$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA= Subject key identifier: 35:A1:F4:1F:11:41:7A:84:A5:E1:35:93:48:65:E8:11:FF:F6:88:8C Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 47C7E4C3D69432526E79580395672BD7B3EAC790 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4808.roa Signing time: Tue 16 Jun 2026 15:37:44 +0000 ROA not before: Tue 16 Jun 2026 15:32:44 +0000 ROA not after: Tue 15 Jun 2027 15:37:44 +0000 asID: 4808 IP address blocks: 49.4.32.0/20 maxlen: 20 114.115.128.0/18 maxlen: 18 114.115.192.0/19 maxlen: 19 114.115.224.0/19 maxlen: 19 114.116.0.0/19 maxlen: 19 114.116.32.0/19 maxlen: 19 114.116.64.0/19 maxlen: 19 114.116.96.0/19 maxlen: 19 114.116.128.0/19 maxlen: 19 114.116.160.0/19 maxlen: 19 114.116.192.0/19 maxlen: 19 116.63.0.0/19 maxlen: 19 116.196.218.0/23 maxlen: 23 116.196.220.0/22 maxlen: 22 122.9.0.0/19 maxlen: 19 122.9.32.0/20 maxlen: 20 2409:27fa::/48 maxlen: 48 2409:27fa:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c7:e4:c3:d6:94:32:52:6e:79:58:03:95:67:2b:d7:b3:ea:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jun 16 15:32:44 2026 GMT Not After : Jun 15 15:37:44 2027 GMT Subject: CN=35A1F41F11417A84A5E135934865E811FFF6888C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:93:65:f2:22:a3:60:21:7c:31:bd:3c:1c: 0d:79:ef:49:a9:93:59:86:34:79:e4:e3:8a:75:f8: 02:2d:63:2a:56:52:f1:79:d3:4d:fa:67:f7:98:ce: 5a:42:a0:e6:b1:d2:ba:ce:a3:bf:b7:c6:01:8b:f1: 8a:a2:a1:9c:dc:68:90:bb:5c:43:06:78:b7:7a:39: 18:18:4d:fe:08:33:d6:71:13:5d:5c:43:d6:f4:da: f2:a8:4f:d6:87:69:94:b8:32:07:d1:1f:f2:99:03: c8:06:bb:51:6d:6d:4c:5f:8f:69:b1:3e:46:ee:c6: fb:fb:79:3c:37:ed:82:5a:ce:11:66:8d:5e:8a:9a: ad:d1:4c:87:67:1c:0c:3a:4f:1e:5a:58:07:c9:4f: 50:a0:e9:c7:44:28:9c:b5:2b:c3:13:e7:59:87:2b: 38:7c:0c:3e:bc:31:47:59:46:00:87:0b:86:80:50: 3d:bc:91:16:a9:0d:27:ae:7d:a2:5c:67:d8:40:1b: e8:9a:99:6e:23:de:26:16:22:7f:74:a2:ac:71:15: 12:e0:ed:9d:1b:26:d9:d8:6d:55:74:66:63:14:68: d7:fa:2b:68:60:65:19:a7:4f:1f:70:ab:21:d3:a3: 36:6a:e1:11:45:04:f9:39:d4:c8:e3:be:71:22:9c: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:F4:1F:11:41:7A:84:A5:E1:35:93:48:65:E8:11:FF:F6:88:8C X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.4.32.0/20 114.115.128.0-114.116.223.255 116.63.0.0/19 116.196.218.0-116.196.223.255 122.9.0.0-122.9.47.255 IPv6: 2409:27fa::/48 2409:27fa:f000::/48 Signature Algorithm: sha256WithRSAEncryption 36:d1:8d:8b:f9:66:4e:5d:e8:aa:d0:77:47:98:8a:52:ab:4b: 25:e9:27:bf:08:16:ad:fd:25:6a:e8:d4:40:41:bd:b5:fe:ad: c9:dc:53:8c:1c:1c:c7:7a:d2:39:f5:d9:cb:ea:a2:be:c2:53: 72:6b:81:0b:59:4d:0c:ca:df:22:58:07:bf:2f:ec:a1:35:0a: b2:f7:7c:2e:62:cc:dd:cb:04:a7:f5:ca:77:e9:d8:8f:7b:55: da:04:92:a1:43:45:1e:85:8c:88:41:71:f4:44:c8:0e:0b:c5: ee:ae:52:8c:58:85:13:3d:f1:91:e1:ee:09:32:20:2b:b9:13: 75:26:8e:e1:75:f5:62:83:bd:a9:96:7a:6c:d9:4b:19:4f:0e: 2b:7b:d6:97:31:62:02:a4:ee:11:90:63:67:af:74:5f:80:8c: 2a:db:16:8e:32:26:de:42:e4:2c:bf:2e:72:11:47:f3:56:cd: b8:c0:91:ce:26:00:6b:f3:1b:fc:ae:0c:4d:81:31:de:3d:c7: 32:1c:b0:ed:d0:3f:1b:49:5d:71:59:63:d6:ad:0a:85:8e:62: 20:90:71:aa:58:d7:4e:6a:5a:f3:b7:b2:35:0d:c2:a8:b4:42: 99:b9:31:54:f1:40:c9:fd:13:25:2a:fe:da:b9:20:c3:39:96: 74:32:21:4d -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUR8fkw9aUMlJueVgDlWcr17Pqx5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA2MTYxNTMyNDRaFw0yNzA2MTUxNTM3NDRaMDMxMTAvBgNV BAMTKDM1QTFGNDFGMTE0MTdBODRBNUUxMzU5MzQ4NjVFODExRkZGNjg4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5pNl8iKjYCF8Mb08HA1570mp k1mGNHnk44p1+AItYypWUvF50036Z/eYzlpCoOax0rrOo7+3xgGL8YqioZzcaJC7 XEMGeLd6ORgYTf4IM9ZxE11cQ9b02vKoT9aHaZS4MgfRH/KZA8gGu1FtbUxfj2mx Pkbuxvv7eTw37YJazhFmjV6Kmq3RTIdnHAw6Tx5aWAfJT1Cg6cdEKJy1K8MT51mH Kzh8DD68MUdZRgCHC4aAUD28kRapDSeufaJcZ9hAG+iamW4j3iYWIn90oqxxFRLg 7Z0bJtnYbVV0ZmMUaNf6K2hgZRmnTx9wqyHTozZq4RFFBPk51MjjvnEinF7nAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUNaH0HxFBeoSl4TWTSGXoEf/2iIwwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwaAYIKwYBBQUHAQcBAf8EWTBXMDsEAgAB MDUDBAQxBCAwDAMEB3JzgAMEBXJ0wAMEBXQ/ADAMAwQBdMTaAwQFdMTAMAsDAwB6 CQMEBHoJIDAYBAIAAjASAwcAJAkn+gAAAwcAJAkn+vAAMA0GCSqGSIb3DQEBCwUA A4IBAQA20Y2L+WZOXeiq0HdHmIpSq0sl6Se/CBat/SVq6NRAQb21/q3J3FOMHBzH etI59dnL6qK+wlNya4ELWU0Myt8iWAe/L+yhNQqy93wuYszdywSn9cp36diPe1Xa BJKhQ0UehYyIQXH0RMgOC8XurlKMWIUTPfGR4e4JMiAruRN1Jo7hdfVig72plnps 2UsZTw4re9aXMWICpO4RkGNnr3RfgIwq2xaOMibeQuQsvy5yEUfzVs24wJHOJgBr 8xv8rgxNgTHePccyHLDt0D8bSV1xWWPWrQqFjmIgkHGqWNdOalrzt7I1DcKotEKZ uTFU8UDJ/RMlKv7auSDDOZZ0MiFN -----END CERTIFICATE-----Generated at Fri Jul 24 14:51:43 2026 by rpki-client