Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS9808.roa
File:                     AS9808.roa (raw, json)
Hash identifier:          cVhvwH8EDjYOVc8loPwdZ7I4KxYQ8YaoGlrJQAu5/M8=
Subject key identifier:   38:8E:41:EC:DB:FD:53:63:D2:2F:8D:5F:4F:04:1F:D9:C3:9A:4C:10
Certificate issuer:       /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial:       0313DCBF1C05A134C7BE110B21ADBF7B63264099
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS9808.roa
Signing time:             Mon 08 Jun 2026 06:54:11 +0000
ROA not before:           Mon 08 Jun 2026 06:49:11 +0000
ROA not after:            Mon 07 Jun 2027 06:54:11 +0000
asID:                     9808
IP address blocks:        118.26.197.0/24 maxlen: 24
                          118.26.198.0/24 maxlen: 24
                          118.26.199.0/24 maxlen: 24
                          118.26.200.0/21 maxlen: 21
                          118.26.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:dc:bf:1c:05:a1:34:c7:be:11:0b:21:ad:bf:7b:63:26:40:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
        Validity
            Not Before: Jun  8 06:49:11 2026 GMT
            Not After : Jun  7 06:54:11 2027 GMT
        Subject: CN=388E41ECDBFD5363D22F8D5F4F041FD9C39A4C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:6a:75:d1:03:3d:8d:7a:fa:74:a5:d3:cd:
                    11:a0:07:9f:a0:a3:37:fd:5a:d5:8e:34:f2:10:4f:
                    fc:3f:5f:61:c8:f7:39:49:11:86:36:c7:98:df:f5:
                    19:a9:9b:2b:b0:87:d8:be:42:e4:21:16:fd:60:8f:
                    bd:6c:42:9e:1b:eb:47:b4:a1:8b:87:f8:7a:18:d0:
                    71:67:7a:32:4e:fd:7c:66:97:ba:8b:fc:20:29:ec:
                    db:94:97:1c:67:85:50:0f:7e:2c:6a:64:97:70:46:
                    8c:32:81:71:b8:d1:05:35:c9:e4:c8:e2:92:a1:0d:
                    db:ed:2c:64:0e:0a:b2:96:a5:32:79:c0:76:1c:be:
                    1b:a9:5e:21:2f:07:1f:73:3a:a8:f3:35:10:d4:e8:
                    78:c7:ad:6c:2c:e7:0b:9e:5f:c9:4f:dd:4f:5e:4d:
                    a7:5a:7f:67:16:a0:e8:0e:c1:5d:1e:9e:6d:72:e1:
                    8a:dd:1d:32:3c:cb:80:d9:44:c2:0a:bf:7d:07:a5:
                    c1:3d:af:e9:18:25:6a:0e:cf:a5:d6:69:5d:cb:c1:
                    3a:33:c1:43:13:84:89:79:12:40:c6:ba:65:b7:68:
                    73:69:e6:e8:38:6f:ba:e2:c5:b5:66:7f:1d:76:31:
                    69:cf:40:20:be:41:44:3e:fd:aa:59:1e:36:81:af:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:41:EC:DB:FD:53:63:D2:2F:8D:5F:4F:04:1F:D9:C3:9A:4C:10
            X509v3 Authority Key Identifier:
                keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS9808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.26.197.0-118.26.207.255
                  118.26.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:39:ed:17:c6:ec:c2:a6:f7:92:16:fd:bb:4a:57:85:7e:
         8a:ee:c5:f2:22:f6:01:1b:a9:58:5e:51:6d:7e:b7:d4:88:d0:
         48:4a:eb:fc:f7:1c:55:8f:3e:f1:a5:9a:cf:61:d5:a5:88:a0:
         06:58:2d:57:f1:e7:ec:f5:c6:36:e8:ee:6c:74:68:69:c1:f2:
         4b:bf:5b:4a:33:c6:43:69:3c:c5:76:2d:77:6f:14:d7:ab:78:
         42:06:52:b3:23:5c:7a:82:70:6b:70:66:3e:36:c5:5f:05:ae:
         cc:95:17:f9:ac:8e:29:26:72:65:17:d5:81:3f:c8:e8:1e:d0:
         87:7e:db:c8:6c:0e:bb:c8:11:05:b0:32:ec:b8:34:e2:22:9a:
         18:65:46:f7:f1:f4:62:ab:2b:75:d3:85:32:88:d1:6e:79:7f:
         5b:36:d6:1a:5f:19:e5:f0:19:33:a8:95:68:ab:02:1f:24:87:
         3b:ac:d3:d1:19:98:d1:aa:85:42:48:7f:34:c6:02:c6:6f:0c:
         a8:f2:8f:c5:03:af:70:ed:17:f4:87:ed:7d:a0:fd:5d:a5:d0:
         55:76:0c:09:13:5b:35:4e:26:7b:5c:97:bf:39:3a:4d:bb:ec:
         5b:18:84:0a:e1:e8:20:2e:4f:64:2a:08:b8:de:a5:91:1b:e7:
         ca:48:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:40 2026 by rpki-client