$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: ucqn86u+IJ9vYp/SA84clZlwF0jiLsyxgIfX9pKX2+I= Subject key identifier: 35:95:CD:D4:51:E9:C0:B7:E9:C8:22:EA:C3:E0:FF:E5:C8:21:FA:1A Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 7CCF8E4C5BB17336D43DC6D5459FCD39132A7193 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS4808.roa Signing time: Wed 01 Jul 2026 08:55:19 +0000 ROA not before: Wed 01 Jul 2026 08:50:19 +0000 ROA not after: Wed 30 Jun 2027 08:55:19 +0000 asID: 4808 IP address blocks: 114.31.64.0/22 maxlen: 24 119.161.120.0/22 maxlen: 24 119.161.124.0/24 maxlen: 24 120.136.16.0/22 maxlen: 24 120.136.20.0/22 maxlen: 24 202.57.204.0/23 maxlen: 24 202.65.96.0/22 maxlen: 24 202.65.96.0/24 maxlen: 24 2403:9b00:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cf:8e:4c:5b:b1:73:36:d4:3d:c6:d5:45:9f:cd:39:13:2a:71:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jul 1 08:50:19 2026 GMT Not After : Jun 30 08:55:19 2027 GMT Subject: CN=3595CDD451E9C0B7E9C822EAC3E0FFE5C821FA1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:96:4b:67:a6:9e:7c:b3:99:57:f4:90:9a: 52:aa:97:f3:6b:0a:19:44:f9:2d:41:dd:2a:bc:b5: 35:57:3e:e4:02:4a:4e:12:2c:82:1f:fa:d2:1a:2a: d9:77:46:48:1f:57:81:3a:f9:de:ba:b5:52:7c:e8: 77:26:e0:0e:29:d2:7e:54:23:5b:21:95:d5:19:60: df:e4:7b:d7:d8:e1:62:61:6e:e8:33:bb:bd:a7:88: 34:b5:94:6d:9f:36:94:ab:8a:65:fa:f8:dd:bc:3e: 16:b5:5f:80:ab:2d:e6:d1:6b:76:96:ae:75:e1:30: 9c:fe:81:31:d9:49:33:49:46:43:c4:81:c1:8f:a6: d5:1f:f2:6c:46:8e:3e:ae:d2:a6:57:1c:1f:66:52: 80:89:7c:c5:d6:12:08:58:6f:66:ae:41:e1:05:0a: 18:d6:5d:01:d8:8d:0e:e4:10:7c:09:32:d7:98:ed: 05:65:25:af:38:50:d5:a3:ef:05:7f:95:0f:c8:cb: 40:aa:a4:d5:1e:3a:7c:42:af:a7:6a:d5:b3:ab:68: 88:8a:a0:0b:e3:30:a2:19:0a:b7:59:a6:8e:28:52: d0:1a:91:86:e2:8d:e6:5e:70:1e:ed:d5:5d:06:39: b0:24:8c:f3:78:94:96:6e:3d:10:3c:14:3d:d0:13: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:95:CD:D4:51:E9:C0:B7:E9:C8:22:EA:C3:E0:FF:E5:C8:21:FA:1A X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.31.64.0/22 119.161.120.0-119.161.124.255 120.136.16.0/21 202.57.204.0/23 202.65.96.0/22 IPv6: 2403:9b00:2000::/48 Signature Algorithm: sha256WithRSAEncryption 79:b8:b0:d8:33:17:e1:30:6f:a6:72:37:e7:77:eb:85:3f:86: b0:c5:cd:ae:01:ac:74:58:4a:83:77:95:35:8c:10:91:32:07: 1d:cd:5a:de:a1:d3:be:4b:85:bd:93:92:79:ad:f3:86:5f:33: 28:2c:7b:d7:fd:76:2c:0d:8c:98:df:73:61:fb:57:fa:38:6f: 68:aa:17:66:35:7d:26:79:77:0c:6d:db:45:aa:4c:f3:06:c3: c9:fb:eb:59:43:02:fe:60:1b:a7:b2:3f:e2:3e:25:22:15:ce: c1:48:be:a1:c6:61:65:f5:78:67:b0:84:7e:32:2d:a4:07:5f: f8:82:68:d7:ce:4f:bd:3c:2b:65:10:aa:37:c9:ea:6f:42:45: 93:df:ee:62:ef:88:a8:e6:9d:cf:78:53:35:1d:12:d5:e8:2f: 05:3d:dd:50:0f:fb:b3:d9:18:5a:8c:fb:27:27:11:f5:55:63: da:96:08:95:ac:9f:00:3b:84:e1:23:11:7e:0b:e1:a4:2f:48: ae:16:23:05:4a:57:d3:be:6e:a7:28:4a:91:71:73:a4:6e:8d: 68:de:f0:b4:07:b3:f6:e4:5b:02:b7:a5:38:3d:fa:b6:d3:53: 15:6b:c2:cd:d0:ce:84:61:25:d2:58:87:50:e4:de:76:47:1c: e7:e6:29:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUfM+OTFuxczbUPcbVRZ/NORMqcZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA3MDEwODUwMTlaFw0yNzA2MzAwODU1MTlaMDMxMTAvBgNV BAMTKDM1OTVDREQ0NTFFOUMwQjdFOUM4MjJFQUMzRTBGRkU1QzgyMUZBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dpZLZ6aefLOZV/SQmlKql/Nr ChlE+S1B3Sq8tTVXPuQCSk4SLIIf+tIaKtl3RkgfV4E6+d66tVJ86Hcm4A4p0n5U I1shldUZYN/ke9fY4WJhbugzu72niDS1lG2fNpSrimX6+N28Pha1X4CrLebRa3aW rnXhMJz+gTHZSTNJRkPEgcGPptUf8mxGjj6u0qZXHB9mUoCJfMXWEghYb2auQeEF ChjWXQHYjQ7kEHwJMteY7QVlJa84UNWj7wV/lQ/Iy0CqpNUeOnxCr6dq1bOraIiK oAvjMKIZCrdZpo4oUtAakYbijeZecB7t1V0GObAkjPN4lJZuPRA8FD3QE/dJAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUNZXN1FHpwLfpyCLqw+D/5cgh+howHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYIKwYBBQUHAQcBAf8EQTA/MCwEAgAB MCYDBAJyH0AwDAMEA3eheAMEAHehfAMEA3iIEAMEAco5zAMEAspBYDAPBAIAAjAJ AwcAJAObACAAMA0GCSqGSIb3DQEBCwUAA4IBAQB5uLDYMxfhMG+mcjfnd+uFP4aw xc2uAax0WEqDd5U1jBCRMgcdzVreodO+S4W9k5J5rfOGXzMoLHvX/XYsDYyY33Nh +1f6OG9oqhdmNX0meXcMbdtFqkzzBsPJ++tZQwL+YBunsj/iPiUiFc7BSL6hxmFl 9XhnsIR+Mi2kB1/4gmjXzk+9PCtlEKo3yepvQkWT3+5i74io5p3PeFM1HRLV6C8F Pd1QD/uz2RhajPsnJxH1VWPalgiVrJ8AO4ThIxF+C+GkL0iuFiMFSlfTvm6nKEqR cXOkbo1o3vC0B7P25FsCt6U4Pfq201MVa8LN0M6EYSXSWIdQ5N52Rxzn5inW -----END CERTIFICATE-----Generated at Fri Jul 24 07:59:52 2026 by rpki-client