Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: v2tZ5aRYmWIzu+YFY0ecPPc9l5uwNOpJunCjfdxgW5E=
Subject key identifier: 96:D1:B0:CA:3B:82:FB:22:D4:D6:69:23:F2:84:C7:B0:DC:BC:01:70
Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
Certificate serial: 3B67EC8FC2A91C780D3CAC1A6BD6A33C4432E67B
Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS9808.roa
Signing time: Wed 13 May 2026 08:47:18 +0000
ROA not before: Wed 13 May 2026 08:42:18 +0000
ROA not after: Wed 12 May 2027 08:47:18 +0000
asID: 9808
IP address blocks: 36.212.0.0/24 maxlen: 24
36.212.1.0/24 maxlen: 24
36.212.2.0/24 maxlen: 24
36.212.4.0/24 maxlen: 24
36.212.5.0/24 maxlen: 24
36.212.8.0/24 maxlen: 24
36.212.9.0/24 maxlen: 24
36.212.10.0/24 maxlen: 24
36.212.11.0/24 maxlen: 24
36.212.12.0/24 maxlen: 24
36.212.13.0/24 maxlen: 24
36.212.14.0/24 maxlen: 24
36.212.15.0/24 maxlen: 24
36.212.16.0/24 maxlen: 24
36.212.17.0/24 maxlen: 24
36.212.18.0/24 maxlen: 24
36.212.19.0/24 maxlen: 24
36.212.20.0/24 maxlen: 24
36.212.21.0/24 maxlen: 24
36.212.22.0/24 maxlen: 24
36.212.23.0/24 maxlen: 24
36.212.24.0/24 maxlen: 24
36.212.25.0/24 maxlen: 24
36.212.26.0/24 maxlen: 24
36.212.27.0/24 maxlen: 24
36.212.28.0/24 maxlen: 24
36.212.29.0/24 maxlen: 24
36.212.30.0/24 maxlen: 24
36.212.31.0/24 maxlen: 24
36.212.32.0/24 maxlen: 24
36.212.33.0/24 maxlen: 24
36.212.34.0/24 maxlen: 24
36.212.35.0/24 maxlen: 24
36.212.36.0/24 maxlen: 24
36.212.37.0/24 maxlen: 24
36.212.38.0/24 maxlen: 24
36.212.39.0/24 maxlen: 24
36.212.40.0/24 maxlen: 24
36.212.41.0/24 maxlen: 24
36.212.42.0/24 maxlen: 24
36.212.43.0/24 maxlen: 24
36.212.44.0/24 maxlen: 24
36.212.45.0/24 maxlen: 24
36.212.46.0/24 maxlen: 24
36.212.47.0/24 maxlen: 24
36.212.48.0/24 maxlen: 24
36.212.49.0/24 maxlen: 24
36.212.50.0/24 maxlen: 24
36.212.51.0/24 maxlen: 24
36.212.52.0/24 maxlen: 24
36.212.53.0/24 maxlen: 24
36.212.54.0/24 maxlen: 24
36.212.55.0/24 maxlen: 24
36.212.56.0/24 maxlen: 24
36.212.57.0/24 maxlen: 24
36.212.58.0/24 maxlen: 24
36.212.59.0/24 maxlen: 24
36.212.60.0/24 maxlen: 24
36.212.61.0/24 maxlen: 24
36.212.62.0/24 maxlen: 24
36.212.63.0/24 maxlen: 24
36.212.64.0/24 maxlen: 24
36.212.65.0/24 maxlen: 24
36.212.66.0/24 maxlen: 24
36.212.67.0/24 maxlen: 24
36.212.68.0/24 maxlen: 24
36.212.69.0/24 maxlen: 24
36.212.70.0/24 maxlen: 24
36.212.71.0/24 maxlen: 24
36.212.72.0/24 maxlen: 24
36.212.73.0/24 maxlen: 24
36.212.74.0/24 maxlen: 24
36.212.75.0/24 maxlen: 24
36.212.76.0/24 maxlen: 24
36.212.77.0/24 maxlen: 24
36.212.78.0/24 maxlen: 24
36.212.79.0/24 maxlen: 24
36.212.80.0/24 maxlen: 24
36.212.81.0/24 maxlen: 24
36.212.82.0/24 maxlen: 24
36.212.83.0/24 maxlen: 24
36.212.84.0/24 maxlen: 24
36.212.85.0/24 maxlen: 24
36.212.86.0/24 maxlen: 24
36.212.87.0/24 maxlen: 24
36.212.88.0/24 maxlen: 24
36.212.89.0/24 maxlen: 24
36.212.90.0/24 maxlen: 24
36.212.91.0/24 maxlen: 24
36.212.92.0/24 maxlen: 24
36.212.93.0/24 maxlen: 24
36.212.94.0/24 maxlen: 24
36.212.95.0/24 maxlen: 24
36.212.96.0/24 maxlen: 24
36.212.97.0/24 maxlen: 24
36.212.98.0/24 maxlen: 24
36.212.99.0/24 maxlen: 24
36.212.100.0/24 maxlen: 24
36.212.101.0/24 maxlen: 24
36.212.102.0/24 maxlen: 24
36.212.103.0/24 maxlen: 24
36.212.104.0/24 maxlen: 24
36.212.105.0/24 maxlen: 24
36.212.106.0/24 maxlen: 24
36.212.107.0/24 maxlen: 24
36.212.108.0/24 maxlen: 24
36.212.109.0/24 maxlen: 24
36.212.110.0/24 maxlen: 24
36.212.111.0/24 maxlen: 24
36.212.112.0/24 maxlen: 24
36.212.113.0/24 maxlen: 24
36.212.114.0/24 maxlen: 24
36.212.115.0/24 maxlen: 24
36.212.116.0/24 maxlen: 24
36.212.117.0/24 maxlen: 24
36.212.118.0/24 maxlen: 24
36.212.119.0/24 maxlen: 24
36.212.120.0/24 maxlen: 24
36.212.121.0/24 maxlen: 24
36.212.122.0/24 maxlen: 24
36.212.123.0/24 maxlen: 24
36.212.124.0/24 maxlen: 24
36.212.125.0/24 maxlen: 24
36.212.126.0/24 maxlen: 24
36.212.127.0/24 maxlen: 24
36.212.128.0/24 maxlen: 24
36.212.129.0/24 maxlen: 24
36.212.130.0/24 maxlen: 24
36.212.131.0/24 maxlen: 24
36.212.132.0/24 maxlen: 24
36.212.133.0/24 maxlen: 24
36.212.134.0/24 maxlen: 24
36.212.135.0/24 maxlen: 24
36.212.136.0/24 maxlen: 24
36.212.137.0/24 maxlen: 24
36.212.138.0/24 maxlen: 24
36.212.139.0/24 maxlen: 24
36.212.140.0/24 maxlen: 24
36.212.141.0/24 maxlen: 24
36.212.142.0/24 maxlen: 24
36.212.143.0/24 maxlen: 24
36.212.144.0/24 maxlen: 24
36.212.145.0/24 maxlen: 24
36.212.146.0/24 maxlen: 24
36.212.147.0/24 maxlen: 24
36.212.148.0/24 maxlen: 24
36.212.149.0/24 maxlen: 24
36.212.150.0/24 maxlen: 24
36.212.151.0/24 maxlen: 24
36.212.152.0/24 maxlen: 24
36.212.153.0/24 maxlen: 24
36.212.154.0/24 maxlen: 24
36.212.155.0/24 maxlen: 24
36.212.156.0/24 maxlen: 24
36.212.157.0/24 maxlen: 24
36.212.158.0/24 maxlen: 24
36.212.159.0/24 maxlen: 24
36.212.160.0/24 maxlen: 24
36.212.161.0/24 maxlen: 24
36.212.162.0/24 maxlen: 24
36.212.163.0/24 maxlen: 24
36.212.164.0/24 maxlen: 24
36.212.165.0/24 maxlen: 24
36.212.166.0/24 maxlen: 24
36.212.167.0/24 maxlen: 24
36.212.168.0/24 maxlen: 24
36.212.169.0/24 maxlen: 24
36.212.170.0/24 maxlen: 24
36.212.171.0/24 maxlen: 24
36.212.172.0/24 maxlen: 24
36.212.173.0/24 maxlen: 24
36.212.174.0/24 maxlen: 24
36.212.175.0/24 maxlen: 24
36.212.176.0/24 maxlen: 24
36.212.177.0/24 maxlen: 24
36.212.178.0/24 maxlen: 24
36.212.179.0/24 maxlen: 24
36.212.180.0/24 maxlen: 24
36.212.182.0/24 maxlen: 24
36.212.183.0/24 maxlen: 24
36.212.184.0/24 maxlen: 24
36.212.185.0/24 maxlen: 24
36.212.186.0/24 maxlen: 24
36.212.187.0/24 maxlen: 24
36.212.188.0/24 maxlen: 24
36.212.189.0/24 maxlen: 24
36.212.190.0/24 maxlen: 24
36.212.191.0/24 maxlen: 24
36.212.192.0/24 maxlen: 24
36.212.194.0/24 maxlen: 24
36.212.195.0/24 maxlen: 24
36.212.196.0/24 maxlen: 24
36.212.197.0/24 maxlen: 24
36.212.198.0/24 maxlen: 24
36.212.199.0/24 maxlen: 24
36.212.200.0/24 maxlen: 24
36.212.202.0/24 maxlen: 24
36.212.203.0/24 maxlen: 24
36.212.204.0/24 maxlen: 24
36.212.205.0/24 maxlen: 24
36.212.206.0/24 maxlen: 24
36.212.207.0/24 maxlen: 24
36.212.208.0/24 maxlen: 24
36.212.209.0/24 maxlen: 24
36.212.210.0/24 maxlen: 24
36.212.211.0/24 maxlen: 24
36.212.212.0/24 maxlen: 24
36.212.213.0/24 maxlen: 24
36.212.214.0/24 maxlen: 24
36.212.215.0/24 maxlen: 24
36.212.216.0/24 maxlen: 24
36.212.217.0/24 maxlen: 24
36.212.218.0/24 maxlen: 24
36.212.219.0/24 maxlen: 24
36.212.220.0/24 maxlen: 24
36.212.221.0/24 maxlen: 24
36.212.222.0/24 maxlen: 24
36.212.223.0/24 maxlen: 24
36.212.225.0/24 maxlen: 24
36.212.226.0/24 maxlen: 24
36.212.227.0/24 maxlen: 24
36.212.228.0/24 maxlen: 24
36.212.229.0/24 maxlen: 24
36.212.230.0/24 maxlen: 24
36.212.231.0/24 maxlen: 24
36.212.232.0/24 maxlen: 24
36.212.233.0/24 maxlen: 24
36.212.234.0/24 maxlen: 24
36.212.235.0/24 maxlen: 24
36.212.236.0/24 maxlen: 24
36.212.237.0/24 maxlen: 24
36.212.238.0/24 maxlen: 24
36.212.239.0/24 maxlen: 24
36.212.240.0/24 maxlen: 24
36.212.241.0/24 maxlen: 24
36.212.242.0/24 maxlen: 24
36.212.243.0/24 maxlen: 24
36.212.244.0/24 maxlen: 24
36.212.245.0/24 maxlen: 24
36.212.246.0/24 maxlen: 24
36.212.247.0/24 maxlen: 24
36.212.248.0/24 maxlen: 24
36.212.249.0/24 maxlen: 24
36.212.250.0/24 maxlen: 24
36.212.251.0/24 maxlen: 24
36.212.252.0/24 maxlen: 24
36.212.253.0/24 maxlen: 24
36.212.254.0/24 maxlen: 24
36.212.255.0/24 maxlen: 24
36.213.0.0/24 maxlen: 24
36.213.1.0/24 maxlen: 24
36.213.10.0/24 maxlen: 24
36.213.11.0/24 maxlen: 24
36.213.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl
rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:67:ec:8f:c2:a9:1c:78:0d:3c:ac:1a:6b:d6:a3:3c:44:32:e6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
Validity
Not Before: May 13 08:42:18 2026 GMT
Not After : May 12 08:47:18 2027 GMT
Subject: CN=96D1B0CA3B82FB22D4D66923F284C7B0DCBC0170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:be:ea:5f:4c:e9:b7:c7:e3:b6:59:cd:c5:
fe:d8:23:a0:22:95:16:da:79:6c:17:3e:4b:15:66:
fb:e2:5a:8e:23:b7:f0:61:0a:68:ae:26:e9:50:93:
3d:b8:1e:fe:a6:86:d1:65:b8:da:36:0d:a8:09:b6:
98:2a:e6:4e:35:2a:b4:36:2f:c3:ad:ea:1a:ab:11:
7e:f9:f5:f1:ba:e6:98:74:02:dd:1f:b9:9d:2f:5b:
04:2e:2d:f1:36:36:e4:50:ea:25:60:76:26:4c:f8:
d4:4f:b3:4c:63:3d:5e:ee:58:43:f1:07:c9:e7:a2:
84:4f:4a:b7:3b:f3:dc:98:ad:8a:33:4c:4a:44:21:
09:73:b4:2f:22:92:9a:db:3e:19:99:ad:da:7b:7c:
41:22:6a:01:18:18:f4:7f:6e:74:cf:ce:cb:c0:86:
cc:99:8e:88:fa:99:1c:32:ef:71:6c:e4:81:4f:de:
68:71:b0:b5:69:44:d0:f0:15:d7:c4:91:eb:db:10:
22:1f:ad:e1:a7:1d:70:16:dd:e4:c6:24:ad:4c:72:
3c:0e:13:fc:ba:9e:a2:68:74:a8:8d:fa:56:d0:2d:
f9:f4:a2:8d:9b:c0:d2:99:44:83:6c:b6:da:5a:a9:
55:90:2d:2a:b6:71:b8:12:1a:c3:3b:88:1d:73:15:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:B0:CA:3B:82:FB:22:D4:D6:69:23:F2:84:C7:B0:DC:BC:01:70
X509v3 Authority Key Identifier:
keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.212.0.0-36.212.2.255
36.212.4.0/23
36.212.8.0-36.212.180.255
36.212.182.0-36.212.192.255
36.212.194.0-36.212.200.255
36.212.202.0-36.212.223.255
36.212.225.0-36.213.1.255
36.213.10.0-36.213.12.255
Signature Algorithm: sha256WithRSAEncryption
ab:52:26:9e:a2:c2:4c:eb:f0:97:11:b3:37:2d:76:2e:ff:35:
f6:6b:9b:ad:53:d5:04:1b:c7:a4:f1:b3:69:f5:9e:96:d3:f9:
e5:d1:71:3b:b4:71:7a:35:b3:24:05:d7:97:74:7d:a3:12:3b:
7a:2b:85:9d:b8:97:3d:17:83:30:cc:50:22:9d:b1:59:cb:a3:
14:c8:af:91:bc:2f:2b:a3:13:ef:96:67:5a:f0:ea:34:8d:46:
2c:fd:a6:44:d9:50:3a:e1:c4:ef:af:24:96:34:66:a0:b9:fa:
14:66:66:66:36:16:7b:18:46:b5:4e:6e:39:39:11:2c:fb:e7:
28:bf:fb:23:25:9a:6c:70:6b:5e:68:b7:e8:97:5f:8c:e8:47:
18:2b:40:5b:fb:d9:69:b5:ff:a8:d6:96:25:99:2e:17:e8:ed:
db:2d:4b:37:02:9e:b0:38:75:47:f3:c9:4d:39:fc:ae:7f:4c:
46:9e:1b:36:b1:74:d1:92:1e:ae:87:a8:6c:85:2e:61:1f:29:
41:07:98:dc:74:7b:f8:25:8a:a1:18:26:bb:8f:75:26:d8:b0:
a0:af:40:ab:86:2e:a5:e5:7f:88:78:f4:bf:78:e7:da:f0:4c:
2a:f1:1a:b8:c5:8c:f3:4e:7b:c3:51:38:98:a2:00:16:30:5e:
8f:e9:c3:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:18:02 2026 by rpki-client