQg5lUAoTbMMlnorRyjYzmBeULsZ/gKR4E8Esam4+iFWh1ciP
7QAHNBffqH/ZspNdU+snPjqi1nP2nxDwEdjCbb2LwFfYV/JKfF8RzCiLuakATm8=
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:09:37 2026 by rpki-client