Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: 43JbO/RY/CXlAZ6gtxSZl4suSooMAGX4ZhYCBk21is8=
Subject key identifier: 77:24:47:68:1D:D7:1C:E4:02:30:78:8C:48:46:16:CF:2A:93:E4:F6
Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial: 4E77312138731D401923A5E512962B7E0C76F25F
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4847.roa
Signing time: Tue 01 Sep 2026 16:47:05 +0000
ROA not before: Tue 01 Sep 2026 16:42:05 +0000
ROA not after: Tue 31 Aug 2027 16:47:05 +0000
asID: 4847
IP address blocks: 113.209.128.0/17 maxlen: 17
113.209.129.0/24 maxlen: 24
113.209.130.0/24 maxlen: 24
113.209.136.0/24 maxlen: 24
113.209.194.0/23 maxlen: 23
113.209.194.0/24 maxlen: 24
113.209.195.0/24 maxlen: 24
113.209.196.0/22 maxlen: 22
113.209.196.0/23 maxlen: 23
113.209.196.0/24 maxlen: 24
113.209.197.0/24 maxlen: 24
117.122.192.0/18 maxlen: 18
117.122.192.0/24 maxlen: 24
117.122.198.0/24 maxlen: 24
117.122.199.0/24 maxlen: 24
117.122.203.0/24 maxlen: 24
117.122.208.0/23 maxlen: 23
117.122.208.0/24 maxlen: 24
117.122.209.0/24 maxlen: 24
117.122.211.0/24 maxlen: 24
117.122.212.0/23 maxlen: 23
117.122.212.0/24 maxlen: 24
117.122.213.0/24 maxlen: 24
117.122.214.0/24 maxlen: 24
117.122.216.0/24 maxlen: 24
117.122.218.0/23 maxlen: 23
117.122.218.0/24 maxlen: 24
117.122.219.0/24 maxlen: 24
117.122.220.0/23 maxlen: 23
117.122.222.0/23 maxlen: 23
117.122.223.0/24 maxlen: 24
117.122.224.0/23 maxlen: 23
117.122.224.0/24 maxlen: 24
117.122.225.0/24 maxlen: 24
117.122.226.0/23 maxlen: 23
117.122.226.0/24 maxlen: 24
117.122.228.0/22 maxlen: 22
117.122.232.0/21 maxlen: 21
117.122.240.0/20 maxlen: 20
117.122.240.0/23 maxlen: 23
117.122.240.0/24 maxlen: 24
117.122.241.0/24 maxlen: 24
117.122.242.0/24 maxlen: 24
125.208.0.0/20 maxlen: 20
125.208.0.0/24 maxlen: 24
125.208.1.0/24 maxlen: 24
125.208.2.0/24 maxlen: 24
125.208.3.0/24 maxlen: 24
125.208.4.0/24 maxlen: 24
125.208.5.0/24 maxlen: 24
125.208.6.0/24 maxlen: 24
125.208.7.0/24 maxlen: 24
125.208.8.0/24 maxlen: 24
125.208.9.0/24 maxlen: 24
125.208.10.0/24 maxlen: 24
125.208.11.0/24 maxlen: 24
125.208.12.0/22 maxlen: 22
125.208.12.0/24 maxlen: 24
125.208.14.0/24 maxlen: 24
125.208.15.0/24 maxlen: 24
125.208.24.0/21 maxlen: 21
125.208.24.0/24 maxlen: 24
125.208.25.0/24 maxlen: 24
125.208.26.0/24 maxlen: 24
211.154.0.0/24 maxlen: 24
211.154.1.0/24 maxlen: 24
211.154.4.0/22 maxlen: 22
211.154.4.0/23 maxlen: 23
211.154.5.0/24 maxlen: 24
211.154.6.0/24 maxlen: 24
211.154.7.0/24 maxlen: 24
211.154.10.0/24 maxlen: 24
211.154.11.0/24 maxlen: 24
211.154.12.0/24 maxlen: 24
211.154.13.0/24 maxlen: 24
211.154.14.0/24 maxlen: 24
211.154.15.0/24 maxlen: 24
219.232.96.0/19 maxlen: 19
219.232.96.0/23 maxlen: 23
219.232.96.0/24 maxlen: 24
219.232.100.0/23 maxlen: 23
219.232.101.0/24 maxlen: 24
219.232.102.0/24 maxlen: 24
219.232.103.0/24 maxlen: 24
219.232.104.0/23 maxlen: 23
219.232.105.0/24 maxlen: 24
219.232.106.0/24 maxlen: 24
219.232.108.0/24 maxlen: 24
219.232.112.0/21 maxlen: 21
219.232.112.0/24 maxlen: 24
219.232.113.0/24 maxlen: 24
219.232.114.0/23 maxlen: 23
219.232.114.0/24 maxlen: 24
219.232.115.0/24 maxlen: 24
219.232.117.0/24 maxlen: 24
219.232.118.0/24 maxlen: 24
219.232.120.0/23 maxlen: 23
219.232.120.0/24 maxlen: 24
219.232.122.0/23 maxlen: 23
219.232.123.0/24 maxlen: 24
219.232.124.0/22 maxlen: 22
219.232.124.0/23 maxlen: 23
219.232.124.0/24 maxlen: 24
219.232.125.0/24 maxlen: 24
219.232.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:77:31:21:38:73:1d:40:19:23:a5:e5:12:96:2b:7e:0c:76:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Validity
Not Before: Sep 1 16:42:05 2026 GMT
Not After : Aug 31 16:47:05 2027 GMT
Subject: CN=772447681DD71CE40230788C484616CF2A93E4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:d7:7a:1b:33:d2:ca:85:7f:2a:72:9d:49:
05:49:03:17:7e:e5:ef:1f:e9:39:28:de:ce:12:28:
1a:28:14:4b:37:1a:e0:2b:77:23:3d:09:36:8d:0a:
26:4e:13:c7:f0:70:91:33:04:62:b6:dc:22:e0:bb:
1d:e1:b9:a2:44:23:96:11:bd:77:20:75:20:9b:d0:
6a:a4:ef:ae:9d:c6:35:27:61:58:a4:2f:e1:8e:3a:
15:af:7c:be:5b:d5:1b:e5:4f:2d:e9:3c:92:d7:4a:
b6:7e:54:c7:e1:b9:e9:a3:8f:5e:dc:ac:5d:d7:bb:
c0:90:39:4c:13:59:ab:5e:ef:c3:2a:fe:41:99:07:
98:1f:13:ad:91:aa:f2:8d:a7:90:9e:1d:51:c2:03:
f9:a7:b8:25:20:e1:f8:c3:57:ca:28:c5:57:cf:25:
cd:7e:aa:61:76:08:57:4e:9d:59:9a:b2:fa:55:49:
4c:af:2e:db:59:d8:5a:2b:32:f2:ba:82:42:36:36:
c6:d4:d5:fb:86:f4:6f:82:f2:42:1b:4d:c1:09:99:
1c:5b:d2:6d:3a:c1:76:d1:37:b5:88:ee:7e:62:41:
cd:57:5d:a3:b0:fe:09:fc:f5:e0:5e:e9:79:51:49:
eb:fb:b5:47:9d:48:fc:9a:c1:ae:79:02:f6:3a:30:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:47:68:1D:D7:1C:E4:02:30:78:8C:48:46:16:CF:2A:93:E4:F6
X509v3 Authority Key Identifier:
keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.209.128.0/17
117.122.192.0/18
125.208.0.0/20
125.208.24.0/21
211.154.0.0/23
211.154.4.0/22
211.154.10.0-211.154.15.255
219.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:44:c8:81:c6:92:34:0d:61:6d:c6:0b:69:7a:89:b5:df:21:
19:87:44:6b:83:20:3b:04:95:64:6d:ec:d9:76:62:88:ee:45:
64:25:92:b8:30:7f:8f:a9:8a:7f:50:45:7e:3f:cb:a0:48:5d:
9b:da:b0:c1:18:71:12:60:d5:98:73:35:b4:3c:ba:20:ba:a2:
89:2a:12:5d:cb:16:2d:c6:34:5b:6a:90:9b:a0:d5:7e:81:35:
c4:3d:7a:51:c5:cd:aa:31:88:76:fc:94:0c:8a:69:d4:22:c9:
d6:92:dd:7e:5b:dc:c1:78:58:76:d9:26:04:b6:47:1b:ee:7f:
f0:67:dc:a8:2a:59:24:39:f5:7b:fd:32:3e:01:20:43:b1:c8:
24:80:25:4a:89:e3:27:3e:a5:97:27:15:cc:5e:4a:c5:f1:80:
d1:a8:60:87:87:84:55:16:66:e4:41:dd:93:c6:e7:22:9c:ae:
19:77:bf:32:9b:24:45:ba:7d:e4:80:c5:d7:11:7b:b0:ab:80:
a3:a6:74:d3:8b:4b:4d:b5:c5:68:3a:6b:d9:6d:cc:00:ba:8f:
b4:ce:23:80:41:99:1e:3a:1a:c4:b7:2d:57:91:c6:be:50:98:
08:29:56:85:31:f4:c7:2f:1c:4a:5a:71:91:d9:37:81:1b:fc:
20:a0:b6:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:26:36 2026 by rpki-client