Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: U7KbUWiP/AAQvRMEGh+u4NxiYj3+qGXv5INIKnlfO78=
Subject key identifier: 08:5F:B7:C2:E8:58:37:85:49:45:56:3E:0C:DE:F9:DF:29:0C:08:67
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 5D421F42301FED504F7E43D856A9D59EEB498B99
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9808.roa
Signing time: Tue 12 May 2026 13:25:57 +0000
ROA not before: Tue 12 May 2026 13:20:57 +0000
ROA not after: Tue 11 May 2027 13:25:57 +0000
asID: 9808
IP address blocks: 61.234.152.0/24 maxlen: 24
123.88.0.0/24 maxlen: 24
123.88.2.0/24 maxlen: 24
123.88.5.0/24 maxlen: 24
123.88.16.0/23 maxlen: 23
123.88.22.0/23 maxlen: 23
123.88.24.0/21 maxlen: 21
123.88.30.0/24 maxlen: 24
123.88.32.0/21 maxlen: 21
123.88.32.0/24 maxlen: 24
123.88.33.0/24 maxlen: 24
123.88.40.0/23 maxlen: 23
123.88.42.0/24 maxlen: 24
123.88.43.0/24 maxlen: 24
123.88.44.0/22 maxlen: 22
123.88.48.0/22 maxlen: 22
123.88.52.0/23 maxlen: 23
123.88.60.0/22 maxlen: 22
123.88.64.0/24 maxlen: 24
123.88.70.0/23 maxlen: 23
123.88.72.0/22 maxlen: 22
123.88.76.0/24 maxlen: 24
123.88.81.0/24 maxlen: 24
123.88.82.0/23 maxlen: 23
123.88.84.0/24 maxlen: 24
123.88.99.0/24 maxlen: 24
123.88.100.0/23 maxlen: 23
123.88.102.0/24 maxlen: 24
123.88.106.0/23 maxlen: 23
123.88.108.0/24 maxlen: 24
123.88.139.0/24 maxlen: 24
123.88.140.0/23 maxlen: 23
123.88.142.0/23 maxlen: 23
123.88.144.0/23 maxlen: 23
123.88.146.0/24 maxlen: 24
123.88.147.0/24 maxlen: 24
123.88.152.0/22 maxlen: 22
123.88.156.0/23 maxlen: 23
123.88.158.0/24 maxlen: 24
123.88.159.0/24 maxlen: 24
123.88.160.0/23 maxlen: 23
123.88.163.0/24 maxlen: 24
123.88.164.0/24 maxlen: 24
123.88.165.0/24 maxlen: 24
123.88.166.0/23 maxlen: 23
123.88.168.0/22 maxlen: 22
222.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:42:1f:42:30:1f:ed:50:4f:7e:43:d8:56:a9:d5:9e:eb:49:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: May 12 13:20:57 2026 GMT
Not After : May 11 13:25:57 2027 GMT
Subject: CN=085FB7C2E85837854945563E0CDEF9DF290C0867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:f7:a6:94:68:c3:5c:29:a7:20:d8:ef:61:
9c:fd:17:91:6f:5d:2f:f9:a3:7c:3a:d3:aa:ed:4f:
e2:03:f0:a0:26:b4:b3:d6:89:a5:72:f2:97:8e:75:
60:5f:66:58:d4:48:f9:e1:8c:4a:45:a0:ae:27:ac:
c0:c6:fa:79:a0:99:4c:aa:5a:d0:2e:cb:4c:6b:2b:
92:f1:f0:f7:2e:5a:28:81:23:b6:83:9a:40:0c:b8:
de:11:d9:50:8f:91:69:87:8c:5d:96:d9:e4:48:4f:
79:31:da:ab:be:a3:c4:cb:3a:b9:e2:dc:18:81:e8:
56:ce:38:ed:a0:d2:db:ec:15:e1:3b:b7:33:ca:b4:
a6:65:5c:74:38:c2:69:2f:76:ff:dd:2b:e0:cc:9e:
f6:c1:09:82:27:2a:ce:25:cf:58:f1:04:17:76:71:
55:1a:f1:84:9a:3a:07:78:7b:04:c0:f1:10:b2:61:
a6:b1:33:e7:48:53:28:7c:fe:19:8f:bc:38:b7:75:
d6:46:b9:ed:20:71:e5:c1:ab:56:78:98:d4:8a:22:
76:1f:4b:59:28:b9:fd:d3:1e:7f:51:9b:15:de:98:
05:f5:92:64:3f:71:15:af:da:08:cc:c0:18:3b:08:
55:81:64:0b:e0:7b:f9:34:f0:e1:60:e8:b2:4c:20:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:B7:C2:E8:58:37:85:49:45:56:3E:0C:DE:F9:DF:29:0C:08:67
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.234.152.0/24
123.88.0.0/24
123.88.2.0/24
123.88.5.0/24
123.88.16.0/23
123.88.22.0-123.88.53.255
123.88.60.0-123.88.64.255
123.88.70.0-123.88.76.255
123.88.81.0-123.88.84.255
123.88.99.0-123.88.102.255
123.88.106.0-123.88.108.255
123.88.139.0-123.88.147.255
123.88.152.0-123.88.161.255
123.88.163.0-123.88.171.255
222.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
01:51:ab:5e:01:ab:30:25:eb:98:12:ae:b9:b2:58:4e:b3:47:
b8:e2:3b:53:6d:71:2f:cc:f1:d6:39:b0:16:33:dd:f9:9b:07:
6e:34:4a:95:66:bb:4d:91:79:58:6b:ce:a7:97:40:1a:17:d8:
a7:cc:62:28:67:1f:ee:09:79:f0:12:4d:15:12:66:26:e8:cb:
25:81:8b:65:15:ad:05:4d:be:78:68:3e:a5:d8:cb:0b:58:07:
96:d3:8d:98:c3:97:00:09:7e:bb:1a:ef:49:59:4b:4e:3b:a8:
3c:e9:db:85:2d:1e:4f:4e:2a:85:4d:b7:ff:f6:8d:5c:40:7c:
a5:b6:69:a3:ff:d3:4f:cc:b8:92:b7:47:b9:4f:f7:ee:bc:46:
af:42:dc:b6:d9:83:15:22:dd:9c:1a:bc:31:6a:b5:26:83:44:
51:ec:57:3d:b6:83:be:e7:80:d7:8e:1e:5c:f9:fe:8b:0e:72:
a0:28:25:69:c0:0c:43:b7:06:b1:24:fa:a9:60:d7:3e:cb:85:
20:27:33:08:b7:52:9c:33:32:ad:11:b7:a1:f6:4a:a1:14:32:
2c:e1:c7:72:6d:84:05:c2:ce:3f:18:90:43:2e:30:7b:39:0a:
9a:55:7d:b7:ac:c4:54:23:c1:1f:31:88:cd:09:02:b8:1f:1c:
55:73:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:57 2026 by rpki-client