Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: nuSY6+frDMEdAAT8bzwajeQyRxhduchPsSLgOeZbGPU=
Subject key identifier: 35:35:1F:77:54:A3:90:0C:75:D7:2D:0F:A0:0F:D5:42:57:2D:8D:53
Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E
Certificate serial: 141F0B8A5CB30BC9F38A468ACF31160492EC9785
Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/AS4847.roa
Signing time: Tue 25 Aug 2026 08:45:27 +0000
ROA not before: Tue 25 Aug 2026 08:40:27 +0000
ROA not after: Tue 24 Aug 2027 08:45:27 +0000
asID: 4847
IP address blocks: 58.116.0.0/18 maxlen: 18
58.116.64.0/18 maxlen: 18
58.116.128.0/18 maxlen: 18
58.116.192.0/18 maxlen: 18
58.117.0.0/18 maxlen: 18
58.117.64.0/18 maxlen: 18
58.117.128.0/17 maxlen: 17
58.117.128.0/18 maxlen: 18
58.117.192.0/21 maxlen: 21
58.117.224.0/20 maxlen: 20
58.117.240.0/20 maxlen: 20
58.118.0.0/15 maxlen: 15
58.128.0.0/18 maxlen: 18
58.128.64.0/18 maxlen: 18
58.128.128.0/18 maxlen: 18
58.128.192.0/18 maxlen: 18
58.129.0.0/16 maxlen: 16
58.129.0.0/18 maxlen: 18
58.129.64.0/18 maxlen: 18
58.129.128.0/18 maxlen: 18
58.129.192.0/18 maxlen: 18
58.130.0.0/18 maxlen: 18
58.130.64.0/18 maxlen: 18
58.130.128.0/18 maxlen: 18
58.130.192.0/18 maxlen: 18
58.131.0.0/18 maxlen: 18
58.131.64.0/18 maxlen: 18
58.131.128.0/18 maxlen: 18
58.131.192.0/18 maxlen: 18
58.132.0.0/18 maxlen: 18
58.132.64.0/18 maxlen: 18
58.132.128.0/18 maxlen: 18
58.132.168.0/21 maxlen: 21
58.132.176.0/21 maxlen: 21
58.132.192.0/19 maxlen: 19
58.132.200.0/21 maxlen: 21
58.132.208.0/20 maxlen: 20
58.132.209.0/24 maxlen: 24
58.132.224.0/19 maxlen: 19
58.133.0.0/18 maxlen: 18
58.133.64.0/18 maxlen: 18
58.133.128.0/18 maxlen: 18
58.133.192.0/18 maxlen: 18
58.134.0.0/18 maxlen: 18
58.134.64.0/18 maxlen: 18
58.134.128.0/18 maxlen: 18
58.134.192.0/18 maxlen: 18
58.135.0.0/18 maxlen: 18
58.135.64.0/18 maxlen: 18
58.135.64.0/21 maxlen: 21
58.135.72.0/22 maxlen: 22
58.135.81.0/24 maxlen: 24
58.135.88.0/21 maxlen: 21
58.135.96.0/20 maxlen: 20
58.135.104.0/21 maxlen: 21
58.135.112.0/21 maxlen: 21
58.135.120.0/22 maxlen: 22
58.135.128.0/18 maxlen: 18
58.135.192.0/18 maxlen: 18
117.106.0.0/18 maxlen: 18
117.106.64.0/18 maxlen: 18
117.106.128.0/18 maxlen: 18
117.106.192.0/18 maxlen: 18
117.107.0.0/18 maxlen: 18
117.107.64.0/18 maxlen: 18
117.112.0.0/18 maxlen: 18
117.112.0.0/21 maxlen: 21
117.112.64.0/18 maxlen: 18
117.112.128.0/18 maxlen: 18
117.112.192.0/18 maxlen: 18
117.113.0.0/18 maxlen: 18
117.113.64.0/19 maxlen: 19
117.113.96.0/19 maxlen: 19
117.113.128.0/18 maxlen: 18
117.113.192.0/18 maxlen: 18
117.114.0.0/19 maxlen: 19
117.114.14.0/23 maxlen: 23
117.114.32.0/19 maxlen: 19
117.114.64.0/19 maxlen: 19
117.114.64.0/23 maxlen: 23
117.114.96.0/19 maxlen: 19
117.114.128.0/19 maxlen: 19
117.114.128.0/20 maxlen: 20
117.114.128.0/24 maxlen: 24
117.114.144.0/21 maxlen: 21
117.114.152.0/21 maxlen: 21
117.114.160.0/19 maxlen: 19
117.114.160.0/23 maxlen: 23
117.114.168.0/21 maxlen: 21
117.114.192.0/19 maxlen: 19
117.114.192.0/21 maxlen: 21
117.114.223.0/24 maxlen: 24
117.114.224.0/19 maxlen: 19
117.114.224.0/20 maxlen: 20
117.115.0.0/18 maxlen: 18
117.115.64.0/18 maxlen: 18
117.115.128.0/18 maxlen: 18
117.115.192.0/18 maxlen: 18
117.116.0.0/18 maxlen: 18
117.116.64.0/18 maxlen: 18
117.116.128.0/18 maxlen: 18
117.116.192.0/18 maxlen: 18
117.117.0.0/18 maxlen: 18
117.117.64.0/18 maxlen: 18
117.117.128.0/18 maxlen: 18
117.117.192.0/18 maxlen: 18
117.118.0.0/18 maxlen: 18
117.118.64.0/18 maxlen: 18
117.119.0.0/17 maxlen: 17
117.119.0.0/18 maxlen: 18
117.119.83.0/24 maxlen: 24
117.119.84.0/24 maxlen: 24
117.119.128.0/18 maxlen: 18
117.119.192.0/18 maxlen: 18
171.84.0.0/21 maxlen: 21
171.84.2.0/24 maxlen: 24
211.153.0.0/17 maxlen: 17
211.153.0.0/22 maxlen: 22
211.153.4.0/22 maxlen: 22
211.153.8.0/22 maxlen: 22
211.153.12.0/22 maxlen: 22
211.153.16.0/22 maxlen: 22
211.153.20.0/24 maxlen: 24
211.153.21.0/24 maxlen: 24
211.153.22.0/24 maxlen: 24
211.153.23.0/24 maxlen: 24
211.153.24.0/22 maxlen: 22
211.153.28.0/22 maxlen: 22
211.153.32.0/22 maxlen: 22
211.153.36.0/22 maxlen: 22
211.153.40.0/22 maxlen: 22
211.153.44.0/22 maxlen: 22
211.153.48.0/20 maxlen: 20
211.153.64.0/24 maxlen: 24
211.153.65.0/24 maxlen: 24
211.153.66.0/23 maxlen: 23
211.153.68.0/24 maxlen: 24
211.153.69.0/24 maxlen: 24
211.153.70.0/23 maxlen: 23
211.153.72.0/24 maxlen: 24
211.153.73.0/24 maxlen: 24
211.153.74.0/24 maxlen: 24
211.153.75.0/24 maxlen: 24
211.153.76.0/24 maxlen: 24
211.153.77.0/24 maxlen: 24
211.153.78.0/24 maxlen: 24
211.153.79.0/24 maxlen: 24
211.153.80.0/21 maxlen: 21
211.153.88.0/21 maxlen: 21
211.153.88.0/22 maxlen: 22
211.153.92.0/23 maxlen: 23
211.153.96.0/20 maxlen: 20
211.153.112.0/20 maxlen: 20
211.153.112.0/23 maxlen: 23
211.153.128.0/17 maxlen: 17
211.153.128.0/19 maxlen: 19
211.153.160.0/19 maxlen: 19
211.153.192.0/19 maxlen: 19
211.153.224.0/19 maxlen: 19
222.249.0.0/17 maxlen: 17
222.249.0.0/18 maxlen: 18
222.249.64.0/18 maxlen: 18
222.249.112.0/21 maxlen: 21
222.249.112.0/23 maxlen: 23
222.249.114.0/23 maxlen: 23
222.249.116.0/24 maxlen: 24
222.249.120.0/21 maxlen: 21
222.249.128.0/24 maxlen: 24
222.249.129.0/24 maxlen: 24
222.249.130.0/24 maxlen: 24
222.249.131.0/24 maxlen: 24
222.249.132.0/23 maxlen: 23
222.249.134.0/23 maxlen: 23
222.249.136.0/22 maxlen: 22
222.249.139.0/24 maxlen: 24
222.249.140.0/22 maxlen: 22
222.249.144.0/21 maxlen: 21
222.249.144.0/22 maxlen: 22
222.249.148.0/24 maxlen: 24
222.249.149.0/24 maxlen: 24
222.249.150.0/23 maxlen: 23
222.249.152.0/22 maxlen: 22
222.249.156.0/22 maxlen: 22
222.249.160.0/20 maxlen: 20
222.249.168.0/23 maxlen: 23
222.249.172.0/22 maxlen: 22
222.249.176.0/20 maxlen: 20
222.249.176.0/24 maxlen: 24
222.249.192.0/19 maxlen: 19
222.249.224.0/20 maxlen: 20
222.249.224.0/23 maxlen: 23
222.249.226.0/23 maxlen: 23
222.249.228.0/23 maxlen: 23
222.249.230.0/23 maxlen: 23
222.249.232.0/23 maxlen: 23
222.249.234.0/23 maxlen: 23
222.249.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl
rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1f:0b:8a:5c:b3:0b:c9:f3:8a:46:8a:cf:31:16:04:92:ec:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E
Validity
Not Before: Aug 25 08:40:27 2026 GMT
Not After : Aug 24 08:45:27 2027 GMT
Subject: CN=35351F7754A3900C75D72D0FA00FD542572D8D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:2f:47:14:44:69:3a:28:73:b1:50:dc:1f:
42:21:e0:fa:ac:29:cc:3c:1b:d8:ba:a0:36:45:54:
c8:3c:25:98:e7:ea:49:62:18:3e:73:fd:9d:71:54:
df:9b:7e:14:59:d8:33:25:0e:ac:29:ab:1f:92:24:
50:f0:1b:a7:c2:52:52:63:d9:08:0b:2f:2c:a1:42:
a0:07:b2:97:03:56:d5:98:aa:71:34:18:4d:84:0e:
79:3c:98:62:c9:2e:0b:74:60:41:32:43:94:f0:a5:
f5:c3:65:8e:b4:1a:6c:ff:bb:9a:65:69:f7:07:06:
7a:96:47:a3:91:cc:17:d5:7a:12:a3:42:fb:96:f4:
c7:fe:55:51:1e:e6:bd:26:4b:cb:90:fc:8b:97:d7:
ff:7e:36:be:7f:79:68:22:6f:ae:97:ec:c4:a7:42:
a9:7f:19:03:a7:39:a6:4c:01:1a:a9:40:18:8e:e3:
f4:58:00:e1:7b:40:10:6d:1b:5b:1b:dc:24:82:50:
1b:a7:ad:c0:2c:72:67:fb:c9:84:ec:5e:5f:c2:d4:
53:95:10:48:43:e4:dc:40:2c:3b:9a:0f:a7:da:19:
8f:da:4f:62:69:c2:ab:ae:eb:f3:5d:81:28:37:41:
b9:05:20:e7:9f:9d:97:8c:98:8c:35:65:6a:c6:3e:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:1F:77:54:A3:90:0C:75:D7:2D:0F:A0:0F:D5:42:57:2D:8D:53
X509v3 Authority Key Identifier:
keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.116.0.0/14
58.128.0.0/13
117.106.0.0-117.107.127.255
117.112.0.0-117.118.127.255
117.119.0.0/16
171.84.0.0/21
211.153.0.0/16
222.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:95:69:55:91:4a:9d:2a:7b:a8:ef:42:33:34:46:09:5c:26:
5b:a2:d8:f9:e5:2b:f0:92:cd:24:5a:1a:ef:6b:d6:84:15:dc:
55:85:97:df:a0:5c:83:41:51:4e:d9:33:40:eb:8f:c0:ec:40:
81:70:40:35:fe:75:4f:b4:b6:8b:70:ce:bf:36:e2:b2:e3:dc:
7d:ee:80:47:b7:0d:e9:e2:0f:39:ed:86:eb:7e:ce:54:41:ff:
84:29:1b:72:8c:9c:85:2b:c7:3a:cf:7e:d3:d6:06:22:af:ab:
a6:69:cb:9c:e5:59:c6:3c:6d:f7:03:28:31:b1:0a:48:37:7a:
59:fe:9f:e2:1c:08:91:35:d0:9a:c0:1d:9b:7a:2f:f7:62:5e:
75:19:77:3a:b6:37:98:59:71:a3:e2:2f:a7:9a:57:ba:30:a9:
94:3f:84:e8:9f:8c:35:64:16:15:69:13:75:cb:67:64:d9:21:
2b:78:c7:69:fc:40:e6:3c:a7:ec:79:52:22:74:f8:ed:42:a4:
dc:1b:be:84:d5:38:8c:e7:ff:be:19:54:e1:34:1c:c5:db:6b:
33:e5:e0:ea:a0:d7:8b:49:34:5e:ce:e8:c6:ed:19:ad:1e:2e:
9a:2f:3d:69:01:4e:63:5c:c0:c3:28:20:86:25:7c:83:09:12:
68:fe:da:c2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUFB8LilyzC8nzikaKzzEWBJLsl4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3
NTQwRTY1RTAeFw0yNjA4MjUwODQwMjdaFw0yNzA4MjQwODQ1MjdaMDMxMTAvBgNV
BAMTKDM1MzUxRjc3NTRBMzkwMEM3NUQ3MkQwRkEwMEZENTQyNTcyRDhENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNii9HFERpOihzsVDcH0Ih4Pqs
Kcw8G9i6oDZFVMg8JZjn6kliGD5z/Z1xVN+bfhRZ2DMlDqwpqx+SJFDwG6fCUlJj
2QgLLyyhQqAHspcDVtWYqnE0GE2EDnk8mGLJLgt0YEEyQ5TwpfXDZY60Gmz/u5pl
afcHBnqWR6ORzBfVehKjQvuW9Mf+VVEe5r0mS8uQ/IuX1/9+Nr5/eWgib66X7MSn
Qql/GQOnOaZMARqpQBiO4/RYAOF7QBBtG1sb3CSCUBunrcAscmf7yYTsXl/C1FOV
EEhD5NxALDuaD6faGY/aT2Jpwquu6/NdgSg3QbkFIOefnZeMmIw1ZWrGPvMvAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUNTUfd1SjkAx11y0PoA/VQlctjVMwHwYDVR0j
BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4
NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9BUzQ4NDcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMD8EAgAB
MDkDAwI6dAMDAzqAMAsDAwF1agMEB3VrADALAwMEdXADBAd1dgADAwB1dwMEA6tU
AAMDANOZAwMA3vkwDQYJKoZIhvcNAQELBQADggEBAHGVaVWRSp0qe6jvQjM0Rglc
Jlui2PnlK/CSzSRaGu9r1oQV3FWFl9+gXINBUU7ZM0Drj8DsQIFwQDX+dU+0totw
zr824rLj3H3ugEe3DeniDznthut+zlRB/4QpG3KMnIUrxzrPftPWBiKvq6Zpy5zl
WcY8bfcDKDGxCkg3eln+n+IcCJE10JrAHZt6L/diXnUZdzq2N5hZcaPiL6eaV7ow
qZQ/hOifjDVkFhVpE3XLZ2TZISt4x2n8QOY8p+x5UiJ0+O1CpNwbvoTVOIzn/74Z
VOE0HMXbazPl4Oqg14tJNF7O6MbtGa0eLpovPWkBTmNcwMMoIIYlfIMJEmj+2sI=
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:35:27 2026 by rpki-client