Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4808.roa
File: AS4808.roa (raw, json)
Hash identifier: TPs4K1IwuFBCZlPJPwsrxBKlLQX+ki67IEXGfZAOXrc=
Subject key identifier: A4:6A:EB:26:E3:DE:52:53:32:2C:35:DC:76:74:4B:D9:ED:AE:13:DA
Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial: 3F892C427C6708C2B5E3E87A793FA4230205C5E0
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4808.roa
Signing time: Sat 30 May 2026 16:01:06 +0000
ROA not before: Sat 30 May 2026 15:56:06 +0000
ROA not after: Sat 29 May 2027 16:01:06 +0000
asID: 4808
IP address blocks: 113.209.129.0/24 maxlen: 24
113.209.130.0/24 maxlen: 24
113.209.194.0/24 maxlen: 24
113.209.195.0/24 maxlen: 24
113.209.196.0/24 maxlen: 24
113.209.197.0/24 maxlen: 24
117.122.198.0/24 maxlen: 24
117.122.208.0/24 maxlen: 24
117.122.209.0/24 maxlen: 24
117.122.211.0/24 maxlen: 24
117.122.212.0/24 maxlen: 24
117.122.213.0/24 maxlen: 24
117.122.214.0/24 maxlen: 24
117.122.218.0/24 maxlen: 24
117.122.219.0/24 maxlen: 24
117.122.223.0/24 maxlen: 24
117.122.224.0/24 maxlen: 24
117.122.225.0/24 maxlen: 24
117.122.226.0/24 maxlen: 24
117.122.240.0/24 maxlen: 24
117.122.241.0/24 maxlen: 24
125.208.7.0/24 maxlen: 24
125.208.8.0/24 maxlen: 24
125.208.12.0/24 maxlen: 24
125.208.24.0/24 maxlen: 24
125.208.26.0/24 maxlen: 24
211.154.0.0/24 maxlen: 24
211.154.5.0/24 maxlen: 24
211.154.10.0/24 maxlen: 24
219.232.96.0/24 maxlen: 24
219.232.105.0/24 maxlen: 24
219.232.108.0/24 maxlen: 24
219.232.112.0/24 maxlen: 24
219.232.114.0/24 maxlen: 24
219.232.115.0/24 maxlen: 24
219.232.118.0/24 maxlen: 24
219.232.120.0/24 maxlen: 24
219.232.123.0/24 maxlen: 24
219.232.124.0/24 maxlen: 24
219.232.125.0/24 maxlen: 24
219.232.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:89:2c:42:7c:67:08:c2:b5:e3:e8:7a:79:3f:a4:23:02:05:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Validity
Not Before: May 30 15:56:06 2026 GMT
Not After : May 29 16:01:06 2027 GMT
Subject: CN=A46AEB26E3DE5253322C35DC76744BD9EDAE13DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:12:53:c3:82:5f:c5:0a:c0:9b:3d:e4:2b:
f8:95:9c:0c:f9:91:a5:63:14:21:4b:c1:77:96:4a:
ac:e6:4a:74:b4:39:5c:71:6c:09:d5:19:fb:63:e0:
ff:5e:76:d0:b0:33:79:a8:8d:21:e5:9e:9e:f0:a0:
b0:39:3a:8c:ad:0d:70:ab:2e:cf:22:61:2e:e1:4a:
db:45:55:b1:f1:e1:14:8e:42:a2:b8:0c:17:be:ff:
5f:94:b6:fd:0b:d2:53:fe:fc:24:bf:08:53:09:7d:
af:07:41:5f:7e:05:58:b3:98:be:56:f8:f7:b4:77:
76:50:0d:4e:50:0a:e0:df:24:bf:ca:77:5c:c2:d8:
c2:b5:27:b7:ab:87:6f:96:fc:3a:9a:fc:2d:c1:ad:
c6:07:df:e0:e7:33:44:8d:25:90:46:31:9f:35:74:
98:f6:43:bf:4d:7c:33:e5:43:bb:79:60:02:7f:20:
d0:1d:4f:01:17:2f:67:f9:2f:4d:51:22:9f:62:5e:
30:f4:bf:ae:34:d8:0f:69:db:8c:91:51:6b:b4:4a:
32:d6:17:07:d9:df:81:2b:8e:4f:c1:d9:cf:d6:32:
ea:30:02:8d:f0:14:9d:bc:38:b4:16:08:54:c5:ca:
d8:9c:4f:ae:a8:f6:d0:1b:fc:46:22:0c:a6:3a:a8:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:EB:26:E3:DE:52:53:32:2C:35:DC:76:74:4B:D9:ED:AE:13:DA
X509v3 Authority Key Identifier:
keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.209.129.0-113.209.130.255
113.209.194.0-113.209.197.255
117.122.198.0/24
117.122.208.0/23
117.122.211.0-117.122.214.255
117.122.218.0/23
117.122.223.0-117.122.226.255
117.122.240.0/23
125.208.7.0-125.208.8.255
125.208.12.0/24
125.208.24.0/24
125.208.26.0/24
211.154.0.0/24
211.154.5.0/24
211.154.10.0/24
219.232.96.0/24
219.232.105.0/24
219.232.108.0/24
219.232.112.0/24
219.232.114.0/23
219.232.118.0/24
219.232.120.0/24
219.232.123.0-219.232.126.255
Signature Algorithm: sha256WithRSAEncryption
d1:f1:52:d7:ed:77:83:2e:6a:6c:54:37:6b:9f:bd:e1:ca:bf:
59:cf:1c:0b:a4:00:0b:02:41:13:b8:e0:ad:93:0c:c7:0a:c8:
96:b8:18:2f:6c:15:5d:ea:e7:0a:37:a1:5a:e3:76:de:5a:c2:
54:87:2e:e2:9f:14:8e:29:f8:32:aa:34:d3:76:da:2b:18:61:
08:99:43:01:73:71:9b:ee:fe:6a:50:b2:8a:83:5a:23:8d:79:
79:6c:fb:44:52:9a:a0:85:76:b0:57:69:ed:4d:c2:08:72:ce:
41:fe:be:dc:9b:0d:ec:9f:83:90:7d:9e:81:bc:22:a9:43:10:
96:72:ca:bf:ab:44:06:e3:41:80:47:dc:c6:6e:28:da:4d:b6:
ca:d9:66:3f:44:75:41:eb:d6:15:cd:4d:7a:2c:39:d4:04:d2:
6f:13:2d:43:12:4d:1f:d3:6f:8a:09:14:2b:26:6f:a3:a0:99:
b6:37:ea:36:cf:dd:d1:a5:1c:69:8e:d5:af:41:76:d7:96:a0:
7b:7b:1d:36:7d:47:3e:39:d3:83:f5:b3:c4:29:5c:42:14:b6:
d3:3f:5c:0e:71:a7:d1:cc:74:a4:4f:93:db:c3:09:1b:0a:c1:
98:a6:08:17:87:a4:83:16:16:40:f8:0b:59:84:48:27:e0:4b:
27:54:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client