Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: JQLx3JnyR6s2JefXfNJljD16BF1a+JHs8l5et6sKIqA=
Subject key identifier: AB:EA:C1:6A:E7:67:21:28:99:5A:E5:73:99:06:78:78:79:1E:EA:04
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: C79FC85E07025C5D5F1E16A9617C47EF7922DF
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
Signing time: Thu 11 Jun 2026 16:14:09 +0000
ROA not before: Thu 11 Jun 2026 16:09:09 +0000
ROA not after: Thu 10 Jun 2027 16:14:09 +0000
asID: 4847
IP address blocks: 1.202.0.0/17 maxlen: 17
1.202.128.0/17 maxlen: 17
1.202.143.0/24 maxlen: 24
1.202.217.0/24 maxlen: 24
1.202.224.0/24 maxlen: 24
1.202.228.0/24 maxlen: 24
1.202.231.0/24 maxlen: 24
1.202.237.0/24 maxlen: 24
1.203.90.0/24 maxlen: 24
1.203.91.0/24 maxlen: 24
1.203.105.0/24 maxlen: 24
36.110.0.0/17 maxlen: 17
36.110.14.0/24 maxlen: 24
36.110.24.0/24 maxlen: 24
36.110.28.0/24 maxlen: 24
36.110.38.0/24 maxlen: 24
36.110.60.0/24 maxlen: 24
36.110.82.0/24 maxlen: 24
36.110.114.0/24 maxlen: 24
36.110.118.0/24 maxlen: 24
36.110.119.0/24 maxlen: 24
36.110.120.0/24 maxlen: 24
36.110.121.0/24 maxlen: 24
36.112.3.0/24 maxlen: 24
36.112.20.0/24 maxlen: 24
36.112.22.0/24 maxlen: 24
36.112.27.0/24 maxlen: 24
36.112.30.0/24 maxlen: 24
36.112.31.0/24 maxlen: 24
36.112.39.0/24 maxlen: 24
36.112.48.0/22 maxlen: 22
36.112.56.0/24 maxlen: 24
36.112.63.0/24 maxlen: 24
36.112.89.0/24 maxlen: 24
36.112.97.0/24 maxlen: 24
36.112.107.0/24 maxlen: 24
36.112.113.0/24 maxlen: 24
36.112.115.0/24 maxlen: 24
36.112.120.0/24 maxlen: 24
36.112.121.0/24 maxlen: 24
36.112.122.0/24 maxlen: 24
36.112.140.0/23 maxlen: 23
36.112.151.0/24 maxlen: 24
36.112.152.0/24 maxlen: 24
36.112.162.0/24 maxlen: 24
36.112.166.0/24 maxlen: 24
36.112.228.0/24 maxlen: 24
36.112.232.0/24 maxlen: 24
36.112.248.0/24 maxlen: 24
106.37.0.0/16 maxlen: 16
106.38.0.0/16 maxlen: 16
106.38.0.0/19 maxlen: 19
106.38.57.0/24 maxlen: 24
106.39.0.0/16 maxlen: 16
106.39.90.0/24 maxlen: 24
106.39.91.0/24 maxlen: 24
106.39.103.0/24 maxlen: 24
106.120.0.0/19 maxlen: 19
106.120.32.0/19 maxlen: 19
106.120.64.0/19 maxlen: 19
106.120.96.0/19 maxlen: 19
106.120.101.0/24 maxlen: 24
106.120.128.0/20 maxlen: 20
106.120.192.0/19 maxlen: 19
106.120.213.0/24 maxlen: 24
106.120.224.0/19 maxlen: 19
106.121.0.0/16 maxlen: 16
115.168.1.0/24 maxlen: 24
115.168.64.0/24 maxlen: 24
115.171.0.0/16 maxlen: 16
115.171.0.0/18 maxlen: 18
115.171.64.0/18 maxlen: 18
115.171.128.0/18 maxlen: 18
115.171.192.0/18 maxlen: 18
202.111.240.0/24 maxlen: 24
218.30.179.0/24 maxlen: 24
218.30.180.0/24 maxlen: 24
218.30.181.0/24 maxlen: 24
218.30.182.0/24 maxlen: 24
219.141.128.0/17 maxlen: 17
219.141.150.0/24 maxlen: 24
219.141.224.0/24 maxlen: 24
219.141.239.0/24 maxlen: 24
219.142.0.0/16 maxlen: 16
219.142.0.0/17 maxlen: 17
219.142.34.0/24 maxlen: 24
219.142.43.0/24 maxlen: 24
219.142.51.0/24 maxlen: 24
219.142.91.0/24 maxlen: 24
219.142.128.0/18 maxlen: 18
219.142.192.0/18 maxlen: 18
219.142.210.0/24 maxlen: 24
219.142.211.0/24 maxlen: 24
219.143.0.0/16 maxlen: 16
219.143.8.0/24 maxlen: 24
219.143.18.0/24 maxlen: 24
219.143.37.0/24 maxlen: 24
219.143.76.0/24 maxlen: 24
219.143.80.0/21 maxlen: 21
219.143.88.0/21 maxlen: 21
219.143.96.0/22 maxlen: 22
219.143.101.0/24 maxlen: 24
219.143.144.0/24 maxlen: 24
219.143.240.0/20 maxlen: 20
220.181.176.0/24 maxlen: 24
220.181.190.0/24 maxlen: 24
240e:83:8000::/48 maxlen: 48
240e:604:111::/48 maxlen: 48
240e:604:20f::/48 maxlen: 48
240e:604:784::/48 maxlen: 48
240e:604:900::/40 maxlen: 40
240e:b04::/32 maxlen: 32
240e:b05::/32 maxlen: 32
240e:b06::/32 maxlen: 32
240e:b07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c7:9f:c8:5e:07:02:5c:5d:5f:1e:16:a9:61:7c:47:ef:79:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 11 16:09:09 2026 GMT
Not After : Jun 10 16:14:09 2027 GMT
Subject: CN=ABEAC16AE7672128995AE57399067878791EEA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:68:b6:1d:13:53:df:05:2b:76:08:b1:86:
cc:64:3b:d6:82:f0:2d:5c:64:81:1a:f7:49:27:57:
1d:d0:76:c3:c1:c1:b0:2f:2a:b7:fd:71:59:00:d9:
78:5d:39:9f:35:df:7b:fd:4f:1a:55:d7:0c:fc:4d:
c0:ee:78:88:0b:5b:80:fd:fe:ad:87:45:c8:ea:ea:
38:07:1d:70:b6:51:79:ab:a9:6a:14:39:b7:5d:6a:
6a:20:79:1a:49:fe:f1:6b:50:b7:40:00:2e:4c:0c:
60:25:ed:72:ba:f8:06:71:72:ad:92:eb:10:97:e4:
f7:85:26:86:80:e0:3c:21:ba:15:e2:d0:b0:9d:79:
e7:4b:f6:29:6a:d7:e7:05:a9:5c:82:68:d1:d7:32:
94:8f:e4:87:3c:9e:f3:40:92:0e:a0:80:b4:db:ea:
f1:88:68:75:22:4a:c0:7d:39:d9:dd:f8:b8:73:f3:
02:9c:7b:5a:ba:9c:c4:32:3b:20:b9:4d:6f:89:d4:
11:ea:d5:34:72:09:55:b9:1a:f0:c7:d0:a1:c3:9d:
30:9c:ba:ad:59:3a:78:1f:9d:f3:9d:30:7c:38:1d:
a1:34:e1:12:95:b3:07:47:70:f8:a2:e8:41:47:14:
29:41:b4:6b:7f:5b:0f:60:dc:1a:5c:bb:6b:de:14:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:C1:6A:E7:67:21:28:99:5A:E5:73:99:06:78:78:79:1E:EA:04
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.202.0.0/16
1.203.90.0/23
1.203.105.0/24
36.110.0.0/17
36.112.3.0/24
36.112.20.0/24
36.112.22.0/24
36.112.27.0/24
36.112.30.0/23
36.112.39.0/24
36.112.48.0/22
36.112.56.0/24
36.112.63.0/24
36.112.89.0/24
36.112.97.0/24
36.112.107.0/24
36.112.113.0/24
36.112.115.0/24
36.112.120.0-36.112.122.255
36.112.140.0/23
36.112.151.0-36.112.152.255
36.112.162.0/24
36.112.166.0/24
36.112.228.0/24
36.112.232.0/24
36.112.248.0/24
106.37.0.0-106.39.255.255
106.120.0.0-106.120.143.255
106.120.192.0-106.121.255.255
115.168.1.0/24
115.168.64.0/24
115.171.0.0/16
202.111.240.0/24
218.30.179.0-218.30.182.255
219.141.128.0-219.143.255.255
220.181.176.0/24
220.181.190.0/24
IPv6:
240e:83:8000::/48
240e:604:111::/48
240e:604:20f::/48
240e:604:784::/48
240e:604:900::/40
240e:b04::/30
Signature Algorithm: sha256WithRSAEncryption
00:61:8c:86:9c:7b:3c:61:17:f7:2b:7b:31:d7:dc:91:6b:ce:
bd:bf:04:41:5e:ce:ca:ea:09:25:5e:61:4e:ef:95:d8:d2:6a:
da:cc:94:a6:6d:fc:05:76:0c:a4:3a:8a:c1:44:c0:85:45:0c:
55:85:d5:d9:af:54:63:e7:f3:61:03:54:f3:c8:f3:13:e0:9b:
50:54:ed:c3:c7:cf:b3:5b:7d:40:16:25:09:dd:25:39:c0:93:
9e:8a:42:62:cb:87:a3:39:87:78:36:21:c8:31:8e:69:a1:ec:
b6:51:73:70:57:54:ba:b5:c9:89:f6:aa:d3:0c:2f:cc:b8:0f:
be:53:07:4b:fb:4a:7b:2a:3f:c7:ec:b4:98:b0:28:6d:6b:4e:
57:0c:91:cb:41:e3:f0:90:d7:4b:33:23:4e:dc:e5:97:0b:dd:
21:81:15:4d:f8:b9:d9:48:b4:4d:2f:65:b3:f5:3c:20:f6:0e:
e1:b8:bc:20:e6:4d:c5:7c:85:a0:cb:00:fa:c9:80:67:45:04:
75:74:fe:a9:d6:9c:93:95:8a:8d:8b:3d:98:83:0d:c0:84:e2:
a3:ac:9b:bb:ce:4e:6b:41:c3:f6:78:77:1d:d0:46:f7:50:87:
1e:b7:57:ee:9e:2d:d3:15:28:16:01:8b:66:fc:5f:5f:4c:8c:
be:7c:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client