Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
File: AS4837.roa (raw, json)
Hash identifier: 4jC7pNZJlCkvu7YhGeel55NiuoIgFlOzY6NAf24LZ5Q=
Subject key identifier: 3F:1B:F9:AD:95:1E:07:2A:7D:63:DB:BF:70:01:5D:E6:31:11:01:98
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 4E2971537FF50C0D9D23FF310C026DD8D495C2B7
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
Signing time: Fri 12 Jun 2026 04:44:58 +0000
ROA not before: Fri 12 Jun 2026 04:39:58 +0000
ROA not after: Fri 11 Jun 2027 04:44:58 +0000
asID: 4837
IP address blocks: 61.240.0.0/19 maxlen: 19
61.240.32.0/19 maxlen: 19
61.240.64.0/18 maxlen: 18
61.240.128.0/19 maxlen: 19
61.240.192.0/19 maxlen: 19
61.240.224.0/20 maxlen: 20
61.240.224.0/21 maxlen: 21
61.240.232.0/21 maxlen: 21
61.240.240.0/21 maxlen: 21
61.240.248.0/21 maxlen: 21
61.241.64.0/18 maxlen: 18
61.241.192.0/19 maxlen: 19
61.242.128.0/19 maxlen: 19
61.242.160.0/19 maxlen: 19
61.242.192.0/18 maxlen: 18
61.243.0.0/19 maxlen: 19
61.243.1.0/24 maxlen: 24
61.243.2.0/24 maxlen: 24
61.243.3.0/24 maxlen: 24
61.243.4.0/24 maxlen: 24
61.243.10.0/24 maxlen: 24
61.243.11.0/24 maxlen: 24
61.243.12.0/24 maxlen: 24
61.243.32.0/20 maxlen: 20
61.243.48.0/20 maxlen: 20
61.243.64.0/19 maxlen: 19
61.243.96.0/20 maxlen: 20
61.243.112.0/21 maxlen: 21
61.243.120.0/22 maxlen: 22
61.243.124.0/22 maxlen: 22
61.243.128.0/18 maxlen: 18
61.243.192.0/19 maxlen: 19
61.243.224.0/19 maxlen: 19
116.78.0.0/16 maxlen: 16
116.128.224.0/19 maxlen: 19
116.129.0.0/17 maxlen: 17
116.129.128.0/18 maxlen: 18
116.129.192.0/19 maxlen: 19
116.129.224.0/20 maxlen: 20
116.129.240.0/22 maxlen: 22
116.129.244.0/22 maxlen: 22
116.129.248.0/21 maxlen: 21
116.130.0.0/16 maxlen: 16
116.131.0.0/16 maxlen: 16
116.132.0.0/15 maxlen: 15
116.135.0.0/18 maxlen: 18
116.138.0.0/15 maxlen: 15
116.140.0.0/17 maxlen: 17
116.140.128.0/18 maxlen: 18
116.140.192.0/18 maxlen: 18
116.141.0.0/16 maxlen: 16
116.142.0.0/15 maxlen: 15
116.144.0.0/15 maxlen: 15
116.146.0.0/16 maxlen: 16
116.147.0.0/16 maxlen: 16
116.148.0.0/16 maxlen: 16
116.153.0.0/16 maxlen: 16
116.154.0.0/15 maxlen: 15
116.161.0.0/16 maxlen: 16
116.162.0.0/16 maxlen: 16
116.163.0.0/18 maxlen: 18
116.165.0.0/16 maxlen: 16
116.167.0.0/16 maxlen: 16
116.168.0.0/16 maxlen: 16
116.171.0.0/16 maxlen: 16
116.171.38.0/24 maxlen: 24
116.171.98.0/24 maxlen: 24
116.171.109.0/24 maxlen: 24
116.171.138.0/24 maxlen: 24
116.171.249.0/24 maxlen: 24
116.172.64.0/18 maxlen: 18
116.172.128.0/17 maxlen: 17
116.173.0.0/16 maxlen: 16
116.174.0.0/15 maxlen: 15
116.176.0.0/16 maxlen: 16
116.177.0.0/16 maxlen: 16
116.178.0.0/16 maxlen: 16
116.179.0.0/16 maxlen: 16
116.180.0.0/16 maxlen: 16
211.90.0.0/18 maxlen: 18
211.90.64.0/21 maxlen: 21
211.90.80.0/21 maxlen: 21
211.90.88.0/21 maxlen: 21
211.90.96.0/19 maxlen: 19
211.90.128.0/18 maxlen: 18
211.90.192.0/20 maxlen: 20
211.90.216.0/21 maxlen: 21
211.90.224.0/19 maxlen: 19
211.91.0.0/18 maxlen: 18
211.91.120.0/21 maxlen: 21
211.91.128.0/19 maxlen: 19
211.91.160.0/20 maxlen: 20
211.91.176.0/21 maxlen: 21
211.91.184.0/21 maxlen: 21
211.91.216.0/21 maxlen: 21
211.91.224.0/19 maxlen: 19
211.91.224.0/20 maxlen: 20
211.91.240.0/20 maxlen: 20
211.92.0.0/17 maxlen: 17
211.92.128.0/21 maxlen: 21
211.92.136.0/21 maxlen: 21
211.92.144.0/20 maxlen: 20
211.92.160.0/20 maxlen: 20
211.92.176.0/20 maxlen: 20
211.92.192.0/19 maxlen: 19
211.92.224.0/20 maxlen: 20
211.92.244.0/22 maxlen: 22
211.93.0.0/21 maxlen: 21
211.93.8.0/21 maxlen: 21
211.93.16.0/21 maxlen: 21
211.93.18.0/23 maxlen: 23
211.93.24.0/21 maxlen: 21
211.93.32.0/19 maxlen: 19
211.93.64.0/18 maxlen: 18
211.93.128.0/20 maxlen: 20
211.93.144.0/21 maxlen: 21
211.93.164.0/22 maxlen: 22
211.93.168.0/21 maxlen: 21
211.93.176.0/20 maxlen: 20
211.93.192.0/21 maxlen: 21
211.93.200.0/23 maxlen: 23
211.93.204.0/22 maxlen: 22
211.93.211.0/24 maxlen: 24
211.93.212.0/23 maxlen: 23
211.93.224.0/19 maxlen: 19
211.94.37.0/24 maxlen: 24
211.94.192.0/18 maxlen: 18
211.97.64.0/19 maxlen: 19
211.97.96.0/21 maxlen: 21
211.97.104.0/21 maxlen: 21
211.97.112.0/20 maxlen: 20
211.97.128.0/19 maxlen: 19
211.97.160.0/21 maxlen: 21
211.97.168.0/21 maxlen: 21
211.97.176.0/20 maxlen: 20
211.97.192.0/18 maxlen: 18
220.192.0.0/18 maxlen: 18
220.192.64.0/21 maxlen: 21
220.192.80.0/20 maxlen: 20
220.192.96.0/19 maxlen: 19
220.192.128.0/19 maxlen: 19
220.192.160.0/20 maxlen: 20
220.192.176.0/21 maxlen: 21
220.192.184.0/22 maxlen: 22
220.192.188.0/22 maxlen: 22
220.192.192.0/20 maxlen: 20
220.192.208.0/21 maxlen: 21
220.192.216.0/21 maxlen: 21
220.192.224.0/19 maxlen: 19
220.193.0.0/17 maxlen: 17
220.194.64.0/18 maxlen: 18
220.194.128.0/18 maxlen: 18
220.194.128.0/24 maxlen: 24
220.194.138.0/24 maxlen: 24
220.194.140.0/24 maxlen: 24
220.194.146.0/24 maxlen: 24
220.194.147.0/24 maxlen: 24
220.194.148.0/24 maxlen: 24
220.194.172.0/24 maxlen: 24
220.194.188.0/24 maxlen: 24
220.194.189.0/24 maxlen: 24
220.194.192.0/18 maxlen: 18
220.195.0.0/19 maxlen: 19
220.197.0.0/17 maxlen: 17
220.197.77.0/24 maxlen: 24
220.197.160.0/20 maxlen: 20
220.197.169.0/24 maxlen: 24
220.197.176.0/20 maxlen: 20
220.197.192.0/19 maxlen: 19
220.197.224.0/21 maxlen: 21
220.197.232.0/21 maxlen: 21
220.197.240.0/20 maxlen: 20
220.200.0.0/18 maxlen: 18
220.200.64.0/19 maxlen: 19
220.200.96.0/20 maxlen: 20
220.200.112.0/20 maxlen: 20
220.200.128.0/20 maxlen: 20
220.200.148.0/22 maxlen: 22
220.200.152.0/21 maxlen: 21
220.200.160.0/19 maxlen: 19
220.200.192.0/18 maxlen: 18
220.201.0.0/17 maxlen: 17
220.201.128.0/18 maxlen: 18
220.201.192.0/18 maxlen: 18
220.202.0.0/18 maxlen: 18
220.202.64.0/19 maxlen: 19
220.202.96.0/19 maxlen: 19
220.202.128.0/17 maxlen: 17
220.202.128.0/19 maxlen: 19
220.202.160.0/19 maxlen: 19
220.202.192.0/18 maxlen: 18
220.203.128.0/18 maxlen: 18
220.207.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:29:71:53:7f:f5:0c:0d:9d:23:ff:31:0c:02:6d:d8:d4:95:c2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Jun 12 04:39:58 2026 GMT
Not After : Jun 11 04:44:58 2027 GMT
Subject: CN=3F1BF9AD951E072A7D63DBBF70015DE631110198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:14:b2:92:e2:bd:3f:4a:f8:9b:48:0a:b9:
ff:1d:04:fd:32:aa:9c:21:03:88:ee:d5:24:eb:06:
ea:e4:38:af:12:61:fd:6d:d5:10:6b:04:0b:0f:f2:
56:2b:41:9c:17:3f:a3:66:99:c6:c8:88:33:e8:af:
ab:db:b5:36:74:1f:62:f4:09:6f:a7:95:fd:b5:fb:
37:f9:31:72:02:4b:ba:20:c3:77:4c:62:98:11:02:
a0:da:cd:61:e1:7e:29:6f:a4:f0:ab:53:63:55:1d:
83:3a:e2:9a:c3:4d:47:58:a7:92:b3:ba:aa:e3:42:
6f:11:06:4d:06:3e:ae:32:5e:b5:a7:93:54:6b:fd:
df:09:4a:9a:9b:2b:6f:79:f2:d5:eb:1a:c2:db:75:
b2:c1:f7:fe:16:43:c7:08:6d:e9:e8:1b:56:33:91:
85:cd:33:35:b8:05:b7:ab:cc:62:c6:a2:54:d0:26:
02:f6:20:70:c6:24:66:c0:a0:a2:40:d6:f4:e2:5f:
25:6b:63:82:f0:43:1b:f9:67:66:3b:00:0f:66:40:
54:1e:48:43:d0:7a:98:28:e9:2a:14:88:dc:95:b5:
3e:b6:e6:ff:80:8d:f1:f1:97:93:0b:49:d3:f4:ff:
c1:b9:87:5e:d7:87:51:72:ff:9c:6f:ef:99:31:22:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:F9:AD:95:1E:07:2A:7D:63:DB:BF:70:01:5D:E6:31:11:01:98
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.240.0.0-61.240.159.255
61.240.192.0/18
61.241.64.0/18
61.241.192.0/19
61.242.128.0-61.243.255.255
116.78.0.0/16
116.128.224.0-116.133.255.255
116.135.0.0/18
116.138.0.0-116.148.255.255
116.153.0.0-116.155.255.255
116.161.0.0-116.163.63.255
116.165.0.0/16
116.167.0.0-116.168.255.255
116.171.0.0/16
116.172.64.0-116.180.255.255
211.90.0.0-211.90.71.255
211.90.80.0-211.90.207.255
211.90.216.0-211.91.63.255
211.91.120.0-211.91.191.255
211.91.216.0-211.92.239.255
211.92.244.0/22
211.93.0.0-211.93.151.255
211.93.164.0-211.93.201.255
211.93.204.0/22
211.93.211.0-211.93.213.255
211.93.224.0/19
211.94.37.0/24
211.94.192.0/18
211.97.64.0-211.97.255.255
220.192.0.0-220.192.71.255
220.192.80.0-220.193.127.255
220.194.64.0-220.195.31.255
220.197.0.0/17
220.197.160.0-220.197.255.255
220.200.0.0-220.200.143.255
220.200.148.0-220.202.255.255
220.203.128.0/18
220.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
92:51:09:c1:49:81:9e:9a:21:3d:e8:db:94:56:ae:61:69:83:
fd:4a:e8:28:c3:da:65:d2:26:60:ac:b1:c0:5a:80:b9:f5:59:
23:7c:39:3b:48:a0:4c:85:29:28:ad:f0:2f:d8:18:67:42:4d:
f9:dc:74:93:0e:50:42:6f:a9:29:63:7a:16:47:10:18:5a:34:
af:83:1d:6f:51:ea:8c:6a:b7:7f:a1:31:03:7d:42:e8:2e:9b:
d1:de:76:fa:56:94:d5:d2:89:55:b5:9e:12:c4:3f:c0:76:a1:
7e:ea:f6:1b:bc:dc:4e:66:6c:44:9b:59:0a:f4:32:e6:63:11:
81:8a:25:86:d5:7b:85:87:8b:e9:21:b8:05:37:f9:c8:79:d5:
ad:8b:f9:e8:80:35:15:c2:cf:8f:07:7a:56:5c:09:f4:05:3c:
68:ee:8f:54:5c:f9:84:70:de:ea:2b:03:9f:18:0d:12:18:d0:
38:97:04:0d:85:9a:6e:d7:f0:6a:33:ac:a4:76:9a:10:e6:3b:
69:04:0e:d9:60:f8:bb:8a:f4:3f:81:dc:9e:6f:0e:58:92:4c:
54:58:f6:5a:e1:2a:1f:72:af:2d:37:25:46:c0:dc:4b:47:70:
e3:57:b2:58:54:79:94:79:6b:30:4b:9a:15:e6:b8:e1:08:e2:
58:42:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:04 2026 by rpki-client