Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS9808.roa
File: AS9808.roa (raw, json)
Hash identifier: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=
Subject key identifier: 3F:37:8C:A3:77:B4:B5:D8:BC:2C:F1:8D:B8:C1:22:C5:B4:9C:C7:3F
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 042B2381A389B601D427FCB58CF813A2C4BA0C83
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS9808.roa
Signing time: Thu 04 Jun 2026 02:21:35 +0000
ROA not before: Thu 04 Jun 2026 02:16:35 +0000
ROA not after: Thu 03 Jun 2027 02:21:35 +0000
asID: 9808
IP address blocks: 103.244.80.0/22 maxlen: 22
114.118.0.0/21 maxlen: 21
114.118.8.0/21 maxlen: 21
114.118.16.0/21 maxlen: 21
114.118.24.0/21 maxlen: 21
114.118.40.0/21 maxlen: 21
114.118.48.0/21 maxlen: 21
114.118.56.0/21 maxlen: 21
114.118.64.0/21 maxlen: 21
114.118.72.0/21 maxlen: 21
114.118.80.0/21 maxlen: 21
114.118.88.0/21 maxlen: 21
114.118.96.0/21 maxlen: 21
114.118.104.0/21 maxlen: 21
114.118.112.0/21 maxlen: 21
114.118.120.0/21 maxlen: 21
117.48.0.0/22 maxlen: 22
117.48.4.0/22 maxlen: 22
117.48.8.0/22 maxlen: 22
117.48.12.0/22 maxlen: 22
117.48.16.0/22 maxlen: 22
117.48.20.0/22 maxlen: 22
117.48.24.0/22 maxlen: 22
117.48.28.0/22 maxlen: 22
117.48.32.0/22 maxlen: 22
117.48.36.0/22 maxlen: 22
117.48.40.0/22 maxlen: 22
117.48.44.0/22 maxlen: 22
117.48.48.0/22 maxlen: 22
117.48.52.0/22 maxlen: 22
117.48.56.0/22 maxlen: 22
117.48.60.0/22 maxlen: 22
117.48.64.0/22 maxlen: 22
117.48.68.0/22 maxlen: 22
117.48.72.0/22 maxlen: 22
117.48.76.0/22 maxlen: 22
117.48.80.0/22 maxlen: 22
117.48.84.0/22 maxlen: 22
117.48.88.0/22 maxlen: 22
117.48.92.0/22 maxlen: 22
120.132.32.0/22 maxlen: 22
120.132.36.0/22 maxlen: 22
120.132.40.0/22 maxlen: 22
120.132.44.0/22 maxlen: 22
120.132.48.0/22 maxlen: 22
120.132.52.0/22 maxlen: 22
120.132.56.0/22 maxlen: 22
120.132.60.0/22 maxlen: 22
120.132.64.0/22 maxlen: 22
120.132.68.0/22 maxlen: 22
120.132.72.0/22 maxlen: 22
120.132.76.0/22 maxlen: 22
120.132.80.0/22 maxlen: 22
120.132.84.0/22 maxlen: 22
120.132.88.0/22 maxlen: 22
120.132.92.0/22 maxlen: 22
123.59.0.0/19 maxlen: 19
123.59.32.0/19 maxlen: 19
123.59.64.0/19 maxlen: 19
123.59.96.0/19 maxlen: 19
123.59.128.0/19 maxlen: 19
123.59.160.0/19 maxlen: 19
123.59.192.0/19 maxlen: 19
123.59.224.0/19 maxlen: 19
180.150.176.0/22 maxlen: 22
180.150.180.0/22 maxlen: 22
180.150.184.0/22 maxlen: 22
180.150.188.0/22 maxlen: 22
2406:cf00::/48 maxlen: 48
2406:cf00:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2b:23:81:a3:89:b6:01:d4:27:fc:b5:8c:f8:13:a2:c4:ba:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: Jun 4 02:16:35 2026 GMT
Not After : Jun 3 02:21:35 2027 GMT
Subject: CN=3F378CA377B4B5D8BC2CF18DB8C122C5B49CC73F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:fe:a4:97:84:45:95:d6:fd:de:dc:32:4a:
11:20:88:47:9d:bf:37:85:4a:53:b4:3c:e0:6a:b8:
0a:a1:59:e6:1b:76:a4:65:d5:39:9b:78:e2:e8:de:
f3:d8:ae:ab:de:53:6b:0f:84:2d:e4:39:ad:44:00:
d7:cb:5f:45:f2:c9:12:80:58:dd:ae:df:16:d7:6a:
7b:df:73:34:5c:bc:32:ed:2c:ec:09:76:c6:00:1c:
ff:9b:9e:31:64:3b:4d:13:d3:7b:e9:87:c5:a7:81:
ef:c4:76:d5:ff:d0:54:3f:70:b0:77:8c:5a:2d:1c:
51:ab:e9:7e:bf:4b:be:60:6a:70:b3:fc:9d:c5:2d:
81:46:9d:2c:a0:97:22:67:f0:4a:3d:d7:25:88:31:
d3:d6:46:cb:86:b1:e8:7c:51:e8:b8:56:a2:21:59:
fe:a9:2f:4f:84:18:1a:1f:93:b2:fc:78:ac:23:a4:
d7:3e:48:16:37:ed:aa:c3:1d:a5:d9:f2:2f:2e:dd:
f0:d4:b2:8d:f6:df:18:a3:11:25:59:73:3b:9e:fa:
93:e8:a1:37:4c:06:74:ef:72:44:9a:be:7f:2b:b4:
2b:e4:35:ea:b7:de:d6:bc:1c:48:35:25:4c:f6:2b:
46:c0:66:d3:ff:67:4d:5f:cc:6c:28:4b:31:ce:01:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:8C:A3:77:B4:B5:D8:BC:2C:F1:8D:B8:C1:22:C5:B4:9C:C7:3F
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS9808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.80.0/22
114.118.0.0/19
114.118.40.0-114.118.127.255
117.48.0.0-117.48.95.255
120.132.32.0-120.132.95.255
123.59.0.0/16
180.150.176.0/20
IPv6:
2406:cf00::/48
2406:cf00:1800::/38
Signature Algorithm: sha256WithRSAEncryption
60:77:3f:fb:b3:66:9d:ef:8b:3a:8b:28:c4:38:70:12:0d:2c:
81:87:05:2a:a3:0a:ad:8b:d2:81:f1:d8:6f:a2:8c:77:1e:89:
0c:c5:c0:df:5f:e2:3f:23:86:50:5a:ea:5c:5f:66:c7:25:76:
0c:30:5c:7b:ec:e8:8e:a1:9c:13:8c:d6:1c:a0:ea:72:1e:b1:
6d:54:3e:b7:7a:6c:b8:7b:b0:6c:00:fd:47:9b:5e:42:50:22:
88:a3:af:06:7a:34:4b:93:ae:fa:75:4b:5b:8d:30:b2:f1:61:
f7:41:eb:80:7c:9d:a0:1b:13:54:3f:65:b1:8b:c8:5c:21:7d:
5a:db:b2:1c:e9:3e:d0:8c:c1:c9:54:3c:53:b0:3e:5d:7d:f2:
52:c0:05:b2:db:cf:aa:40:b3:c2:02:95:8b:9f:af:f8:a7:94:
48:08:64:86:f0:60:be:f2:a0:c4:3b:ba:9b:64:9d:01:e8:b8:
7d:5b:a9:e4:bd:80:b2:2b:32:9f:5f:35:13:25:a5:08:7f:ee:
b9:b7:9b:f5:d5:d4:fb:a9:9f:96:42:2c:dd:13:d3:dc:24:e8:
8e:4c:e4:ef:d1:9a:ff:bd:4c:39:75:59:c0:7d:ac:00:e4:30:
b3:b3:78:47:d6:56:41:53:e1:6f:92:91:5b:a8:1c:ea:89:4b:
3a:93:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:34 2026 by rpki-client