Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4808.roa
File:                     AS4808.roa (raw, json)
Hash identifier:          e+VcAnuH1mwiD1G9IzrYFDZy0d3k9uuPRbOxDtsoeR8=
Subject key identifier:   12:F5:A8:3A:94:5B:43:E1:69:AF:7A:F6:D8:C5:87:12:97:3A:18:54
Certificate issuer:       /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial:       1DB411297031EB7FEA90D4F447818F3E950D2973
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4808.roa
Signing time:             Wed 10 Jun 2026 07:21:04 +0000
ROA not before:           Wed 10 Jun 2026 07:16:04 +0000
ROA not after:            Wed 09 Jun 2027 07:21:04 +0000
asID:                     4808
IP address blocks:        118.26.64.0/23 maxlen: 23
                          118.26.68.0/23 maxlen: 23
                          118.26.160.0/20 maxlen: 24
                          122.14.44.0/22 maxlen: 22
                          122.14.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b4:11:29:70:31:eb:7f:ea:90:d4:f4:47:81:8f:3e:95:0d:29:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
        Validity
            Not Before: Jun 10 07:16:04 2026 GMT
            Not After : Jun  9 07:21:04 2027 GMT
        Subject: CN=12F5A83A945B43E169AF7AF6D8C58712973A1854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:5c:74:a8:12:85:24:9c:44:57:84:c9:ff:
                    9a:77:c7:65:52:9c:d8:de:9f:5a:53:6c:8f:d2:6d:
                    5e:c3:1e:bf:7e:db:f7:e1:5e:76:12:99:68:3a:29:
                    4b:e9:67:56:3c:da:29:33:12:ef:eb:6b:5c:ec:e8:
                    9d:5d:cc:b5:93:7e:bf:21:c0:13:9c:ba:38:a5:9d:
                    2a:0c:ac:32:f6:0e:08:89:13:a7:fd:a5:24:c1:4a:
                    ac:89:84:96:fa:a1:71:da:1a:8d:7e:92:9d:96:91:
                    3e:77:e4:71:26:1b:c3:1d:a6:d4:1b:f2:2a:a3:46:
                    58:a8:c0:e2:d1:10:36:25:7c:a7:b8:a0:09:24:48:
                    2d:a5:5b:61:ac:f7:45:b0:19:5c:49:04:68:ac:50:
                    a8:16:3d:87:a7:86:b6:98:0a:ce:7d:42:e3:3f:89:
                    27:23:3f:ae:57:02:d5:01:49:2d:8f:18:39:92:9d:
                    4b:93:62:6e:e1:e8:11:70:4c:3d:d9:10:f7:61:76:
                    b7:fd:d9:23:24:3d:40:67:7b:c1:d4:9d:18:0a:61:
                    db:03:c0:9a:ad:c5:ec:21:14:ae:b1:94:8e:d4:a9:
                    75:ed:7c:fa:a2:a6:d3:ef:b3:da:2e:6a:46:ba:3f:
                    f9:6d:ca:39:99:0e:5b:69:31:47:2c:96:e2:71:8f:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:A8:3A:94:5B:43:E1:69:AF:7A:F6:D8:C5:87:12:97:3A:18:54
            X509v3 Authority Key Identifier:
                keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.26.64.0/23
                  118.26.68.0/23
                  118.26.160.0/20
                  122.14.44.0/22
                  122.14.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:dc:a9:fb:ea:59:4d:a0:1d:68:b0:ba:b8:95:29:e3:19:55:
         a2:01:3c:30:55:95:db:38:9d:f3:de:42:f8:71:10:ca:5c:1a:
         5e:dd:b4:89:de:f3:3f:38:8b:25:02:bd:cb:20:57:d8:a0:bd:
         69:01:e2:74:d8:2b:70:24:7b:2a:b2:d4:85:43:01:15:e0:55:
         c5:ba:4e:5f:9a:6e:46:83:a4:de:37:d7:b7:f7:6e:79:80:98:
         a8:2c:8e:ba:b3:fb:13:11:44:e9:6f:33:c2:d5:c2:89:da:d1:
         12:cb:94:0c:ab:90:a7:19:3b:4d:3f:88:8f:42:91:bb:ba:48:
         f1:a8:21:03:7f:dd:fe:d8:78:37:a2:09:87:0b:af:ea:8f:92:
         72:cd:e3:b5:a6:68:55:86:16:f1:d6:f7:9e:70:80:fc:4d:d3:
         55:5a:a0:30:3d:36:ee:04:2e:d0:85:26:d0:6c:39:8a:88:ed:
         8f:58:41:33:67:5f:45:7b:6d:5f:bd:8e:7f:78:19:2b:90:9c:
         99:99:34:52:b2:20:b4:82:b3:2a:6b:e2:e8:27:1e:04:c3:d4:
         79:71:1d:f7:09:eb:7b:9f:37:00:2c:81:1a:15:1a:a9:72:33:
         95:a1:89:70:4a:8d:8e:1a:47:a2:b6:c1:36:57:11:2e:96:b2:
         e1:7a:84:38
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHbQRKXAx63/qkNT0R4GPPpUNKXMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD
NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYxMDA3MTYwNFoX
DTI3MDYwOTA3MjEwNFowMzExMC8GA1UEAxMoMTJGNUE4M0E5NDVCNDNFMTY5QUY3
QUY2RDhDNTg3MTI5NzNBMTg1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANH7XHSoEoUknERXhMn/mnfHZVKc2N6fWlNsj9JtXsMev37b9+FedhKZaDop
S+lnVjzaKTMS7+trXOzonV3MtZN+vyHAE5y6OKWdKgysMvYOCIkTp/2lJMFKrImE
lvqhcdoajX6SnZaRPnfkcSYbwx2m1BvyKqNGWKjA4tEQNiV8p7igCSRILaVbYaz3
RbAZXEkEaKxQqBY9h6eGtpgKzn1C4z+JJyM/rlcC1QFJLY8YOZKdS5NibuHoEXBM
PdkQ92F2t/3ZIyQ9QGd7wdSdGAph2wPAmq3F7CEUrrGUjtSpde18+qKm0++z2i5q
Rro/+W3KOZkOW2kxRyyW4nGPFwMCAwEAAaOCAfowggH2MB0GA1UdDgQWBBQS9ag6
lFtD4WmvevbYxYcSlzoYVDAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7
uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0
Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ
ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH
MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2
NDQyMjE2My8wL0FTNDgwOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAXYaQAMEAXYaRAMEBHYaoAMEAnoO
LAMEAHoOPjANBgkqhkiG9w0BAQsFAAOCAQEAn9yp++pZTaAdaLC6uJUp4xlVogE8
MFWV2zid895C+HEQylwaXt20id7zPziLJQK9yyBX2KC9aQHidNgrcCR7KrLUhUMB
FeBVxbpOX5puRoOk3jfXt/dueYCYqCyOurP7ExFE6W8zwtXCidrREsuUDKuQpxk7
TT+Ij0KRu7pI8aghA3/d/th4N6IJhwuv6o+Scs3jtaZoVYYW8db3nnCA/E3TVVqg
MD027gQu0IUm0Gw5iojtj1hBM2dfRXttX72Of3gZK5CcmZk0UrIgtIKzKmvi6Cce
BMPUeXEd9wnre583ACyBGhUaqXIzlaGJcEqNjhpHorbBNlcRLpay4XqEOA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client