Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4816.roa
File: AS4816.roa (raw, json)
Hash identifier: BcG6FjMdl5c0OtBEHYeufzhh5uB4p3dXzzP2LgFEMAE=
Subject key identifier: E3:ED:59:B8:10:B5:25:39:71:A6:89:89:F0:93:BF:D7:34:48:6A:C3
Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial: 0B0FEDEBA876745254A7E75C1D0DF4B89B31024F
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4816.roa
Signing time: Tue 09 Jun 2026 08:41:28 +0000
ROA not before: Tue 09 Jun 2026 08:36:28 +0000
ROA not after: Tue 08 Jun 2027 08:41:28 +0000
asID: 4816
IP address blocks: 123.58.32.0/24 maxlen: 24
123.58.33.0/24 maxlen: 24
123.58.34.0/24 maxlen: 24
123.58.36.0/24 maxlen: 24
123.58.38.0/24 maxlen: 24
123.58.39.0/24 maxlen: 24
123.58.40.0/24 maxlen: 24
123.58.41.0/24 maxlen: 24
123.58.42.0/24 maxlen: 24
123.58.43.0/24 maxlen: 24
123.58.44.0/24 maxlen: 24
123.58.45.0/24 maxlen: 24
123.58.47.0/24 maxlen: 24
123.58.48.0/24 maxlen: 24
123.58.50.0/24 maxlen: 24
123.58.53.0/24 maxlen: 24
123.58.54.0/24 maxlen: 24
123.58.55.0/24 maxlen: 24
123.58.56.0/24 maxlen: 24
123.58.57.0/24 maxlen: 24
123.58.59.0/24 maxlen: 24
123.58.60.0/24 maxlen: 24
123.58.61.0/24 maxlen: 24
123.58.62.0/24 maxlen: 24
123.58.63.0/24 maxlen: 24
123.58.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0f:ed:eb:a8:76:74:52:54:a7:e7:5c:1d:0d:f4:b8:9b:31:02:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Validity
Not Before: Jun 9 08:36:28 2026 GMT
Not After : Jun 8 08:41:28 2027 GMT
Subject: CN=E3ED59B810B5253971A68989F093BFD734486AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:58:a0:77:c0:03:2e:b8:24:5d:fa:aa:26:
0b:a1:87:48:3d:68:bb:5f:b3:06:76:94:cc:66:0f:
ff:5a:42:bb:58:fc:30:79:59:7a:cc:c9:a7:65:d9:
e1:0b:63:d0:64:dd:67:d8:d5:b5:1b:7d:7c:8b:b2:
94:30:e6:9f:3e:1b:98:3e:3c:74:4a:ee:fc:fe:d5:
73:79:89:d2:e6:2e:94:dc:f6:b7:04:43:f9:3b:76:
88:4c:69:df:2c:dd:e7:cb:6f:66:2b:31:18:e1:96:
34:63:b0:e8:cf:ad:a7:c5:50:c6:7a:4f:98:33:c1:
d3:32:c7:4f:20:78:4e:3a:d2:cf:65:a2:2b:98:ff:
59:1a:92:54:9f:f0:6e:cc:6c:af:b9:e2:1c:18:7f:
e1:0e:f0:4f:78:3a:c3:1b:0c:10:cb:e7:c5:cb:02:
8a:f8:09:7a:c9:ec:25:ad:f6:79:88:85:96:0f:21:
05:f0:53:b0:e7:24:e8:eb:09:6e:10:89:f0:7e:75:
a7:b3:01:45:cf:c5:a6:5a:eb:97:92:29:08:19:0d:
dd:81:d9:bb:d0:a7:0d:c1:f6:a6:6f:23:eb:5c:d5:
50:c5:56:c7:93:c3:e7:04:2d:73:0d:24:a7:83:0c:
41:1e:ce:08:09:15:0e:a9:81:bc:14:4f:6e:7b:79:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:59:B8:10:B5:25:39:71:A6:89:89:F0:93:BF:D7:34:48:6A:C3
X509v3 Authority Key Identifier:
keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.58.32.0-123.58.34.255
123.58.36.0/24
123.58.38.0-123.58.45.255
123.58.47.0-123.58.48.255
123.58.50.0/24
123.58.53.0-123.58.57.255
123.58.59.0-123.58.64.255
Signature Algorithm: sha256WithRSAEncryption
94:cb:4c:4a:c9:d3:46:7b:92:79:a2:f4:95:e6:53:4c:9f:3f:
6d:d1:d0:10:52:e5:f1:57:04:50:15:85:d3:05:76:bf:1a:c5:
38:91:fc:07:ef:1d:2b:75:9f:24:d5:9f:8e:44:58:db:69:1a:
c7:c2:cf:6d:7d:e1:7f:e6:5b:a8:97:67:e7:9c:b8:54:55:0d:
a8:5d:92:ed:5f:6e:34:c9:f7:31:e0:b9:c4:17:ba:35:0f:bc:
1e:57:11:36:93:4a:c8:de:26:c6:ad:ea:be:b0:88:bc:45:78:
29:cb:e3:af:ba:12:4f:38:9d:48:36:ba:ac:cd:c7:c0:5b:4b:
fc:7d:07:95:4b:9d:26:fe:72:60:01:7a:1b:9c:ed:54:62:6a:
47:a7:f7:d6:05:60:30:25:0f:80:e6:75:16:2a:a7:8a:ec:55:
4b:92:09:5a:86:a6:0f:4c:f3:a9:25:fe:99:68:e1:0c:6a:1e:
0b:bd:b2:f9:f7:b4:cf:ec:d4:63:ab:7c:18:59:fb:29:e3:cd:
07:bd:fa:3f:1e:12:be:c0:cf:22:a4:cd:fb:74:5e:3f:a6:7b:
76:51:d1:a6:1d:4d:f1:bd:02:fb:08:69:07:29:bf:b1:6a:44:
eb:bd:9b:a9:79:92:3e:0a:02:91:ad:8f:52:9e:16:33:b6:2a:
74:db:9e:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client