Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: lDrAoTUnYB64grsjpP1t7+3xH0Ykk2SmzdWPX2wFqNM=
Subject key identifier: E3:59:0D:EA:9B:6E:7E:38:14:F7:34:FF:20:2E:12:58:1C:6E:F9:C6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 1265162DD53C86792675908F6B842717192C52D8
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
Signing time: Thu 16 Apr 2026 07:47:05 +0000
ROA not before: Thu 16 Apr 2026 07:42:05 +0000
ROA not after: Thu 15 Apr 2027 07:47:05 +0000
asID: 9808
IP address blocks: 240a:4021:883a::/48 maxlen: 48
240a:40b0:683a::/48 maxlen: 48
240a:40c1::/44 maxlen: 48
240a:40c1:10::/44 maxlen: 48
240a:40c1:e000::/44 maxlen: 48
240a:40c1:e010::/44 maxlen: 48
240a:40c2::/44 maxlen: 48
240a:40c2:10::/44 maxlen: 48
240a:40c2:8000::/44 maxlen: 48
240a:40c2:8010::/44 maxlen: 48
240a:40c2:e000::/44 maxlen: 48
240a:40c2:e010::/44 maxlen: 48
240a:40c3::/44 maxlen: 48
240a:40c3:10::/44 maxlen: 48
240a:40c3:2000::/44 maxlen: 48
240a:40c3:2010::/44 maxlen: 48
240a:40c3:4000::/44 maxlen: 48
240a:40c3:4010::/44 maxlen: 48
240a:40c3:6000::/44 maxlen: 48
240a:40c3:6010::/44 maxlen: 48
240a:40c3:8000::/44 maxlen: 48
240a:40c3:8010::/44 maxlen: 48
240a:40c3:a000::/44 maxlen: 48
240a:40c3:a010::/44 maxlen: 48
240a:40c3:c000::/44 maxlen: 48
240a:40c3:c010::/44 maxlen: 48
240a:40c3:e000::/44 maxlen: 48
240a:40c3:e010::/44 maxlen: 48
240a:40c4::/44 maxlen: 48
240a:40c4:10::/44 maxlen: 48
240a:40c4:2000::/44 maxlen: 48
240a:40c4:2010::/44 maxlen: 48
240a:40c4:4010::/44 maxlen: 48
240a:428e::/31 maxlen: 31
240a:4292::/31 maxlen: 31
240a:42ac::/31 maxlen: 31
240a:42ae::/31 maxlen: 31
240a:42b0::/31 maxlen: 31
240a:42b2::/31 maxlen: 31
240a:42b4::/31 maxlen: 31
240a:42b6::/31 maxlen: 31
240a:42c0::/31 maxlen: 31
240a:42c4::/31 maxlen: 31
240a:42ca::/31 maxlen: 31
240a:42ce::/31 maxlen: 31
240a:42d0::/31 maxlen: 31
240a:42d2::/31 maxlen: 31
240a:42d4::/31 maxlen: 31
240a:42d6::/31 maxlen: 31
240a:42d8::/31 maxlen: 31
240a:42da::/31 maxlen: 31
240a:42dc::/31 maxlen: 31
240a:42de::/31 maxlen: 31
240a:42e0::/31 maxlen: 31
240a:42e2::/31 maxlen: 31
240a:42e4::/31 maxlen: 31
240a:42e6::/31 maxlen: 31
240a:42e8::/31 maxlen: 31
240a:42ea::/31 maxlen: 31
240a:42ec::/31 maxlen: 31
240a:42ee::/31 maxlen: 31
240a:42f0::/31 maxlen: 31
240a:42f2::/31 maxlen: 31
240a:42f4::/31 maxlen: 31
240a:42f6::/31 maxlen: 31
240a:42f8::/31 maxlen: 31
240a:42fa::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 01:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:65:16:2d:d5:3c:86:79:26:75:90:8f:6b:84:27:17:19:2c:52:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Apr 16 07:42:05 2026 GMT
Not After : Apr 15 07:47:05 2027 GMT
Subject: CN=E3590DEA9B6E7E3814F734FF202E12581C6EF9C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:e4:b6:b0:7d:0a:4a:ab:37:22:bd:aa:7b:
48:7c:b2:c7:46:8b:a8:21:72:af:5d:98:a8:78:5c:
fd:ec:07:bd:b1:d4:0d:46:53:59:ec:f9:0d:98:03:
2c:2e:ed:9e:c7:e4:03:4b:54:4b:2e:0f:0e:db:73:
64:cd:cd:ba:f8:0b:b7:36:6d:f5:a6:2b:f2:9a:65:
b0:e0:b4:02:61:68:f9:78:b5:cd:b5:17:42:e3:75:
4f:7f:e2:41:ef:4b:ef:b5:ca:75:02:cd:51:79:52:
67:b0:5b:b1:8b:de:5e:74:fd:86:99:9a:66:01:f9:
45:ba:77:0d:d9:6d:ee:33:28:ca:4a:5a:2f:9b:30:
8d:88:e7:ef:ac:46:35:76:6e:d6:c8:f0:65:e4:e7:
79:c2:54:6e:53:ab:a9:e9:0a:10:4a:ed:8c:77:5f:
95:88:06:c3:72:90:7c:fe:ab:20:9a:41:82:bd:93:
d7:66:e0:fa:b9:cd:ec:59:26:10:a2:ad:db:7e:e2:
a4:7b:df:49:5a:1e:75:96:71:fd:1f:db:9c:a8:3b:
e6:83:ce:f8:51:05:80:2e:2c:11:26:71:de:a5:62:
f3:6a:34:89:b7:9d:10:69:88:26:a3:22:32:a4:25:
a4:2d:c2:f2:58:14:90:ba:dd:1b:6b:05:3a:8c:aa:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:0D:EA:9B:6E:7E:38:14:F7:34:FF:20:2E:12:58:1C:6E:F9:C6
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:4021:883a::/48
240a:40b0:683a::/48
240a:40c1::/43
240a:40c1:e000::/43
240a:40c2::/43
240a:40c2:8000::/43
240a:40c2:e000::/43
240a:40c3::/43
240a:40c3:2000::/43
240a:40c3:4000::/43
240a:40c3:6000::/43
240a:40c3:8000::/43
240a:40c3:a000::/43
240a:40c3:c000::/43
240a:40c3:e000::/43
240a:40c4::/43
240a:40c4:2000::/43
240a:40c4:4010::/44
240a:428e::/31
240a:4292::/31
240a:42ac::-240a:42b7:ffff:ffff:ffff:ffff:ffff:ffff
240a:42c0::/31
240a:42c4::/31
240a:42ca::/31
240a:42ce::-240a:42fb:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:be:f9:42:03:43:29:03:96:e5:71:83:13:08:cf:52:4a:c5:
a8:39:a4:6f:92:18:73:c9:8d:3e:99:55:aa:3d:c1:0e:11:dc:
88:03:e5:56:a8:8c:83:cd:c2:f2:73:94:f1:cf:99:04:45:d1:
e6:51:86:30:e7:41:d1:d3:bb:51:04:50:5d:69:88:7d:3c:fe:
c4:8f:31:30:bc:43:53:02:62:a3:7e:52:d9:e1:d0:ca:57:da:
cc:18:d8:a0:e0:e5:1f:e1:cc:a5:74:39:40:98:9b:f3:a7:8c:
ec:f4:f6:74:c3:d8:19:9f:09:64:c3:18:d9:7a:d1:c2:52:ff:
86:76:f5:61:12:0f:74:c6:c2:39:1f:b3:e2:ee:6c:ec:b8:8b:
9d:43:8c:a4:c3:b2:7b:6e:cb:ae:bb:35:57:96:ac:1c:af:2b:
57:df:df:d9:9e:72:7c:b0:78:5e:50:18:70:89:97:94:a6:23:
ff:ff:39:97:bd:c2:05:5f:32:bf:46:be:3e:10:e3:6e:0d:13:
5d:3a:e3:d4:13:75:77:37:68:79:2e:22:ce:68:1d:09:da:bc:
f9:05:46:9b:a6:4d:9c:3f:8c:dd:31:7a:14:f0:bb:16:75:3b:
52:7e:f2:94:60:65:9e:ba:e4:17:47:90:a7:a0:83:0e:55:a7:
5f:6c:43:25
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUEmUWLdU8hnkmdZCPa4QnFxksUtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2
Nzk2RjBGNjAeFw0yNjA0MTYwNzQyMDVaFw0yNzA0MTUwNzQ3MDVaMDMxMTAvBgNV
BAMTKEUzNTkwREVBOUI2RTdFMzgxNEY3MzRGRjIwMkUxMjU4MUM2RUY5QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMeS2sH0KSqs3Ir2qe0h8ssdG
i6ghcq9dmKh4XP3sB72x1A1GU1ns+Q2YAywu7Z7H5ANLVEsuDw7bc2TNzbr4C7c2
bfWmK/KaZbDgtAJhaPl4tc21F0LjdU9/4kHvS++1ynUCzVF5UmewW7GL3l50/YaZ
mmYB+UW6dw3Zbe4zKMpKWi+bMI2I5++sRjV2btbI8GXk53nCVG5Tq6npChBK7Yx3
X5WIBsNykHz+qyCaQYK9k9dm4Pq5zexZJhCirdt+4qR730laHnWWcf0f25yoO+aD
zvhRBYAuLBEmcd6lYvNqNIm3nRBpiCajIjKkJaQtwvJYFJC63RtrBTqMqtNvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU41kN6ptufjgU9zT/IC4SWBxu+cYwHwYDVR0j
BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4
OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzk4MDgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggECBggrBgEFBQcBBwEB/wSB8jCB7zCB
7AQCAAIwgeUDBwAkCkAhiDoDBwAkCkCwaDoDBwUkCkDBAAADBwUkCkDB4AADBwUk
CkDCAAADBwUkCkDCgAADBwUkCkDC4AADBwUkCkDDAAADBwUkCkDDIAADBwUkCkDD
QAADBwUkCkDDYAADBwUkCkDDgAADBwUkCkDDoAADBwUkCkDDwAADBwUkCkDD4AAD
BwUkCkDEAAADBwUkCkDEIAADBwQkCkDEQBADBQEkCkKOAwUBJApCkjAOAwUCJApC
rAMFAyQKQrADBQEkCkLAAwUBJApCxAMFASQKQsowDgMFASQKQs4DBQIkCkL4MA0G
CSqGSIb3DQEBCwUAA4IBAQB3vvlCA0MpA5blcYMTCM9SSsWoOaRvkhhzyY0+mVWq
PcEOEdyIA+VWqIyDzcLyc5Txz5kERdHmUYYw50HR07tRBFBdaYh9PP7EjzEwvENT
AmKjflLZ4dDKV9rMGNig4OUf4cyldDlAmJvzp4zs9PZ0w9gZnwlkwxjZetHCUv+G
dvVhEg90xsI5H7Pi7mzsuIudQ4ykw7J7bsuuuzVXlqwcrytX39/ZnnJ8sHheUBhw
iZeUpiP//zmXvcIFXzK/Rr4+EONuDRNdOuPUE3V3N2h5LiLOaB0J2rz5BUabpk2c
P4zdMXoU8LsWdTtSfvKUYGWeuuQXR5CnoIMOVadfbEMl
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:31:27 2026 by rpki-client