Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: 3csMzZ5SPyHlLymIh5PqzkYG95RuWHFr2H/oRLQZd/g=
Subject key identifier: DD:98:68:BF:03:FE:8A:1C:21:21:29:33:81:AE:7A:BA:A3:0E:82:68
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 57A8A2A3D3D58E9F61DBD0B8864CF0642B8EF2CE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
Signing time: Tue 03 Nov 2026 03:34:17 +0000
ROA not before: Tue 03 Nov 2026 03:29:17 +0000
ROA not after: Tue 02 Nov 2027 03:34:17 +0000
asID: 4847
IP address blocks: 1.202.0.0/17 maxlen: 17
1.202.17.0/24 maxlen: 24
1.202.128.0/17 maxlen: 17
1.202.143.0/24 maxlen: 24
1.202.217.0/24 maxlen: 24
1.202.224.0/24 maxlen: 24
1.202.228.0/24 maxlen: 24
1.202.231.0/24 maxlen: 24
1.202.237.0/24 maxlen: 24
1.203.0.0/16 maxlen: 16
1.203.0.0/18 maxlen: 18
1.203.90.0/24 maxlen: 24
1.203.91.0/24 maxlen: 24
1.203.96.0/24 maxlen: 24
1.203.105.0/24 maxlen: 24
1.203.128.0/20 maxlen: 20
36.110.0.0/17 maxlen: 17
36.110.14.0/24 maxlen: 24
36.110.24.0/24 maxlen: 24
36.110.28.0/24 maxlen: 24
36.110.38.0/24 maxlen: 24
36.110.60.0/24 maxlen: 24
36.110.69.0/24 maxlen: 24
36.110.82.0/24 maxlen: 24
36.110.112.0/24 maxlen: 24
36.110.114.0/24 maxlen: 24
36.110.118.0/24 maxlen: 24
36.110.119.0/24 maxlen: 24
36.110.120.0/24 maxlen: 24
36.110.121.0/24 maxlen: 24
36.112.0.0/16 maxlen: 16
36.112.3.0/24 maxlen: 24
36.112.20.0/24 maxlen: 24
36.112.22.0/24 maxlen: 24
36.112.27.0/24 maxlen: 24
36.112.30.0/24 maxlen: 24
36.112.31.0/24 maxlen: 24
36.112.39.0/24 maxlen: 24
36.112.48.0/22 maxlen: 22
36.112.56.0/24 maxlen: 24
36.112.63.0/24 maxlen: 24
36.112.89.0/24 maxlen: 24
36.112.97.0/24 maxlen: 24
36.112.101.0/24 maxlen: 24
36.112.107.0/24 maxlen: 24
36.112.113.0/24 maxlen: 24
36.112.115.0/24 maxlen: 24
36.112.120.0/24 maxlen: 24
36.112.121.0/24 maxlen: 24
36.112.122.0/24 maxlen: 24
36.112.140.0/23 maxlen: 23
36.112.151.0/24 maxlen: 24
36.112.152.0/24 maxlen: 24
36.112.162.0/24 maxlen: 24
36.112.166.0/24 maxlen: 24
36.112.228.0/24 maxlen: 24
36.112.232.0/24 maxlen: 24
36.112.248.0/24 maxlen: 24
106.37.0.0/16 maxlen: 16
106.37.237.0/24 maxlen: 24
106.37.239.0/24 maxlen: 24
106.38.0.0/16 maxlen: 16
106.38.0.0/19 maxlen: 19
106.38.57.0/24 maxlen: 24
106.39.0.0/16 maxlen: 16
106.39.90.0/24 maxlen: 24
106.39.91.0/24 maxlen: 24
106.39.103.0/24 maxlen: 24
106.120.0.0/19 maxlen: 19
106.120.32.0/19 maxlen: 19
106.120.64.0/19 maxlen: 19
106.120.96.0/19 maxlen: 19
106.120.101.0/24 maxlen: 24
106.120.128.0/20 maxlen: 20
106.120.192.0/19 maxlen: 19
106.120.213.0/24 maxlen: 24
106.120.224.0/19 maxlen: 19
106.121.0.0/16 maxlen: 16
115.168.1.0/24 maxlen: 24
115.168.64.0/24 maxlen: 24
115.171.0.0/16 maxlen: 16
115.171.0.0/18 maxlen: 18
115.171.64.0/18 maxlen: 18
115.171.128.0/18 maxlen: 18
115.171.192.0/18 maxlen: 18
202.111.240.0/24 maxlen: 24
218.30.179.0/24 maxlen: 24
218.30.180.0/24 maxlen: 24
218.30.181.0/24 maxlen: 24
218.30.182.0/24 maxlen: 24
219.141.128.0/17 maxlen: 17
219.141.150.0/24 maxlen: 24
219.141.187.0/24 maxlen: 24
219.141.224.0/24 maxlen: 24
219.141.239.0/24 maxlen: 24
219.142.0.0/16 maxlen: 16
219.142.0.0/17 maxlen: 17
219.142.5.0/24 maxlen: 24
219.142.34.0/24 maxlen: 24
219.142.43.0/24 maxlen: 24
219.142.51.0/24 maxlen: 24
219.142.70.0/24 maxlen: 24
219.142.91.0/24 maxlen: 24
219.142.128.0/18 maxlen: 18
219.142.192.0/18 maxlen: 18
219.142.210.0/24 maxlen: 24
219.142.211.0/24 maxlen: 24
219.143.0.0/16 maxlen: 16
219.143.8.0/24 maxlen: 24
219.143.10.0/24 maxlen: 24
219.143.18.0/24 maxlen: 24
219.143.37.0/24 maxlen: 24
219.143.76.0/24 maxlen: 24
219.143.80.0/21 maxlen: 21
219.143.88.0/21 maxlen: 21
219.143.96.0/22 maxlen: 22
219.143.101.0/24 maxlen: 24
219.143.144.0/24 maxlen: 24
219.143.217.0/24 maxlen: 24
219.143.240.0/20 maxlen: 20
220.181.176.0/24 maxlen: 24
220.181.190.0/24 maxlen: 24
240e:83:8000::/48 maxlen: 48
240e:604:111::/48 maxlen: 48
240e:604:20f::/48 maxlen: 48
240e:604:784::/48 maxlen: 48
240e:604:900::/40 maxlen: 40
240e:b04::/32 maxlen: 32
240e:b05::/32 maxlen: 32
240e:b06::/32 maxlen: 32
240e:b07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 10:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a8:a2:a3:d3:d5:8e:9f:61:db:d0:b8:86:4c:f0:64:2b:8e:f2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Nov 3 03:29:17 2026 GMT
Not After : Nov 2 03:34:17 2027 GMT
Subject: CN=DD9868BF03FE8A1C2121293381AE7ABAA30E8268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:e5:2f:8e:61:11:c9:d3:2e:97:bb:52:b5:
5e:a1:86:aa:fc:71:4b:de:b6:7d:fd:c2:bb:7d:a2:
0f:7d:0f:ce:d0:7d:87:b5:ec:5b:cf:ca:e2:34:c0:
76:af:3d:5e:4d:17:4d:7a:71:83:c6:ac:1b:10:b7:
0f:3c:7a:e5:bc:43:f4:9a:93:69:ba:a2:fb:e2:0c:
d6:fa:26:4b:d6:6d:0d:45:4f:b6:c4:a3:74:71:0a:
01:c9:32:d2:e2:2a:c9:58:96:d4:58:e6:91:d1:24:
6a:89:a9:fe:41:0a:1c:a5:d0:82:a9:df:a6:6b:30:
ed:bb:09:c4:5b:67:ee:2d:e2:eb:da:0a:d5:ec:e9:
0a:b0:ea:c1:cb:3e:8b:f9:ea:c0:a8:d7:cd:6e:a2:
50:8a:11:18:c9:7e:78:50:de:f2:4d:3a:ee:3e:52:
25:e7:7e:e7:61:4f:83:84:ae:87:9b:28:d5:4a:17:
26:aa:7b:24:0d:02:95:41:49:73:50:0f:44:2f:4e:
2a:51:fa:c3:fe:09:8c:18:00:c6:ee:53:d2:9a:b0:
6f:99:76:00:bf:7a:72:de:cd:b9:85:a1:18:f6:68:
f3:96:a5:95:9b:ec:97:5c:8e:a8:a3:2c:1b:70:70:
70:c6:4b:20:35:44:48:ca:79:ed:0a:45:58:da:53:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:98:68:BF:03:FE:8A:1C:21:21:29:33:81:AE:7A:BA:A3:0E:82:68
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.202.0.0/15
36.110.0.0/17
36.112.0.0/16
106.37.0.0-106.39.255.255
106.120.0.0-106.120.143.255
106.120.192.0-106.121.255.255
115.168.1.0/24
115.168.64.0/24
115.171.0.0/16
202.111.240.0/24
218.30.179.0-218.30.182.255
219.141.128.0-219.143.255.255
220.181.176.0/24
220.181.190.0/24
IPv6:
240e:83:8000::/48
240e:604:111::/48
240e:604:20f::/48
240e:604:784::/48
240e:604:900::/40
240e:b04::/30
Signature Algorithm: sha256WithRSAEncryption
06:1e:ff:f4:12:2f:09:e8:82:5b:db:30:0c:26:37:e5:d9:7e:
97:2a:d1:e6:3f:e5:1b:97:93:2b:3b:01:3d:00:2d:24:35:bf:
c9:24:44:f6:84:9f:a5:d0:53:a7:1f:fb:ee:8a:47:28:3c:43:
9d:f7:a3:67:9f:c4:94:37:ef:bf:cd:97:67:d5:33:22:e6:ee:
4e:e4:aa:31:29:f4:b4:a5:14:be:8e:55:c9:67:07:f4:e1:b1:
ef:3e:ad:67:72:73:af:44:70:44:9a:f4:b7:91:9f:5b:85:4c:
6b:dc:8a:44:8b:9a:03:e1:1d:be:e5:ac:8f:8c:17:46:68:d1:
8a:89:90:27:71:ef:5a:ec:85:cb:13:ff:c2:87:ca:ee:14:55:
52:ba:2d:eb:33:3a:d4:03:c2:e6:8e:8c:8c:0b:62:d6:11:89:
9e:d5:f6:51:76:3b:da:8d:c2:fa:f5:60:02:2e:e8:10:81:1a:
e1:f3:b8:7d:b9:a2:25:2a:04:24:9a:18:f1:e0:7c:f3:a5:a9:
46:54:8b:ce:1f:09:64:cd:fd:a2:5b:fb:cc:21:10:65:3d:d1:
99:07:02:ca:b7:38:01:2d:a2:0f:27:ac:29:65:24:73:d4:08:
27:93:5a:5f:b9:39:61:20:bc:d8:ee:e3:1b:c6:10:d8:91:21:
1c:b1:ef:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:08:51 2026 by rpki-client