Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=
Subject key identifier: 40:82:8B:95:2D:36:EE:4E:80:7B:9D:3A:B3:BA:60:9C:4F:A2:D5:FE
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 3DEBAF73808CF5BD24A1000107E92C2CC0365E42
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9808.roa
Signing time: Thu 14 May 2026 02:04:37 +0000
ROA not before: Thu 14 May 2026 01:59:37 +0000
ROA not after: Thu 13 May 2027 02:04:37 +0000
asID: 9808
IP address blocks: 61.234.152.0/24 maxlen: 24
110.203.0.0/24 maxlen: 24
110.203.1.0/24 maxlen: 24
123.88.0.0/24 maxlen: 24
123.88.2.0/24 maxlen: 24
123.88.5.0/24 maxlen: 24
123.88.16.0/23 maxlen: 23
123.88.22.0/23 maxlen: 23
123.88.24.0/21 maxlen: 21
123.88.30.0/24 maxlen: 24
123.88.32.0/21 maxlen: 21
123.88.32.0/24 maxlen: 24
123.88.33.0/24 maxlen: 24
123.88.40.0/23 maxlen: 23
123.88.42.0/24 maxlen: 24
123.88.43.0/24 maxlen: 24
123.88.44.0/22 maxlen: 22
123.88.48.0/22 maxlen: 22
123.88.52.0/23 maxlen: 23
123.88.60.0/22 maxlen: 22
123.88.64.0/24 maxlen: 24
123.88.70.0/23 maxlen: 23
123.88.72.0/22 maxlen: 22
123.88.76.0/24 maxlen: 24
123.88.81.0/24 maxlen: 24
123.88.82.0/23 maxlen: 23
123.88.84.0/24 maxlen: 24
123.88.99.0/24 maxlen: 24
123.88.100.0/23 maxlen: 23
123.88.102.0/24 maxlen: 24
123.88.106.0/23 maxlen: 23
123.88.108.0/24 maxlen: 24
123.88.139.0/24 maxlen: 24
123.88.140.0/23 maxlen: 23
123.88.142.0/23 maxlen: 23
123.88.144.0/23 maxlen: 23
123.88.146.0/24 maxlen: 24
123.88.147.0/24 maxlen: 24
123.88.152.0/22 maxlen: 22
123.88.156.0/23 maxlen: 23
123.88.158.0/24 maxlen: 24
123.88.159.0/24 maxlen: 24
123.88.160.0/23 maxlen: 23
123.88.163.0/24 maxlen: 24
123.88.164.0/24 maxlen: 24
123.88.165.0/24 maxlen: 24
123.88.166.0/23 maxlen: 23
123.88.168.0/22 maxlen: 22
222.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 20:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:eb:af:73:80:8c:f5:bd:24:a1:00:01:07:e9:2c:2c:c0:36:5e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: May 14 01:59:37 2026 GMT
Not After : May 13 02:04:37 2027 GMT
Subject: CN=40828B952D36EE4E807B9D3AB3BA609C4FA2D5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:57:c1:1d:66:ee:7c:39:da:8a:6a:8b:e5:
20:f4:a7:bd:de:46:42:0e:3a:8d:6b:a9:72:f4:fd:
ac:fc:c4:86:74:c5:24:49:96:f9:60:ec:13:52:5d:
10:72:76:61:92:72:cd:61:67:71:37:4e:a7:ba:25:
32:dd:d1:5a:88:62:71:7e:ad:45:79:08:da:d4:ec:
c9:ab:27:9c:09:4f:13:c4:ce:17:99:af:4f:72:99:
cb:8c:3a:27:26:df:f6:bd:2c:f0:ab:57:17:2a:7f:
31:53:a3:ec:8f:1b:2c:0e:6e:bf:d2:1e:2c:1e:ca:
6a:b3:a4:db:dd:d4:c9:c9:8c:1e:f3:2a:b3:0f:df:
85:d6:bb:11:9a:5b:3b:50:bd:3c:fb:fc:aa:bd:89:
86:a5:90:d8:7a:94:a6:fa:b8:c0:eb:60:78:11:62:
07:11:a9:f7:f4:cb:1a:2c:a9:90:67:f0:2d:5e:f7:
d2:cc:f6:d0:70:b4:08:22:c6:9a:7b:05:04:38:b0:
d7:9c:de:4f:da:04:ae:36:5e:08:a5:82:17:df:92:
d7:c6:28:0b:4b:ca:33:68:c6:e3:d9:c6:00:1f:43:
cc:a3:0e:fa:d6:a0:9a:01:1e:54:16:4e:f9:4c:00:
f5:77:7d:84:b4:b1:37:e9:cb:b4:14:93:f5:1e:cb:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:8B:95:2D:36:EE:4E:80:7B:9D:3A:B3:BA:60:9C:4F:A2:D5:FE
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.234.152.0/24
110.203.0.0/23
123.88.0.0/24
123.88.2.0/24
123.88.5.0/24
123.88.16.0/23
123.88.22.0-123.88.53.255
123.88.60.0-123.88.64.255
123.88.70.0-123.88.76.255
123.88.81.0-123.88.84.255
123.88.99.0-123.88.102.255
123.88.106.0-123.88.108.255
123.88.139.0-123.88.147.255
123.88.152.0-123.88.161.255
123.88.163.0-123.88.171.255
222.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3f:a1:71:6e:5b:37:50:4a:31:e3:9e:26:11:66:4c:95:4c:
52:f4:87:64:a0:44:9d:fd:ba:40:15:ee:f5:5e:7a:ce:f6:b7:
12:49:46:0b:35:a2:7d:94:36:81:0f:65:cf:e9:cc:1f:4c:f8:
3c:45:bf:79:45:e5:da:61:67:33:16:b3:c0:fd:9d:1a:96:68:
1e:65:eb:bd:af:8c:4e:2c:f9:dc:e7:a3:7d:1d:e5:d1:bf:6e:
21:e2:02:b1:3d:88:a3:7a:0c:ce:e2:29:42:f1:83:d8:6d:1d:
b0:8a:44:27:ca:55:86:55:6e:47:ba:94:29:5b:ec:ae:0b:4f:
7e:da:69:26:fb:b7:17:ed:d3:a9:f8:4a:29:31:3a:8d:f0:a4:
36:3e:6b:bc:4e:56:6d:e0:ad:ed:ea:ad:4d:28:01:f7:9d:5a:
54:7b:af:ff:70:6e:ba:85:87:95:39:6e:3c:06:ff:39:ea:97:
21:88:23:35:91:04:39:03:6c:08:16:76:25:79:b2:2c:f1:bb:
3b:22:c8:69:f2:19:b2:00:89:37:2b:2c:1f:8e:be:d2:2b:f3:
7a:42:95:e5:f1:85:ca:e0:43:01:77:e2:9b:33:79:bd:ca:e3:
d0:05:a5:25:fb:25:15:fe:55:47:25:cb:2c:9c:50:0c:11:38:
71:f3:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:20 2026 by rpki-client