Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/AS9812.roa
File: AS9812.roa (raw, json)
Hash identifier: TCsU4/hp59fDHvgCzxIh3dSpRzRqD4Ky9FA7aHqLkjQ=
Subject key identifier: CF:A1:2E:00:4D:DD:14:9A:F5:B2:38:56:89:8D:B1:E6:34:A4:C6:E4
Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial: 73629EA02F6FBE4482219A1BC840AEA210D67A2A
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/AS9812.roa
Signing time: Thu 07 May 2026 05:34:12 +0000
ROA not before: Thu 07 May 2026 05:29:12 +0000
ROA not after: Thu 06 May 2027 05:34:12 +0000
asID: 9812
IP address blocks: 58.24.0.0/18 maxlen: 18
58.24.64.0/18 maxlen: 18
58.24.128.0/18 maxlen: 18
58.24.192.0/18 maxlen: 18
58.25.0.0/18 maxlen: 18
58.25.64.0/18 maxlen: 18
58.25.128.0/18 maxlen: 18
58.25.192.0/18 maxlen: 18
60.63.0.0/18 maxlen: 18
60.63.64.0/18 maxlen: 18
60.63.128.0/18 maxlen: 18
60.63.192.0/18 maxlen: 18
61.87.192.0/19 maxlen: 19
61.87.224.0/19 maxlen: 19
111.212.0.0/18 maxlen: 18
111.212.64.0/18 maxlen: 18
111.212.128.0/18 maxlen: 18
111.212.192.0/18 maxlen: 18
111.213.0.0/18 maxlen: 18
111.213.64.0/18 maxlen: 18
111.213.128.0/18 maxlen: 18
111.213.192.0/18 maxlen: 18
111.214.0.0/18 maxlen: 18
111.214.64.0/18 maxlen: 18
111.214.128.0/18 maxlen: 18
111.214.192.0/18 maxlen: 18
111.215.0.0/18 maxlen: 18
111.215.64.0/18 maxlen: 18
111.215.128.0/18 maxlen: 18
111.215.192.0/18 maxlen: 18
114.60.0.0/18 maxlen: 18
114.60.64.0/18 maxlen: 18
114.60.128.0/18 maxlen: 18
114.60.192.0/18 maxlen: 18
114.61.0.0/18 maxlen: 18
114.61.64.0/18 maxlen: 18
114.61.128.0/18 maxlen: 18
114.61.192.0/18 maxlen: 18
114.62.0.0/18 maxlen: 18
114.62.64.0/18 maxlen: 18
114.62.128.0/18 maxlen: 18
114.62.192.0/18 maxlen: 18
114.63.0.0/18 maxlen: 18
114.63.64.0/18 maxlen: 18
114.63.128.0/18 maxlen: 18
114.63.192.0/18 maxlen: 18
118.132.0.0/18 maxlen: 18
118.132.64.0/18 maxlen: 18
118.132.128.0/18 maxlen: 18
118.132.192.0/18 maxlen: 18
118.133.0.0/18 maxlen: 18
118.133.64.0/18 maxlen: 18
118.133.128.0/18 maxlen: 18
118.133.192.0/18 maxlen: 18
118.134.0.0/18 maxlen: 18
118.134.64.0/18 maxlen: 18
118.134.128.0/18 maxlen: 18
118.134.192.0/18 maxlen: 18
118.135.0.0/18 maxlen: 18
118.135.64.0/18 maxlen: 18
118.135.128.0/18 maxlen: 18
118.135.192.0/18 maxlen: 18
121.76.0.0/18 maxlen: 18
121.76.64.0/18 maxlen: 18
121.76.128.0/18 maxlen: 18
121.76.192.0/18 maxlen: 18
121.77.0.0/18 maxlen: 18
121.77.64.0/18 maxlen: 18
121.77.128.0/18 maxlen: 18
121.77.192.0/19 maxlen: 19
121.77.224.0/19 maxlen: 19
124.28.192.0/18 maxlen: 18
124.28.192.0/19 maxlen: 19
124.28.224.0/19 maxlen: 19
124.151.0.0/17 maxlen: 17
124.151.0.0/18 maxlen: 18
124.151.64.0/18 maxlen: 18
124.151.128.0/18 maxlen: 18
124.151.192.0/18 maxlen: 18
124.151.224.0/19 maxlen: 19
202.158.160.0/19 maxlen: 19
202.158.160.0/20 maxlen: 20
202.158.176.0/20 maxlen: 20
211.144.64.0/19 maxlen: 19
211.144.64.0/20 maxlen: 20
211.144.80.0/20 maxlen: 20
211.154.64.0/19 maxlen: 19
211.154.64.0/20 maxlen: 20
211.154.80.0/20 maxlen: 20
211.167.96.0/19 maxlen: 19
211.167.96.0/20 maxlen: 20
211.167.106.0/24 maxlen: 24
211.167.112.0/20 maxlen: 20
218.242.0.0/16 maxlen: 16
218.242.0.0/18 maxlen: 18
218.242.64.0/18 maxlen: 18
218.242.128.0/18 maxlen: 18
218.242.192.0/18 maxlen: 18
219.233.0.0/16 maxlen: 16
219.233.0.0/18 maxlen: 18
219.233.64.0/18 maxlen: 18
219.233.128.0/18 maxlen: 18
219.233.192.0/18 maxlen: 18
220.232.64.0/19 maxlen: 19
220.232.96.0/19 maxlen: 19
220.234.0.0/18 maxlen: 18
220.234.64.0/18 maxlen: 18
220.234.128.0/18 maxlen: 18
220.234.192.0/18 maxlen: 18
221.137.0.0/18 maxlen: 18
221.137.64.0/18 maxlen: 18
221.137.128.0/18 maxlen: 18
221.137.192.0/18 maxlen: 18
223.248.0.0/17 maxlen: 17
223.248.128.0/17 maxlen: 17
223.248.128.0/18 maxlen: 18
223.248.192.0/18 maxlen: 18
223.249.0.0/17 maxlen: 17
223.249.128.0/18 maxlen: 18
223.249.192.0/18 maxlen: 18
223.249.192.0/19 maxlen: 19
223.249.224.0/19 maxlen: 19
223.250.0.0/17 maxlen: 17
223.250.128.0/17 maxlen: 17
223.251.0.0/17 maxlen: 17
223.251.128.0/17 maxlen: 17
2400:6600::/32 maxlen: 32
2400:6600::/33 maxlen: 33
2400:6600::/48 maxlen: 48
2400:6600:8000::/33 maxlen: 33
2401:800::/32 maxlen: 32
2401:800::/33 maxlen: 33
2401:800:8000::/33 maxlen: 33
2401:800:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:62:9e:a0:2f:6f:be:44:82:21:9a:1b:c8:40:ae:a2:10:d6:7a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Validity
Not Before: May 7 05:29:12 2026 GMT
Not After : May 6 05:34:12 2027 GMT
Subject: CN=CFA12E004DDD149AF5B23856898DB1E634A4C6E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:44:49:67:e7:24:76:88:ff:d6:ab:89:e7:
65:9c:aa:7e:72:33:da:da:83:ef:0a:ac:f1:9e:6f:
b0:ac:9b:99:c2:90:e0:8f:de:c1:5f:9b:c6:e5:f4:
e3:b5:24:ff:fc:6c:b1:a8:25:27:41:97:ab:ef:7d:
d0:b3:8b:26:84:b9:d2:4b:d9:f1:b1:dc:f9:a1:9a:
2a:9c:77:27:5f:94:77:a3:a4:3e:a2:69:21:4b:6f:
73:74:95:38:f2:be:e8:23:1b:ca:42:bd:70:56:6b:
d6:93:84:45:dd:2b:fa:c2:9b:5b:59:3f:a3:7b:b7:
56:8c:dc:f6:a5:08:a2:dd:91:7a:78:d6:ba:c3:e8:
86:a7:a7:21:f6:cf:e0:cf:01:6d:2b:f4:02:c7:e0:
d2:bf:b6:3b:ae:0d:6b:49:76:b5:03:96:fb:09:a8:
83:d4:b2:63:93:da:41:fd:8f:99:b5:5a:8f:fd:94:
be:09:24:7a:24:4d:e6:e3:a7:10:0c:d1:79:a1:d3:
c0:7a:d5:9a:21:67:5d:64:7a:69:91:7e:98:33:bd:
6b:0f:ce:f0:58:1c:35:1e:2c:77:aa:c7:92:53:b2:
dd:93:a6:fd:1d:9d:9a:85:74:80:76:36:2a:eb:73:
1a:d7:13:38:4b:e9:7a:56:80:3a:29:8f:c4:b4:a8:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:2E:00:4D:DD:14:9A:F5:B2:38:56:89:8D:B1:E6:34:A4:C6:E4
X509v3 Authority Key Identifier:
keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/AS9812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.24.0.0/15
60.63.0.0/16
61.87.192.0/18
111.212.0.0/14
114.60.0.0/14
118.132.0.0/14
121.76.0.0/15
124.28.192.0/18
124.151.0.0/16
202.158.160.0/19
211.144.64.0/19
211.154.64.0/19
211.167.96.0/19
218.242.0.0/16
219.233.0.0/16
220.232.64.0/18
220.234.0.0/16
221.137.0.0/16
223.248.0.0/14
IPv6:
2400:6600::/32
2401:800::/32
Signature Algorithm: sha256WithRSAEncryption
30:4c:cc:c6:03:8b:79:86:0b:de:d9:9f:af:11:93:a9:ef:e9:
9d:cf:7b:20:8b:4d:22:ce:80:dc:15:c7:70:1a:60:66:46:e0:
d8:3d:88:ae:11:72:78:4c:fb:b0:9f:b4:f5:d5:3f:4f:43:c9:
51:33:a5:2c:ff:f5:dc:94:3e:39:19:a5:5b:99:f3:05:14:72:
2a:06:54:d6:68:fe:51:33:3a:22:c2:1b:09:73:17:b9:52:28:
6f:7f:84:1d:92:24:77:ed:2a:11:3e:b3:ab:98:8a:e8:90:1a:
5e:12:1f:43:dc:2c:6b:7d:d9:6e:41:1b:64:13:4c:bf:e0:13:
64:44:d1:ba:02:68:e0:b1:45:5e:0c:ac:74:09:cd:b5:ad:02:
77:fc:e9:89:87:f7:cd:b1:c9:63:1c:71:46:49:af:47:f0:7b:
bd:07:cd:bb:d9:e9:1a:bc:ba:95:b0:82:a4:e9:4d:bd:d1:c7:
3c:eb:e5:b0:23:59:b1:6f:42:a8:ef:78:85:ef:f4:00:58:1c:
dd:3f:be:d8:cb:02:b7:ae:84:75:8a:23:70:be:f5:88:e3:3f:
43:9e:63:14:38:a7:fe:17:4c:55:4b:a1:51:d9:ce:25:f3:18:
23:61:8f:98:3e:a4:40:65:c4:83:c0:a4:0b:79:e9:0f:d0:11:
75:b6:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:20 2026 by rpki-client