Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4837.roa
File:                     AS4837.roa (raw, json)
Hash identifier:          35MbCT8VhsXLT78Z4m9dlWoU/Qth2kVUj1dWKGWULlQ=
Subject key identifier:   64:7E:7F:2B:CA:40:9C:61:23:5D:76:09:F2:9A:DE:86:C0:02:76:25
Certificate issuer:       /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial:       155B5937EACC0F3E00C7308F6C1243E20503B1FC
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4837.roa
Signing time:             Thu 11 Jun 2026 08:19:35 +0000
ROA not before:           Thu 11 Jun 2026 08:14:35 +0000
ROA not after:            Thu 10 Jun 2027 08:19:35 +0000
asID:                     4837
IP address blocks:        118.191.0.0/22 maxlen: 22
                          118.191.4.0/23 maxlen: 23
                          118.191.5.0/24 maxlen: 24
                          118.191.6.0/23 maxlen: 23
                          118.191.8.0/22 maxlen: 22
                          118.191.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5b:59:37:ea:cc:0f:3e:00:c7:30:8f:6c:12:43:e2:05:03:b1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
        Validity
            Not Before: Jun 11 08:14:35 2026 GMT
            Not After : Jun 10 08:19:35 2027 GMT
        Subject: CN=647E7F2BCA409C61235D7609F29ADE86C0027625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:50:a4:3a:45:85:66:46:5b:a4:70:12:1a:
                    38:73:84:99:14:a2:94:a5:3a:f4:2a:2d:75:14:f6:
                    ee:04:f5:f8:d1:19:cc:bc:7d:11:24:fb:2e:2f:e0:
                    b7:14:86:c8:b0:91:e2:fc:33:c6:bb:0c:83:00:6a:
                    e4:74:ed:1c:52:14:e3:2d:24:dd:40:fa:d0:d0:c2:
                    47:d3:28:da:81:4e:3d:9f:91:88:ad:54:aa:68:dd:
                    fe:80:a1:a8:33:a8:09:0f:07:ac:58:71:a0:28:d2:
                    9d:71:f0:33:7e:fc:79:51:a4:c7:65:c2:cb:01:54:
                    8e:b2:01:b4:91:5b:0a:13:7a:4a:e0:96:88:2c:dc:
                    3b:a0:8f:60:50:d9:86:52:3e:86:fb:ce:f4:e9:b1:
                    64:45:fa:2b:be:dc:d6:2c:a8:d0:c7:f0:34:70:93:
                    21:e2:12:74:ae:6e:c2:06:b8:e7:43:bd:8a:a6:3a:
                    da:f6:f7:33:37:89:a9:4c:0a:4f:c7:24:ae:23:fc:
                    b0:8b:89:f1:2a:6d:7d:b3:d4:48:11:40:27:bd:14:
                    c8:e7:2e:67:17:fd:2a:b5:72:1a:85:1b:8a:d6:7b:
                    c3:46:1a:a2:33:97:e5:ce:84:30:2c:ba:e8:dc:34:
                    1f:54:60:7f:ec:5d:75:d4:3d:2f:5c:87:7c:3c:3d:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:7F:2B:CA:40:9C:61:23:5D:76:09:F2:9A:DE:86:C0:02:76:25
            X509v3 Authority Key Identifier:
                keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS4837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.191.0.0-118.191.12.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:b2:a6:70:73:77:4f:f4:f9:15:87:a3:4b:0e:e2:bb:99:
         b5:fd:be:21:83:dc:be:47:35:c0:c5:99:d5:c1:f8:df:6f:88:
         6e:fe:fa:b8:ce:a6:70:a4:d3:75:2c:d2:13:7a:f8:21:bf:e0:
         2b:5d:e2:b1:35:b1:d0:75:5b:aa:e2:b2:2b:70:47:f1:34:cc:
         c2:9f:e2:49:48:bb:30:76:d3:90:fa:ba:a5:36:d3:24:d4:b5:
         6d:fb:c6:c3:93:48:93:e3:1f:e2:48:46:17:fc:0c:ec:e3:b7:
         06:08:30:d6:24:23:e9:98:1a:52:4b:a8:cb:f5:0d:04:b8:a1:
         e2:99:ec:c6:47:1e:f3:27:ac:36:83:33:4c:f0:d4:b6:6a:e2:
         89:a0:1a:b6:39:d2:91:6d:e8:fa:6f:67:af:e9:a9:b0:db:18:
         fc:08:61:31:c9:37:e9:cb:41:d4:69:43:71:83:82:e4:d8:c6:
         82:75:9c:21:86:7a:2d:d6:d4:5f:d8:4e:a1:1e:e1:94:75:4f:
         ae:c3:a5:69:be:6f:6c:60:ab:a2:93:31:68:43:5a:96:aa:a1:
         d5:21:55:b8:ce:6a:0a:92:31:2b:3d:76:6c:20:9d:11:42:57:
         b3:06:f1:55:b3:c9:53:95:04:7e:dd:ff:b5:91:95:36:02:b3:
         8e:38:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:41 2026 by rpki-client