Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS4811.roa
File: AS4811.roa (raw, json)
Hash identifier: 32TasS6+fouFzGeDGV29KDnDHGS2EZZkaSUqH0j9Hs4=
Subject key identifier: C3:F9:95:33:CA:4B:E0:32:D7:99:AD:F2:56:F2:72:B1:88:FA:62:3D
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 38095BA02564370BBF348480B432BB2C28594425
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS4811.roa
Signing time: Mon 29 Jun 2026 15:15:13 +0000
ROA not before: Mon 29 Jun 2026 15:10:13 +0000
ROA not after: Mon 28 Jun 2027 15:15:13 +0000
asID: 4811
IP address blocks: 103.200.136.0/22 maxlen: 22
103.200.140.0/22 maxlen: 22
103.200.144.0/22 maxlen: 22
103.200.148.0/22 maxlen: 22
103.202.0.0/22 maxlen: 22
103.202.4.0/22 maxlen: 22
103.202.8.0/22 maxlen: 22
103.202.12.0/22 maxlen: 22
103.202.16.0/22 maxlen: 22
103.202.20.0/22 maxlen: 22
103.202.24.0/22 maxlen: 22
103.202.28.0/22 maxlen: 22
103.202.32.0/22 maxlen: 22
103.202.36.0/22 maxlen: 22
103.202.40.0/22 maxlen: 22
103.202.44.0/22 maxlen: 22
103.202.92.0/22 maxlen: 22
103.202.96.0/22 maxlen: 22
103.202.100.0/22 maxlen: 22
103.202.104.0/22 maxlen: 22
103.202.108.0/22 maxlen: 22
103.202.112.0/22 maxlen: 22
103.202.120.0/22 maxlen: 22
103.202.124.0/22 maxlen: 22
103.202.128.0/22 maxlen: 22
103.202.132.0/22 maxlen: 22
103.202.136.0/22 maxlen: 22
103.202.140.0/22 maxlen: 22
103.202.144.0/22 maxlen: 22
202.72.112.0/22 maxlen: 22
202.72.116.0/22 maxlen: 22
202.72.120.0/22 maxlen: 22
202.72.124.0/22 maxlen: 22
202.73.240.0/22 maxlen: 22
202.73.244.0/22 maxlen: 22
202.73.248.0/22 maxlen: 22
202.73.252.0/22 maxlen: 22
202.81.176.0/22 maxlen: 22
202.81.180.0/22 maxlen: 22
202.81.184.0/22 maxlen: 22
202.81.188.0/22 maxlen: 22
202.90.96.0/22 maxlen: 22
202.90.100.0/22 maxlen: 22
202.90.104.0/22 maxlen: 22
202.90.108.0/22 maxlen: 22
203.76.208.0/22 maxlen: 22
203.76.212.0/22 maxlen: 22
203.76.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:09:5b:a0:25:64:37:0b:bf:34:84:80:b4:32:bb:2c:28:59:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 29 15:10:13 2026 GMT
Not After : Jun 28 15:15:13 2027 GMT
Subject: CN=C3F99533CA4BE032D799ADF256F272B188FA623D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:1e:b0:2f:d1:9e:3d:a8:df:c9:d0:be:76:
28:8d:9d:85:7d:23:c3:c4:2e:38:34:3b:c5:d8:b2:
05:5d:3b:b4:91:38:f5:4d:20:e8:99:2e:dd:bf:df:
27:ca:7e:33:ef:8f:ba:5e:cc:ef:f9:80:a3:9b:0a:
5b:96:21:cc:2a:1f:66:4f:12:a2:a9:08:8b:ea:7e:
8a:a3:9c:72:05:1a:5a:81:8b:96:e6:c0:e6:2c:44:
cc:b8:00:d4:8f:0b:62:74:99:7b:68:8a:3e:c9:06:
ad:b1:4e:3c:13:0e:0c:8c:bc:18:e6:38:b1:35:a0:
f7:20:6c:ad:ad:c7:82:10:8a:cd:67:3a:9f:6f:9a:
da:16:3e:9d:33:2f:5d:b9:df:70:0e:a7:88:45:37:
aa:1b:ed:a1:9c:a6:bc:49:7c:37:02:9d:62:98:b1:
34:45:03:0a:81:0a:e0:45:66:b1:28:18:a1:76:20:
b0:2c:f5:c8:e5:db:3a:28:d6:a3:a9:72:d6:81:03:
5b:58:85:69:47:c5:99:77:56:40:11:26:a9:a1:95:
9a:3c:79:fb:a3:59:e8:ae:f1:32:89:99:08:6b:e5:
db:68:31:ca:6d:ae:c0:92:19:a7:fb:01:bd:d9:64:
2b:71:99:13:03:83:75:f6:a1:e4:ed:a3:a5:0c:ff:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:95:33:CA:4B:E0:32:D7:99:AD:F2:56:F2:72:B1:88:FA:62:3D
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS4811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.200.136.0-103.200.151.255
103.202.0.0-103.202.47.255
103.202.92.0-103.202.115.255
103.202.120.0-103.202.147.255
202.72.112.0/20
202.73.240.0/20
202.81.176.0/20
202.90.96.0/20
203.76.208.0-203.76.219.255
Signature Algorithm: sha256WithRSAEncryption
30:08:56:07:7e:09:57:65:46:76:95:98:6d:fb:06:8c:b6:da:
c7:b7:7c:7b:ae:b5:3b:cd:07:83:47:be:4e:ba:70:44:c2:97:
ee:26:98:3d:b0:d0:ac:e3:9c:a4:67:8a:32:20:06:03:6f:63:
81:00:00:23:97:73:54:da:34:78:0d:2f:aa:95:5b:bf:5c:53:
c1:12:df:7b:e3:fd:a3:4c:79:41:97:69:a4:4d:f8:c2:66:5c:
40:f2:8f:04:cd:e3:8b:46:05:e1:89:5e:38:a2:8c:dc:97:27:
11:81:97:53:b3:a8:49:ca:69:3d:d5:c9:bf:96:19:64:17:a5:
21:a3:ab:4c:dd:8e:e0:8f:2e:99:d7:45:43:8c:89:d8:01:09:
20:3c:e5:78:cd:b7:4a:79:25:f9:7f:43:55:1d:2e:1d:06:54:
dd:05:ee:80:22:16:06:ef:7f:b8:6a:85:fb:95:6c:7e:7a:bb:
f9:f4:27:28:5c:85:22:46:df:bd:86:ba:99:97:c1:2c:67:d9:
c7:e9:6a:c8:f8:5a:96:3e:70:fd:80:56:74:f7:73:37:31:03:
f7:15:a4:c5:d4:f7:f1:fb:bd:26:54:15:b0:06:53:af:37:2c:
53:cf:15:41:7e:cf:ac:a9:45:67:67:e1:c7:bb:c5:9a:91:aa:
1e:7e:e5:7a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUOAlboCVkNwu/NISAtDK7LChZRCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MjkxNTEwMTNaFw0yNzA2MjgxNTE1MTNaMDMxMTAvBgNV
BAMTKEMzRjk5NTMzQ0E0QkUwMzJENzk5QURGMjU2RjI3MkIxODhGQTYyM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAx6wL9GePajfydC+diiNnYV9
I8PELjg0O8XYsgVdO7SROPVNIOiZLt2/3yfKfjPvj7pezO/5gKObCluWIcwqH2ZP
EqKpCIvqfoqjnHIFGlqBi5bmwOYsRMy4ANSPC2J0mXtoij7JBq2xTjwTDgyMvBjm
OLE1oPcgbK2tx4IQis1nOp9vmtoWPp0zL12533AOp4hFN6ob7aGcprxJfDcCnWKY
sTRFAwqBCuBFZrEoGKF2ILAs9cjl2zoo1qOpctaBA1tYhWlHxZl3VkARJqmhlZo8
efujWeiu8TKJmQhr5dtoMcptrsCSGaf7Ab3ZZCtxmRMDg3X2oeTto6UM/3wTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUw/mVM8pL4DLXma3yVvJysYj6Yj0wHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC9BUzQ4MTEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwdgYIKwYBBQUHAQcBAf8EZzBlMGMEAgAB
MF0wDAMEA2fIiAMEA2fIkDALAwMBZ8oDBARnyiAwDAMEAmfKXAMEAmfKcDAMAwQD
Z8p4AwQCZ8qQAwQEykhwAwQEyknwAwQEylGwAwQEylpgMAwDBATLTNADBALLTNgw
DQYJKoZIhvcNAQELBQADggEBADAIVgd+CVdlRnaVmG37Boy22se3fHuutTvNB4NH
vk66cETCl+4mmD2w0KzjnKRnijIgBgNvY4EAACOXc1TaNHgNL6qVW79cU8ES33vj
/aNMeUGXaaRN+MJmXEDyjwTN44tGBeGJXjiijNyXJxGBl1OzqEnKaT3Vyb+WGWQX
pSGjq0zdjuCPLpnXRUOMidgBCSA85XjNt0p5Jfl/Q1UdLh0GVN0F7oAiFgbvf7hq
hfuVbH56u/n0JyhchSJG372GupmXwSxn2cfpasj4WpY+cP2AVnT3czcxA/cVpMXU
9/H7vSZUFbAGU683LFPPFUF+z6ypRWdn4ce7xZqRqh5+5Xo=
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:53:58 2026 by rpki-client