
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4837.roa
File: AS4837.roa (raw, json)
Hash identifier: Hhrp5n5ACbvtTt1ZFv845n82jC0Kr7eOvuI/05uKOVg=
Subject key identifier: 1F:16:A0:76:94:A7:30:9D:68:B3:C8:25:81:1F:5B:FD:16:73:24:8B
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 574C65BF913A1207D60C392601C38EA58198E85A
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4837.roa
Signing time: Mon 29 Jun 2026 15:05:25 +0000
ROA not before: Mon 29 Jun 2026 15:00:25 +0000
ROA not after: Mon 28 Jun 2027 15:05:25 +0000
asID: 4837
IP address blocks: 103.63.160.0/21 maxlen: 23
2405:1480:3000::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4c:65:bf:91:3a:12:07:d6:0c:39:26:01:c3:8e:a5:81:98:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 29 15:00:25 2026 GMT
Not After : Jun 28 15:05:25 2027 GMT
Subject: CN=1F16A07694A7309D68B3C825811F5BFD1673248B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:c5:0d:02:b4:58:08:42:cb:f9:38:c4:49:
7c:4a:7f:2a:e1:f9:16:84:db:6a:ea:5c:6c:31:48:
3c:ee:42:c6:6f:98:e3:48:64:cf:f8:0f:af:a2:c1:
06:a3:24:0d:07:89:09:84:00:33:da:3a:ff:e0:b6:
e0:2b:ca:43:f7:16:d1:c1:8e:96:2c:06:44:e8:4f:
c1:23:31:55:5c:d7:72:ee:47:ff:5d:20:c3:9f:92:
4f:7e:9e:c0:f4:60:8d:63:0b:00:72:79:4e:74:7c:
c0:a7:22:b9:3d:24:07:8e:27:f3:19:0b:d4:c6:c6:
91:36:e3:ed:e4:c4:a6:4a:a3:6d:90:67:06:74:ca:
fd:6d:f2:d4:43:80:19:ea:db:60:51:f4:bc:6d:db:
00:53:b0:90:49:d8:75:b7:e4:eb:37:c6:05:7c:a2:
38:4a:4a:36:1e:d5:1a:4b:ac:c5:9b:3c:9b:32:c5:
3a:78:98:ee:d5:f8:1d:21:64:02:fa:0a:3c:fb:37:
03:6e:67:2f:8e:bc:6f:f7:dc:0b:c4:5b:57:f1:c1:
63:a6:e7:31:44:cf:f2:41:c4:a4:08:eb:4f:bb:d4:
7e:6f:e5:57:39:76:c4:4d:d2:4d:cf:de:41:f8:4e:
52:8d:07:d3:76:40:16:84:d9:53:7b:33:d0:80:36:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:A0:76:94:A7:30:9D:68:B3:C8:25:81:1F:5B:FD:16:73:24:8B
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.160.0/21
IPv6:
2405:1480:3000::/47
Signature Algorithm: sha256WithRSAEncryption
44:d9:eb:be:b1:44:16:3c:0c:5d:64:ef:e1:8f:3c:28:ab:cb:
85:5f:54:6d:d7:84:e2:db:52:91:39:ba:c7:f9:7b:55:9c:15:
0a:de:43:4a:25:3d:58:30:3d:bc:81:dd:4f:ee:79:68:c5:c1:
a5:4f:20:b6:8e:22:95:eb:64:4b:5f:0c:3d:6e:df:02:6b:b4:
51:91:6a:49:8c:87:26:f9:fc:3b:86:dd:b1:63:a6:3a:f0:bd:
02:c3:27:42:fc:1d:d5:31:80:03:df:2c:83:1f:2b:2f:d2:b3:
82:1f:78:96:ad:35:83:e1:52:02:54:a0:94:6c:2b:3d:f8:22:
00:13:bd:d4:64:58:55:37:a6:51:27:33:47:ae:35:f0:5f:89:
c3:65:0b:6d:06:1c:5b:91:6d:41:01:3d:5c:c5:78:c3:bc:9d:
77:87:46:b0:c9:e6:3d:88:aa:67:c6:fb:77:ea:34:59:ee:66:
48:fd:81:2b:99:6d:02:f4:00:a4:bc:6f:46:78:6a:46:1c:04:
87:b4:c3:c4:ff:be:5a:e7:19:df:db:44:b5:96:51:be:6a:82:
27:b3:f7:57:e5:80:99:55:ce:8f:96:c2:b9:cc:7e:85:6f:7e:
9d:36:78:fd:0a:f4:42:b8:7e:3d:b3:50:29:26:d5:ca:68:2a:
39:bf:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:24 2026 by rpki-client