Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
File: AS4837.roa (raw, json)
Hash identifier: BWCtNtoP0/N/CLGqdNx7/l+c1zzPvTQyxedE78g1Q3Q=
Subject key identifier: 5C:1D:EB:5A:29:B1:C1:13:40:98:97:D1:E3:9B:8F:A0:2E:83:25:FF
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 03BCE81779EA7B12E9C455BDAB7EF1478007A1F0
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
Signing time: Fri 29 May 2026 17:59:32 +0000
ROA not before: Fri 29 May 2026 17:54:32 +0000
ROA not after: Fri 28 May 2027 17:59:32 +0000
asID: 4837
IP address blocks: 61.240.128.0/19 maxlen: 19
61.240.192.0/19 maxlen: 19
61.240.224.0/21 maxlen: 21
61.240.232.0/21 maxlen: 21
61.240.240.0/21 maxlen: 21
61.240.248.0/21 maxlen: 21
61.241.64.0/18 maxlen: 18
61.242.128.0/19 maxlen: 19
61.242.160.0/19 maxlen: 19
61.242.192.0/18 maxlen: 18
61.243.0.0/19 maxlen: 19
61.243.1.0/24 maxlen: 24
61.243.2.0/24 maxlen: 24
61.243.3.0/24 maxlen: 24
61.243.4.0/24 maxlen: 24
61.243.10.0/24 maxlen: 24
61.243.11.0/24 maxlen: 24
61.243.12.0/24 maxlen: 24
61.243.32.0/20 maxlen: 20
61.243.48.0/20 maxlen: 20
61.243.124.0/22 maxlen: 22
61.243.192.0/19 maxlen: 19
61.243.224.0/19 maxlen: 19
116.128.224.0/19 maxlen: 19
116.129.0.0/17 maxlen: 17
116.129.128.0/18 maxlen: 18
116.129.192.0/19 maxlen: 19
116.129.244.0/22 maxlen: 22
116.129.248.0/21 maxlen: 21
116.131.0.0/16 maxlen: 16
116.132.0.0/15 maxlen: 15
116.138.0.0/15 maxlen: 15
116.140.0.0/17 maxlen: 17
116.140.128.0/18 maxlen: 18
116.140.192.0/18 maxlen: 18
116.141.0.0/16 maxlen: 16
116.142.0.0/15 maxlen: 15
116.144.0.0/15 maxlen: 15
116.146.0.0/16 maxlen: 16
116.148.0.0/16 maxlen: 16
116.161.0.0/16 maxlen: 16
116.162.0.0/16 maxlen: 16
116.163.0.0/18 maxlen: 18
116.165.0.0/16 maxlen: 16
116.168.0.0/16 maxlen: 16
116.171.0.0/16 maxlen: 16
116.171.38.0/24 maxlen: 24
116.171.98.0/24 maxlen: 24
116.171.109.0/24 maxlen: 24
116.171.138.0/24 maxlen: 24
116.171.249.0/24 maxlen: 24
116.172.128.0/17 maxlen: 17
116.173.0.0/16 maxlen: 16
116.174.0.0/15 maxlen: 15
116.177.0.0/16 maxlen: 16
211.90.0.0/18 maxlen: 18
211.90.64.0/21 maxlen: 21
211.90.216.0/21 maxlen: 21
211.90.224.0/19 maxlen: 19
211.91.0.0/18 maxlen: 18
211.91.120.0/21 maxlen: 21
211.91.128.0/19 maxlen: 19
211.91.160.0/20 maxlen: 20
211.91.176.0/21 maxlen: 21
211.91.184.0/21 maxlen: 21
211.91.216.0/21 maxlen: 21
211.91.224.0/20 maxlen: 20
211.91.240.0/20 maxlen: 20
211.92.0.0/17 maxlen: 17
211.92.128.0/21 maxlen: 21
211.92.136.0/21 maxlen: 21
211.92.144.0/20 maxlen: 20
211.92.160.0/20 maxlen: 20
211.92.176.0/20 maxlen: 20
211.92.192.0/19 maxlen: 19
211.92.224.0/20 maxlen: 20
211.92.244.0/22 maxlen: 22
211.93.24.0/21 maxlen: 21
211.93.32.0/19 maxlen: 19
211.93.64.0/18 maxlen: 18
211.93.128.0/20 maxlen: 20
211.93.144.0/21 maxlen: 21
211.93.211.0/24 maxlen: 24
211.97.64.0/19 maxlen: 19
211.97.96.0/21 maxlen: 21
220.192.0.0/18 maxlen: 18
220.192.64.0/21 maxlen: 21
220.192.80.0/20 maxlen: 20
220.192.96.0/19 maxlen: 19
220.192.128.0/19 maxlen: 19
220.192.160.0/20 maxlen: 20
220.192.176.0/21 maxlen: 21
220.192.184.0/22 maxlen: 22
220.192.188.0/22 maxlen: 22
220.192.192.0/20 maxlen: 20
220.192.208.0/21 maxlen: 21
220.192.216.0/21 maxlen: 21
220.192.224.0/19 maxlen: 19
220.194.128.0/24 maxlen: 24
220.194.138.0/24 maxlen: 24
220.194.140.0/24 maxlen: 24
220.194.146.0/24 maxlen: 24
220.194.147.0/24 maxlen: 24
220.194.148.0/24 maxlen: 24
220.194.172.0/24 maxlen: 24
220.194.188.0/24 maxlen: 24
220.194.189.0/24 maxlen: 24
220.194.192.0/18 maxlen: 18
220.195.0.0/19 maxlen: 19
220.197.0.0/17 maxlen: 17
220.197.77.0/24 maxlen: 24
220.197.160.0/20 maxlen: 20
220.197.169.0/24 maxlen: 24
220.197.176.0/20 maxlen: 20
220.197.192.0/19 maxlen: 19
220.197.224.0/21 maxlen: 21
220.197.232.0/21 maxlen: 21
220.197.240.0/20 maxlen: 20
220.200.64.0/19 maxlen: 19
220.200.112.0/20 maxlen: 20
220.200.128.0/20 maxlen: 20
220.201.192.0/18 maxlen: 18
220.202.0.0/18 maxlen: 18
220.202.96.0/19 maxlen: 19
220.202.128.0/19 maxlen: 19
220.202.160.0/19 maxlen: 19
220.202.192.0/18 maxlen: 18
220.203.128.0/18 maxlen: 18
220.207.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bc:e8:17:79:ea:7b:12:e9:c4:55:bd:ab:7e:f1:47:80:07:a1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: May 29 17:54:32 2026 GMT
Not After : May 28 17:59:32 2027 GMT
Subject: CN=5C1DEB5A29B1C113409897D1E39B8FA02E8325FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:24:3b:f4:38:ce:13:a1:96:80:68:24:f2:
eb:56:9d:62:b2:72:79:e7:77:5d:ce:77:cd:d1:4f:
ec:70:ac:60:cc:98:b3:e9:95:93:d6:ba:69:f6:9d:
8a:92:7c:95:f0:27:01:c2:a2:5a:1a:36:7f:9b:58:
37:af:46:03:81:7b:bb:e9:7a:bf:3c:38:d1:ba:49:
55:0b:ea:8a:63:11:e7:51:9f:e6:be:84:48:e2:f3:
63:27:27:56:2e:f3:05:3a:55:90:5b:9e:bb:3b:59:
a3:e9:75:5f:5d:8a:51:81:6b:8e:ae:e6:5e:d5:1f:
aa:5c:b7:a9:87:4c:27:12:78:22:42:82:62:87:35:
6e:45:f4:a8:ba:73:31:5e:15:00:d0:9c:92:e1:f1:
6e:38:15:e1:7f:38:0d:e6:b1:0e:a8:15:eb:27:f6:
a7:de:1c:6c:22:22:b5:ec:79:0b:ce:78:06:a2:49:
fa:e5:31:9d:35:76:33:a6:7b:d9:ef:d3:11:d7:82:
fe:1f:54:76:f2:1a:b1:95:5d:cc:e4:65:1b:1c:85:
6b:df:0a:6b:80:45:94:82:d2:90:0a:73:bb:12:3a:
54:24:fe:60:cf:dd:87:5d:ae:4b:d0:81:66:a5:21:
9c:dc:3e:ce:8f:28:f8:51:4d:dc:ce:48:2a:93:c8:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:EB:5A:29:B1:C1:13:40:98:97:D1:E3:9B:8F:A0:2E:83:25:FF
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.240.128.0/19
61.240.192.0/18
61.241.64.0/18
61.242.128.0-61.243.63.255
61.243.124.0/22
61.243.192.0/18
116.128.224.0-116.129.223.255
116.129.244.0-116.129.255.255
116.131.0.0-116.133.255.255
116.138.0.0-116.146.255.255
116.148.0.0/16
116.161.0.0-116.163.63.255
116.165.0.0/16
116.168.0.0/16
116.171.0.0/16
116.172.128.0-116.175.255.255
116.177.0.0/16
211.90.0.0-211.90.71.255
211.90.216.0-211.91.63.255
211.91.120.0-211.91.191.255
211.91.216.0-211.92.239.255
211.92.244.0/22
211.93.24.0-211.93.151.255
211.93.211.0/24
211.97.64.0-211.97.103.255
220.192.0.0-220.192.71.255
220.192.80.0-220.192.255.255
220.194.128.0/24
220.194.138.0/24
220.194.140.0/24
220.194.146.0-220.194.148.255
220.194.172.0/24
220.194.188.0/23
220.194.192.0-220.195.31.255
220.197.0.0/17
220.197.160.0-220.197.255.255
220.200.64.0/19
220.200.112.0-220.200.143.255
220.201.192.0-220.202.63.255
220.202.96.0-220.202.255.255
220.203.128.0/18
220.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:6b:e4:fe:6b:e1:b6:b1:00:54:60:62:15:4d:38:6b:a5:d5:
4b:4c:f0:31:ba:66:35:86:21:10:9f:4f:1b:ca:5f:e9:91:64:
74:01:35:48:02:b0:1c:cc:8a:64:8a:33:0e:d8:b1:8c:4e:da:
de:23:a0:62:43:d9:a0:d0:f4:0a:95:43:8e:93:40:51:26:fe:
db:64:e9:71:5d:16:cc:91:3f:c2:48:18:57:ac:6d:93:2b:2f:
9d:86:94:31:d4:1d:7a:33:b1:c4:2e:fc:e2:c9:12:ae:77:8d:
4a:1a:10:d6:6b:36:a0:3f:32:e1:c1:2d:dd:8f:50:19:e3:a9:
9b:08:d8:b7:63:79:29:1b:d2:92:8a:8c:11:6f:65:85:25:49:
cb:8e:eb:cc:c7:0e:fa:f4:5f:47:94:c1:d9:99:3c:42:74:f7:
56:b0:4a:72:7c:61:d3:9a:56:94:d5:ee:6b:9c:69:f6:af:f6:
2b:b6:06:3b:a4:00:dd:10:ac:c4:f9:df:2f:7f:46:ff:6f:76:
b7:01:3d:c3:8a:e0:b2:ec:10:3d:22:61:54:f1:cf:82:5a:23:
2e:66:93:4f:16:12:c8:78:4f:76:e0:55:8c:5e:26:d4:52:ec:
bc:7f:e9:84:f8:84:cb:01:03:4b:36:d6:34:06:43:c4:e3:37:
98:ff:a5:83
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUA7zoF3nqexLpxFW9q37xR4AHofAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4
NEZFQkFBRTAeFw0yNjA1MjkxNzU0MzJaFw0yNzA1MjgxNzU5MzJaMDMxMTAvBgNV
BAMTKDVDMURFQjVBMjlCMUMxMTM0MDk4OTdEMUUzOUI4RkEwMkU4MzI1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0yQ79DjOE6GWgGgk8utWnWKy
cnnnd13Od83RT+xwrGDMmLPplZPWumn2nYqSfJXwJwHColoaNn+bWDevRgOBe7vp
er88ONG6SVUL6opjEedRn+a+hEji82MnJ1Yu8wU6VZBbnrs7WaPpdV9dilGBa46u
5l7VH6pct6mHTCcSeCJCgmKHNW5F9Ki6czFeFQDQnJLh8W44FeF/OA3msQ6oFesn
9qfeHGwiIrXseQvOeAaiSfrlMZ01djOme9nv0xHXgv4fVHbyGrGVXczkZRschWvf
CmuARZSC0pAKc7sSOlQk/mDP3YddrkvQgWalIZzcPs6PKPhRTdzOSCqTyIM3AgMB
AAGjggN5MIIDdTAdBgNVHQ4EFgQUXB3rWimxwRNAmJfR45uPoC6DJf8wHwYDVR0j
BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1
NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzQ4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggG0BggrBgEFBQcBBwEB/wSCAaMwggGf
MIIBmwQCAAEwggGTAwQFPfCAAwQGPfDAAwQGPfFAMAwDBAc98oADBAY98wADBAI9
83wDBAY988AwDAMEBXSA4AMEBXSBwDALAwQCdIH0AwMBdIAwCgMDAHSDAwMBdIQw
CgMDAXSKAwMAdJIDAwB0lDALAwMAdKEDBAZ0owADAwB0pQMDAHSoAwMAdKswCwME
B3SsgAMDBHSgAwMAdLEwCwMDAdNaAwQD01pAMAwDBAPTWtgDBAbTWwAwDAMEA9Nb
eAMEBtNbgDAMAwQD01vYAwQE01zgAwQC01z0MAwDBAPTXRgDBAPTXZADBADTXdMw
DAMEBtNhQAMEA9NhYDALAwMG3MADBAPcwEAwCwMEBNzAUAMDANzAAwQA3MKAAwQA
3MKKAwQA3MKMMAwDBAHcwpIDBADcwpQDBADcwqwDBAHcwrwwDAMEBtzCwAMEBdzD
AAMEB9zFADALAwQF3MWgAwMB3MQDBAXcyEAwDAMEBNzIcAMEBNzIgDAMAwQG3MnA
AwQG3MoAMAsDBAXcymADAwDcygMEBtzLgAMEAtzPuDANBgkqhkiG9w0BAQsFAAOC
AQEAL2vk/mvhtrEAVGBiFU04a6XVS0zwMbpmNYYhEJ9PG8pf6ZFkdAE1SAKwHMyK
ZIozDtixjE7a3iOgYkPZoND0CpVDjpNAUSb+22TpcV0WzJE/wkgYV6xtkysvnYaU
MdQdejOxxC784skSrneNShoQ1ms2oD8y4cEt3Y9QGeOpmwjYt2N5KRvSkoqMEW9l
hSVJy47rzMcO+vRfR5TB2Zk8QnT3VrBKcnxh05pWlNXua5xp9q/2K7YGO6QA3RCs
xPnfL39G/292twE9w4rgsuwQPSJhVPHPglojLmaTTxYSyHhPduBVjF4m1FLsvH/p
hPiEywEDSzbWNAZDxOM3mP+lgw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:48:42 2026 by rpki-client