Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/AS4816.roa
File: AS4816.roa (raw, json)
Hash identifier: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=
Subject key identifier: 28:48:FA:E3:40:81:3C:11:C8:A8:50:30:7E:E1:7C:9E:94:5D:AD:DB
Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Certificate serial: 5138D4BA7C2C8B80F7AFEC5B3B9F651D1E5BFD67
Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/AS4816.roa
Signing time: Thu 16 Apr 2026 08:09:51 +0000
ROA not before: Thu 16 Apr 2026 08:04:51 +0000
ROA not after: Thu 15 Apr 2027 08:09:51 +0000
asID: 4816
IP address blocks: 103.39.208.0/20 maxlen: 20
103.39.208.0/24 maxlen: 24
103.39.209.0/24 maxlen: 24
103.39.210.0/24 maxlen: 24
103.39.211.0/24 maxlen: 24
103.39.212.0/24 maxlen: 24
103.39.213.0/24 maxlen: 24
103.39.214.0/24 maxlen: 24
103.39.215.0/24 maxlen: 24
103.39.216.0/24 maxlen: 24
103.39.217.0/24 maxlen: 24
103.39.218.0/24 maxlen: 24
103.39.219.0/24 maxlen: 24
103.39.220.0/24 maxlen: 24
103.39.221.0/24 maxlen: 24
103.39.222.0/24 maxlen: 24
103.39.223.0/24 maxlen: 24
103.39.224.0/21 maxlen: 21
103.39.224.0/24 maxlen: 24
103.39.225.0/24 maxlen: 24
103.39.226.0/24 maxlen: 24
103.39.227.0/24 maxlen: 24
103.39.228.0/24 maxlen: 24
103.39.229.0/24 maxlen: 24
103.39.230.0/24 maxlen: 24
103.39.231.0/24 maxlen: 24
103.39.232.0/22 maxlen: 22
103.39.232.0/24 maxlen: 24
103.39.233.0/24 maxlen: 24
103.39.234.0/24 maxlen: 24
103.39.235.0/24 maxlen: 24
103.40.240.0/20 maxlen: 20
103.40.240.0/24 maxlen: 24
103.40.241.0/24 maxlen: 24
103.40.242.0/24 maxlen: 24
103.40.243.0/24 maxlen: 24
103.40.244.0/24 maxlen: 24
103.40.245.0/24 maxlen: 24
103.40.246.0/24 maxlen: 24
103.40.247.0/24 maxlen: 24
103.40.248.0/24 maxlen: 24
103.40.249.0/24 maxlen: 24
103.40.250.0/24 maxlen: 24
103.40.251.0/24 maxlen: 24
103.40.252.0/24 maxlen: 24
103.40.253.0/24 maxlen: 24
103.40.254.0/24 maxlen: 24
103.40.255.0/24 maxlen: 24
103.44.236.0/22 maxlen: 22
103.44.236.0/24 maxlen: 24
103.44.237.0/24 maxlen: 24
103.44.238.0/24 maxlen: 24
103.44.239.0/24 maxlen: 24
103.44.240.0/20 maxlen: 20
103.44.240.0/24 maxlen: 24
103.44.241.0/24 maxlen: 24
103.44.242.0/24 maxlen: 24
103.44.243.0/24 maxlen: 24
103.44.244.0/24 maxlen: 24
103.44.245.0/24 maxlen: 24
103.44.246.0/24 maxlen: 24
103.44.247.0/24 maxlen: 24
103.44.248.0/24 maxlen: 24
103.44.249.0/24 maxlen: 24
103.44.250.0/24 maxlen: 24
103.44.251.0/24 maxlen: 24
103.44.252.0/24 maxlen: 24
103.44.253.0/24 maxlen: 24
103.44.254.0/24 maxlen: 24
103.44.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 10:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:38:d4:ba:7c:2c:8b:80:f7:af:ec:5b:3b:9f:65:1d:1e:5b:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Validity
Not Before: Apr 16 08:04:51 2026 GMT
Not After : Apr 15 08:09:51 2027 GMT
Subject: CN=2848FAE340813C11C8A850307EE17C9E945DADDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:97:02:54:8f:32:22:eb:a4:7b:3f:1f:8c:
10:44:33:6e:a0:47:32:90:0f:33:75:99:57:8c:bd:
80:88:f5:b2:da:5f:9a:a6:1c:5c:6f:a2:c5:bb:39:
1a:18:5e:fe:28:07:f5:61:ad:05:16:e4:c8:14:9b:
8c:fd:3e:b8:be:bc:32:38:06:4b:b8:40:66:18:48:
51:1b:50:5d:2c:10:d2:79:c9:01:14:f2:6f:b0:86:
8f:15:a3:02:96:1f:bb:84:da:5f:c6:ac:4e:b8:48:
9f:bb:b5:26:a4:e8:6a:f4:50:b0:4c:11:7e:00:33:
f9:95:91:65:23:42:0b:9d:b2:12:2d:c1:9f:b2:28:
d1:3e:2c:81:a4:be:f3:5c:4f:85:67:16:a8:77:00:
8a:66:ef:bc:54:cd:00:9a:30:6d:5e:40:99:33:0d:
fe:ed:90:25:4a:d9:f8:75:bf:93:c1:1e:76:eb:d7:
bd:9d:e2:a8:0c:03:57:77:98:08:34:15:d2:35:79:
e5:31:bd:63:51:24:41:24:16:fd:91:4f:b8:e2:d1:
29:e2:0c:da:3a:73:e8:45:23:22:dd:02:56:1e:81:
fa:80:4c:73:5e:53:c5:af:a4:30:30:18:2a:b0:92:
7d:8f:13:45:79:47:fe:31:ef:fe:02:57:68:ac:fd:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:FA:E3:40:81:3C:11:C8:A8:50:30:7E:E1:7C:9E:94:5D:AD:DB
X509v3 Authority Key Identifier:
keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/AS4816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.208.0-103.39.235.255
103.40.240.0/20
103.44.236.0-103.44.255.255
Signature Algorithm: sha256WithRSAEncryption
84:d7:8a:e5:d0:c5:b5:13:49:ef:42:a5:bc:96:3b:20:5a:3d:
df:a7:57:91:7a:14:da:58:d6:cc:0f:b6:a5:2f:3e:a6:ce:9e:
c2:63:7d:16:70:e1:ee:cc:2e:02:94:d8:08:5d:b0:ac:45:55:
be:e2:57:2c:0d:dd:42:6b:a6:15:38:4a:53:47:32:bb:b9:70:
f2:dc:96:7b:ee:39:a1:fb:af:c6:94:02:b9:44:f8:93:c7:0a:
a8:eb:68:51:c2:a4:94:20:f1:9a:07:9b:0d:e1:e6:c8:91:6f:
3e:a3:b9:7a:ad:a6:b9:48:2a:05:42:02:97:62:b1:03:9d:57:
80:ec:c1:66:c7:c7:5f:4e:e0:26:b2:44:ba:10:a2:11:5c:f6:
e3:36:eb:6b:7f:99:ee:a3:a9:b7:f4:f9:f6:f7:35:61:5b:71:
d8:01:1b:7f:de:1f:13:1f:62:aa:f0:51:2a:e3:9b:0a:0d:35:
02:5d:f7:71:0f:e8:d1:a5:dc:ec:bb:f1:1e:49:21:f6:7e:cf:
ad:71:9b:8a:42:4e:6c:8a:4a:9e:78:a6:bd:58:e1:3b:6f:4d:
b9:af:6e:0c:9d:b4:83:21:99:cf:9b:50:44:4a:62:11:db:29:
1c:7c:c3:f1:b6:4c:5e:13:1b:30:2e:d9:09:1e:8a:b8:2e:40:
8d:cf:37:8c
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUUTjUunwsi4D3r+xbO59lHR5b/WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx
MTMwOUNBQzAeFw0yNjA0MTYwODA0NTFaFw0yNzA0MTUwODA5NTFaMDMxMTAvBgNV
BAMTKDI4NDhGQUUzNDA4MTNDMTFDOEE4NTAzMDdFRTE3QzlFOTQ1REFEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vJcCVI8yIuukez8fjBBEM26g
RzKQDzN1mVeMvYCI9bLaX5qmHFxvosW7ORoYXv4oB/VhrQUW5MgUm4z9Pri+vDI4
Bku4QGYYSFEbUF0sENJ5yQEU8m+who8VowKWH7uE2l/GrE64SJ+7tSak6Gr0ULBM
EX4AM/mVkWUjQgudshItwZ+yKNE+LIGkvvNcT4VnFqh3AIpm77xUzQCaMG1eQJkz
Df7tkCVK2fh1v5PBHnbr172d4qgMA1d3mAg0FdI1eeUxvWNRJEEkFv2RT7ji0Sni
DNo6c+hFIyLdAlYegfqATHNeU8WvpDAwGCqwkn2PE0V5R/4x7/4CV2is/QVTAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUKEj640CBPBHIqFAwfuF8npRdrdswHwYDVR0j
BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2
NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC9BUzQ4MTYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMCcEAgAB
MCEwDAMEBGcn0AMEAmcn6AMEBGco8DALAwQCZyzsAwMAZywwDQYJKoZIhvcNAQEL
BQADggEBAITXiuXQxbUTSe9CpbyWOyBaPd+nV5F6FNpY1swPtqUvPqbOnsJjfRZw
4e7MLgKU2AhdsKxFVb7iVywN3UJrphU4SlNHMru5cPLclnvuOaH7r8aUArlE+JPH
CqjraFHCpJQg8ZoHmw3h5siRbz6juXqtprlIKgVCApdisQOdV4DswWbHx19O4Cay
RLoQohFc9uM262t/me6jqbf0+fb3NWFbcdgBG3/eHxMfYqrwUSrjmwoNNQJd93EP
6NGl3Oy78R5JIfZ+z61xm4pCTmyKSp54pr1Y4TtvTbmvbgydtIMhmc+bUERKYhHb
KRx8w/G2TF4TGzAu2QkeirguQI3PN4w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:36 2026 by rpki-client