$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: y/PjnhYxx/gJ4vYlP3ncB5QhYnl2P4kiq/+WwbOyJ4g= Subject key identifier: 10:B5:DB:CF:C9:8B:D8:77:99:14:9C:96:D9:9E:54:A0:38:6E:8C:62 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 3AB04287447F2F50756081D4F78345FD29DA19BA Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4808.roa Signing time: Mon 29 Jun 2026 15:02:35 +0000 ROA not before: Mon 29 Jun 2026 14:57:35 +0000 ROA not after: Mon 28 Jun 2027 15:02:35 +0000 asID: 4808 IP address blocks: 43.241.208.0/21 maxlen: 21 43.241.216.0/21 maxlen: 21 43.241.224.0/21 maxlen: 21 43.241.232.0/21 maxlen: 21 101.236.0.0/21 maxlen: 21 101.236.8.0/21 maxlen: 21 101.236.16.0/21 maxlen: 21 101.236.24.0/21 maxlen: 21 101.236.32.0/21 maxlen: 21 101.236.40.0/21 maxlen: 21 101.236.48.0/21 maxlen: 21 101.236.56.0/21 maxlen: 21 101.236.64.0/21 maxlen: 21 101.236.72.0/21 maxlen: 21 103.37.136.0/21 maxlen: 21 103.37.144.0/21 maxlen: 21 103.37.152.0/21 maxlen: 21 103.37.160.0/21 maxlen: 21 2405:1480:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b0:42:87:44:7f:2f:50:75:60:81:d4:f7:83:45:fd:29:da:19:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 29 14:57:35 2026 GMT Not After : Jun 28 15:02:35 2027 GMT Subject: CN=10B5DBCFC98BD87799149C96D99E54A0386E8C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:dc:26:e6:f6:76:ab:18:07:8f:ff:36:a3: 43:13:13:1d:6f:92:4c:26:b2:bb:b3:03:c5:d5:69: 27:fa:2f:90:da:5c:0d:7a:e8:b7:64:06:50:37:c5: 44:7c:a6:69:2b:29:dc:c4:d7:bd:ae:1b:dd:4f:37: e4:6e:a7:9c:07:9e:4c:50:09:ec:88:a7:e6:bb:1e: 5f:fc:43:ef:27:98:91:c9:cb:30:4c:8e:7c:5f:c8: 54:60:f8:10:59:4e:9e:a2:dd:9d:63:85:35:96:98: 25:89:10:b8:9b:89:11:98:b0:3e:70:d4:d8:f0:ba: 21:b8:cb:60:c0:04:32:da:3e:6e:9f:30:80:eb:d5: 79:66:b8:f4:6e:7d:a0:d2:d5:3c:fa:e1:c8:cd:7d: 48:be:37:1d:86:e9:ae:e3:69:6e:9b:ac:09:a6:74: 80:a5:20:b9:49:16:5d:65:44:f8:6c:87:75:80:f4: 6f:1f:be:39:9f:8b:54:7d:d8:37:31:b1:00:e6:45: 1d:29:81:a2:41:18:f8:c5:f1:6e:9c:cb:57:8e:70: 9b:ad:6c:54:bd:3f:4c:50:15:6d:ec:1c:31:07:3c: 0c:76:34:fb:af:f0:7d:8f:87:1e:69:de:f0:ac:75: e9:3e:b2:f3:eb:69:0d:0a:68:de:04:70:35:f5:71: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B5:DB:CF:C9:8B:D8:77:99:14:9C:96:D9:9E:54:A0:38:6E:8C:62 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.208.0-43.241.239.255 101.236.0.0-101.236.79.255 103.37.136.0-103.37.167.255 IPv6: 2405:1480:2000::/48 Signature Algorithm: sha256WithRSAEncryption 60:37:35:43:e6:15:25:df:31:45:6d:c7:b9:12:67:07:55:5b: e0:cf:e9:65:a6:6d:e7:5a:cd:b9:ab:3e:79:5c:94:20:70:72: 28:1d:82:ff:4a:d3:eb:63:76:23:85:fc:30:73:d8:ab:ac:5c: 00:25:31:01:74:c8:7f:6e:df:9a:1a:c6:e3:f5:f8:45:25:0c: 78:32:c2:ed:45:87:c1:49:5f:b5:f8:28:ae:2f:70:de:8f:99: 90:0c:e7:6c:94:af:c5:76:c3:5f:53:61:8d:ac:ae:8c:81:89: c8:cd:f2:26:a7:80:ee:cc:61:18:d0:50:42:d8:bd:82:ca:db: 88:13:06:0c:9d:1d:36:57:ed:38:98:7b:35:b3:24:d8:7e:a1: 0a:ce:f5:a0:82:28:c0:c3:7d:3d:2c:cf:c9:3e:72:d7:be:17: 18:d4:48:f9:f0:32:49:4b:fa:ad:84:e1:55:1a:48:e8:e3:d5: 53:2a:56:77:85:ae:57:53:f8:9e:f7:d1:6f:10:d0:3a:27:8e: 64:a3:13:3a:a0:7b:5c:f0:d8:26:03:6b:b3:9e:c8:31:36:85: b4:57:e4:2c:d4:97:09:c4:89:c2:12:b2:8b:45:95:d9:a9:4d: 18:82:2d:54:78:14:94:bf:f7:13:37:10:f9:20:a3:43:2d:49: fe:02:c4:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUOrBCh0R/L1B1YIHU94NF/SnaGbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MjkxNDU3MzVaFw0yNzA2MjgxNTAyMzVaMDMxMTAvBgNV BAMTKDEwQjVEQkNGQzk4QkQ4Nzc5OTE0OUM5NkQ5OUU1NEEwMzg2RThDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH5Nwm5vZ2qxgHj/82o0MTEx1v kkwmsruzA8XVaSf6L5DaXA166LdkBlA3xUR8pmkrKdzE172uG91PN+Rup5wHnkxQ CeyIp+a7Hl/8Q+8nmJHJyzBMjnxfyFRg+BBZTp6i3Z1jhTWWmCWJELibiRGYsD5w 1NjwuiG4y2DABDLaPm6fMIDr1XlmuPRufaDS1Tz64cjNfUi+Nx2G6a7jaW6brAmm dIClILlJFl1lRPhsh3WA9G8fvjmfi1R92DcxsQDmRR0pgaJBGPjF8W6cy1eOcJut bFS9P0xQFW3sHDEHPAx2NPuv8H2Phx5p3vCsdek+svPraQ0KaN4EcDX1cRJpAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUELXbz8mL2HeZFJyW2Z5UoDhujGIwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUHAQcBAf8ERDBCMC8EAgAB MCkwDAMEBCvx0AMEBCvx4DALAwMCZewDBARl7EAwDAMEA2cliAMEA2cloDAPBAIA AjAJAwcAJAUUgCAAMA0GCSqGSIb3DQEBCwUAA4IBAQBgNzVD5hUl3zFFbce5EmcH VVvgz+llpm3nWs25qz55XJQgcHIoHYL/StPrY3Yjhfwwc9irrFwAJTEBdMh/bt+a Gsbj9fhFJQx4MsLtRYfBSV+1+CiuL3Dej5mQDOdslK/FdsNfU2GNrK6MgYnIzfIm p4DuzGEY0FBC2L2CytuIEwYMnR02V+04mHs1syTYfqEKzvWggijAw309LM/JPnLX vhcY1Ej58DJJS/qthOFVGkjo49VTKlZ3ha5XU/ie99FvENA6J45koxM6oHtc8Ngm A2uznsgxNoW0V+Qs1JcJxInCErKLRZXZqU0Ygi1UeBSUv/cTNxD5IKNDLUn+AsQN -----END CERTIFICATE-----Generated at Fri Jul 24 05:30:24 2026 by rpki-client