Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4811.roa
File: AS4811.roa (raw, json)
Hash identifier: iNnyZqiBbOKcCg6RzRmZ1zCnEpcRwk2g+ghfT4gKQL4=
Subject key identifier: F4:83:59:F6:FB:68:9D:35:A5:95:96:9F:2B:F6:B8:F8:A8:80:E1:59
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 1F8AEC65A0F37515607580B90C780ED4AF5915D5
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4811.roa
Signing time: Thu 03 Sep 2026 09:53:14 +0000
ROA not before: Thu 03 Sep 2026 09:48:14 +0000
ROA not after: Thu 02 Sep 2027 09:53:14 +0000
asID: 4811
IP address blocks: 1.93.0.0/16 maxlen: 24
14.103.0.0/16 maxlen: 24
14.103.0.0/21 maxlen: 24
14.103.8.0/21 maxlen: 24
14.103.16.0/21 maxlen: 24
14.103.24.0/21 maxlen: 24
14.103.32.0/21 maxlen: 24
14.103.40.0/21 maxlen: 24
14.103.48.0/21 maxlen: 24
14.103.56.0/21 maxlen: 24
14.103.64.0/21 maxlen: 24
14.103.72.0/21 maxlen: 24
14.103.72.0/23 maxlen: 24
14.103.80.0/21 maxlen: 24
14.103.88.0/21 maxlen: 24
14.103.96.0/21 maxlen: 24
14.103.104.0/21 maxlen: 24
59.109.0.0/16 maxlen: 24
101.96.192.0/18 maxlen: 24
101.126.0.0/16 maxlen: 24
115.47.0.0/16 maxlen: 24
115.100.0.0/15 maxlen: 24
115.172.64.0/19 maxlen: 24
115.172.192.0/18 maxlen: 24
115.173.128.0/17 maxlen: 24
115.190.0.0/15 maxlen: 24
118.145.32.0/19 maxlen: 24
118.145.64.0/18 maxlen: 24
118.145.128.0/17 maxlen: 24
118.196.0.0/15 maxlen: 24
118.199.0.0/16 maxlen: 24
119.16.0.0/16 maxlen: 24
119.27.64.0/18 maxlen: 24
119.90.0.0/17 maxlen: 24
120.130.0.0/16 maxlen: 24
124.6.64.0/18 maxlen: 24
124.15.192.0/18 maxlen: 24
124.174.0.0/16 maxlen: 24
124.175.0.0/16 maxlen: 24
175.106.128.0/17 maxlen: 24
180.184.0.0/16 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.168.0/21 maxlen: 24
180.184.176.0/21 maxlen: 24
180.184.184.0/22 maxlen: 24
182.238.0.0/16 maxlen: 24
182.239.0.0/19 maxlen: 24
203.100.96.0/19 maxlen: 24
210.78.96.0/19 maxlen: 24
220.112.64.0/18 maxlen: 24
2406:d440:110::/44 maxlen: 48
2406:d440:210::/44 maxlen: 48
2406:d440:310::/44 maxlen: 48
2406:d440:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 14:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8a:ec:65:a0:f3:75:15:60:75:80:b9:0c:78:0e:d4:af:59:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Sep 3 09:48:14 2026 GMT
Not After : Sep 2 09:53:14 2027 GMT
Subject: CN=F48359F6FB689D35A595969F2BF6B8F8A880E159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:86:25:bc:05:b4:0c:e9:72:ef:35:00:2a:
f3:e4:14:2a:ff:68:4e:21:6a:f0:c2:3b:2b:50:88:
69:0e:c1:cc:58:ca:70:32:45:2b:85:59:2f:10:e1:
0f:01:64:6c:12:4d:90:0d:bd:cd:7f:60:6e:f4:a3:
46:70:80:c1:f9:c9:fa:51:24:43:a4:47:8e:f2:c2:
8b:c9:66:69:3b:4c:27:7c:0b:41:df:10:9c:6e:52:
a4:da:f2:62:50:e6:54:83:a1:e9:ea:ba:5b:1e:2b:
4d:15:4d:7b:2e:07:41:bf:23:e3:20:fd:f0:95:b2:
e5:92:aa:e5:e8:32:0a:77:1e:07:4f:9e:3c:27:e0:
af:c7:e6:60:16:cb:5e:0c:f8:51:e4:03:56:82:b0:
93:2f:a6:3b:6f:08:06:b7:36:1f:ef:03:7b:69:66:
c1:24:f9:c6:51:1c:30:3c:5d:80:26:dc:bd:fc:db:
a5:af:ce:eb:07:04:e2:3d:06:c9:d4:98:e1:c4:a2:
5d:da:84:5f:48:79:68:f1:71:d7:cb:cf:16:25:c4:
ad:c2:28:15:7b:c0:51:ee:22:a0:e6:22:5f:bb:bf:
9f:78:99:8d:f8:10:fa:b1:b6:ea:1b:41:2a:5a:52:
a8:10:3f:4f:fd:c1:81:d3:48:9e:30:af:ad:de:38:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:83:59:F6:FB:68:9D:35:A5:95:96:9F:2B:F6:B8:F8:A8:80:E1:59
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.93.0.0/16
14.103.0.0/16
59.109.0.0/16
101.96.192.0/18
101.126.0.0/16
115.47.0.0/16
115.100.0.0/15
115.172.64.0/19
115.172.192.0/18
115.173.128.0/17
115.190.0.0/15
118.145.32.0-118.145.255.255
118.196.0.0/15
118.199.0.0/16
119.16.0.0/16
119.27.64.0/18
119.90.0.0/17
120.130.0.0/16
124.6.64.0/18
124.15.192.0/18
124.174.0.0/15
175.106.128.0/17
180.184.0.0/16
182.238.0.0-182.239.31.255
203.100.96.0/19
210.78.96.0/19
220.112.64.0/18
IPv6:
2406:d440:110::/44
2406:d440:210::/44
2406:d440:310::/44
2406:d440:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
41:4a:67:34:f4:5f:50:40:50:19:8d:8c:d0:88:e2:76:59:a9:
c4:28:04:04:75:4c:91:e8:51:b9:f7:c3:17:46:f9:a5:07:5b:
2f:05:66:48:26:4c:bc:b0:46:74:da:ba:21:42:89:23:78:68:
22:e1:cb:f0:0a:6f:35:2c:d5:a4:64:ef:1a:8e:1c:48:bf:e5:
a1:24:a9:c8:73:95:7a:9c:6c:71:06:94:31:fd:04:6b:45:1a:
06:c9:9a:b5:bf:2a:62:83:44:43:58:c7:bb:a8:8d:48:72:4d:
89:38:76:c4:dd:16:0a:99:6e:03:c6:16:4c:9d:e5:de:92:e2:
0e:e6:d1:30:25:0f:98:d5:84:6b:29:f3:ad:32:ff:73:e5:28:
b2:b1:ac:18:21:54:0f:92:f0:14:f4:cb:d1:ce:6c:7c:c6:a9:
ac:3d:e7:f7:44:2c:6c:a1:d0:f4:23:bc:28:bf:64:33:65:33:
f5:dc:8a:54:0e:01:22:91:3b:9d:e2:00:b5:80:3a:28:74:11:
5a:cb:b5:43:5b:53:da:39:77:8d:39:90:b0:fe:b1:88:2b:2c:
9f:80:91:cf:d7:fe:d6:71:92:a6:7f:3b:b7:08:17:12:78:6c:
41:b7:2c:d2:62:c2:79:1e:f8:bc:c5:cd:41:a8:d4:6c:59:e8:
08:bb:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:25:48 2026 by rpki-client