Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: 3iSNNi2FuNtir737Ugji4/SXTB5NeQgm9GdlYenOm+U=
Subject key identifier: 52:5F:21:24:7A:F0:B2:ED:3A:1A:01:85:53:D3:78:60:22:28:1A:D0
Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E
Certificate serial: 58550FB5818B5EEAA93AFD439EA1B697DB5B39CE
Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/AS4847.roa
Signing time: Sat 09 May 2026 02:29:00 +0000
ROA not before: Sat 09 May 2026 02:24:00 +0000
ROA not after: Sat 08 May 2027 02:29:00 +0000
asID: 4847
IP address blocks: 58.116.0.0/18 maxlen: 18
58.116.64.0/18 maxlen: 18
58.116.128.0/18 maxlen: 18
58.116.192.0/18 maxlen: 18
58.117.0.0/18 maxlen: 18
58.117.64.0/18 maxlen: 18
58.117.128.0/17 maxlen: 17
58.117.128.0/18 maxlen: 18
58.117.192.0/21 maxlen: 21
58.117.224.0/20 maxlen: 20
58.117.240.0/20 maxlen: 20
58.118.0.0/15 maxlen: 15
58.128.0.0/18 maxlen: 18
58.128.64.0/18 maxlen: 18
58.128.128.0/18 maxlen: 18
58.128.192.0/18 maxlen: 18
58.129.0.0/16 maxlen: 16
58.129.0.0/18 maxlen: 18
58.129.64.0/18 maxlen: 18
58.129.128.0/18 maxlen: 18
58.129.192.0/18 maxlen: 18
58.130.0.0/18 maxlen: 18
58.130.64.0/18 maxlen: 18
58.130.128.0/18 maxlen: 18
58.130.192.0/18 maxlen: 18
58.131.0.0/18 maxlen: 18
58.131.64.0/18 maxlen: 18
58.131.128.0/18 maxlen: 18
58.131.192.0/18 maxlen: 18
58.132.0.0/18 maxlen: 18
58.132.64.0/18 maxlen: 18
58.132.128.0/18 maxlen: 18
58.132.168.0/21 maxlen: 21
58.132.176.0/21 maxlen: 21
58.132.192.0/19 maxlen: 19
58.132.200.0/21 maxlen: 21
58.132.208.0/20 maxlen: 20
58.132.209.0/24 maxlen: 24
58.132.224.0/19 maxlen: 19
58.133.0.0/18 maxlen: 18
58.133.64.0/18 maxlen: 18
58.133.128.0/18 maxlen: 18
58.133.192.0/18 maxlen: 18
58.134.0.0/18 maxlen: 18
58.134.64.0/18 maxlen: 18
58.134.128.0/18 maxlen: 18
58.134.192.0/18 maxlen: 18
58.135.0.0/18 maxlen: 18
58.135.64.0/18 maxlen: 18
58.135.64.0/21 maxlen: 21
58.135.72.0/22 maxlen: 22
58.135.81.0/24 maxlen: 24
58.135.88.0/21 maxlen: 21
58.135.96.0/20 maxlen: 20
58.135.104.0/21 maxlen: 21
58.135.112.0/21 maxlen: 21
58.135.120.0/22 maxlen: 22
58.135.128.0/18 maxlen: 18
58.135.192.0/18 maxlen: 18
117.106.0.0/18 maxlen: 18
117.106.64.0/18 maxlen: 18
117.106.128.0/18 maxlen: 18
117.106.192.0/18 maxlen: 18
117.107.0.0/18 maxlen: 18
117.107.64.0/18 maxlen: 18
117.112.0.0/18 maxlen: 18
117.112.0.0/21 maxlen: 21
117.112.64.0/18 maxlen: 18
117.112.128.0/18 maxlen: 18
117.112.192.0/18 maxlen: 18
117.113.0.0/18 maxlen: 18
117.113.64.0/19 maxlen: 19
117.113.96.0/19 maxlen: 19
117.113.128.0/18 maxlen: 18
117.113.192.0/18 maxlen: 18
117.114.0.0/19 maxlen: 19
117.114.14.0/23 maxlen: 23
117.114.32.0/19 maxlen: 19
117.114.64.0/19 maxlen: 19
117.114.64.0/23 maxlen: 23
117.114.96.0/19 maxlen: 19
117.114.128.0/19 maxlen: 19
117.114.128.0/20 maxlen: 20
117.114.128.0/24 maxlen: 24
117.114.144.0/21 maxlen: 21
117.114.152.0/21 maxlen: 21
117.114.160.0/19 maxlen: 19
117.114.160.0/23 maxlen: 23
117.114.168.0/21 maxlen: 21
117.114.192.0/19 maxlen: 19
117.114.192.0/21 maxlen: 21
117.114.223.0/24 maxlen: 24
117.114.224.0/19 maxlen: 19
117.114.224.0/20 maxlen: 20
117.115.0.0/18 maxlen: 18
117.115.64.0/18 maxlen: 18
117.115.128.0/18 maxlen: 18
117.115.192.0/18 maxlen: 18
117.116.0.0/18 maxlen: 18
117.116.64.0/18 maxlen: 18
117.116.128.0/18 maxlen: 18
117.116.192.0/18 maxlen: 18
117.117.0.0/18 maxlen: 18
117.117.64.0/18 maxlen: 18
117.117.128.0/18 maxlen: 18
117.117.192.0/18 maxlen: 18
117.118.0.0/18 maxlen: 18
117.118.64.0/18 maxlen: 18
117.119.0.0/17 maxlen: 17
117.119.0.0/18 maxlen: 18
117.119.83.0/24 maxlen: 24
117.119.84.0/24 maxlen: 24
117.119.128.0/18 maxlen: 18
117.119.192.0/18 maxlen: 18
171.84.0.0/21 maxlen: 21
171.84.2.0/24 maxlen: 24
211.153.0.0/17 maxlen: 17
211.153.0.0/22 maxlen: 22
211.153.4.0/22 maxlen: 22
211.153.8.0/22 maxlen: 22
211.153.12.0/22 maxlen: 22
211.153.16.0/22 maxlen: 22
211.153.20.0/24 maxlen: 24
211.153.21.0/24 maxlen: 24
211.153.22.0/24 maxlen: 24
211.153.23.0/24 maxlen: 24
211.153.24.0/22 maxlen: 22
211.153.28.0/22 maxlen: 22
211.153.32.0/22 maxlen: 22
211.153.36.0/22 maxlen: 22
211.153.40.0/22 maxlen: 22
211.153.44.0/22 maxlen: 22
211.153.48.0/20 maxlen: 20
211.153.64.0/24 maxlen: 24
211.153.65.0/24 maxlen: 24
211.153.66.0/23 maxlen: 23
211.153.68.0/24 maxlen: 24
211.153.69.0/24 maxlen: 24
211.153.70.0/23 maxlen: 23
211.153.72.0/24 maxlen: 24
211.153.73.0/24 maxlen: 24
211.153.74.0/24 maxlen: 24
211.153.75.0/24 maxlen: 24
211.153.76.0/24 maxlen: 24
211.153.77.0/24 maxlen: 24
211.153.78.0/24 maxlen: 24
211.153.79.0/24 maxlen: 24
211.153.80.0/21 maxlen: 21
211.153.88.0/21 maxlen: 21
211.153.88.0/22 maxlen: 22
211.153.92.0/23 maxlen: 23
211.153.96.0/20 maxlen: 20
211.153.112.0/20 maxlen: 20
211.153.112.0/23 maxlen: 23
211.153.128.0/17 maxlen: 17
211.153.128.0/19 maxlen: 19
211.153.160.0/19 maxlen: 19
211.153.192.0/19 maxlen: 19
211.153.224.0/19 maxlen: 19
222.249.0.0/17 maxlen: 17
222.249.0.0/18 maxlen: 18
222.249.64.0/18 maxlen: 18
222.249.112.0/21 maxlen: 21
222.249.112.0/23 maxlen: 23
222.249.114.0/23 maxlen: 23
222.249.116.0/24 maxlen: 24
222.249.120.0/21 maxlen: 21
222.249.128.0/24 maxlen: 24
222.249.129.0/24 maxlen: 24
222.249.130.0/24 maxlen: 24
222.249.131.0/24 maxlen: 24
222.249.132.0/23 maxlen: 23
222.249.134.0/23 maxlen: 23
222.249.136.0/22 maxlen: 22
222.249.139.0/24 maxlen: 24
222.249.140.0/22 maxlen: 22
222.249.144.0/21 maxlen: 21
222.249.144.0/22 maxlen: 22
222.249.148.0/24 maxlen: 24
222.249.149.0/24 maxlen: 24
222.249.150.0/23 maxlen: 23
222.249.152.0/22 maxlen: 22
222.249.156.0/22 maxlen: 22
222.249.160.0/20 maxlen: 20
222.249.168.0/23 maxlen: 23
222.249.172.0/22 maxlen: 22
222.249.176.0/20 maxlen: 20
222.249.192.0/19 maxlen: 19
222.249.224.0/20 maxlen: 20
222.249.224.0/23 maxlen: 23
222.249.226.0/23 maxlen: 23
222.249.228.0/23 maxlen: 23
222.249.230.0/23 maxlen: 23
222.249.232.0/23 maxlen: 23
222.249.234.0/23 maxlen: 23
222.249.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl
rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:55:0f:b5:81:8b:5e:ea:a9:3a:fd:43:9e:a1:b6:97:db:5b:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E
Validity
Not Before: May 9 02:24:00 2026 GMT
Not After : May 8 02:29:00 2027 GMT
Subject: CN=525F21247AF0B2ED3A1A018553D3786022281AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:22:64:9c:91:95:d9:d9:40:0e:6e:d1:48:
8a:8e:58:a8:b8:58:9e:0c:de:5e:8e:b6:0f:bf:16:
80:8e:9f:dd:a6:08:c4:8d:c2:e5:9f:dc:43:9b:1d:
ac:0d:d4:c0:bc:42:88:e8:53:1d:11:e7:31:87:e1:
8c:9f:17:9f:18:e2:72:b8:41:45:04:7d:e2:bb:1b:
1b:42:74:ce:6d:ab:eb:54:5c:64:30:cd:81:2e:5c:
67:a1:74:93:08:19:08:e1:7d:48:53:c3:e1:76:f8:
e6:58:e9:35:1e:c8:50:a6:0c:82:e4:bf:15:16:46:
01:de:62:2d:25:0e:6e:19:77:21:36:8c:56:9f:6c:
f6:80:87:d0:c7:85:17:e7:11:a8:85:f6:3e:5c:4e:
84:ef:69:d3:17:b9:22:3b:d5:13:3e:b6:3d:46:bc:
33:0a:57:6e:70:15:b9:b1:e4:5b:69:ec:5f:d9:38:
39:69:af:7e:ac:ec:ed:78:d6:d8:32:b9:a5:e8:d9:
59:14:74:e2:bd:00:ab:24:56:23:d1:c8:7a:26:01:
54:52:fe:a2:9e:01:78:1f:c0:b7:1d:ec:cd:6b:2d:
ff:e0:a3:aa:ec:16:40:e7:bb:6b:b1:b9:3d:88:83:
85:00:75:eb:4d:50:2f:d6:06:10:6f:5c:c0:0e:79:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5F:21:24:7A:F0:B2:ED:3A:1A:01:85:53:D3:78:60:22:28:1A:D0
X509v3 Authority Key Identifier:
keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.116.0.0/14
58.128.0.0/13
117.106.0.0-117.107.127.255
117.112.0.0-117.118.127.255
117.119.0.0/16
171.84.0.0/21
211.153.0.0/16
222.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:fc:81:82:7d:29:5a:ef:6a:44:28:fd:b1:8b:38:23:28:8c:
ab:25:11:9d:dd:ff:9c:aa:08:ea:da:31:86:fe:18:9b:96:f6:
97:65:92:d3:54:87:1d:89:bb:e9:13:1e:0d:2b:93:02:84:46:
f1:c4:a2:1f:65:c7:ec:7f:6e:54:09:f6:2f:61:49:ae:9f:b1:
94:cc:98:8b:98:42:af:ce:9a:cc:af:7f:2a:67:44:b7:72:34:
a1:82:d2:e1:a5:cf:45:9d:5d:a3:90:4d:4c:ad:96:09:44:8d:
ee:0e:3d:28:29:8d:b0:b0:aa:72:a9:4b:21:f7:79:99:81:96:
cf:a4:6b:89:67:4a:c2:d5:8c:d3:37:c6:27:51:8b:63:79:75:
87:2e:7f:ca:44:67:3e:d9:aa:7e:42:56:37:fe:3a:7c:95:55:
de:4c:0b:e1:be:20:9b:c6:92:97:2d:a7:5d:2d:46:5f:3f:df:
d3:1a:82:54:1c:9f:46:1d:c6:ea:fb:54:f4:70:6a:3c:df:c1:
bc:dc:32:6b:1d:2e:24:ef:95:a8:fa:ab:e8:e7:c0:89:81:06:
06:80:a1:66:7d:91:64:be:a5:78:18:7f:60:4e:16:3e:d0:41:
b3:28:cc:a9:ff:e5:f6:50:fa:e3:d6:31:f0:da:32:db:89:bd:
8a:a6:64:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:05 2026 by rpki-client