Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: iyF+10CX9sIhLBcJwHW2Fy3KYPgSrXRX6Yr1snvJKh8=
Subject key identifier: D5:8B:0A:1C:1F:55:4F:F0:4A:AE:72:8B:06:6E:E4:00:87:5F:AF:74
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 5295453BF50E3D48FF77F9EE60A80C7289E5D937
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS9808.roa
Signing time: Mon 25 May 2026 06:59:46 +0000
ROA not before: Mon 25 May 2026 06:54:46 +0000
ROA not after: Mon 24 May 2027 06:59:46 +0000
asID: 9808
IP address blocks: 103.244.80.0/22 maxlen: 22
114.118.0.0/21 maxlen: 21
114.118.8.0/21 maxlen: 21
114.118.16.0/21 maxlen: 21
114.118.24.0/21 maxlen: 21
114.118.40.0/21 maxlen: 21
114.118.48.0/21 maxlen: 21
114.118.56.0/21 maxlen: 21
114.118.64.0/21 maxlen: 21
114.118.72.0/21 maxlen: 21
114.118.80.0/21 maxlen: 21
114.118.88.0/21 maxlen: 21
114.118.96.0/21 maxlen: 21
114.118.104.0/21 maxlen: 21
114.118.112.0/21 maxlen: 21
114.118.120.0/21 maxlen: 21
117.48.0.0/22 maxlen: 22
117.48.4.0/22 maxlen: 22
117.48.8.0/22 maxlen: 22
117.48.12.0/22 maxlen: 22
117.48.16.0/22 maxlen: 22
117.48.20.0/22 maxlen: 22
117.48.24.0/22 maxlen: 22
117.48.28.0/22 maxlen: 22
117.48.32.0/22 maxlen: 22
117.48.36.0/22 maxlen: 22
117.48.40.0/22 maxlen: 22
117.48.44.0/22 maxlen: 22
117.48.48.0/22 maxlen: 22
117.48.52.0/22 maxlen: 22
117.48.56.0/22 maxlen: 22
117.48.60.0/22 maxlen: 22
117.48.64.0/22 maxlen: 22
117.48.68.0/22 maxlen: 22
117.48.72.0/22 maxlen: 22
117.48.76.0/22 maxlen: 22
117.48.80.0/22 maxlen: 22
117.48.84.0/22 maxlen: 22
117.48.88.0/22 maxlen: 22
117.48.92.0/22 maxlen: 22
120.132.32.0/22 maxlen: 22
120.132.36.0/22 maxlen: 22
120.132.40.0/22 maxlen: 22
120.132.44.0/22 maxlen: 22
120.132.48.0/22 maxlen: 22
120.132.52.0/22 maxlen: 22
120.132.56.0/22 maxlen: 22
120.132.60.0/22 maxlen: 22
120.132.64.0/22 maxlen: 22
120.132.68.0/22 maxlen: 22
120.132.72.0/22 maxlen: 22
120.132.76.0/22 maxlen: 22
120.132.80.0/22 maxlen: 22
120.132.84.0/22 maxlen: 22
120.132.88.0/22 maxlen: 22
123.59.0.0/19 maxlen: 19
123.59.32.0/19 maxlen: 19
123.59.64.0/19 maxlen: 19
123.59.96.0/19 maxlen: 19
123.59.128.0/19 maxlen: 19
123.59.160.0/19 maxlen: 19
123.59.192.0/19 maxlen: 19
123.59.224.0/19 maxlen: 19
180.150.176.0/22 maxlen: 22
180.150.180.0/22 maxlen: 22
180.150.184.0/22 maxlen: 22
180.150.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:95:45:3b:f5:0e:3d:48:ff:77:f9:ee:60:a8:0c:72:89:e5:d9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: May 25 06:54:46 2026 GMT
Not After : May 24 06:59:46 2027 GMT
Subject: CN=D58B0A1C1F554FF04AAE728B066EE400875FAF74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:ef:e9:a3:84:57:ff:6f:cc:bb:f2:28:7f:
e6:57:77:36:00:e6:c8:b5:5f:64:58:ff:08:49:55:
df:1d:85:4a:c1:24:bf:d9:64:f8:77:05:ec:3e:f3:
b8:1a:bf:89:c8:ea:57:6b:76:ee:7c:d6:6f:f4:f2:
08:bc:2a:81:66:c0:6e:34:60:2f:29:8f:65:a9:60:
22:65:af:d7:78:f9:b8:e1:f3:c3:e5:34:49:15:9a:
f9:47:0a:ff:57:74:54:10:16:45:41:96:57:20:14:
6e:ff:b1:31:9a:47:33:ba:d1:d0:3c:36:f3:df:26:
65:f3:9a:28:d4:b6:1a:ec:d3:17:a2:11:85:16:93:
f2:a1:34:59:be:46:da:6e:60:e8:a5:c7:f2:af:36:
ec:5a:93:40:75:5f:dd:ec:0f:00:34:0a:34:0e:09:
d7:3d:3b:19:73:5b:10:b8:2d:35:96:c2:cd:7e:24:
ec:9e:1f:6a:24:31:53:76:df:7a:54:d1:49:04:2f:
db:ac:91:ff:35:c3:f7:fe:45:15:4d:5a:32:e3:8b:
55:e1:1c:14:8f:2f:07:d4:83:69:87:82:3e:63:f1:
e9:f4:54:1f:27:f6:76:45:a5:3c:97:94:bb:fc:4c:
e0:84:45:70:f6:c7:0f:4f:bb:40:49:34:e9:df:18:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:0A:1C:1F:55:4F:F0:4A:AE:72:8B:06:6E:E4:00:87:5F:AF:74
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.80.0/22
114.118.0.0/19
114.118.40.0-114.118.127.255
117.48.0.0-117.48.95.255
120.132.32.0-120.132.91.255
123.59.0.0/16
180.150.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:9e:72:4c:e7:b1:75:33:d7:36:61:86:6d:4a:fd:c8:71:7c:
a0:c3:fa:26:d6:bb:f9:8b:17:3b:08:ac:02:3d:e0:77:6a:19:
cf:40:0a:1f:76:e8:b1:1c:6f:6c:a8:5a:73:88:d6:5a:91:4b:
e9:2d:63:2b:f7:b6:f7:6b:34:b9:24:08:f8:b6:e9:ff:9c:a7:
2a:c4:c5:ea:16:df:74:6e:5c:fd:d5:98:32:57:2a:44:6e:0b:
c0:59:13:03:1d:39:d8:fd:81:3b:64:95:67:e5:f4:14:9f:b0:
93:6d:e3:da:76:eb:07:2f:bd:66:b5:65:e3:6d:b4:4c:16:d0:
e1:6d:2d:ad:38:71:33:85:5c:44:8e:8a:b8:17:58:d9:47:21:
09:aa:46:be:5c:ec:11:02:18:2c:31:ad:74:ac:07:08:bb:0d:
09:09:d5:e0:a5:d9:ba:04:ac:17:ae:4e:a1:f1:5c:03:28:71:
50:e1:1f:48:0a:68:e2:d1:8d:ef:b7:cb:16:9f:06:37:48:e8:
15:da:83:e0:1b:a9:21:3e:7d:c7:a8:af:f6:ab:2c:28:38:6f:
a7:25:a5:ad:90:59:bd:e4:f3:02:fb:d2:3f:a0:cd:ec:b8:ff:
7f:91:b0:2a:ae:8a:48:3b:22:8c:3e:41:9e:6d:df:55:1a:20:
c3:48:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:29 2026 by rpki-client