$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS4811.roa File: AS4811.roa (raw, json) Hash identifier: I06tg0jWKnueyfETLHRJ/lJdRJ1PkCdBU+YK4bl/rio= Subject key identifier: E2:8F:F8:68:BC:8E:04:74:4D:45:5E:B2:ED:B1:3E:6C:45:59:E1:BB Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 778A7217776CDB30F1CCB54D2D7979F1DD2210DF Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS4811.roa Signing time: Mon 11 May 2026 04:32:05 +0000 ROA not before: Mon 11 May 2026 04:27:05 +0000 ROA not after: Mon 10 May 2027 04:32:05 +0000 asID: 4811 IP address blocks: 110.43.128.0/21 maxlen: 21 110.43.136.0/21 maxlen: 21 110.43.144.0/21 maxlen: 21 110.43.152.0/21 maxlen: 21 120.92.128.0/21 maxlen: 21 120.92.136.0/21 maxlen: 21 120.92.144.0/21 maxlen: 21 120.92.152.0/21 maxlen: 21 120.92.160.0/21 maxlen: 21 120.92.168.0/21 maxlen: 21 120.92.176.0/21 maxlen: 21 120.92.184.0/21 maxlen: 21 120.92.224.0/23 maxlen: 23 120.92.226.0/23 maxlen: 23 120.92.228.0/23 maxlen: 23 120.92.230.0/23 maxlen: 23 120.92.232.0/23 maxlen: 23 120.92.234.0/23 maxlen: 23 120.92.236.0/23 maxlen: 23 120.92.238.0/23 maxlen: 23 2401:1d40:2000::/48 maxlen: 48 2401:1d40:2001::/48 maxlen: 48 2401:1d40:2100::/48 maxlen: 48 2401:1d40:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8a:72:17:77:6c:db:30:f1:cc:b5:4d:2d:79:79:f1:dd:22:10:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: May 11 04:27:05 2026 GMT Not After : May 10 04:32:05 2027 GMT Subject: CN=E28FF868BC8E04744D455EB2EDB13E6C4559E1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:f5:85:d7:54:ba:08:40:5c:03:bc:47:19: 95:1a:01:8f:22:82:03:c3:24:33:dc:de:4f:60:9f: 94:46:4d:8b:df:65:99:9d:49:55:b3:7d:70:bd:4f: 7a:10:ac:dd:8d:33:1b:85:33:cc:e2:bd:1e:f6:72: a1:51:a7:c7:f6:b2:44:51:eb:ec:ff:27:a6:12:b2: 15:17:5f:1b:09:06:8a:a8:0b:35:f7:33:77:94:68: 18:34:d3:b0:fd:9a:00:ef:9c:37:ca:50:df:72:d1: 91:db:a1:1f:f9:c4:34:41:8a:62:f7:93:55:51:80: bc:05:b3:10:d4:bf:fa:94:ef:a1:18:55:e9:c4:3f: b4:f2:62:6f:c4:ce:37:9d:67:6f:75:82:0b:10:52: ae:c7:7d:84:e9:b3:52:43:c5:65:40:55:f9:fa:7a: c1:18:71:0b:1b:0f:f8:2f:40:dd:ce:ea:6a:eb:bc: 89:f0:2e:85:23:50:08:19:0f:9a:45:0f:db:78:0f: 89:87:ec:ff:0a:33:31:f8:0b:1b:28:fb:d6:62:80: 93:99:10:2a:76:01:8c:0a:4c:ca:6a:fd:30:70:ec: 57:6e:f5:3c:94:62:aa:dc:6a:9f:14:84:37:9b:14: 1b:92:7a:ed:8d:f9:2c:9e:e2:55:8b:54:22:c9:1d: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8F:F8:68:BC:8E:04:74:4D:45:5E:B2:ED:B1:3E:6C:45:59:E1:BB X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS4811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.43.128.0/19 120.92.128.0/18 120.92.224.0/20 IPv6: 2401:1d40:2000::/47 2401:1d40:2100::/48 2401:1d40:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 69:1f:61:d6:39:fa:5e:ec:31:72:bc:86:22:b8:fc:49:50:bb: 07:84:fe:18:38:56:bd:98:57:8e:c2:86:da:15:22:27:34:c7: f3:81:b5:b9:7d:bd:1f:92:13:b7:6a:95:52:8f:d6:86:fc:85: 0f:a3:21:7c:97:2f:c0:1e:5c:45:1e:e8:32:2f:4e:82:78:81: d0:85:66:36:d3:83:32:bd:3b:ab:0e:9a:40:27:4c:b3:73:d4: 5a:79:e5:24:5a:03:2c:d2:08:c1:69:f4:8e:c3:2d:1c:c3:95: 50:c1:13:5a:f6:5c:39:65:43:2f:df:f2:14:31:5d:ac:e7:0c: 50:10:33:be:ce:60:7d:58:b9:61:3c:f8:f2:94:54:83:ac:75: db:8d:0d:ed:7a:bd:9c:c1:77:f0:db:73:21:3b:75:35:30:34: 7a:11:04:35:91:f3:22:a2:96:e3:2f:8a:d4:e0:6b:ac:a6:4a: a0:98:68:c1:fb:cb:43:d9:a5:46:f7:ac:96:19:f5:71:86:53: 21:f2:3b:c2:f5:fb:73:dd:a0:5b:29:a6:2f:a4:d8:ad:f0:63: 09:50:0c:60:72:26:52:6f:03:dd:b3:4a:48:9f:bb:17:19:14: 46:9f:ae:e2:10:a9:1c:3e:b4:a8:18:21:f3:5e:80:95:1f:e6: 86:f6:54:f2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUd4pyF3ds2zDxzLVNLXl58d0iEN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA1MTEwNDI3MDVaFw0yNzA1MTAwNDMyMDVaMDMxMTAvBgNV BAMTKEUyOEZGODY4QkM4RTA0NzQ0RDQ1NUVCMkVEQjEzRTZDNDU1OUUxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyPWF11S6CEBcA7xHGZUaAY8i ggPDJDPc3k9gn5RGTYvfZZmdSVWzfXC9T3oQrN2NMxuFM8zivR72cqFRp8f2skRR 6+z/J6YSshUXXxsJBoqoCzX3M3eUaBg007D9mgDvnDfKUN9y0ZHboR/5xDRBimL3 k1VRgLwFsxDUv/qU76EYVenEP7TyYm/EzjedZ291ggsQUq7HfYTps1JDxWVAVfn6 esEYcQsbD/gvQN3O6mrrvInwLoUjUAgZD5pFD9t4D4mH7P8KMzH4Cxso+9ZigJOZ ECp2AYwKTMpq/TBw7Fdu9TyUYqrcap8UhDebFBuSeu2N+Sye4lWLVCLJHf39AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4o/4aLyOBHRNRV6y7bE+bEVZ4bswHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BUzQ4MTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUHAQcBAf8EPzA9MBgEAgAB MBIDBAVuK4ADBAZ4XIADBAR4XOAwIQQCAAIwGwMHASQBHUAgAAMHACQBHUAhAAMH ACQBHUAvADANBgkqhkiG9w0BAQsFAAOCAQEAaR9h1jn6XuwxcryGIrj8SVC7B4T+ GDhWvZhXjsKG2hUiJzTH84G1uX29H5ITt2qVUo/WhvyFD6MhfJcvwB5cRR7oMi9O gniB0IVmNtODMr07qw6aQCdMs3PUWnnlJFoDLNIIwWn0jsMtHMOVUMETWvZcOWVD L9/yFDFdrOcMUBAzvs5gfVi5YTz48pRUg6x1240N7Xq9nMF38NtzITt1NTA0ehEE NZHzIqKW4y+K1OBrrKZKoJhowfvLQ9mlRveslhn1cYZTIfI7wvX7c92gWymmL6TY rfBjCVAMYHImUm8D3bNKSJ+7FxkURp+u4hCpHD60qBgh816AlR/mhvZU8g== -----END CERTIFICATE-----Generated at Wed May 13 04:20:42 2026 by rpki-client