$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: SBoAFQfVIbP1sO3DsIywYPHEyoGjeAh2mu8MjJTzvu4= Subject key identifier: 03:1E:DA:79:5D:FC:A1:B0:C8:D2:97:ED:EB:7B:6F:A4:16:D7:AE:6D Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0B8E1BDF2030277EC6AF07DC4E98DFB2DD819948 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa Signing time: Thu 23 Jul 2026 01:11:20 +0000 ROA not before: Thu 23 Jul 2026 01:06:20 +0000 ROA not after: Thu 22 Jul 2027 01:11:20 +0000 asID: 4837 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.184.0/21 maxlen: 24 43.248.192.0/20 maxlen: 20 43.248.196.0/22 maxlen: 22 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.83.72.0/22 maxlen: 22 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8e:1b:df:20:30:27:7e:c6:af:07:dc:4e:98:df:b2:dd:81:99:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 23 01:06:20 2026 GMT Not After : Jul 22 01:11:20 2027 GMT Subject: CN=031EDA795DFCA1B0C8D297EDEB7B6FA416D7AE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e8:17:b1:5a:1d:32:f8:20:b5:ca:24:cf:89: 01:fd:4f:b8:1c:21:cd:0a:10:c8:c9:b0:4e:7e:62: dd:7e:29:0e:ec:a5:03:88:86:02:78:2e:9b:0d:19: 5e:2b:29:62:ef:26:80:17:5a:31:73:80:31:88:9a: 6e:3f:3c:ce:43:0e:88:4a:90:3d:08:40:23:32:a0: 10:e7:1d:e4:bc:56:dd:c5:86:39:c6:2c:1e:bf:fe: a0:13:b7:1e:64:c2:d5:07:07:1e:84:55:69:cc:5d: ae:ad:fd:91:86:00:b7:f4:a1:12:59:58:e4:4d:17: c1:29:fa:33:17:52:29:e7:21:4f:98:71:4b:47:1d: 70:60:16:ce:0b:dc:b1:dd:20:9a:33:71:85:b2:60: a9:25:f5:4d:4c:c6:01:66:f4:e7:14:45:9f:ef:10: 62:54:37:72:0e:d4:f1:ec:b6:33:90:e4:aa:0e:8e: 75:df:b4:40:49:b8:6d:4f:00:25:52:d0:78:3a:19: bb:42:a8:0a:a5:bc:70:4a:61:a0:b3:84:19:4b:be: 75:a3:3c:7a:59:dc:d1:75:38:cc:99:48:9f:5a:cd: 6b:4f:69:74:4e:34:a6:2b:ca:88:7b:38:b4:1b:f7: 51:8c:2e:8d:87:8c:61:16:f2:b5:17:55:e7:19:37: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1E:DA:79:5D:FC:A1:B0:C8:D2:97:ED:EB:7B:6F:A4:16:D7:AE:6D X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0-43.248.207.255 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption a1:4a:fc:04:3a:11:2a:31:3e:a5:92:c4:3f:bf:a5:76:16:95: 9d:3f:69:76:d8:0c:7f:27:c9:b7:9b:34:61:ab:31:80:77:f6: 77:26:cc:69:63:44:33:80:f9:96:ad:bb:e1:47:44:59:33:0b: aa:31:4a:8e:c6:b5:99:0a:66:43:2a:b6:08:cd:1d:34:8f:b4: 8a:96:8f:de:19:fd:80:8d:d6:74:ff:3a:a2:51:46:02:33:ca: 10:81:c5:9b:a7:10:00:e1:29:3b:67:6a:67:cc:00:ae:eb:ca: fe:45:d9:4f:e3:54:62:b0:89:4b:98:2c:8c:8b:35:43:da:d2: f0:25:d9:97:64:74:68:ec:e5:fa:04:3c:cd:43:8a:9f:7f:98: c0:57:df:fa:0c:c8:fd:eb:83:a2:33:5e:12:e7:95:8e:53:9c: cd:cb:d1:b7:80:b5:a6:bf:52:58:a2:c9:e5:dc:d1:0a:b7:25: c0:01:26:77:6a:87:87:40:3c:90:ef:cb:d3:52:6a:c3:b3:6f: 19:4a:a1:c9:07:4d:a4:44:66:aa:43:16:e0:bd:2f:7c:ff:c1: 36:e4:3f:05:fb:fa:91:1a:3b:7c:14:5b:06:d9:31:5a:2d:ac: 18:75:77:44:29:76:1e:49:15:62:6e:43:47:e4:12:97:f6:e7: 93:73:9a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUC44b3yAwJ37GrwfcTpjfst2BmUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MjMwMTA2MjBaFw0yNzA3MjIwMTExMjBaMDMxMTAvBgNV BAMTKDAzMUVEQTc5NURGQ0ExQjBDOEQyOTdFREVCN0I2RkE0MTZEN0FFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs6BexWh0y+CC1yiTPiQH9T7gc Ic0KEMjJsE5+Yt1+KQ7spQOIhgJ4LpsNGV4rKWLvJoAXWjFzgDGImm4/PM5DDohK kD0IQCMyoBDnHeS8Vt3FhjnGLB6//qATtx5kwtUHBx6EVWnMXa6t/ZGGALf0oRJZ WORNF8Ep+jMXUinnIU+YcUtHHXBgFs4L3LHdIJozcYWyYKkl9U1MxgFm9OcURZ/v EGJUN3IO1PHstjOQ5KoOjnXftEBJuG1PACVS0Hg6GbtCqAqlvHBKYaCzhBlLvnWj PHpZ3NF1OMyZSJ9azWtPaXRONKYryoh7OLQb91GMLo2HjGEW8rUXVecZNzTXAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUAx7aeV38obDI0pft63tvpBbXrm0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYIKwYBBQUHAQcBAf8ETjBMMEoEAgAB MEQDBAIr8AADBAIr8TAwDAMEAyv4uAMEBCv4wAMEAmclLAMEAmcoDAMEAmctoAME AmdTSAMEAmfN/AMEAmfv9AMEAm/fDDANBgkqhkiG9w0BAQsFAAOCAQEAoUr8BDoR KjE+pZLEP7+ldhaVnT9pdtgMfyfJt5s0YasxgHf2dybMaWNEM4D5lq274UdEWTML qjFKjsa1mQpmQyq2CM0dNI+0ipaP3hn9gI3WdP86olFGAjPKEIHFm6cQAOEpO2dq Z8wAruvK/kXZT+NUYrCJS5gsjIs1Q9rS8CXZl2R0aOzl+gQ8zUOKn3+YwFff+gzI /euDojNeEueVjlOczcvRt4C1pr9SWKLJ5dzRCrclwAEmd2qHh0A8kO/L01Jqw7Nv GUqhyQdNpERmqkMW4L0vfP/BNuQ/Bfv6kRo7fBRbBtkxWi2sGHV3RCl2HkkVYm5D R+QSl/bnk3OarQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:46:46 2026 by rpki-client