Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: x6CsxrXJP/tLvJGx1fHtjAL40INQgOCEUORhIbque/Q=
Subject key identifier: 85:63:E9:CC:8D:6F:B5:99:F6:B3:AB:47:6D:D8:86:DF:D0:1B:33:32
Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial: 1B315C418347CF5D02CF674C82B7E59567942348
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4847.roa
Signing time: Sat 30 May 2026 16:05:08 +0000
ROA not before: Sat 30 May 2026 16:00:08 +0000
ROA not after: Sat 29 May 2027 16:05:08 +0000
asID: 4847
IP address blocks: 113.209.128.0/17 maxlen: 17
113.209.129.0/24 maxlen: 24
113.209.130.0/24 maxlen: 24
113.209.136.0/24 maxlen: 24
113.209.194.0/23 maxlen: 23
113.209.194.0/24 maxlen: 24
113.209.195.0/24 maxlen: 24
113.209.196.0/22 maxlen: 22
113.209.196.0/23 maxlen: 23
113.209.196.0/24 maxlen: 24
113.209.197.0/24 maxlen: 24
117.122.192.0/18 maxlen: 18
117.122.192.0/24 maxlen: 24
117.122.198.0/24 maxlen: 24
117.122.199.0/24 maxlen: 24
117.122.203.0/24 maxlen: 24
117.122.208.0/23 maxlen: 23
117.122.208.0/24 maxlen: 24
117.122.209.0/24 maxlen: 24
117.122.211.0/24 maxlen: 24
117.122.212.0/23 maxlen: 23
117.122.212.0/24 maxlen: 24
117.122.213.0/24 maxlen: 24
117.122.214.0/24 maxlen: 24
117.122.216.0/24 maxlen: 24
117.122.218.0/23 maxlen: 23
117.122.218.0/24 maxlen: 24
117.122.219.0/24 maxlen: 24
117.122.220.0/23 maxlen: 23
117.122.222.0/23 maxlen: 23
117.122.223.0/24 maxlen: 24
117.122.224.0/23 maxlen: 23
117.122.224.0/24 maxlen: 24
117.122.225.0/24 maxlen: 24
117.122.226.0/23 maxlen: 23
117.122.226.0/24 maxlen: 24
117.122.228.0/22 maxlen: 22
117.122.232.0/21 maxlen: 21
117.122.240.0/20 maxlen: 20
117.122.240.0/23 maxlen: 23
117.122.240.0/24 maxlen: 24
117.122.241.0/24 maxlen: 24
117.122.242.0/24 maxlen: 24
125.208.0.0/20 maxlen: 20
125.208.0.0/24 maxlen: 24
125.208.1.0/24 maxlen: 24
125.208.2.0/24 maxlen: 24
125.208.3.0/24 maxlen: 24
125.208.4.0/24 maxlen: 24
125.208.5.0/24 maxlen: 24
125.208.6.0/24 maxlen: 24
125.208.7.0/24 maxlen: 24
125.208.8.0/24 maxlen: 24
125.208.9.0/24 maxlen: 24
125.208.10.0/24 maxlen: 24
125.208.11.0/24 maxlen: 24
125.208.12.0/22 maxlen: 22
125.208.12.0/24 maxlen: 24
125.208.14.0/24 maxlen: 24
125.208.15.0/24 maxlen: 24
125.208.24.0/21 maxlen: 21
125.208.24.0/24 maxlen: 24
125.208.25.0/24 maxlen: 24
125.208.26.0/24 maxlen: 24
211.154.0.0/20 maxlen: 20
211.154.0.0/24 maxlen: 24
211.154.1.0/24 maxlen: 24
211.154.4.0/22 maxlen: 22
211.154.4.0/23 maxlen: 23
211.154.5.0/24 maxlen: 24
211.154.6.0/24 maxlen: 24
211.154.7.0/24 maxlen: 24
211.154.10.0/24 maxlen: 24
211.154.11.0/24 maxlen: 24
211.154.12.0/24 maxlen: 24
211.154.15.0/24 maxlen: 24
219.232.96.0/19 maxlen: 19
219.232.96.0/23 maxlen: 23
219.232.96.0/24 maxlen: 24
219.232.100.0/23 maxlen: 23
219.232.101.0/24 maxlen: 24
219.232.102.0/24 maxlen: 24
219.232.103.0/24 maxlen: 24
219.232.104.0/23 maxlen: 23
219.232.105.0/24 maxlen: 24
219.232.106.0/24 maxlen: 24
219.232.108.0/24 maxlen: 24
219.232.112.0/21 maxlen: 21
219.232.112.0/24 maxlen: 24
219.232.113.0/24 maxlen: 24
219.232.114.0/23 maxlen: 23
219.232.114.0/24 maxlen: 24
219.232.115.0/24 maxlen: 24
219.232.117.0/24 maxlen: 24
219.232.118.0/24 maxlen: 24
219.232.120.0/23 maxlen: 23
219.232.120.0/24 maxlen: 24
219.232.122.0/23 maxlen: 23
219.232.123.0/24 maxlen: 24
219.232.124.0/22 maxlen: 22
219.232.124.0/23 maxlen: 23
219.232.124.0/24 maxlen: 24
219.232.125.0/24 maxlen: 24
219.232.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:31:5c:41:83:47:cf:5d:02:cf:67:4c:82:b7:e5:95:67:94:23:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Validity
Not Before: May 30 16:00:08 2026 GMT
Not After : May 29 16:05:08 2027 GMT
Subject: CN=8563E9CC8D6FB599F6B3AB476DD886DFD01B3332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:bb:66:33:72:e3:22:58:2c:fc:85:04:2d:
cf:77:a7:00:44:cb:f6:5d:d3:60:41:9d:65:85:6b:
64:0e:58:69:87:d5:58:4b:6a:9a:01:b1:40:75:4a:
38:4e:8f:11:68:3a:4f:7d:da:39:d1:fe:72:55:0a:
df:85:c6:8a:85:0e:c5:5c:17:d8:0f:2e:77:9e:0d:
f3:5e:61:2f:65:37:3f:1a:bd:3b:e4:5b:29:b8:37:
d8:52:5c:ac:b4:1c:62:59:f2:f2:cc:62:6b:f9:4b:
d4:f8:86:6f:cd:2a:07:a9:3f:28:24:40:8d:aa:a9:
be:78:e9:77:09:58:c0:4a:1d:cd:5a:a5:a0:37:80:
1d:3c:88:e4:1f:ea:66:37:40:ce:79:8a:67:22:d1:
c1:cc:48:ef:00:19:9d:a7:e2:c9:ec:46:eb:38:a4:
74:1d:b1:92:7a:36:c5:e9:3b:51:a3:a9:73:40:5c:
ad:ec:3c:62:fb:86:de:34:f4:30:80:d4:1d:05:c1:
31:af:e9:c9:14:ce:03:62:5e:85:4e:b3:09:22:14:
5f:fb:41:a7:de:da:c5:3e:d1:8a:68:55:3c:33:b9:
67:ce:84:d6:1d:d2:3e:63:e7:90:9d:f2:d1:a8:25:
99:0e:b9:70:07:bd:9d:34:b6:6b:14:90:0d:fe:62:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:E9:CC:8D:6F:B5:99:F6:B3:AB:47:6D:D8:86:DF:D0:1B:33:32
X509v3 Authority Key Identifier:
keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.209.128.0/17
117.122.192.0/18
125.208.0.0/20
125.208.24.0/21
211.154.0.0/20
219.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:da:14:82:89:ff:38:de:c5:e2:45:30:a2:11:ce:34:a8:79:
56:ea:fa:9c:e9:32:79:3e:be:9c:70:38:cd:4e:07:71:d9:79:
ec:39:a4:bc:c3:26:f8:be:d7:fc:2d:69:62:13:7a:9c:15:52:
80:a5:23:75:db:8d:c1:fc:17:1d:02:86:e4:ce:2f:95:fd:b2:
37:4b:61:c5:ab:af:0d:3c:33:70:80:a0:d4:96:d6:c4:8d:50:
80:97:a9:d9:4f:8c:73:37:e0:35:95:b6:61:ef:8f:06:15:28:
cf:ef:e9:09:d3:ab:cf:12:a9:68:92:66:6d:1a:cf:3c:a2:87:
78:24:7e:7b:3c:e1:09:be:de:78:51:b4:1f:3b:8b:91:3e:9e:
56:ca:81:1c:1c:e6:2d:9a:a6:50:e5:51:03:c7:19:55:f6:7e:
19:ea:35:23:d4:ed:d3:8a:cb:63:06:82:5f:4b:bd:08:43:8e:
7a:89:02:b9:be:de:56:64:0a:eb:ac:2b:b9:25:b3:b7:74:14:
e1:9d:14:24:85:2a:2c:b5:70:44:1c:65:f7:ce:e9:67:c5:52:
26:25:40:fb:aa:35:4d:ef:d9:49:ec:33:95:7d:61:d8:1a:5e:
58:29:0c:c4:0d:f9:06:74:19:1a:03:5d:cc:f1:4e:31:45:e7:
d1:89:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client