Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: 6qNLdikeT8sbFwdFTOafrtpVuFF36pLH97ktr9NfugY=
Subject key identifier: 96:33:FE:27:A1:D6:D9:D8:26:76:A3:24:81:62:B0:00:80:2A:9B:27
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 646415BAE02AB690A2A6089FFCAE0355AB8A87D0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
Signing time: Tue 13 Oct 2026 09:35:12 +0000
ROA not before: Tue 13 Oct 2026 09:30:12 +0000
ROA not after: Tue 12 Oct 2027 09:35:12 +0000
asID: 4847
IP address blocks: 1.202.0.0/17 maxlen: 17
1.202.17.0/24 maxlen: 24
1.202.128.0/17 maxlen: 17
1.202.143.0/24 maxlen: 24
1.202.217.0/24 maxlen: 24
1.202.224.0/24 maxlen: 24
1.202.228.0/24 maxlen: 24
1.202.231.0/24 maxlen: 24
1.202.237.0/24 maxlen: 24
1.203.0.0/16 maxlen: 16
1.203.0.0/18 maxlen: 18
1.203.90.0/24 maxlen: 24
1.203.91.0/24 maxlen: 24
1.203.96.0/24 maxlen: 24
1.203.105.0/24 maxlen: 24
1.203.128.0/20 maxlen: 20
36.110.0.0/17 maxlen: 17
36.110.14.0/24 maxlen: 24
36.110.24.0/24 maxlen: 24
36.110.28.0/24 maxlen: 24
36.110.38.0/24 maxlen: 24
36.110.60.0/24 maxlen: 24
36.110.69.0/24 maxlen: 24
36.110.82.0/24 maxlen: 24
36.110.112.0/24 maxlen: 24
36.110.114.0/24 maxlen: 24
36.110.118.0/24 maxlen: 24
36.110.119.0/24 maxlen: 24
36.110.120.0/24 maxlen: 24
36.110.121.0/24 maxlen: 24
36.112.0.0/16 maxlen: 16
36.112.3.0/24 maxlen: 24
36.112.20.0/24 maxlen: 24
36.112.22.0/24 maxlen: 24
36.112.27.0/24 maxlen: 24
36.112.30.0/24 maxlen: 24
36.112.31.0/24 maxlen: 24
36.112.39.0/24 maxlen: 24
36.112.48.0/22 maxlen: 22
36.112.56.0/24 maxlen: 24
36.112.63.0/24 maxlen: 24
36.112.89.0/24 maxlen: 24
36.112.97.0/24 maxlen: 24
36.112.101.0/24 maxlen: 24
36.112.107.0/24 maxlen: 24
36.112.113.0/24 maxlen: 24
36.112.115.0/24 maxlen: 24
36.112.120.0/24 maxlen: 24
36.112.121.0/24 maxlen: 24
36.112.122.0/24 maxlen: 24
36.112.140.0/23 maxlen: 23
36.112.151.0/24 maxlen: 24
36.112.152.0/24 maxlen: 24
36.112.162.0/24 maxlen: 24
36.112.166.0/24 maxlen: 24
36.112.228.0/24 maxlen: 24
36.112.232.0/24 maxlen: 24
36.112.248.0/24 maxlen: 24
106.37.0.0/16 maxlen: 16
106.37.239.0/24 maxlen: 24
106.38.0.0/16 maxlen: 16
106.38.0.0/19 maxlen: 19
106.38.57.0/24 maxlen: 24
106.39.0.0/16 maxlen: 16
106.39.90.0/24 maxlen: 24
106.39.91.0/24 maxlen: 24
106.39.103.0/24 maxlen: 24
106.120.0.0/19 maxlen: 19
106.120.32.0/19 maxlen: 19
106.120.64.0/19 maxlen: 19
106.120.96.0/19 maxlen: 19
106.120.101.0/24 maxlen: 24
106.120.128.0/20 maxlen: 20
106.120.192.0/19 maxlen: 19
106.120.213.0/24 maxlen: 24
106.120.224.0/19 maxlen: 19
106.121.0.0/16 maxlen: 16
115.168.1.0/24 maxlen: 24
115.168.64.0/24 maxlen: 24
115.171.0.0/16 maxlen: 16
115.171.0.0/18 maxlen: 18
115.171.64.0/18 maxlen: 18
115.171.128.0/18 maxlen: 18
115.171.192.0/18 maxlen: 18
202.111.240.0/24 maxlen: 24
218.30.179.0/24 maxlen: 24
218.30.180.0/24 maxlen: 24
218.30.181.0/24 maxlen: 24
218.30.182.0/24 maxlen: 24
219.141.128.0/17 maxlen: 17
219.141.150.0/24 maxlen: 24
219.141.187.0/24 maxlen: 24
219.141.224.0/24 maxlen: 24
219.141.239.0/24 maxlen: 24
219.142.0.0/16 maxlen: 16
219.142.0.0/17 maxlen: 17
219.142.5.0/24 maxlen: 24
219.142.34.0/24 maxlen: 24
219.142.43.0/24 maxlen: 24
219.142.51.0/24 maxlen: 24
219.142.70.0/24 maxlen: 24
219.142.91.0/24 maxlen: 24
219.142.128.0/18 maxlen: 18
219.142.192.0/18 maxlen: 18
219.142.210.0/24 maxlen: 24
219.142.211.0/24 maxlen: 24
219.143.0.0/16 maxlen: 16
219.143.8.0/24 maxlen: 24
219.143.18.0/24 maxlen: 24
219.143.37.0/24 maxlen: 24
219.143.76.0/24 maxlen: 24
219.143.80.0/21 maxlen: 21
219.143.88.0/21 maxlen: 21
219.143.96.0/22 maxlen: 22
219.143.101.0/24 maxlen: 24
219.143.144.0/24 maxlen: 24
219.143.217.0/24 maxlen: 24
219.143.240.0/20 maxlen: 20
220.181.176.0/24 maxlen: 24
220.181.190.0/24 maxlen: 24
240e:83:8000::/48 maxlen: 48
240e:604:111::/48 maxlen: 48
240e:604:20f::/48 maxlen: 48
240e:604:784::/48 maxlen: 48
240e:604:900::/40 maxlen: 40
240e:b04::/32 maxlen: 32
240e:b05::/32 maxlen: 32
240e:b06::/32 maxlen: 32
240e:b07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:64:15:ba:e0:2a:b6:90:a2:a6:08:9f:fc:ae:03:55:ab:8a:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Oct 13 09:30:12 2026 GMT
Not After : Oct 12 09:35:12 2027 GMT
Subject: CN=9633FE27A1D6D9D82676A3248162B000802A9B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2b:96:e9:df:08:78:b0:3c:6f:25:6e:87:ca:
17:8e:9d:4c:fe:aa:05:32:75:b0:6b:b4:ab:87:49:
62:78:50:3a:9f:cd:0f:e4:17:29:3c:c1:e2:78:cc:
75:1f:86:c0:13:16:17:83:26:4e:28:a5:01:98:07:
47:77:6a:cc:ab:18:f6:36:cd:30:06:b7:84:f2:47:
71:ed:ba:3b:e2:92:da:0c:11:ec:e0:f6:9c:96:4e:
ca:d2:31:c2:bc:3d:4f:dc:3e:e2:24:85:29:69:ac:
ad:a9:5b:5a:35:f5:92:d2:a1:f9:6b:6b:a5:1f:d1:
94:3a:a6:a9:fc:93:6c:ab:3f:a1:44:25:4c:5c:e4:
fb:6d:36:5e:8b:72:d6:ea:0b:cd:db:b3:02:bb:b0:
4f:ef:07:d4:8c:2c:57:bc:ad:0d:e1:95:e1:15:f4:
2a:d5:e9:2d:64:0f:3c:2e:5f:6f:43:7a:18:b4:9a:
af:7a:00:15:d0:b2:58:fd:b0:c1:15:0e:b5:28:1c:
6e:8e:af:52:90:ce:f3:a6:e5:4e:15:73:69:67:13:
59:b0:8a:53:86:8e:ba:77:6b:00:65:17:c8:1e:0d:
c5:f4:87:d5:fd:f2:07:47:37:8b:98:41:16:6a:3b:
71:79:53:6f:c9:31:e4:fc:09:2a:b8:d9:88:c6:d0:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:FE:27:A1:D6:D9:D8:26:76:A3:24:81:62:B0:00:80:2A:9B:27
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.202.0.0/15
36.110.0.0/17
36.112.0.0/16
106.37.0.0-106.39.255.255
106.120.0.0-106.120.143.255
106.120.192.0-106.121.255.255
115.168.1.0/24
115.168.64.0/24
115.171.0.0/16
202.111.240.0/24
218.30.179.0-218.30.182.255
219.141.128.0-219.143.255.255
220.181.176.0/24
220.181.190.0/24
IPv6:
240e:83:8000::/48
240e:604:111::/48
240e:604:20f::/48
240e:604:784::/48
240e:604:900::/40
240e:b04::/30
Signature Algorithm: sha256WithRSAEncryption
4a:59:95:14:4a:e3:6c:21:ee:f9:25:79:1a:b9:78:e3:53:2d:
16:f2:1d:f4:9f:c9:86:c7:2f:14:47:a8:e6:d4:11:20:12:b3:
3a:30:03:ca:9d:f9:b4:9f:6f:47:a8:ae:17:87:46:1f:68:1f:
2c:2e:51:12:55:d6:00:8f:5f:f2:e8:f4:20:bb:fa:35:da:66:
29:a3:c0:5a:20:af:0c:49:0f:c5:60:11:41:5c:69:ad:bf:b8:
45:7b:c3:4a:c2:4b:fc:38:dd:27:1d:f9:99:09:af:0e:12:b4:
8f:aa:e5:9d:6e:61:a2:a8:10:c7:e5:f5:0a:69:9c:9d:f2:4e:
4e:95:74:82:15:22:11:db:70:1c:77:c1:96:9b:86:a4:0d:cd:
6c:b9:53:fc:51:7a:e6:5f:51:f7:2c:b0:ce:8b:d1:9b:ba:13:
0e:66:c8:8b:c7:31:53:9b:38:5b:73:3e:db:79:68:34:ee:b9:
ff:5a:77:0b:9e:be:6c:46:cc:2b:22:b6:0e:f6:9d:ea:2f:e2:
00:9b:a0:82:26:2c:ea:03:b2:18:4c:47:5b:68:d8:0c:ed:7e:
dc:bf:45:f4:30:88:f9:6d:64:37:fb:10:39:03:e3:ed:87:57:
85:b1:db:e1:8c:c8:a6:c7:18:59:79:bb:9c:11:53:fa:1d:4e:
b9:df:66:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:50:06 2026 by rpki-client