Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4809.roa
File: AS4809.roa (raw, json)
Hash identifier: HNUR2wvjmd0yu0fioz8+jPLUzZed1VcoIiDW2iBc4go=
Subject key identifier: 39:88:51:AF:1F:98:5C:6A:60:49:14:5A:A7:78:66:31:A9:1C:AE:A2
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0BDC8BAAE1FEDC22F08FE0F975BBFF11378FA285
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4809.roa
Signing time: Fri 12 Jun 2026 16:32:29 +0000
ROA not before: Fri 12 Jun 2026 16:27:29 +0000
ROA not after: Fri 11 Jun 2027 16:32:29 +0000
asID: 4809
IP address blocks: 1.71.103.0/24 maxlen: 24
1.71.119.0/24 maxlen: 24
27.191.140.0/24 maxlen: 24
36.1.209.0/24 maxlen: 24
36.1.210.0/23 maxlen: 23
58.49.108.0/24 maxlen: 24
59.47.56.0/24 maxlen: 24
59.47.57.0/24 maxlen: 24
59.49.112.0/22 maxlen: 22
59.49.116.0/24 maxlen: 24
59.49.118.0/24 maxlen: 24
59.49.119.0/24 maxlen: 24
59.49.120.0/24 maxlen: 24
59.49.121.0/24 maxlen: 24
59.49.122.0/24 maxlen: 24
59.49.123.0/24 maxlen: 24
59.49.124.0/24 maxlen: 24
59.49.125.0/24 maxlen: 24
59.49.126.0/24 maxlen: 24
59.173.248.0/24 maxlen: 24
60.168.127.0/24 maxlen: 24
60.168.148.0/24 maxlen: 24
106.9.0.0/18 maxlen: 18
106.9.122.0/24 maxlen: 24
106.16.240.0/20 maxlen: 20
106.33.193.0/24 maxlen: 24
106.41.64.0/24 maxlen: 24
106.41.65.0/24 maxlen: 24
112.67.112.0/24 maxlen: 24
112.67.113.0/24 maxlen: 24
116.8.0.0/19 maxlen: 19
116.211.5.0/24 maxlen: 24
116.211.6.0/24 maxlen: 24
116.211.31.0/24 maxlen: 24
116.248.192.0/19 maxlen: 19
117.41.0.0/17 maxlen: 17
117.41.48.0/20 maxlen: 20
121.58.116.0/23 maxlen: 23
121.58.126.0/23 maxlen: 23
123.101.0.0/21 maxlen: 21
123.101.8.0/22 maxlen: 22
123.101.12.0/24 maxlen: 24
123.101.28.0/23 maxlen: 23
123.167.110.0/24 maxlen: 24
123.167.111.0/24 maxlen: 24
123.167.128.0/20 maxlen: 20
123.167.156.0/22 maxlen: 22
123.168.0.0/18 maxlen: 18
123.172.0.0/19 maxlen: 19
124.31.231.0/24 maxlen: 24
124.31.253.0/24 maxlen: 24
124.227.64.0/23 maxlen: 23
124.227.66.0/23 maxlen: 23
125.72.240.0/21 maxlen: 21
125.76.16.0/20 maxlen: 20
182.33.126.0/24 maxlen: 24
182.33.253.0/24 maxlen: 24
202.100.97.0/24 maxlen: 24
202.111.192.0/20 maxlen: 20
202.111.208.0/20 maxlen: 20
220.182.40.0/23 maxlen: 23
240e:182:5401::/48 maxlen: 48
240e:182:5501::/48 maxlen: 48
240e:409:9000::/48 maxlen: 48
240e:409:9001::/48 maxlen: 48
240e:410:ff00::/48 maxlen: 48
240e:411:ff00::/48 maxlen: 48
240e:414:e710::/45 maxlen: 45
240e:414:e718::/45 maxlen: 45
240e:43d:fff1::/48 maxlen: 48
240e:43d:fff3::/48 maxlen: 48
240e:43d:fff4::/48 maxlen: 48
240e:43d:fff7::/48 maxlen: 48
240e:440:ac00::/48 maxlen: 48
240e:440:ac01::/48 maxlen: 48
240e:440:ac02::/48 maxlen: 48
240e:441:ac00::/48 maxlen: 48
240e:441:ac01::/48 maxlen: 48
240e:441:ac02::/48 maxlen: 48
240e:445:3f00::/48 maxlen: 48
240e:446:3f00::/48 maxlen: 48
240e:451:bfc0::/48 maxlen: 48
240e:451:bfe0::/48 maxlen: 48
240e:451:ffa0::/48 maxlen: 48
240e:451:ffc0::/48 maxlen: 48
240e:451:ffe0::/48 maxlen: 48
240e:469:f400::/48 maxlen: 48
240e:60e:8000::/48 maxlen: 48
240e:60e:8001::/48 maxlen: 48
240e:60e:e000::/35 maxlen: 35
240e:615:7000::/40 maxlen: 40
240e:61d:e600::/40 maxlen: 40
240e:62c:1f0::/44 maxlen: 44
240e:62f::/48 maxlen: 48
240e:63c:3f00::/44 maxlen: 44
240e:640:178::/48 maxlen: 48
240e:640:179::/48 maxlen: 48
240e:640:17a::/48 maxlen: 48
240e:640:17b::/48 maxlen: 48
240e:645:1000::/36 maxlen: 36
240e:64e:d00::/44 maxlen: 44
240e:64e:de0::/48 maxlen: 48
240e:64e:dec::/48 maxlen: 48
240e:64e:ded::/48 maxlen: 48
240e:650:8000::/38 maxlen: 38
240e:669:b000::/40 maxlen: 40
240e:670:d000::/36 maxlen: 36
240e:713:f020::/48 maxlen: 48
240e:713:f021::/48 maxlen: 48
240e:767:f000::/48 maxlen: 48
240e:787:7000::/48 maxlen: 48
240e:787:7001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 17:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:dc:8b:aa:e1:fe:dc:22:f0:8f:e0:f9:75:bb:ff:11:37:8f:a2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 12 16:27:29 2026 GMT
Not After : Jun 11 16:32:29 2027 GMT
Subject: CN=398851AF1F985C6A6049145AA7786631A91CAEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:19:41:f2:cc:06:5d:46:0a:c9:2f:d7:8c:
39:51:2d:fe:75:bc:cb:ac:cd:52:62:77:b3:71:27:
0e:4c:83:2b:2a:65:90:9b:41:1b:a6:84:ef:b1:4b:
fa:dc:51:6c:dd:f7:8b:69:65:a2:d5:31:01:c0:64:
1d:f2:b9:46:eb:61:c4:a2:18:a0:de:7b:e4:98:cb:
05:f1:ee:e4:29:1e:a9:06:a6:aa:53:70:70:35:d6:
55:f0:64:cb:a8:27:2e:4a:83:e7:14:69:ac:3b:d0:
df:b4:4f:7f:5d:bc:fa:1b:11:06:a4:3f:be:b3:90:
90:47:6f:10:72:6c:4f:bd:8c:d9:a0:cc:e8:0b:f3:
f0:8f:87:89:37:ae:f7:17:1c:2e:23:4a:09:b3:c7:
4a:c2:d7:92:0b:46:b3:53:9e:30:76:c8:b7:01:80:
bc:db:4c:58:57:e6:83:0f:59:54:d5:1c:fc:7c:15:
14:ff:ef:dc:49:00:ab:b8:41:9f:90:fe:5b:ff:eb:
c8:14:e6:c2:2a:f2:a3:ee:57:df:cf:79:5e:cf:54:
0b:85:e8:7b:50:05:54:d6:0a:6f:42:a2:be:48:9f:
50:a0:f1:01:08:87:67:51:0d:ed:d5:bc:de:bd:a6:
73:ae:1b:21:4d:a9:9a:47:aa:ea:29:22:dc:b1:d2:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:88:51:AF:1F:98:5C:6A:60:49:14:5A:A7:78:66:31:A9:1C:AE:A2
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.71.103.0/24
1.71.119.0/24
27.191.140.0/24
36.1.209.0-36.1.211.255
58.49.108.0/24
59.47.56.0/23
59.49.112.0-59.49.116.255
59.49.118.0-59.49.126.255
59.173.248.0/24
60.168.127.0/24
60.168.148.0/24
106.9.0.0/18
106.9.122.0/24
106.16.240.0/20
106.33.193.0/24
106.41.64.0/23
112.67.112.0/23
116.8.0.0/19
116.211.5.0-116.211.6.255
116.211.31.0/24
116.248.192.0/19
117.41.0.0/17
121.58.116.0/23
121.58.126.0/23
123.101.0.0-123.101.12.255
123.101.28.0/23
123.167.110.0/23
123.167.128.0/20
123.167.156.0/22
123.168.0.0/18
123.172.0.0/19
124.31.231.0/24
124.31.253.0/24
124.227.64.0/22
125.72.240.0/21
125.76.16.0/20
182.33.126.0/24
182.33.253.0/24
202.100.97.0/24
202.111.192.0/19
220.182.40.0/23
IPv6:
240e:182:5401::/48
240e:182:5501::/48
240e:409:9000::/47
240e:410:ff00::/48
240e:411:ff00::/48
240e:414:e710::/44
240e:43d:fff1::/48
240e:43d:fff3::-240e:43d:fff4:ffff:ffff:ffff:ffff:ffff
240e:43d:fff7::/48
240e:440:ac00::-240e:440:ac02:ffff:ffff:ffff:ffff:ffff
240e:441:ac00::-240e:441:ac02:ffff:ffff:ffff:ffff:ffff
240e:445:3f00::/48
240e:446:3f00::/48
240e:451:bfc0::/48
240e:451:bfe0::/48
240e:451:ffa0::/48
240e:451:ffc0::/48
240e:451:ffe0::/48
240e:469:f400::/48
240e:60e:8000::/47
240e:60e:e000::/35
240e:615:7000::/40
240e:61d:e600::/40
240e:62c:1f0::/44
240e:62f::/48
240e:63c:3f00::/44
240e:640:178::/46
240e:645:1000::/36
240e:64e:d00::/44
240e:64e:de0::/48
240e:64e:dec::/47
240e:650:8000::/38
240e:669:b000::/40
240e:670:d000::/36
240e:713:f020::/47
240e:767:f000::/48
240e:787:7000::/47
Signature Algorithm: sha256WithRSAEncryption
91:72:41:46:56:1c:fe:c9:40:00:e4:ce:89:ec:ca:82:f5:08:
b0:5c:38:2d:0d:3e:72:49:0c:85:89:e4:79:a0:3b:6e:7d:7e:
f4:12:37:4d:58:f9:19:fe:13:2f:f4:23:f5:77:76:d2:c7:59:
bd:0b:58:6c:fc:9a:7f:1d:f1:c4:2b:f6:ce:d6:72:3a:4e:d5:
c0:02:c0:6d:f3:99:2f:33:6a:e2:39:b1:4d:f1:2a:91:f1:28:
82:4a:4f:57:d4:f2:94:91:4b:cd:01:8a:1e:fd:0c:fe:ed:2c:
b7:0a:21:bf:63:aa:e9:de:7e:1b:61:b5:6d:f4:75:e1:3b:15:
c5:b5:73:32:c8:d8:cb:52:63:c5:64:17:2f:38:ed:3a:85:24:
48:d9:87:4f:af:02:99:fc:55:b5:43:3a:ee:dc:d9:51:bf:86:
79:fa:e7:cf:ea:f6:30:37:b2:2b:60:66:ef:d0:77:4a:62:c0:
d7:85:a3:16:96:b1:49:de:63:84:2b:c4:2d:f3:72:1a:5e:46:
c7:5c:09:e9:70:71:ad:71:62:6a:7b:e5:3e:68:c0:18:90:b1:
e2:37:61:33:8d:22:3a:66:6e:55:b1:b6:49:8a:cf:a3:00:90:
c6:56:d4:77:44:17:59:5e:87:e9:e0:a5:11:26:86:73:63:55:
35:00:68:42
-----BEGIN CERTIFICATE-----
MIIHgTCCBmmgAwIBAgIUC9yLquH+3CLwj+D5dbv/ETePooUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMjE2MjcyOVoX
DTI3MDYxMTE2MzIyOVowMzExMC8GA1UEAxMoMzk4ODUxQUYxRjk4NUM2QTYwNDkx
NDVBQTc3ODY2MzFBOTFDQUVBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALSUGUHyzAZdRgrJL9eMOVEt/nW8y6zNUmJ3s3EnDkyDKyplkJtBG6aE77FL
+txRbN33i2llotUxAcBkHfK5RuthxKIYoN575JjLBfHu5CkeqQamqlNwcDXWVfBk
y6gnLkqD5xRprDvQ37RPf128+hsRBqQ/vrOQkEdvEHJsT72M2aDM6Avz8I+HiTeu
9xccLiNKCbPHSsLXkgtGs1OeMHbItwGAvNtMWFfmgw9ZVNUc/HwVFP/v3EkAq7hB
n5D+W//ryBTmwiryo+5X3895Xs9UC4Xoe1AFVNYKb0KivkifUKDxAQiHZ1EN7dW8
3r2mc64bIU2pmkeq6iki3LHS1rcCAwEAAaOCBHQwggRwMB0GA1UdDgQWBBQ5iFGv
H5hcamBJFFqneGYxqRyuojAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH
MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTNDgwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
Aq8GCCsGAQUFBwEHAQH/BIICnjCCApowggElBAIAATCCAR0DBAABR2cDBAABR3cD
BAAbv4wwDAMEACQB0QMEAiQB0AMEADoxbAMEATsvODAMAwQEOzFwAwQAOzF0MAwD
BAE7MXYDBAA7MX4DBAA7rfgDBAA8qH8DBAA8qJQDBAZqCQADBABqCXoDBARqEPAD
BABqIcEDBAFqKUADBAFwQ3ADBAV0CAAwDAMEAHTTBQMEAHTTBgMEAHTTHwMEBXT4
wAMEB3UpAAMEAXk6dAMEAXk6fjALAwMAe2UDBAB7ZQwDBAF7ZRwDBAF7p24DBAR7
p4ADBAJ7p5wDBAZ7qAADBAV7rAADBAB8H+cDBAB8H/0DBAJ840ADBAN9SPADBAR9
TBADBAC2IX4DBAC2If0DBADKZGEDBAXKb8ADBAHctigwggFtBAIAAjCCAWUDBwAk
DgGCVAEDBwAkDgGCVQEDBwEkDgQJkAADBwAkDgQQ/wADBwAkDgQR/wADBwQkDgQU
5xADBwAkDgQ9//EwEgMHACQOBD3/8wMHACQOBD3/9AMHACQOBD3/9zARAwYCJA4E
QKwDBwAkDgRArAIwEQMGAiQOBEGsAwcAJA4EQawCAwcAJA4ERT8AAwcAJA4ERj8A
AwcAJA4EUb/AAwcAJA4EUb/gAwcAJA4EUf+gAwcAJA4EUf/AAwcAJA4EUf/gAwcA
JA4EafQAAwcBJA4GDoAAAwYFJA4GDuADBgAkDgYVcAMGACQOBh3mAwcEJA4GLAHw
AwcAJA4GLwAAAwcEJA4GPD8AAwcCJA4GQAF4AwYEJA4GRRADBwQkDgZODQADBwAk
DgZODeADBwEkDgZODewDBgIkDgZQgAMGACQOBmmwAwYEJA4GcNADBwEkDgcT8CAD
BwAkDgdn8AADBwEkDgeHcAAwDQYJKoZIhvcNAQELBQADggEBAJFyQUZWHP7JQADk
zonsyoL1CLBcOC0NPnJJDIWJ5HmgO259fvQSN01Y+Rn+Ey/0I/V3dtLHWb0LWGz8
mn8d8cQr9s7WcjpO1cACwG3zmS8zauI5sU3xKpHxKIJKT1fU8pSRS80Bih79DP7t
LLcKIb9jqunefhthtW30deE7FcW1czLI2MtSY8VkFy847TqFJEjZh0+vApn8VbVD
Ou7c2VG/hnn658/q9jA3sitgZu/Qd0piwNeFoxaWsUneY4QrxC3zchpeRsdcCelw
ca1xYmp75T5owBiQseI3YTONIjpmblWxtkmKz6MAkMZW1HdEF1leh+ngpREmhnNj
VTUAaEI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:17 2026 by rpki-client