Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
File: AS4837.roa (raw, json)
Hash identifier: ieWfdFe1ceNYn8zduuSaQ3VEoL9qKHuG04L6JsOflO4=
Subject key identifier: 29:D2:8E:C4:76:FE:62:A0:E5:8D:04:EF:21:DD:78:A6:2D:34:02:D1
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 5B020658C70BB18478F91BDA4E14C0B707F6A172
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
Signing time: Fri 10 Jul 2026 09:08:19 +0000
ROA not before: Fri 10 Jul 2026 09:03:19 +0000
ROA not after: Fri 09 Jul 2027 09:08:19 +0000
asID: 4837
IP address blocks: 61.240.0.0/19 maxlen: 19
61.240.32.0/19 maxlen: 19
61.240.64.0/18 maxlen: 18
61.240.128.0/19 maxlen: 19
61.240.160.0/19 maxlen: 19
61.240.192.0/19 maxlen: 19
61.240.224.0/20 maxlen: 20
61.240.224.0/21 maxlen: 21
61.240.232.0/21 maxlen: 21
61.240.240.0/21 maxlen: 21
61.240.248.0/21 maxlen: 21
61.241.64.0/18 maxlen: 18
61.241.128.0/19 maxlen: 19
61.241.160.0/19 maxlen: 19
61.241.192.0/19 maxlen: 19
61.242.128.0/19 maxlen: 19
61.242.160.0/19 maxlen: 19
61.242.192.0/18 maxlen: 18
61.243.0.0/19 maxlen: 19
61.243.1.0/24 maxlen: 24
61.243.2.0/24 maxlen: 24
61.243.3.0/24 maxlen: 24
61.243.4.0/24 maxlen: 24
61.243.10.0/24 maxlen: 24
61.243.11.0/24 maxlen: 24
61.243.12.0/24 maxlen: 24
61.243.32.0/20 maxlen: 20
61.243.48.0/20 maxlen: 20
61.243.64.0/19 maxlen: 19
61.243.96.0/20 maxlen: 20
61.243.112.0/21 maxlen: 21
61.243.120.0/22 maxlen: 22
61.243.124.0/22 maxlen: 22
61.243.128.0/18 maxlen: 18
61.243.192.0/19 maxlen: 19
61.243.224.0/19 maxlen: 19
116.78.0.0/16 maxlen: 16
116.128.224.0/19 maxlen: 19
116.129.0.0/17 maxlen: 17
116.129.128.0/18 maxlen: 18
116.129.192.0/19 maxlen: 19
116.129.224.0/20 maxlen: 20
116.129.240.0/22 maxlen: 22
116.129.244.0/22 maxlen: 22
116.129.248.0/21 maxlen: 21
116.130.0.0/16 maxlen: 16
116.131.0.0/16 maxlen: 16
116.132.0.0/15 maxlen: 15
116.135.0.0/18 maxlen: 18
116.135.64.0/18 maxlen: 18
116.135.128.0/17 maxlen: 17
116.136.0.0/15 maxlen: 15
116.138.0.0/15 maxlen: 15
116.140.0.0/17 maxlen: 17
116.140.128.0/18 maxlen: 18
116.140.192.0/18 maxlen: 18
116.141.0.0/16 maxlen: 16
116.142.0.0/15 maxlen: 15
116.144.0.0/15 maxlen: 15
116.146.0.0/16 maxlen: 16
116.147.0.0/16 maxlen: 16
116.148.0.0/16 maxlen: 16
116.149.0.0/17 maxlen: 17
116.149.128.0/17 maxlen: 17
116.153.0.0/16 maxlen: 16
116.154.0.0/15 maxlen: 15
116.161.0.0/16 maxlen: 16
116.162.0.0/16 maxlen: 16
116.163.0.0/18 maxlen: 18
116.165.0.0/16 maxlen: 16
116.167.0.0/16 maxlen: 16
116.168.0.0/16 maxlen: 16
116.171.0.0/16 maxlen: 16
116.171.38.0/24 maxlen: 24
116.171.98.0/24 maxlen: 24
116.171.109.0/24 maxlen: 24
116.171.138.0/24 maxlen: 24
116.171.249.0/24 maxlen: 24
116.172.64.0/18 maxlen: 18
116.172.128.0/17 maxlen: 17
116.173.0.0/16 maxlen: 16
116.174.0.0/15 maxlen: 15
116.176.0.0/16 maxlen: 16
116.177.0.0/16 maxlen: 16
116.178.0.0/16 maxlen: 16
116.179.0.0/16 maxlen: 16
116.180.0.0/16 maxlen: 16
211.90.0.0/18 maxlen: 18
211.90.64.0/21 maxlen: 21
211.90.72.0/21 maxlen: 21
211.90.80.0/21 maxlen: 21
211.90.88.0/21 maxlen: 21
211.90.96.0/19 maxlen: 19
211.90.128.0/18 maxlen: 18
211.90.192.0/20 maxlen: 20
211.90.216.0/21 maxlen: 21
211.90.224.0/19 maxlen: 19
211.91.0.0/18 maxlen: 18
211.91.64.0/20 maxlen: 20
211.91.80.0/20 maxlen: 20
211.91.96.0/20 maxlen: 20
211.91.120.0/21 maxlen: 21
211.91.128.0/19 maxlen: 19
211.91.160.0/20 maxlen: 20
211.91.176.0/21 maxlen: 21
211.91.184.0/21 maxlen: 21
211.91.216.0/21 maxlen: 21
211.91.224.0/19 maxlen: 19
211.91.224.0/20 maxlen: 20
211.91.240.0/20 maxlen: 20
211.92.0.0/17 maxlen: 17
211.92.128.0/21 maxlen: 21
211.92.136.0/21 maxlen: 21
211.92.144.0/20 maxlen: 20
211.92.160.0/20 maxlen: 20
211.92.176.0/20 maxlen: 20
211.92.192.0/19 maxlen: 19
211.92.224.0/20 maxlen: 20
211.92.244.0/22 maxlen: 22
211.93.0.0/21 maxlen: 21
211.93.8.0/21 maxlen: 21
211.93.16.0/21 maxlen: 21
211.93.18.0/23 maxlen: 23
211.93.24.0/21 maxlen: 21
211.93.32.0/19 maxlen: 19
211.93.64.0/18 maxlen: 18
211.93.128.0/20 maxlen: 20
211.93.144.0/21 maxlen: 21
211.93.164.0/22 maxlen: 22
211.93.168.0/21 maxlen: 21
211.93.176.0/20 maxlen: 20
211.93.192.0/21 maxlen: 21
211.93.200.0/23 maxlen: 23
211.93.204.0/22 maxlen: 22
211.93.211.0/24 maxlen: 24
211.93.212.0/23 maxlen: 23
211.93.224.0/19 maxlen: 19
211.94.37.0/24 maxlen: 24
211.94.192.0/18 maxlen: 18
211.97.64.0/19 maxlen: 19
211.97.96.0/21 maxlen: 21
211.97.104.0/21 maxlen: 21
211.97.112.0/20 maxlen: 20
211.97.128.0/19 maxlen: 19
211.97.160.0/21 maxlen: 21
211.97.168.0/21 maxlen: 21
211.97.176.0/20 maxlen: 20
211.97.192.0/18 maxlen: 18
220.192.0.0/18 maxlen: 18
220.192.64.0/21 maxlen: 21
220.192.80.0/20 maxlen: 20
220.192.96.0/19 maxlen: 19
220.192.128.0/19 maxlen: 19
220.192.160.0/20 maxlen: 20
220.192.176.0/21 maxlen: 21
220.192.184.0/22 maxlen: 22
220.192.188.0/22 maxlen: 22
220.192.192.0/20 maxlen: 20
220.192.208.0/21 maxlen: 21
220.192.216.0/21 maxlen: 21
220.192.224.0/19 maxlen: 19
220.193.0.0/17 maxlen: 17
220.194.64.0/18 maxlen: 18
220.194.128.0/18 maxlen: 18
220.194.128.0/24 maxlen: 24
220.194.138.0/24 maxlen: 24
220.194.140.0/24 maxlen: 24
220.194.146.0/24 maxlen: 24
220.194.147.0/24 maxlen: 24
220.194.148.0/24 maxlen: 24
220.194.172.0/24 maxlen: 24
220.194.188.0/24 maxlen: 24
220.194.189.0/24 maxlen: 24
220.194.192.0/18 maxlen: 18
220.195.0.0/19 maxlen: 19
220.195.32.0/19 maxlen: 19
220.195.64.0/18 maxlen: 18
220.195.128.0/19 maxlen: 19
220.196.47.0/24 maxlen: 24
220.197.0.0/17 maxlen: 17
220.197.77.0/24 maxlen: 24
220.197.160.0/20 maxlen: 20
220.197.169.0/24 maxlen: 24
220.197.176.0/20 maxlen: 20
220.197.192.0/19 maxlen: 19
220.197.224.0/21 maxlen: 21
220.197.232.0/21 maxlen: 21
220.197.240.0/20 maxlen: 20
220.200.0.0/18 maxlen: 18
220.200.64.0/19 maxlen: 19
220.200.96.0/20 maxlen: 20
220.200.112.0/20 maxlen: 20
220.200.128.0/20 maxlen: 20
220.200.148.0/22 maxlen: 22
220.200.152.0/21 maxlen: 21
220.200.160.0/19 maxlen: 19
220.200.192.0/18 maxlen: 18
220.201.0.0/17 maxlen: 17
220.201.128.0/18 maxlen: 18
220.201.192.0/18 maxlen: 18
220.202.0.0/18 maxlen: 18
220.202.64.0/19 maxlen: 19
220.202.96.0/19 maxlen: 19
220.202.128.0/17 maxlen: 17
220.202.128.0/19 maxlen: 19
220.202.160.0/19 maxlen: 19
220.202.192.0/18 maxlen: 18
220.203.128.0/18 maxlen: 18
220.207.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:02:06:58:c7:0b:b1:84:78:f9:1b:da:4e:14:c0:b7:07:f6:a1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Jul 10 09:03:19 2026 GMT
Not After : Jul 9 09:08:19 2027 GMT
Subject: CN=29D28EC476FE62A0E58D04EF21DD78A62D3402D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:d9:85:83:dd:3f:c2:4b:fe:ba:f8:b6:38:
25:23:8a:58:96:9c:8f:18:dc:55:c1:1a:ce:68:3f:
92:ae:c7:88:95:95:48:6c:4d:d1:60:9c:73:e2:9a:
f4:f3:12:c6:e2:49:22:af:ee:71:c6:76:c9:31:0c:
ca:96:4b:0e:20:76:3e:ed:ba:58:16:1d:72:dd:57:
22:3a:c4:f7:df:82:53:2a:4f:36:fe:6a:01:e2:7c:
ea:bb:cf:bf:4e:eb:2a:3e:38:7a:59:0b:65:bc:e1:
ea:59:89:ff:b3:28:e8:9b:2b:37:95:bd:e4:d0:ad:
db:a8:c4:bb:92:b1:97:9a:09:dd:c0:ff:93:59:92:
39:58:4f:d3:66:ab:f8:c1:25:72:15:1e:93:fd:c9:
25:76:e0:18:cc:a7:c4:4c:3a:7d:32:5f:5d:39:e5:
23:90:92:32:93:33:ac:38:07:6b:2a:fd:6b:c7:36:
00:41:39:c2:b0:8f:f6:2c:9b:ed:b7:92:fc:c3:1b:
91:da:57:30:c7:be:dd:0a:26:64:2f:2a:e2:84:7a:
89:d2:2b:93:5d:65:c9:31:ac:ad:b2:3c:93:d2:de:
d4:25:80:5a:b9:e6:80:e5:fb:d2:00:1a:4c:1f:bb:
e1:52:cc:0b:e7:9d:b2:0b:a9:98:3b:ec:90:30:88:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:8E:C4:76:FE:62:A0:E5:8D:04:EF:21:DD:78:A6:2D:34:02:D1
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.240.0.0/16
61.241.64.0-61.241.223.255
61.242.128.0-61.243.255.255
116.78.0.0/16
116.128.224.0-116.133.255.255
116.135.0.0-116.149.255.255
116.153.0.0-116.155.255.255
116.161.0.0-116.163.63.255
116.165.0.0/16
116.167.0.0-116.168.255.255
116.171.0.0/16
116.172.64.0-116.180.255.255
211.90.0.0-211.90.207.255
211.90.216.0-211.91.111.255
211.91.120.0-211.91.191.255
211.91.216.0-211.92.239.255
211.92.244.0/22
211.93.0.0-211.93.151.255
211.93.164.0-211.93.201.255
211.93.204.0/22
211.93.211.0-211.93.213.255
211.93.224.0/19
211.94.37.0/24
211.94.192.0/18
211.97.64.0-211.97.255.255
220.192.0.0-220.192.71.255
220.192.80.0-220.193.127.255
220.194.64.0-220.195.159.255
220.196.47.0/24
220.197.0.0/17
220.197.160.0-220.197.255.255
220.200.0.0-220.200.143.255
220.200.148.0-220.202.255.255
220.203.128.0/18
220.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fd:1e:33:3b:12:81:52:fe:3b:e9:52:a8:7e:32:61:81:c7:
1d:7f:ae:23:39:8b:32:7d:a1:80:89:49:b3:5b:78:7a:20:bb:
e5:2d:f9:da:34:0a:43:f2:ee:83:96:bc:cc:b4:3a:a1:75:ee:
e9:9c:84:28:7a:74:71:51:d4:b7:a8:c7:48:5a:d0:fb:eb:4e:
a3:47:9c:a4:d6:2b:53:e5:69:e9:50:8a:f6:2b:d0:59:88:cd:
b7:e0:af:bc:60:48:ab:d9:e8:53:02:29:b5:bf:38:d6:af:3b:
4f:ea:0a:79:36:47:3f:9c:73:e6:8b:53:8d:f0:a2:3f:20:6f:
d1:f1:71:ea:7a:5b:40:ca:03:c2:a2:74:19:c2:24:e4:ff:87:
bb:06:6d:ec:b9:12:59:ba:10:ad:09:31:c2:9a:b6:90:5a:64:
12:e4:49:dd:65:72:b1:ad:be:d2:5e:e0:bc:68:32:94:4b:40:
45:23:a6:6d:fc:f8:22:f5:11:51:b8:c7:16:7c:08:7d:6f:41:
47:21:4e:1b:56:3a:44:75:2f:f3:9a:3e:a2:02:40:61:07:80:
f1:6d:bc:3f:37:c4:8f:2c:31:94:ec:c5:91:3e:d9:34:dc:2d:
df:84:fd:de:3a:d3:02:53:d3:40:2b:ea:5f:79:46:fa:07:ae:
bd:4e:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:59:12 2026 by rpki-client