$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: tasK4cpH9M4PtTXCeNeZvukouo7AYHCM07ZHpy7dkSA= Subject key identifier: D4:39:F6:5B:D3:D6:D4:A8:AA:A3:40:D8:EF:29:23:5F:E1:3A:27:61 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 438EDE9469AA21EA6DDCC9B449F9BA30B6A99C95 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4808.roa Signing time: Wed 01 Jul 2026 13:08:39 +0000 ROA not before: Wed 01 Jul 2026 13:03:39 +0000 ROA not after: Wed 30 Jun 2027 13:08:39 +0000 asID: 4808 IP address blocks: 180.184.24.0/21 maxlen: 24 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8e:de:94:69:aa:21:ea:6d:dc:c9:b4:49:f9:ba:30:b6:a9:9c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jul 1 13:03:39 2026 GMT Not After : Jun 30 13:08:39 2027 GMT Subject: CN=D439F65BD3D6D4A8AAA340D8EF29235FE13A2761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:36:c7:2d:52:79:0a:38:1f:b2:8f:be:a8: e4:0e:70:ba:35:10:63:5b:ef:e0:1e:bc:f7:4f:30: 8b:c8:7c:1b:e3:27:ee:d4:eb:79:af:3e:f1:33:1f: 55:82:69:45:d3:e5:17:e5:11:28:ca:35:62:58:bd: ca:78:29:45:2d:ea:c2:0c:f0:27:d2:83:f6:cc:8c: e8:d4:7f:6b:d5:04:86:58:4a:87:35:46:3f:15:36: 18:ba:45:61:7a:bb:2a:c5:7e:3a:99:ea:fa:9b:bf: b5:8a:be:65:1c:62:b0:bc:cf:a1:a9:55:29:bb:83: 94:9d:53:9e:57:38:e0:7f:21:ee:70:d9:53:94:8c: 6f:95:45:ff:0f:3a:36:e9:e8:ec:b3:20:43:d2:20: fd:19:dc:f6:7e:cb:f1:ea:42:e6:24:17:ca:91:61: ae:31:8d:19:96:34:e2:04:f3:7c:8b:07:a0:b7:d5: 8a:38:0d:7e:34:ab:e9:ed:bd:7e:81:45:e9:f2:d1: 29:05:60:e7:ce:5d:9c:4c:77:cf:76:db:a8:38:1b: 81:14:a9:0e:48:e3:44:42:9f:ec:dc:43:84:00:75: c8:1a:c6:33:73:ed:1c:6d:7d:50:0d:ac:a9:f0:6e: a2:71:a9:aa:c4:d4:2f:0f:ec:62:e6:b2:31:32:96: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:F6:5B:D3:D6:D4:A8:AA:A3:40:D8:EF:29:23:5F:E1:3A:27:61 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.184.24.0/21 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 70:49:92:d7:2e:cb:c9:72:6c:7a:4e:9e:60:b0:f3:63:98:81: ff:e9:04:4c:55:3b:53:df:26:e6:40:88:6d:a6:d7:3f:51:80: b1:2c:eb:70:9a:cc:73:da:a3:5b:e4:0c:c7:80:91:56:f4:fd: a1:35:7c:bd:52:f8:04:60:bb:ad:b8:da:bc:b1:be:d6:4b:5b: 3e:91:93:37:06:5f:48:4e:0d:70:68:50:33:81:67:b4:1c:30: ca:27:67:e1:55:12:0e:97:c7:46:9c:90:e7:91:ab:08:64:d8: 06:2f:c6:db:26:e6:42:48:0b:e2:f8:b3:d0:d8:a7:22:ef:7f: 36:4c:0b:f9:f6:2f:ad:20:9a:d5:8e:b5:39:97:c4:99:d3:02: 92:a1:59:bb:22:0a:70:ec:b1:a6:98:84:fb:76:e4:0b:43:66: 6b:17:60:0a:f1:81:f6:4d:b0:ad:65:89:4a:cd:c7:8a:0c:a9: 0e:49:da:c5:43:2f:2f:2f:fa:a5:62:5c:e2:87:e8:e4:6c:b0: 00:73:16:29:ca:0e:d4:cf:30:6f:b3:7a:41:29:dc:e2:57:f9: 46:66:3d:d9:4d:8f:45:29:44:50:de:7f:d5:b1:2e:af:27:05: a6:1a:07:8f:cb:46:8f:1b:c4:e1:dc:43:08:d6:0c:da:ca:b2: 1b:91:35:22 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUQ47elGmqIept3Mm0Sfm6MLapnJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjA3MDExMzAzMzlaFw0yNzA2MzAxMzA4MzlaMDMxMTAvBgNV BAMTKEQ0MzlGNjVCRDNENkQ0QThBQUEzNDBEOEVGMjkyMzVGRTEzQTI3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcYTbHLVJ5Cjgfso++qOQOcLo1 EGNb7+AevPdPMIvIfBvjJ+7U63mvPvEzH1WCaUXT5RflESjKNWJYvcp4KUUt6sIM 8CfSg/bMjOjUf2vVBIZYSoc1Rj8VNhi6RWF6uyrFfjqZ6vqbv7WKvmUcYrC8z6Gp VSm7g5SdU55XOOB/Ie5w2VOUjG+VRf8POjbp6OyzIEPSIP0Z3PZ+y/HqQuYkF8qR Ya4xjRmWNOIE83yLB6C31Yo4DX40q+ntvX6BReny0SkFYOfOXZxMd89226g4G4EU qQ5I40RCn+zcQ4QAdcgaxjNz7RxtfVANrKnwbqJxqarE1C8P7GLmsjEylg85AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU1Dn2W9PW1Kiqo0DY7ykjX+E6J2EwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAO0uBgDBAO0uDgwDQYJKoZIhvcNAQELBQADggEBAHBJktcuy8lybHpOnmCw 82OYgf/pBExVO1PfJuZAiG2m1z9RgLEs63CazHPao1vkDMeAkVb0/aE1fL1S+ARg u6242ryxvtZLWz6RkzcGX0hODXBoUDOBZ7QcMMonZ+FVEg6Xx0ackOeRqwhk2AYv xtsm5kJIC+L4s9DYpyLvfzZMC/n2L60gmtWOtTmXxJnTApKhWbsiCnDssaaYhPt2 5AtDZmsXYArxgfZNsK1liUrNx4oMqQ5J2sVDLy8v+qViXOKH6ORssABzFinKDtTP MG+zekEp3OJX+UZmPdlNj0UpRFDef9WxLq8nBaYaB4/LRo8bxOHcQwjWDNrKshuR NSI= -----END CERTIFICATE-----Generated at Fri Jul 24 18:15:49 2026 by rpki-client