Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4837.roa
File:                     AS4837.roa (raw, json)
Hash identifier:          Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=
Subject key identifier:   1F:16:A0:76:94:A7:30:9D:68:B3:C8:25:81:1F:5B:FD:16:73:24:8B
Certificate issuer:       /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial:       574C65BF913A1207D60C392601C38EA58198E85A
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4837.roa
Signing time:             Mon 29 Jun 2026 15:05:25 +0000
ROA not before:           Mon 29 Jun 2026 15:00:25 +0000
ROA not after:            Mon 28 Jun 2027 15:05:25 +0000
asID:                     4837
IP address blocks:        103.63.160.0/21 maxlen: 23
                          2405:1480:3000::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:65:bf:91:3a:12:07:d6:0c:39:26:01:c3:8e:a5:81:98:e8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
        Validity
            Not Before: Jun 29 15:00:25 2026 GMT
            Not After : Jun 28 15:05:25 2027 GMT
        Subject: CN=1F16A07694A7309D68B3C825811F5BFD1673248B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:c5:0d:02:b4:58:08:42:cb:f9:38:c4:49:
                    7c:4a:7f:2a:e1:f9:16:84:db:6a:ea:5c:6c:31:48:
                    3c:ee:42:c6:6f:98:e3:48:64:cf:f8:0f:af:a2:c1:
                    06:a3:24:0d:07:89:09:84:00:33:da:3a:ff:e0:b6:
                    e0:2b:ca:43:f7:16:d1:c1:8e:96:2c:06:44:e8:4f:
                    c1:23:31:55:5c:d7:72:ee:47:ff:5d:20:c3:9f:92:
                    4f:7e:9e:c0:f4:60:8d:63:0b:00:72:79:4e:74:7c:
                    c0:a7:22:b9:3d:24:07:8e:27:f3:19:0b:d4:c6:c6:
                    91:36:e3:ed:e4:c4:a6:4a:a3:6d:90:67:06:74:ca:
                    fd:6d:f2:d4:43:80:19:ea:db:60:51:f4:bc:6d:db:
                    00:53:b0:90:49:d8:75:b7:e4:eb:37:c6:05:7c:a2:
                    38:4a:4a:36:1e:d5:1a:4b:ac:c5:9b:3c:9b:32:c5:
                    3a:78:98:ee:d5:f8:1d:21:64:02:fa:0a:3c:fb:37:
                    03:6e:67:2f:8e:bc:6f:f7:dc:0b:c4:5b:57:f1:c1:
                    63:a6:e7:31:44:cf:f2:41:c4:a4:08:eb:4f:bb:d4:
                    7e:6f:e5:57:39:76:c4:4d:d2:4d:cf:de:41:f8:4e:
                    52:8d:07:d3:76:40:16:84:d9:53:7b:33:d0:80:36:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:16:A0:76:94:A7:30:9D:68:B3:C8:25:81:1F:5B:FD:16:73:24:8B
            X509v3 Authority Key Identifier:
                keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.160.0/21
                IPv6:
                  2405:1480:3000::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:d9:eb:be:b1:44:16:3c:0c:5d:64:ef:e1:8f:3c:28:ab:cb:
         85:5f:54:6d:d7:84:e2:db:52:91:39:ba:c7:f9:7b:55:9c:15:
         0a:de:43:4a:25:3d:58:30:3d:bc:81:dd:4f:ee:79:68:c5:c1:
         a5:4f:20:b6:8e:22:95:eb:64:4b:5f:0c:3d:6e:df:02:6b:b4:
         51:91:6a:49:8c:87:26:f9:fc:3b:86:dd:b1:63:a6:3a:f0:bd:
         02:c3:27:42:fc:1d:d5:31:80:03:df:2c:83:1f:2b:2f:d2:b3:
         82:1f:78:96:ad:35:83:e1:52:02:54:a0:94:6c:2b:3d:f8:22:
         00:13:bd:d4:64:58:55:37:a6:51:27:33:47:ae:35:f0:5f:89:
         c3:65:0b:6d:06:1c:5b:91:6d:41:01:3d:5c:c5:78:c3:bc:9d:
         77:87:46:b0:c9:e6:3d:88:aa:67:c6:fb:77:ea:34:59:ee:66:
         48:fd:81:2b:99:6d:02:f4:00:a4:bc:6f:46:78:6a:46:1c:04:
         87:b4:c3:c4:ff:be:5a:e7:19:df:db:44:b5:96:51:be:6a:82:
         27:b3:f7:57:e5:80:99:55:ce:8f:96:c2:b9:cc:7e:85:6f:7e:
         9d:36:78:fd:0a:f4:42:b8:7e:3d:b3:50:29:26:d5:ca:68:2a:
         39:bf:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:24 2026 by rpki-client