$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS4812.roa File: AS4812.roa (raw, json) Hash identifier: LmnIUO9YtlVI7MkVW1z3WRgay7mOfvJO72uQW6kuKfc= Subject key identifier: 44:D8:E9:4C:F8:79:D7:FF:F6:F5:81:9D:0A:49:05:14:F1:DD:97:01 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 54A2B420683265FBEC48A631269486609988F4ED Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS4812.roa Signing time: Tue 12 May 2026 09:40:17 +0000 ROA not before: Tue 12 May 2026 09:35:17 +0000 ROA not after: Tue 11 May 2027 09:40:17 +0000 asID: 4812 IP address blocks: 106.75.224.0/20 maxlen: 20 106.75.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a2:b4:20:68:32:65:fb:ec:48:a6:31:26:94:86:60:99:88:f4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 12 09:35:17 2026 GMT Not After : May 11 09:40:17 2027 GMT Subject: CN=44D8E94CF879D7FFF6F5819D0A490514F1DD9701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:67:fe:61:05:6b:5f:82:2c:20:e5:f1:22: c8:76:4f:cd:e6:8c:a5:fa:68:c2:ba:6b:52:0b:d3: c5:26:da:a4:ed:46:ec:9a:73:28:f4:25:73:52:66: b0:d1:5c:ba:f6:af:ac:31:70:32:2b:f7:70:20:97: 53:76:d6:16:9d:02:b6:23:8e:2b:2e:db:10:3d:da: cb:dd:85:bb:09:c7:f4:e1:92:4e:72:7f:93:71:63: 7e:b6:f3:87:e7:20:21:8d:ae:92:6d:b6:99:fc:1f: 69:af:57:68:7d:9e:ca:91:7e:64:a9:c6:a1:3b:1a: 17:0b:c7:e8:49:37:04:e4:53:6f:0d:ef:fd:74:45: 62:f7:a8:33:28:62:56:d1:b7:ed:63:46:0f:e2:c1: a3:ae:b5:d9:0d:e4:be:7a:89:fc:95:1c:92:9f:ea: f0:5c:1b:63:4d:82:b3:3b:42:de:6a:5b:17:80:72: 5e:67:c1:28:81:95:8e:0c:1f:56:00:21:2c:4e:09: 8e:84:f9:9f:3e:60:d2:79:11:af:c0:ad:38:cb:39: 71:11:a9:1d:65:9f:f6:e0:87:5c:76:d7:5a:c3:e9: 77:8d:99:0c:ab:be:c7:c8:ad:92:4c:59:a2:83:f1: a1:85:0c:42:9b:b2:d1:eb:43:51:f9:85:97:b8:61: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D8:E9:4C:F8:79:D7:FF:F6:F5:81:9D:0A:49:05:14:F1:DD:97:01 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS4812.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.224.0/19 Signature Algorithm: sha256WithRSAEncryption 85:0d:06:a6:c8:03:83:0c:fd:51:23:ce:be:f1:62:11:57:f9: fe:50:54:13:db:6c:72:03:6a:71:f9:9a:c0:12:0a:aa:81:8d: f4:86:49:35:58:4c:b1:50:9b:70:85:81:a0:8a:c0:1e:20:0a: 5b:1b:97:24:8d:9b:08:16:ac:4d:ac:97:2d:ad:c7:53:be:91: 7b:81:76:6a:74:7f:67:e6:7a:67:d8:16:52:f1:41:34:3b:bb: 75:8f:9b:f0:2b:c3:f9:c8:92:ed:aa:85:88:fe:a7:27:48:21: ac:81:88:d5:90:ec:45:22:5c:07:2d:25:a1:4f:fa:2b:fc:26: 57:d9:d2:96:54:a4:11:a6:e6:26:8a:ef:45:8d:56:4e:de:a5: 7d:b0:08:d1:dc:35:aa:3a:fa:ec:de:d9:dd:cf:f8:fc:8d:27: dc:1d:84:30:91:16:a9:4e:7d:53:c7:7c:9d:3a:37:95:d2:4b: c1:a4:15:13:8a:eb:1a:87:00:c4:20:21:43:60:2a:ba:ce:e8: d3:df:4e:ec:aa:52:d1:c8:47:45:ae:f7:e5:f6:09:b0:97:da: 10:d5:97:04:bc:c1:3c:32:f5:5e:b4:f5:ad:8e:fa:b8:0f:77: e2:72:72:79:91:09:1e:f0:27:f5:aa:fd:af:8e:97:14:8c:b9: cf:18:39:3b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUVKK0IGgyZfvsSKYxJpSGYJmI9O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTIwOTM1MTdaFw0yNzA1MTEwOTQwMTdaMDMxMTAvBgNV BAMTKDQ0RDhFOTRDRjg3OUQ3RkZGNkY1ODE5RDBBNDkwNTE0RjFERDk3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPb2f+YQVrX4IsIOXxIsh2T83m jKX6aMK6a1IL08Um2qTtRuyacyj0JXNSZrDRXLr2r6wxcDIr93Agl1N21hadArYj jisu2xA92svdhbsJx/Thkk5yf5NxY36284fnICGNrpJttpn8H2mvV2h9nsqRfmSp xqE7GhcLx+hJNwTkU28N7/10RWL3qDMoYlbRt+1jRg/iwaOutdkN5L56ifyVHJKf 6vBcG2NNgrM7Qt5qWxeAcl5nwSiBlY4MH1YAISxOCY6E+Z8+YNJ5Ea/ArTjLOXER qR1ln/bgh1x211rD6XeNmQyrvsfIrZJMWaKD8aGFDEKbstHrQ1H5hZe4YY8dAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQURNjpTPh51//29YGdCkkFFPHdlwEwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzQ4MTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVqS+AwDQYJKoZIhvcNAQELBQADggEBAIUNBqbIA4MM/VEjzr7xYhFX+f5Q VBPbbHIDanH5msASCqqBjfSGSTVYTLFQm3CFgaCKwB4gClsblySNmwgWrE2sly2t x1O+kXuBdmp0f2fmemfYFlLxQTQ7u3WPm/Arw/nIku2qhYj+pydIIayBiNWQ7EUi XActJaFP+iv8JlfZ0pZUpBGm5iaK70WNVk7epX2wCNHcNao6+uze2d3P+PyNJ9wd hDCRFqlOfVPHfJ06N5XSS8GkFROK6xqHAMQgIUNgKrrO6NPfTuyqUtHIR0Wu9+X2 CbCX2hDVlwS8wTwy9V609a2O+rgPd+JycnmRCR7wJ/Wq/a+OlxSMuc8YOTs= -----END CERTIFICATE-----Generated at Wed May 13 07:46:46 2026 by rpki-client