Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
File: AS4837.roa (raw, json)
Hash identifier: DxH/zqWUSoDUCZ3UFy4Yk98posHagr6zBefAKMjq/k4=
Subject key identifier: CD:FE:86:9B:09:24:7E:08:CC:26:3A:24:69:87:2E:0F:73:D2:CD:19
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 45AC495EAF6C9D5C4028A1C841EE48B57C9B40AB
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
Signing time: Tue 21 Jul 2026 06:49:26 +0000
ROA not before: Tue 21 Jul 2026 06:44:26 +0000
ROA not after: Tue 20 Jul 2027 06:49:26 +0000
asID: 4837
IP address blocks: 61.240.0.0/19 maxlen: 19
61.240.32.0/19 maxlen: 19
61.240.64.0/18 maxlen: 18
61.240.128.0/19 maxlen: 19
61.240.160.0/19 maxlen: 19
61.240.192.0/19 maxlen: 19
61.240.224.0/20 maxlen: 20
61.240.224.0/21 maxlen: 21
61.240.232.0/21 maxlen: 21
61.240.240.0/21 maxlen: 21
61.240.248.0/21 maxlen: 21
61.241.64.0/18 maxlen: 18
61.241.128.0/19 maxlen: 19
61.241.160.0/19 maxlen: 19
61.241.192.0/19 maxlen: 19
61.242.128.0/19 maxlen: 19
61.242.160.0/19 maxlen: 19
61.242.192.0/18 maxlen: 18
61.243.0.0/19 maxlen: 19
61.243.1.0/24 maxlen: 24
61.243.2.0/24 maxlen: 24
61.243.3.0/24 maxlen: 24
61.243.4.0/24 maxlen: 24
61.243.10.0/24 maxlen: 24
61.243.11.0/24 maxlen: 24
61.243.12.0/24 maxlen: 24
61.243.32.0/20 maxlen: 20
61.243.48.0/20 maxlen: 20
61.243.64.0/19 maxlen: 19
61.243.96.0/20 maxlen: 20
61.243.112.0/21 maxlen: 21
61.243.120.0/22 maxlen: 22
61.243.124.0/22 maxlen: 22
61.243.128.0/18 maxlen: 18
61.243.192.0/19 maxlen: 19
61.243.224.0/19 maxlen: 19
116.78.0.0/16 maxlen: 16
116.128.224.0/19 maxlen: 19
116.129.0.0/17 maxlen: 17
116.129.128.0/18 maxlen: 18
116.129.192.0/19 maxlen: 19
116.129.224.0/20 maxlen: 20
116.129.240.0/22 maxlen: 22
116.129.244.0/22 maxlen: 22
116.129.248.0/21 maxlen: 21
116.130.0.0/16 maxlen: 16
116.131.0.0/16 maxlen: 16
116.132.0.0/15 maxlen: 15
116.132.114.0/24 maxlen: 24
116.135.0.0/18 maxlen: 18
116.135.64.0/18 maxlen: 18
116.135.128.0/17 maxlen: 17
116.136.0.0/15 maxlen: 15
116.138.0.0/15 maxlen: 15
116.140.0.0/17 maxlen: 17
116.140.128.0/18 maxlen: 18
116.140.192.0/18 maxlen: 18
116.141.0.0/16 maxlen: 16
116.142.0.0/15 maxlen: 15
116.144.0.0/15 maxlen: 15
116.146.0.0/16 maxlen: 16
116.147.0.0/16 maxlen: 16
116.148.0.0/16 maxlen: 16
116.149.0.0/17 maxlen: 17
116.149.128.0/17 maxlen: 17
116.153.0.0/16 maxlen: 16
116.154.0.0/15 maxlen: 15
116.161.0.0/16 maxlen: 16
116.162.0.0/16 maxlen: 16
116.163.0.0/18 maxlen: 18
116.165.0.0/16 maxlen: 16
116.167.0.0/16 maxlen: 16
116.168.0.0/16 maxlen: 16
116.169.0.0/16 maxlen: 16
116.170.0.0/16 maxlen: 16
116.171.0.0/16 maxlen: 16
116.171.38.0/24 maxlen: 24
116.171.98.0/24 maxlen: 24
116.171.109.0/24 maxlen: 24
116.171.138.0/24 maxlen: 24
116.171.249.0/24 maxlen: 24
116.172.64.0/18 maxlen: 18
116.172.128.0/17 maxlen: 17
116.173.0.0/16 maxlen: 16
116.174.0.0/15 maxlen: 15
116.176.0.0/16 maxlen: 16
116.177.0.0/16 maxlen: 16
116.178.0.0/16 maxlen: 16
116.179.0.0/16 maxlen: 16
116.180.0.0/16 maxlen: 16
211.90.0.0/18 maxlen: 18
211.90.64.0/21 maxlen: 21
211.90.72.0/21 maxlen: 21
211.90.80.0/21 maxlen: 21
211.90.88.0/21 maxlen: 21
211.90.96.0/19 maxlen: 19
211.90.128.0/18 maxlen: 18
211.90.192.0/20 maxlen: 20
211.90.216.0/21 maxlen: 21
211.90.224.0/19 maxlen: 19
211.91.0.0/18 maxlen: 18
211.91.64.0/20 maxlen: 20
211.91.80.0/20 maxlen: 20
211.91.96.0/20 maxlen: 20
211.91.120.0/21 maxlen: 21
211.91.128.0/19 maxlen: 19
211.91.160.0/20 maxlen: 20
211.91.176.0/21 maxlen: 21
211.91.184.0/21 maxlen: 21
211.91.216.0/21 maxlen: 21
211.91.224.0/19 maxlen: 19
211.91.224.0/20 maxlen: 20
211.91.240.0/20 maxlen: 20
211.92.0.0/17 maxlen: 17
211.92.128.0/21 maxlen: 21
211.92.136.0/21 maxlen: 21
211.92.144.0/20 maxlen: 20
211.92.160.0/20 maxlen: 20
211.92.176.0/20 maxlen: 20
211.92.192.0/19 maxlen: 19
211.92.224.0/20 maxlen: 20
211.92.244.0/22 maxlen: 22
211.93.0.0/21 maxlen: 21
211.93.8.0/21 maxlen: 21
211.93.16.0/21 maxlen: 21
211.93.18.0/23 maxlen: 23
211.93.24.0/21 maxlen: 21
211.93.32.0/19 maxlen: 19
211.93.64.0/18 maxlen: 18
211.93.128.0/20 maxlen: 20
211.93.144.0/21 maxlen: 21
211.93.164.0/22 maxlen: 22
211.93.168.0/21 maxlen: 21
211.93.176.0/20 maxlen: 20
211.93.192.0/21 maxlen: 21
211.93.200.0/23 maxlen: 23
211.93.204.0/22 maxlen: 22
211.93.211.0/24 maxlen: 24
211.93.212.0/23 maxlen: 23
211.93.224.0/19 maxlen: 19
211.94.37.0/24 maxlen: 24
211.94.192.0/18 maxlen: 18
211.97.64.0/19 maxlen: 19
211.97.96.0/21 maxlen: 21
211.97.104.0/21 maxlen: 21
211.97.112.0/20 maxlen: 20
211.97.128.0/19 maxlen: 19
211.97.160.0/21 maxlen: 21
211.97.168.0/21 maxlen: 21
211.97.176.0/20 maxlen: 20
211.97.192.0/18 maxlen: 18
220.192.0.0/18 maxlen: 18
220.192.64.0/21 maxlen: 21
220.192.80.0/20 maxlen: 20
220.192.96.0/19 maxlen: 19
220.192.128.0/19 maxlen: 19
220.192.160.0/20 maxlen: 20
220.192.176.0/21 maxlen: 21
220.192.184.0/22 maxlen: 22
220.192.188.0/22 maxlen: 22
220.192.192.0/20 maxlen: 20
220.192.208.0/21 maxlen: 21
220.192.216.0/21 maxlen: 21
220.192.224.0/19 maxlen: 19
220.193.0.0/17 maxlen: 17
220.194.64.0/18 maxlen: 18
220.194.128.0/18 maxlen: 18
220.194.128.0/24 maxlen: 24
220.194.138.0/24 maxlen: 24
220.194.140.0/24 maxlen: 24
220.194.146.0/24 maxlen: 24
220.194.147.0/24 maxlen: 24
220.194.148.0/24 maxlen: 24
220.194.172.0/24 maxlen: 24
220.194.188.0/24 maxlen: 24
220.194.189.0/24 maxlen: 24
220.194.192.0/18 maxlen: 18
220.195.0.0/19 maxlen: 19
220.195.32.0/19 maxlen: 19
220.195.64.0/18 maxlen: 18
220.195.128.0/19 maxlen: 19
220.196.47.0/24 maxlen: 24
220.197.0.0/17 maxlen: 17
220.197.77.0/24 maxlen: 24
220.197.160.0/20 maxlen: 20
220.197.169.0/24 maxlen: 24
220.197.176.0/20 maxlen: 20
220.197.192.0/19 maxlen: 19
220.197.224.0/21 maxlen: 21
220.197.232.0/21 maxlen: 21
220.197.240.0/20 maxlen: 20
220.200.0.0/18 maxlen: 18
220.200.64.0/19 maxlen: 19
220.200.96.0/20 maxlen: 20
220.200.112.0/20 maxlen: 20
220.200.128.0/20 maxlen: 20
220.200.148.0/22 maxlen: 22
220.200.152.0/21 maxlen: 21
220.200.160.0/19 maxlen: 19
220.200.192.0/18 maxlen: 18
220.201.0.0/17 maxlen: 17
220.201.128.0/18 maxlen: 18
220.201.192.0/18 maxlen: 18
220.202.0.0/18 maxlen: 18
220.202.64.0/19 maxlen: 19
220.202.96.0/19 maxlen: 19
220.202.128.0/17 maxlen: 17
220.202.128.0/19 maxlen: 19
220.202.160.0/19 maxlen: 19
220.202.192.0/18 maxlen: 18
220.203.128.0/18 maxlen: 18
220.207.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ac:49:5e:af:6c:9d:5c:40:28:a1:c8:41:ee:48:b5:7c:9b:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Jul 21 06:44:26 2026 GMT
Not After : Jul 20 06:49:26 2027 GMT
Subject: CN=CDFE869B09247E08CC263A2469872E0F73D2CD19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:01:3b:3b:ca:c7:41:08:ab:ee:1b:94:4a:1b:
f8:7b:20:5a:0a:47:f4:43:bf:8d:a0:ee:d1:5f:82:
f6:fa:d9:00:b0:6e:f2:98:b3:b2:4e:b3:ea:1e:a0:
7d:fe:b9:2b:f1:2a:38:53:6f:c9:51:a3:00:77:03:
84:e1:9d:16:f5:9c:c4:60:55:44:96:8e:7e:f9:d9:
03:a9:c7:44:be:7a:72:b2:43:54:96:00:c0:96:4a:
19:60:62:84:c5:86:ae:e6:c4:10:f7:d8:82:eb:93:
77:10:07:1d:44:00:15:f0:55:69:c5:0b:6f:50:fd:
43:08:b7:d6:6d:78:46:e1:83:62:49:9d:f8:69:b0:
7b:e8:cd:fb:1c:5a:3d:87:22:f8:bf:ae:2d:94:7c:
99:30:f7:f4:71:74:8b:eb:e8:3e:ac:13:81:d9:c7:
cd:75:a2:6f:5f:7a:58:af:81:37:da:c7:29:c4:3a:
ea:66:c1:c4:c6:db:57:4d:61:fc:37:02:7b:39:27:
c1:06:9b:cf:c6:b5:f3:d8:e2:60:7f:b4:99:72:ca:
84:e0:7a:86:49:18:7c:78:ac:7d:83:4f:02:d0:c0:
53:d8:d8:0e:db:b7:6c:59:c8:87:da:77:f7:8c:96:
97:68:ff:a5:64:c1:8c:a8:bd:30:06:8a:ae:17:40:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:86:9B:09:24:7E:08:CC:26:3A:24:69:87:2E:0F:73:D2:CD:19
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.240.0.0/16
61.241.64.0-61.241.223.255
61.242.128.0-61.243.255.255
116.78.0.0/16
116.128.224.0-116.133.255.255
116.135.0.0-116.149.255.255
116.153.0.0-116.155.255.255
116.161.0.0-116.163.63.255
116.165.0.0/16
116.167.0.0-116.171.255.255
116.172.64.0-116.180.255.255
211.90.0.0-211.90.207.255
211.90.216.0-211.91.111.255
211.91.120.0-211.91.191.255
211.91.216.0-211.92.239.255
211.92.244.0/22
211.93.0.0-211.93.151.255
211.93.164.0-211.93.201.255
211.93.204.0/22
211.93.211.0-211.93.213.255
211.93.224.0/19
211.94.37.0/24
211.94.192.0/18
211.97.64.0-211.97.255.255
220.192.0.0-220.192.71.255
220.192.80.0-220.193.127.255
220.194.64.0-220.195.159.255
220.196.47.0/24
220.197.0.0/17
220.197.160.0-220.197.255.255
220.200.0.0-220.200.143.255
220.200.148.0-220.202.255.255
220.203.128.0/18
220.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:9a:7e:22:9d:16:c4:78:9d:62:cf:3f:3f:d3:ce:fa:b5:57:
44:29:01:2e:55:d1:a7:90:61:4b:9f:ca:21:2f:d9:6f:ba:0c:
af:4c:70:e3:c4:15:41:d5:75:f1:96:50:2f:53:05:a7:79:a5:
3e:4f:9d:52:10:26:ca:49:6c:7b:ca:18:0b:57:09:a5:73:df:
ea:7f:f9:f7:d9:99:7c:b0:b0:3e:76:35:da:bc:da:37:2c:5f:
fb:00:22:d4:51:5b:fb:01:44:f9:d7:e5:ea:d3:f2:c1:92:07:
1f:8a:37:b6:fa:e8:c5:67:e1:44:80:b1:9c:65:8f:54:3d:15:
96:89:d3:11:66:64:fd:c0:62:fc:7d:96:7a:b9:31:26:15:c7:
28:ae:dc:c1:a8:ce:a7:ae:20:bd:e0:d3:bf:a4:6b:6a:05:83:
07:24:86:c0:6c:03:4e:9d:16:22:4c:26:5e:29:87:49:3e:8f:
f6:b2:13:c2:03:e4:1f:c2:16:d9:bc:f8:83:3b:ac:ff:02:fe:
df:f5:d5:ec:7c:dc:87:8a:c8:bd:fa:0f:2d:35:0b:3c:9f:ad:
31:ff:f1:97:ca:13:09:d0:8c:74:4c:5b:1d:7e:cd:46:ec:a6:
ea:e7:57:c8:2a:fe:11:3e:a8:97:92:26:e7:2a:f4:11:d2:0e:
cf:4c:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:49 2026 by rpki-client