$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS4847.roa File: AS4847.roa (raw, json) Hash identifier: iYIqyTBeceqSoVu5RIzK6ibOsWGTZSbuyD2v5I4QZnY= Subject key identifier: 0D:F9:C0:65:60:DC:4A:16:44:21:AC:82:E2:7A:C5:00:A2:88:3A:3F Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 79157F6F60E77B3806ABA81F145F4ED83E057C73 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS4847.roa Signing time: Wed 01 Jul 2026 08:55:19 +0000 ROA not before: Wed 01 Jul 2026 08:50:19 +0000 ROA not after: Wed 30 Jun 2027 08:55:19 +0000 asID: 4847 IP address blocks: 114.31.64.0/22 maxlen: 24 119.161.120.0/22 maxlen: 24 119.161.124.0/24 maxlen: 24 120.136.16.0/22 maxlen: 24 120.136.20.0/22 maxlen: 24 202.57.204.0/23 maxlen: 24 202.65.96.0/22 maxlen: 24 202.65.96.0/24 maxlen: 24 2403:9b00:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:7f:6f:60:e7:7b:38:06:ab:a8:1f:14:5f:4e:d8:3e:05:7c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jul 1 08:50:19 2026 GMT Not After : Jun 30 08:55:19 2027 GMT Subject: CN=0DF9C06560DC4A164421AC82E27AC500A2883A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:1b:a8:40:59:a1:45:f4:46:6c:d0:67:2c: 2e:96:ff:b4:bc:1c:a5:67:1a:30:9d:75:0f:07:10: c8:82:eb:e6:bd:5e:99:d9:31:8f:0d:e0:e9:0b:5a: 1a:1c:49:f2:94:e1:84:b0:1a:20:c8:35:9c:44:dc: 92:67:b9:65:30:00:1d:5f:5e:4c:a9:47:77:59:24: 7b:97:1e:d9:8b:cb:35:6d:6a:9f:56:e6:1c:6a:dc: 8b:06:f9:54:ff:7e:39:48:ed:80:31:c0:1c:df:fd: c1:e6:d5:58:89:3f:e3:80:53:9b:40:c1:28:b1:5a: 35:eb:93:da:82:61:89:88:cf:31:c9:5c:b8:12:00: a2:99:ca:7f:d5:90:3a:80:f3:d9:31:b8:85:77:78: 5a:09:09:3f:c7:9e:45:ef:e0:71:3a:fa:07:63:54: e2:0d:91:02:cd:2a:95:d8:b1:56:6d:02:62:a6:32: 16:c2:58:80:6c:1c:98:0e:9e:a7:69:0c:34:79:0e: 38:56:dc:5d:97:7e:8b:ea:c0:3d:a7:43:5c:4a:83: 21:7a:9b:0e:95:52:a7:50:4d:e3:a8:68:69:15:68: 39:b6:68:f2:a1:28:e4:1a:04:a9:8e:4f:8b:53:51: a7:bf:a4:40:15:ed:6c:0c:4a:e9:c1:02:83:92:3b: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:C0:65:60:DC:4A:16:44:21:AC:82:E2:7A:C5:00:A2:88:3A:3F X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS4847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.31.64.0/22 119.161.120.0-119.161.124.255 120.136.16.0/21 202.57.204.0/23 202.65.96.0/22 IPv6: 2403:9b00:2000::/48 Signature Algorithm: sha256WithRSAEncryption 85:5c:1b:34:0e:18:b9:a1:64:05:e1:e4:20:18:71:b3:36:30: e0:ef:48:7f:75:12:a2:2f:2b:4c:61:37:bc:5a:b9:0a:f2:fe: 1a:ef:c5:18:01:6b:7c:3e:d7:07:21:b3:e1:c6:d6:1b:67:87: fa:8c:7c:b2:b7:fe:24:46:70:82:32:18:88:e5:48:3a:e2:77: f7:22:e5:f9:a1:6e:37:da:a5:59:5d:45:cd:a5:10:2c:8c:99: 22:74:71:74:38:d5:2d:55:23:f0:c2:5e:2b:21:ff:3f:8e:aa: 4c:de:e4:81:d9:04:e1:79:3e:e7:21:db:57:1a:ba:65:4c:82: da:a1:2a:84:37:fb:94:47:37:84:3b:ae:d9:58:0f:e8:df:70: f1:7e:fe:b8:e0:14:38:05:ad:db:bc:f0:fa:91:2c:ac:ed:01: 2e:f0:97:75:50:56:8b:3e:97:ff:cb:a5:fe:00:a4:eb:ee:2f: f9:12:e2:49:e3:97:55:13:11:6f:3e:8d:36:0c:fb:f6:ec:19: 03:5a:76:08:58:e9:64:61:3e:f2:ad:5b:ef:48:1c:f7:48:0b: f9:d9:21:ec:12:a6:e1:61:fa:4f:6d:f0:ee:b3:86:e8:56:65: 9e:69:39:af:ce:f2:88:a7:60:96:48:fc:6f:ba:a2:64:2b:c9: bd:d3:7f:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUeRV/b2DnezgGq6gfFF9O2D4FfHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA3MDEwODUwMTlaFw0yNzA2MzAwODU1MTlaMDMxMTAvBgNV BAMTKDBERjlDMDY1NjBEQzRBMTY0NDIxQUM4MkUyN0FDNTAwQTI4ODNBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtxuoQFmhRfRGbNBnLC6W/7S8 HKVnGjCddQ8HEMiC6+a9XpnZMY8N4OkLWhocSfKU4YSwGiDINZxE3JJnuWUwAB1f XkypR3dZJHuXHtmLyzVtap9W5hxq3IsG+VT/fjlI7YAxwBzf/cHm1ViJP+OAU5tA wSixWjXrk9qCYYmIzzHJXLgSAKKZyn/VkDqA89kxuIV3eFoJCT/HnkXv4HE6+gdj VOINkQLNKpXYsVZtAmKmMhbCWIBsHJgOnqdpDDR5DjhW3F2XfovqwD2nQ1xKgyF6 mw6VUqdQTeOoaGkVaDm2aPKhKOQaBKmOT4tTUae/pEAV7WwMSunBAoOSO5obAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUDfnAZWDcShZEIayC4nrFAKKIOj8wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC9BUzQ4NDcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYIKwYBBQUHAQcBAf8EQTA/MCwEAgAB MCYDBAJyH0AwDAMEA3eheAMEAHehfAMEA3iIEAMEAco5zAMEAspBYDAPBAIAAjAJ AwcAJAObACAAMA0GCSqGSIb3DQEBCwUAA4IBAQCFXBs0Dhi5oWQF4eQgGHGzNjDg 70h/dRKiLytMYTe8WrkK8v4a78UYAWt8PtcHIbPhxtYbZ4f6jHyyt/4kRnCCMhiI 5Ug64nf3IuX5oW432qVZXUXNpRAsjJkidHF0ONUtVSPwwl4rIf8/jqpM3uSB2QTh eT7nIdtXGrplTILaoSqEN/uURzeEO67ZWA/o33Dxfv644BQ4Ba3bvPD6kSys7QEu 8Jd1UFaLPpf/y6X+AKTr7i/5EuJJ45dVExFvPo02DPv27BkDWnYIWOlkYT7yrVvv SBz3SAv52SHsEqbhYfpPbfDus4boVmWeaTmvzvKIp2CWSPxvuqJkK8m903+Q -----END CERTIFICATE-----Generated at Fri Jul 24 15:36:57 2026 by rpki-client