Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=
Subject key identifier: 09:70:84:02:BA:B5:41:80:D9:E5:EE:39:2E:F1:B8:72:B1:4F:96:F9
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 5F454535AE436B4827E49664D2A0A4712A92BC9D
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
Signing time: Thu 04 Jun 2026 02:25:16 +0000
ROA not before: Thu 04 Jun 2026 02:20:16 +0000
ROA not after: Thu 03 Jun 2027 02:25:16 +0000
asID: 9808
IP address blocks: 240a:4021:883a::/48 maxlen: 48
240a:40b0:683a::/48 maxlen: 48
240a:40c1::/44 maxlen: 48
240a:40c1:10::/44 maxlen: 48
240a:40c1:e000::/44 maxlen: 48
240a:40c1:e010::/44 maxlen: 48
240a:40c2::/44 maxlen: 48
240a:40c2:10::/44 maxlen: 48
240a:40c2:8000::/44 maxlen: 48
240a:40c2:8010::/44 maxlen: 48
240a:40c2:e000::/44 maxlen: 48
240a:40c2:e010::/44 maxlen: 48
240a:40c3::/44 maxlen: 48
240a:40c3:10::/44 maxlen: 48
240a:40c3:2000::/44 maxlen: 48
240a:40c3:2010::/44 maxlen: 48
240a:40c3:4000::/44 maxlen: 48
240a:40c3:4010::/44 maxlen: 48
240a:40c3:6000::/44 maxlen: 48
240a:40c3:6010::/44 maxlen: 48
240a:40c3:8000::/44 maxlen: 48
240a:40c3:8010::/44 maxlen: 48
240a:40c3:a000::/44 maxlen: 48
240a:40c3:a010::/44 maxlen: 48
240a:40c3:c000::/44 maxlen: 48
240a:40c3:c010::/44 maxlen: 48
240a:40c3:e000::/44 maxlen: 48
240a:40c3:e010::/44 maxlen: 48
240a:40c4::/44 maxlen: 48
240a:40c4:10::/44 maxlen: 48
240a:40c4:2000::/44 maxlen: 48
240a:40c4:2010::/44 maxlen: 48
240a:40c4:4000::/44 maxlen: 44
240a:40c4:4010::/44 maxlen: 48
240a:428e::/31 maxlen: 31
240a:4292::/31 maxlen: 31
240a:42ac::/31 maxlen: 31
240a:42ae::/31 maxlen: 31
240a:42b0::/31 maxlen: 31
240a:42b2::/31 maxlen: 31
240a:42c0::/31 maxlen: 31
240a:42c4::/31 maxlen: 31
240a:42ca::/31 maxlen: 31
240a:42ce::/31 maxlen: 31
240a:42d0::/31 maxlen: 31
240a:42d2::/31 maxlen: 31
240a:42d4::/31 maxlen: 31
240a:42d6::/31 maxlen: 31
240a:42d8::/31 maxlen: 31
240a:42da::/31 maxlen: 31
240a:42dc::/31 maxlen: 31
240a:42de::/31 maxlen: 31
240a:42e0::/31 maxlen: 31
240a:42e2::/31 maxlen: 31
240a:42e4::/31 maxlen: 31
240a:42e6::/31 maxlen: 31
240a:42e8::/31 maxlen: 31
240a:42ea::/31 maxlen: 31
240a:42ec::/31 maxlen: 31
240a:42ee::/31 maxlen: 31
240a:42f0::/31 maxlen: 31
240a:42f2::/31 maxlen: 31
240a:42f4::/31 maxlen: 31
240a:42f6::/31 maxlen: 31
240a:42f8::/31 maxlen: 31
240a:42fa::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:45:45:35:ae:43:6b:48:27:e4:96:64:d2:a0:a4:71:2a:92:bc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Jun 4 02:20:16 2026 GMT
Not After : Jun 3 02:25:16 2027 GMT
Subject: CN=09708402BAB54180D9E5EE392EF1B872B14F96F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:27:e8:c6:3b:52:0a:33:41:14:ee:26:78:
a7:70:49:ea:1c:ea:25:85:e4:ec:10:e2:3b:63:1a:
47:aa:c9:d7:42:c7:ed:16:b4:01:5d:a3:00:7d:fd:
30:b5:7e:0f:be:8e:41:70:f8:09:84:42:87:75:1e:
5b:90:7c:8e:62:68:25:76:56:f1:44:a4:94:4b:5f:
a9:9e:28:ba:39:2d:a1:a6:15:da:a9:2a:89:f3:1c:
a0:d8:90:90:82:fa:1b:98:e3:f1:f7:d6:11:0e:55:
9d:db:eb:cc:bc:0f:78:db:25:04:45:7c:2a:d1:78:
e3:c0:f6:b4:27:b2:c2:7b:4d:04:2c:d5:80:1d:c4:
15:ca:fb:48:5d:e1:e3:37:4d:0c:19:e9:af:35:86:
c6:c7:6e:21:6c:4d:37:37:5c:0d:7b:a8:73:1e:27:
05:0a:4c:cc:52:79:fe:12:5f:dc:f9:9e:fa:68:54:
54:08:3a:a9:ef:39:41:6d:b9:2a:cf:08:20:62:e4:
f9:38:2b:04:8f:4a:e8:70:60:1f:9d:f9:48:18:a1:
58:c9:df:1a:5d:56:c2:38:2a:7c:2a:5d:b8:af:32:
d5:e6:78:49:7c:fb:e2:4f:00:8c:81:48:a5:e5:2c:
55:e8:ec:f8:fe:6e:56:78:56:cf:39:b6:29:78:41:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:84:02:BA:B5:41:80:D9:E5:EE:39:2E:F1:B8:72:B1:4F:96:F9
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:4021:883a::/48
240a:40b0:683a::/48
240a:40c1::/43
240a:40c1:e000::/43
240a:40c2::/43
240a:40c2:8000::/43
240a:40c2:e000::/43
240a:40c3::/43
240a:40c3:2000::/43
240a:40c3:4000::/43
240a:40c3:6000::/43
240a:40c3:8000::/43
240a:40c3:a000::/43
240a:40c3:c000::/43
240a:40c3:e000::/43
240a:40c4::/43
240a:40c4:2000::/43
240a:40c4:4000::/43
240a:428e::/31
240a:4292::/31
240a:42ac::-240a:42b3:ffff:ffff:ffff:ffff:ffff:ffff
240a:42c0::/31
240a:42c4::/31
240a:42ca::/31
240a:42ce::-240a:42fb:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:d1:45:24:57:91:a5:38:34:71:6c:24:d6:41:28:db:81:42:
10:54:8f:30:23:b4:61:5a:23:68:1b:73:b5:e4:c4:bc:30:77:
7c:fc:dd:d1:6f:da:c9:c4:ff:54:bd:0a:6c:85:9e:60:8f:6a:
9d:d6:79:18:df:3a:07:25:f7:e7:a9:aa:2a:0e:1a:67:6e:9d:
5e:ce:db:15:f3:c3:d5:89:65:2a:8d:98:04:40:2f:c2:17:01:
43:68:95:8c:1c:ed:77:4b:06:44:41:ab:69:99:5a:6a:b7:66:
2c:09:e1:15:8d:a6:88:fb:39:dd:72:b3:ee:7e:63:41:b3:25:
fd:54:ec:1a:10:66:0c:63:31:29:e8:8f:03:0c:2c:f5:47:54:
b0:83:1e:f7:61:5d:9c:8c:a8:2f:c0:f0:47:ab:e6:f7:7d:46:
19:57:bb:8c:c4:f4:e8:eb:cf:bb:14:73:d8:78:b8:c2:af:da:
d9:f2:1c:c7:78:c6:fe:03:2b:68:c9:2f:fc:af:5a:78:0d:44:
20:a9:7c:e0:54:0c:f3:ef:fc:4e:b9:67:64:ef:7d:c9:8f:d2:
2b:33:80:af:07:0f:b9:58:96:a5:80:41:2b:e1:0d:45:ff:77:
72:0f:85:8d:0e:4a:6c:50:22:c4:c2:08:d2:77:c1:3c:b0:93:
eb:f0:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:43:45 2026 by rpki-client