Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: deOGv6huaMOHg+AeBrdSsAnoEbTOqCmQGKmsdYT9SEA=
Subject key identifier: 6D:E3:C9:AB:08:34:C5:D8:75:0E:22:89:EB:77:BE:08:07:84:56:57
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 334A4EF02C48C8D9C814086C4919CEB8826C6EF2
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
Signing time: Mon 13 Jul 2026 16:07:45 +0000
ROA not before: Mon 13 Jul 2026 16:02:45 +0000
ROA not after: Mon 12 Jul 2027 16:07:45 +0000
asID: 4847
IP address blocks: 1.202.0.0/17 maxlen: 17
1.202.128.0/17 maxlen: 17
1.202.143.0/24 maxlen: 24
1.202.217.0/24 maxlen: 24
1.202.224.0/24 maxlen: 24
1.202.228.0/24 maxlen: 24
1.202.231.0/24 maxlen: 24
1.202.237.0/24 maxlen: 24
1.203.0.0/16 maxlen: 16
1.203.0.0/18 maxlen: 18
1.203.90.0/24 maxlen: 24
1.203.91.0/24 maxlen: 24
1.203.96.0/24 maxlen: 24
1.203.105.0/24 maxlen: 24
1.203.128.0/20 maxlen: 20
36.110.0.0/17 maxlen: 17
36.110.14.0/24 maxlen: 24
36.110.24.0/24 maxlen: 24
36.110.28.0/24 maxlen: 24
36.110.38.0/24 maxlen: 24
36.110.60.0/24 maxlen: 24
36.110.82.0/24 maxlen: 24
36.110.114.0/24 maxlen: 24
36.110.118.0/24 maxlen: 24
36.110.119.0/24 maxlen: 24
36.110.120.0/24 maxlen: 24
36.110.121.0/24 maxlen: 24
36.112.0.0/16 maxlen: 16
36.112.3.0/24 maxlen: 24
36.112.20.0/24 maxlen: 24
36.112.22.0/24 maxlen: 24
36.112.27.0/24 maxlen: 24
36.112.30.0/24 maxlen: 24
36.112.31.0/24 maxlen: 24
36.112.39.0/24 maxlen: 24
36.112.48.0/22 maxlen: 22
36.112.56.0/24 maxlen: 24
36.112.63.0/24 maxlen: 24
36.112.89.0/24 maxlen: 24
36.112.97.0/24 maxlen: 24
36.112.107.0/24 maxlen: 24
36.112.113.0/24 maxlen: 24
36.112.115.0/24 maxlen: 24
36.112.120.0/24 maxlen: 24
36.112.121.0/24 maxlen: 24
36.112.122.0/24 maxlen: 24
36.112.140.0/23 maxlen: 23
36.112.151.0/24 maxlen: 24
36.112.152.0/24 maxlen: 24
36.112.162.0/24 maxlen: 24
36.112.166.0/24 maxlen: 24
36.112.228.0/24 maxlen: 24
36.112.232.0/24 maxlen: 24
36.112.248.0/24 maxlen: 24
106.37.0.0/16 maxlen: 16
106.38.0.0/16 maxlen: 16
106.38.0.0/19 maxlen: 19
106.38.57.0/24 maxlen: 24
106.39.0.0/16 maxlen: 16
106.39.90.0/24 maxlen: 24
106.39.91.0/24 maxlen: 24
106.39.103.0/24 maxlen: 24
106.120.0.0/19 maxlen: 19
106.120.32.0/19 maxlen: 19
106.120.64.0/19 maxlen: 19
106.120.96.0/19 maxlen: 19
106.120.101.0/24 maxlen: 24
106.120.128.0/20 maxlen: 20
106.120.192.0/19 maxlen: 19
106.120.213.0/24 maxlen: 24
106.120.224.0/19 maxlen: 19
106.121.0.0/16 maxlen: 16
115.168.1.0/24 maxlen: 24
115.168.64.0/24 maxlen: 24
115.171.0.0/16 maxlen: 16
115.171.0.0/18 maxlen: 18
115.171.64.0/18 maxlen: 18
115.171.128.0/18 maxlen: 18
115.171.192.0/18 maxlen: 18
202.111.240.0/24 maxlen: 24
218.30.179.0/24 maxlen: 24
218.30.180.0/24 maxlen: 24
218.30.181.0/24 maxlen: 24
218.30.182.0/24 maxlen: 24
219.141.128.0/17 maxlen: 17
219.141.150.0/24 maxlen: 24
219.141.224.0/24 maxlen: 24
219.141.239.0/24 maxlen: 24
219.142.0.0/16 maxlen: 16
219.142.0.0/17 maxlen: 17
219.142.34.0/24 maxlen: 24
219.142.43.0/24 maxlen: 24
219.142.51.0/24 maxlen: 24
219.142.91.0/24 maxlen: 24
219.142.128.0/18 maxlen: 18
219.142.192.0/18 maxlen: 18
219.142.210.0/24 maxlen: 24
219.142.211.0/24 maxlen: 24
219.143.0.0/16 maxlen: 16
219.143.8.0/24 maxlen: 24
219.143.18.0/24 maxlen: 24
219.143.37.0/24 maxlen: 24
219.143.76.0/24 maxlen: 24
219.143.80.0/21 maxlen: 21
219.143.88.0/21 maxlen: 21
219.143.96.0/22 maxlen: 22
219.143.101.0/24 maxlen: 24
219.143.144.0/24 maxlen: 24
219.143.240.0/20 maxlen: 20
220.181.176.0/24 maxlen: 24
220.181.190.0/24 maxlen: 24
240e:83:8000::/48 maxlen: 48
240e:604:111::/48 maxlen: 48
240e:604:20f::/48 maxlen: 48
240e:604:784::/48 maxlen: 48
240e:604:900::/40 maxlen: 40
240e:b04::/32 maxlen: 32
240e:b05::/32 maxlen: 32
240e:b06::/32 maxlen: 32
240e:b07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4a:4e:f0:2c:48:c8:d9:c8:14:08:6c:49:19:ce:b8:82:6c:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jul 13 16:02:45 2026 GMT
Not After : Jul 12 16:07:45 2027 GMT
Subject: CN=6DE3C9AB0834C5D8750E2289EB77BE0807845657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:f9:7f:8b:c7:fa:81:2d:98:0c:e8:39:60:
c3:05:22:db:3d:6d:eb:cf:f9:13:02:ea:6f:81:0b:
ca:35:e5:5b:45:43:47:71:37:44:08:d0:1f:9f:44:
12:36:51:83:1a:39:91:b3:53:0f:18:6e:ae:99:74:
72:5b:3b:4e:ea:11:46:20:11:a6:af:90:c3:9a:1a:
dd:59:0d:af:e3:52:cd:7c:85:8b:b5:97:3c:82:4a:
da:c7:d0:9c:ef:10:f9:25:29:7b:92:17:c4:8a:0e:
de:7b:80:7e:a8:b5:a8:c9:24:3d:f2:d8:10:73:33:
6a:e7:6e:4b:12:20:90:d1:4b:41:89:16:35:3e:8c:
25:3d:3d:7f:1b:78:08:72:71:2e:78:a3:44:19:e3:
87:7e:45:22:8a:83:a0:a5:b9:30:7b:d7:e0:98:5a:
b9:ac:d1:5e:cb:d9:87:bb:91:cf:d6:a6:e9:a2:ce:
bb:ae:e1:ef:5d:38:a4:59:c1:84:2e:37:1b:b5:35:
d9:c2:2b:b9:f7:3e:f8:e0:83:83:8f:60:bf:1a:32:
6b:f5:ed:57:39:9c:8d:04:ab:92:81:f2:22:7b:7f:
07:ff:9c:2a:6c:53:54:c0:0e:4d:bb:26:7b:68:15:
dc:3e:51:d2:7c:19:b3:b5:a9:f4:dd:cf:6d:56:e3:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E3:C9:AB:08:34:C5:D8:75:0E:22:89:EB:77:BE:08:07:84:56:57
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.202.0.0/15
36.110.0.0/17
36.112.0.0/16
106.37.0.0-106.39.255.255
106.120.0.0-106.120.143.255
106.120.192.0-106.121.255.255
115.168.1.0/24
115.168.64.0/24
115.171.0.0/16
202.111.240.0/24
218.30.179.0-218.30.182.255
219.141.128.0-219.143.255.255
220.181.176.0/24
220.181.190.0/24
IPv6:
240e:83:8000::/48
240e:604:111::/48
240e:604:20f::/48
240e:604:784::/48
240e:604:900::/40
240e:b04::/30
Signature Algorithm: sha256WithRSAEncryption
06:96:de:82:c1:e4:2d:8c:b2:dc:5c:aa:52:56:5d:38:42:c4:
c9:58:13:47:d0:0a:e6:ae:0b:30:f1:fd:6b:53:af:80:7d:b0:
fa:38:8d:1a:92:4c:8b:16:5a:3d:a3:78:46:33:85:dc:aa:59:
82:96:a0:0f:0f:d4:dc:fb:b6:bb:f3:bc:aa:75:31:62:7c:96:
d1:13:48:77:a5:c5:2a:a6:2b:bf:25:05:06:bd:f7:a0:76:53:
50:9f:fb:8a:0d:92:58:02:e7:48:f8:3c:23:d5:04:88:df:e8:
f5:08:d0:59:1e:53:17:c1:84:80:88:84:b5:0e:bc:f0:c2:7e:
83:9f:ec:41:a1:4e:29:ac:4e:78:ae:d8:cd:f0:73:aa:41:13:
d4:8a:6d:1f:ac:84:99:fd:ba:bb:4d:59:7e:b7:f9:75:cf:dd:
f2:17:0d:dc:31:b5:95:91:71:ab:90:b6:6b:f3:19:94:20:04:
3a:55:ac:69:bb:2e:a6:4e:10:2d:46:c9:1b:be:de:d6:68:e6:
43:70:d9:96:4a:44:ba:5f:2b:9e:2f:5c:17:ac:e8:eb:89:88:
56:1b:5f:77:11:31:24:00:d7:b4:40:50:c1:6f:a8:89:04:b0:
d9:7a:8c:29:88:d0:0f:9d:49:e4:bc:7a:bc:01:d5:8c:a4:fe:
e1:91:65:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:46 2026 by rpki-client