$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs= Subject key identifier: 6C:93:33:11:96:CA:C7:A3:A1:B8:D1:9E:51:F8:C1:73:49:FB:39:F1 Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 2422E1B50C546050BF2DD4C0A3120DBD95F0F0E2 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS4808.roa Signing time: Wed 13 May 2026 09:59:07 +0000 ROA not before: Wed 13 May 2026 09:54:07 +0000 ROA not after: Wed 12 May 2027 09:59:07 +0000 asID: 4808 IP address blocks: 123.103.2.0/23 maxlen: 23 123.103.4.0/22 maxlen: 22 123.103.8.0/22 maxlen: 22 123.103.8.0/24 maxlen: 24 123.103.12.0/24 maxlen: 24 123.103.13.0/24 maxlen: 24 123.103.15.0/24 maxlen: 24 123.103.16.0/22 maxlen: 22 123.103.20.0/22 maxlen: 22 123.103.28.0/24 maxlen: 24 123.103.29.0/24 maxlen: 24 123.103.30.0/24 maxlen: 24 123.103.40.0/21 maxlen: 21 123.103.48.0/21 maxlen: 21 123.103.56.0/21 maxlen: 21 123.103.64.0/21 maxlen: 21 123.103.72.0/21 maxlen: 21 123.103.80.0/20 maxlen: 20 123.103.96.0/20 maxlen: 20 123.103.112.0/20 maxlen: 20 203.130.40.0/21 maxlen: 21 203.212.0.0/21 maxlen: 21 203.212.8.0/22 maxlen: 22 210.192.96.0/21 maxlen: 21 210.192.120.0/21 maxlen: 21 220.243.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:22:e1:b5:0c:54:60:50:bf:2d:d4:c0:a3:12:0d:bd:95:f0:f0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: May 13 09:54:07 2026 GMT Not After : May 12 09:59:07 2027 GMT Subject: CN=6C93331196CAC7A3A1B8D19E51F8C17349FB39F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:69:07:e9:d8:f1:4f:a5:d2:3f:78:26:8c: d3:da:b6:a1:78:68:26:3e:54:e1:1c:e5:55:48:7c: 75:7d:dc:99:25:de:ce:da:fb:ef:92:0f:04:a2:98: ed:28:d7:6a:6d:48:fe:69:db:85:df:bd:90:7b:15: 81:5f:34:c7:a3:44:99:f9:09:1c:eb:08:c0:3e:70: 54:11:ff:a9:22:bb:3e:c9:05:d3:a7:21:c4:58:e1: ef:77:dd:5f:2f:2a:f3:72:f2:9d:c1:0f:9b:8a:a2: df:05:a8:89:ad:82:78:54:e7:82:8f:67:3b:bf:19: 73:52:d6:f7:25:35:8a:47:fe:f3:8b:7d:3b:1a:5d: b2:b8:1d:d4:41:3f:06:ee:ef:4d:16:5a:42:b8:6a: 8e:89:2b:fc:af:1d:e6:79:52:c1:28:c3:b9:92:0d: 48:55:69:1c:46:2a:05:08:e8:c9:1b:e8:c7:3c:69: 73:aa:6b:ff:bf:4b:4b:b8:d3:92:9a:94:e8:05:53: 82:78:49:11:21:56:8a:bf:3c:10:16:25:e7:ed:71: a5:6a:fb:78:eb:5c:e6:7d:d0:ac:23:bd:d3:cb:4f: a5:7e:8c:18:c0:1c:a0:eb:2d:8b:7a:21:58:f6:9f: e0:17:69:e8:a1:ef:f1:7c:3a:75:d9:c3:14:c2:18: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:93:33:11:96:CA:C7:A3:A1:B8:D1:9E:51:F8:C1:73:49:FB:39:F1 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.103.2.0-123.103.13.255 123.103.15.0-123.103.23.255 123.103.28.0-123.103.30.255 123.103.40.0-123.103.127.255 203.130.40.0/21 203.212.0.0-203.212.11.255 210.192.96.0/21 210.192.120.0/21 220.243.176.0/20 Signature Algorithm: sha256WithRSAEncryption a6:fc:30:4e:e3:65:a3:22:08:db:d8:d8:b3:fc:2a:53:48:ca: a6:02:7d:5f:c8:f6:6c:b7:ba:a1:0c:5b:70:82:a6:f6:c0:13: 2b:cf:57:ec:7e:78:ae:7a:88:3a:ff:cb:bb:4a:c8:8f:dc:15: ca:66:01:68:e1:8b:de:9c:df:ec:60:f5:b8:ee:c2:57:3f:22: ea:d5:37:da:e0:cb:a6:7a:9b:f0:60:67:b9:53:23:63:a8:f8: 3c:c4:c6:fd:e8:18:cf:01:04:e2:da:86:63:3f:a6:5f:09:59: a6:b0:a9:a0:3f:54:1e:d4:70:a7:4a:78:bd:f3:4f:06:49:cb: 47:76:54:44:b1:7d:c6:1a:3a:4c:e7:90:5a:31:fa:e2:53:9c: 02:66:9d:fc:66:72:07:e9:31:6d:40:45:0e:a3:f1:bd:29:f2: 12:84:eb:91:ac:0a:23:10:6d:c5:55:cc:2a:ef:78:69:be:a6: 21:3f:b4:38:23:e3:61:b3:75:ca:aa:2e:a0:43:f4:82:9f:be: d5:ec:ac:84:7f:96:34:60:43:72:16:ed:e3:46:cc:02:20:2a: 44:b7:01:21:69:ef:57:ff:08:b1:a2:32:6e:f3:03:55:03:d4: a2:30:a1:59:ac:3b:7f:a8:cc:f3:44:98:26:f0:0c:c5:2b:66: ca:a6:06:3c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJCLhtQxUYFC/LdTAoxINvZXw8OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA1MTMwOTU0MDdaFw0yNzA1MTIwOTU5MDdaMDMxMTAvBgNV BAMTKDZDOTMzMzExOTZDQUM3QTNBMUI4RDE5RTUxRjhDMTczNDlGQjM5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikWkH6djxT6XSP3gmjNPatqF4 aCY+VOEc5VVIfHV93Jkl3s7a+++SDwSimO0o12ptSP5p24XfvZB7FYFfNMejRJn5 CRzrCMA+cFQR/6kiuz7JBdOnIcRY4e933V8vKvNy8p3BD5uKot8FqImtgnhU54KP Zzu/GXNS1vclNYpH/vOLfTsaXbK4HdRBPwbu700WWkK4ao6JK/yvHeZ5UsEow7mS DUhVaRxGKgUI6Mkb6Mc8aXOqa/+/S0u405KalOgFU4J4SREhVoq/PBAWJeftcaVq +3jrXOZ90KwjvdPLT6V+jBjAHKDrLYt6IVj2n+AXaeih7/F8OnXZwxTCGDhLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUbJMzEZbKx6OhuNGeUfjBc0n7OfEwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwdgYIKwYBBQUHAQcBAf8EZzBlMGMEAgAB MF0wDAMEAXtnAgMEAXtnDDAMAwQAe2cPAwQDe2cQMAwDBAJ7ZxwDBAB7Zx4wDAME A3tnKAMEB3tnAAMEA8uCKDALAwMCy9QDBALL1AgDBAPSwGADBAPSwHgDBATc87Aw DQYJKoZIhvcNAQELBQADggEBAKb8ME7jZaMiCNvY2LP8KlNIyqYCfV/I9my3uqEM W3CCpvbAEyvPV+x+eK56iDr/y7tKyI/cFcpmAWjhi96c3+xg9bjuwlc/IurVN9rg y6Z6m/BgZ7lTI2Oo+DzExv3oGM8BBOLahmM/pl8JWaawqaA/VB7UcKdKeL3zTwZJ y0d2VESxfcYaOkznkFox+uJTnAJmnfxmcgfpMW1ARQ6j8b0p8hKE65GsCiMQbcVV zCrveGm+piE/tDgj42GzdcqqLqBD9IKfvtXsrIR/ljRgQ3IW7eNGzAIgKkS3ASFp 71f/CLGiMm7zA1UD1KIwoVmsO3+ozPNEmCbwDMUrZsqmBjw= -----END CERTIFICATE-----Generated at Wed May 13 17:09:38 2026 by rpki-client