Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4816.roa
File: AS4816.roa (raw, json)
Hash identifier: rZIG04+pngLFLay7PCvybdReGCRSFyjRtr6qNro8Bjc=
Subject key identifier: 73:B8:1A:AE:D6:1B:CF:98:F2:99:58:F6:09:D4:AF:05:9E:54:C0:47
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1C8851FFF6BA4A4290E258F95B5F8B793BA21E94
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4816.roa
Signing time: Tue 16 Jun 2026 16:16:09 +0000
ROA not before: Tue 16 Jun 2026 16:11:09 +0000
ROA not after: Tue 15 Jun 2027 16:16:09 +0000
asID: 4816
IP address blocks: 113.108.66.0/24 maxlen: 24
113.108.72.0/24 maxlen: 24
240e:1f:6000::/36 maxlen: 36
240e:ff:f000::/36 maxlen: 36
240e:108:2c::/48 maxlen: 48
240e:108:99::/48 maxlen: 48
240e:108:11e2::/48 maxlen: 48
240e:108:4048::/48 maxlen: 48
240e:108:4848::/48 maxlen: 48
240e:97c:4000::/36 maxlen: 36
240e:980:2c00::/48 maxlen: 48
240e:980:9900::/40 maxlen: 40
240e:982:e200::/40 maxlen: 40
240e:983:1e06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:88:51:ff:f6:ba:4a:42:90:e2:58:f9:5b:5f:8b:79:3b:a2:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 16 16:11:09 2026 GMT
Not After : Jun 15 16:16:09 2027 GMT
Subject: CN=73B81AAED61BCF98F29958F609D4AF059E54C047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:62:39:5b:06:29:5f:65:64:a5:b6:05:95:
8b:7d:76:d9:a8:27:f8:cc:21:e1:d0:61:64:b8:32:
07:4c:96:b3:e4:55:96:5e:03:d0:8b:f3:f6:5b:13:
0b:d7:6f:3c:80:51:7c:5c:19:a0:c2:b9:89:a4:ea:
9e:38:8d:03:b5:d3:0b:6d:5f:a9:b6:dd:10:02:54:
38:9a:0b:db:b9:c3:6f:9e:bd:f1:ed:46:cd:95:c3:
a9:07:18:78:01:79:67:39:b9:e1:69:98:a6:c3:35:
d0:90:32:81:c5:4b:9f:2c:a4:dc:4e:5b:49:a3:52:
37:68:ec:ca:bd:a7:87:7e:6d:39:fd:cc:22:2f:8b:
bc:54:7d:d8:98:a4:45:88:58:76:c6:62:6d:da:15:
3f:11:40:e8:2e:57:53:0e:04:1f:67:b3:64:f2:68:
c1:fc:17:9c:4e:92:cd:d6:b7:94:cd:aa:0a:ff:1a:
26:19:23:41:8d:47:fd:38:20:91:f7:c6:09:cf:34:
9c:42:f1:39:66:e3:42:b2:94:98:09:63:81:4d:42:
76:3e:55:b6:58:92:c4:d9:58:db:7d:04:12:2a:fe:
98:6c:a9:09:fc:3f:81:3c:08:5a:a0:2e:ca:06:8e:
e0:ef:f6:33:e1:6a:8d:64:d8:f0:b0:67:e5:30:9e:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:1A:AE:D6:1B:CF:98:F2:99:58:F6:09:D4:AF:05:9E:54:C0:47
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.108.66.0/24
113.108.72.0/24
IPv6:
240e:1f:6000::/36
240e:ff:f000::/36
240e:108:2c::/48
240e:108:99::/48
240e:108:11e2::/48
240e:108:4048::/48
240e:108:4848::/48
240e:97c:4000::/36
240e:980:2c00::/48
240e:980:9900::/40
240e:982:e200::/40
240e:983:1e06::/48
Signature Algorithm: sha256WithRSAEncryption
60:80:c5:d3:c1:9a:68:8c:c4:5b:1b:07:0d:81:aa:cd:a5:07:
af:99:4d:5c:fc:a1:59:ed:fd:21:77:33:3d:00:4c:69:3c:ac:
5f:17:76:35:01:b6:aa:07:19:e5:54:5e:1b:51:3f:96:a8:f0:
6f:39:50:2c:4f:76:a3:a2:39:1d:26:d0:0a:c9:1c:9b:3c:c3:
ba:a5:b4:50:d5:f9:3f:af:3a:5f:ef:19:7b:a0:b5:49:74:5e:
6e:a6:38:2f:fd:2c:af:16:58:82:e9:7d:79:06:c8:d8:88:60:
19:6f:48:7d:1f:cc:67:0e:81:92:78:5e:36:33:9f:c1:22:a6:
f2:21:ec:81:92:23:61:7b:a5:2f:13:74:f1:d8:cb:81:27:19:
e4:a1:db:13:64:2a:f6:5e:9e:2c:b8:36:ae:ce:5c:f9:c9:a3:
0d:e8:f6:06:5d:34:d5:e1:1a:3d:c1:82:5c:a8:7d:cf:18:57:
9c:f8:d7:38:66:11:68:78:06:e7:26:98:92:86:1d:df:34:d5:
99:f0:20:69:18:b9:15:fb:7f:89:cb:11:43:ae:b0:78:74:72:
d0:8f:d7:ba:55:e5:16:3f:d9:b9:34:9e:2a:31:3c:ce:93:b9:
98:da:36:f9:3e:74:57:f9:71:e1:c2:b3:2c:36:c4:71:f3:52:
36:d4:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:43 2026 by rpki-client