Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
File: AS4847.roa (raw, json)
Hash identifier: 02z1+CcCyYXaO62W5h5ieIdSPmupV8s712AtPPzkpkI=
Subject key identifier: 1B:97:6A:57:85:A1:7B:79:49:5F:ED:54:BF:C3:0D:CD:14:00:B1:29
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1EE556FEAC35D8EC99234D860872BA202D4D7E25
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
Signing time: Mon 14 Sep 2026 06:07:53 +0000
ROA not before: Mon 14 Sep 2026 06:02:53 +0000
ROA not after: Mon 13 Sep 2027 06:07:53 +0000
asID: 4847
IP address blocks: 1.202.0.0/17 maxlen: 17
1.202.128.0/17 maxlen: 17
1.202.143.0/24 maxlen: 24
1.202.217.0/24 maxlen: 24
1.202.224.0/24 maxlen: 24
1.202.228.0/24 maxlen: 24
1.202.231.0/24 maxlen: 24
1.202.237.0/24 maxlen: 24
1.203.0.0/16 maxlen: 16
1.203.0.0/18 maxlen: 18
1.203.90.0/24 maxlen: 24
1.203.91.0/24 maxlen: 24
1.203.96.0/24 maxlen: 24
1.203.105.0/24 maxlen: 24
1.203.128.0/20 maxlen: 20
36.110.0.0/17 maxlen: 17
36.110.14.0/24 maxlen: 24
36.110.24.0/24 maxlen: 24
36.110.28.0/24 maxlen: 24
36.110.38.0/24 maxlen: 24
36.110.60.0/24 maxlen: 24
36.110.69.0/24 maxlen: 24
36.110.82.0/24 maxlen: 24
36.110.112.0/24 maxlen: 24
36.110.114.0/24 maxlen: 24
36.110.118.0/24 maxlen: 24
36.110.119.0/24 maxlen: 24
36.110.120.0/24 maxlen: 24
36.110.121.0/24 maxlen: 24
36.112.0.0/16 maxlen: 16
36.112.3.0/24 maxlen: 24
36.112.20.0/24 maxlen: 24
36.112.22.0/24 maxlen: 24
36.112.27.0/24 maxlen: 24
36.112.30.0/24 maxlen: 24
36.112.31.0/24 maxlen: 24
36.112.39.0/24 maxlen: 24
36.112.48.0/22 maxlen: 22
36.112.56.0/24 maxlen: 24
36.112.63.0/24 maxlen: 24
36.112.89.0/24 maxlen: 24
36.112.97.0/24 maxlen: 24
36.112.101.0/24 maxlen: 24
36.112.107.0/24 maxlen: 24
36.112.113.0/24 maxlen: 24
36.112.115.0/24 maxlen: 24
36.112.120.0/24 maxlen: 24
36.112.121.0/24 maxlen: 24
36.112.122.0/24 maxlen: 24
36.112.140.0/23 maxlen: 23
36.112.151.0/24 maxlen: 24
36.112.152.0/24 maxlen: 24
36.112.162.0/24 maxlen: 24
36.112.166.0/24 maxlen: 24
36.112.228.0/24 maxlen: 24
36.112.232.0/24 maxlen: 24
36.112.248.0/24 maxlen: 24
106.37.0.0/16 maxlen: 16
106.37.239.0/24 maxlen: 24
106.38.0.0/16 maxlen: 16
106.38.0.0/19 maxlen: 19
106.38.57.0/24 maxlen: 24
106.39.0.0/16 maxlen: 16
106.39.90.0/24 maxlen: 24
106.39.91.0/24 maxlen: 24
106.39.103.0/24 maxlen: 24
106.120.0.0/19 maxlen: 19
106.120.32.0/19 maxlen: 19
106.120.64.0/19 maxlen: 19
106.120.96.0/19 maxlen: 19
106.120.101.0/24 maxlen: 24
106.120.128.0/20 maxlen: 20
106.120.192.0/19 maxlen: 19
106.120.213.0/24 maxlen: 24
106.120.224.0/19 maxlen: 19
106.121.0.0/16 maxlen: 16
115.168.1.0/24 maxlen: 24
115.168.64.0/24 maxlen: 24
115.171.0.0/16 maxlen: 16
115.171.0.0/18 maxlen: 18
115.171.64.0/18 maxlen: 18
115.171.128.0/18 maxlen: 18
115.171.192.0/18 maxlen: 18
202.111.240.0/24 maxlen: 24
218.30.179.0/24 maxlen: 24
218.30.180.0/24 maxlen: 24
218.30.181.0/24 maxlen: 24
218.30.182.0/24 maxlen: 24
219.141.128.0/17 maxlen: 17
219.141.150.0/24 maxlen: 24
219.141.187.0/24 maxlen: 24
219.141.224.0/24 maxlen: 24
219.141.239.0/24 maxlen: 24
219.142.0.0/16 maxlen: 16
219.142.0.0/17 maxlen: 17
219.142.34.0/24 maxlen: 24
219.142.43.0/24 maxlen: 24
219.142.51.0/24 maxlen: 24
219.142.70.0/24 maxlen: 24
219.142.91.0/24 maxlen: 24
219.142.128.0/18 maxlen: 18
219.142.192.0/18 maxlen: 18
219.142.210.0/24 maxlen: 24
219.142.211.0/24 maxlen: 24
219.143.0.0/16 maxlen: 16
219.143.8.0/24 maxlen: 24
219.143.18.0/24 maxlen: 24
219.143.37.0/24 maxlen: 24
219.143.76.0/24 maxlen: 24
219.143.80.0/21 maxlen: 21
219.143.88.0/21 maxlen: 21
219.143.96.0/22 maxlen: 22
219.143.101.0/24 maxlen: 24
219.143.144.0/24 maxlen: 24
219.143.217.0/24 maxlen: 24
219.143.240.0/20 maxlen: 20
220.181.176.0/24 maxlen: 24
220.181.190.0/24 maxlen: 24
240e:83:8000::/48 maxlen: 48
240e:604:111::/48 maxlen: 48
240e:604:20f::/48 maxlen: 48
240e:604:784::/48 maxlen: 48
240e:604:900::/40 maxlen: 40
240e:b04::/32 maxlen: 32
240e:b05::/32 maxlen: 32
240e:b06::/32 maxlen: 32
240e:b07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e5:56:fe:ac:35:d8:ec:99:23:4d:86:08:72:ba:20:2d:4d:7e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Sep 14 06:02:53 2026 GMT
Not After : Sep 13 06:07:53 2027 GMT
Subject: CN=1B976A5785A17B79495FED54BFC30DCD1400B129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:3b:b9:2e:6a:08:04:7a:c3:a3:cc:f1:db:
38:b7:b7:78:d5:c4:05:90:2e:6e:97:2b:a2:02:d9:
78:cd:8e:32:ff:9d:4c:9e:9a:94:64:50:d2:d8:c2:
c0:23:f6:d9:f7:da:b4:ba:9c:0a:f1:ca:56:52:47:
8f:73:c5:18:48:9f:78:6c:72:89:18:64:7d:d4:a8:
7f:9d:9b:02:49:f6:ed:b3:a5:bc:44:4f:80:dd:c7:
6e:31:7b:61:b3:71:64:4c:05:75:bc:9d:d1:2e:1f:
24:a1:0a:cd:14:58:80:fd:92:39:1e:82:be:89:a4:
a5:4f:e6:7b:2e:01:fb:34:23:b9:49:06:35:75:66:
b9:aa:41:ab:93:a6:93:54:95:5a:e7:ac:f0:d8:9d:
93:54:77:a8:db:af:1d:e8:43:9e:92:f6:03:04:da:
36:de:65:13:12:99:19:13:ae:28:ab:b9:60:8c:a5:
2c:ca:f4:fe:66:b4:ef:7b:4d:ce:e1:fb:22:73:e0:
5e:26:88:0d:f4:02:ea:a3:0c:27:03:92:5f:78:9c:
23:fb:c3:a8:3d:88:e0:52:8d:59:6a:aa:f3:04:26:
24:17:42:0a:3b:11:de:6f:f7:04:83:22:14:52:d5:
bf:f4:d0:46:92:42:0c:fc:dd:e2:cd:60:63:38:09:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:6A:57:85:A1:7B:79:49:5F:ED:54:BF:C3:0D:CD:14:00:B1:29
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.202.0.0/15
36.110.0.0/17
36.112.0.0/16
106.37.0.0-106.39.255.255
106.120.0.0-106.120.143.255
106.120.192.0-106.121.255.255
115.168.1.0/24
115.168.64.0/24
115.171.0.0/16
202.111.240.0/24
218.30.179.0-218.30.182.255
219.141.128.0-219.143.255.255
220.181.176.0/24
220.181.190.0/24
IPv6:
240e:83:8000::/48
240e:604:111::/48
240e:604:20f::/48
240e:604:784::/48
240e:604:900::/40
240e:b04::/30
Signature Algorithm: sha256WithRSAEncryption
43:83:a9:ac:47:de:4b:5a:31:3e:1a:eb:65:46:1d:b7:f0:95:
4e:61:fe:a8:76:38:a2:dd:32:25:af:01:93:5e:36:01:66:5e:
27:dc:68:96:f1:76:a2:3b:d6:b1:b5:b6:4a:46:32:f6:99:4d:
47:03:ab:eb:bf:ad:7b:9c:f3:e2:be:95:a4:bd:14:21:40:89:
2f:13:5f:24:e4:d2:83:93:a4:84:a2:8b:35:a6:77:6b:e3:0e:
37:ff:29:09:c1:64:d0:aa:9d:69:0b:4b:e0:43:ab:f8:bf:aa:
01:5c:ec:b0:a7:ea:15:1e:d4:23:d3:8d:e9:15:5b:62:bd:e3:
85:01:a5:5d:75:fc:d5:f3:90:54:cf:0c:62:d9:d9:67:98:ee:
98:2d:6c:21:3f:1e:e6:63:58:a6:8d:d9:42:e3:c7:54:84:cc:
33:e2:30:d9:ca:31:73:bc:bc:3d:72:17:5d:65:a8:77:c3:40:
6d:4d:e7:49:e2:96:81:d6:b1:4e:ac:5a:47:e9:06:0e:90:bb:
b1:96:dd:d6:7c:5d:dc:29:c6:db:c4:03:17:25:34:69:e1:39:
f4:c6:46:8c:ec:f8:42:fa:61:4c:13:a7:0f:c0:8a:8a:0f:f5:
e4:bb:f9:71:e5:36:f2:a1:b5:8f:78:50:d5:96:7c:7f:3a:54:
a7:58:08:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:39:14 2026 by rpki-client