$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: iOOWAMHmzhTv2avlWBB19ZOmGwP6qQPSjlupNqBsPHY= Subject key identifier: 40:EF:4E:FA:26:16:74:68:B1:FE:31:2C:95:D2:44:C2:52:F9:88:8C Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 6219DD204EE98588D9CDF105E335C748A4B9DC1F Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS4837.roa Signing time: Tue 07 Jul 2026 02:50:37 +0000 ROA not before: Tue 07 Jul 2026 02:45:37 +0000 ROA not after: Tue 06 Jul 2027 02:50:37 +0000 asID: 4837 IP address blocks: 43.226.48.0/24 maxlen: 24 43.226.52.0/24 maxlen: 24 43.226.55.0/24 maxlen: 24 43.226.56.0/21 maxlen: 24 43.226.78.0/23 maxlen: 24 43.226.112.0/22 maxlen: 24 43.226.128.0/20 maxlen: 24 43.227.56.0/21 maxlen: 24 43.227.69.0/24 maxlen: 24 43.227.70.0/23 maxlen: 24 43.248.104.0/22 maxlen: 24 43.248.120.0/21 maxlen: 24 43.248.144.0/22 maxlen: 24 43.248.208.0/22 maxlen: 24 103.183.122.0/23 maxlen: 24 103.183.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:19:dd:20:4e:e9:85:88:d9:cd:f1:05:e3:35:c7:48:a4:b9:dc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 7 02:45:37 2026 GMT Not After : Jul 6 02:50:37 2027 GMT Subject: CN=40EF4EFA26167468B1FE312C95D244C252F9888C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:91:23:0e:1c:d0:e2:f4:a1:72:6a:b8:d4: b7:88:ee:48:cf:de:9a:c8:1a:67:93:47:dc:47:58: 83:17:a8:ba:64:dc:e4:7a:02:e8:b2:93:81:1d:18: 4f:f1:d1:34:60:60:ba:b7:b1:02:e8:43:da:bf:ba: 4a:20:46:0b:13:0b:9e:f6:0f:92:af:22:22:ed:ea: 67:9a:47:4d:2a:0a:75:d5:3a:a3:0e:19:d3:61:d1: e2:9b:c4:86:6d:4c:4c:b3:24:cd:ec:b3:51:0e:d9: 83:33:c2:3b:a7:a4:8d:ac:eb:ae:2c:03:49:4e:82: f7:f3:76:8d:ee:3e:50:8d:41:63:a2:41:1b:10:67: 14:f6:80:05:c9:14:b2:0c:52:99:79:ad:78:ac:b2: b8:cd:89:7a:fc:b3:f2:db:9b:74:6f:e4:de:45:26: 90:1f:8d:e5:87:4e:8a:fd:eb:f8:52:9e:18:0f:58: f8:59:73:6b:d0:58:d5:11:1a:c5:3c:40:1f:61:b3: f9:09:e1:a6:dd:9b:b9:a5:5c:1d:62:a3:d9:13:a8: 91:bc:24:4a:ad:5b:a8:02:f6:72:d4:f4:5a:59:7f: 8c:53:21:fe:71:f9:71:72:78:02:83:4e:3b:48:7c: 2f:27:90:47:58:f9:e8:79:68:ad:91:d6:27:98:6c: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:4E:FA:26:16:74:68:B1:FE:31:2C:95:D2:44:C2:52:F9:88:8C X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.48.0/24 43.226.52.0/24 43.226.55.0-43.226.63.255 43.226.78.0/23 43.226.112.0/22 43.226.128.0/20 43.227.56.0/21 43.227.69.0-43.227.71.255 43.248.104.0/22 43.248.120.0/21 43.248.144.0/22 43.248.208.0/22 103.183.122.0-103.183.125.255 Signature Algorithm: sha256WithRSAEncryption 85:5e:f2:f2:cc:5f:50:49:fc:1d:8e:10:c6:d3:7c:82:06:68: 02:6f:df:ca:db:1c:1d:59:55:df:25:f7:a9:30:1b:d1:e5:8f: 4d:2c:3b:49:94:45:ce:c3:8d:17:2d:04:16:ae:cc:96:11:60: e5:3d:cb:57:65:bb:c6:84:d1:74:21:6e:6c:5f:aa:d2:e7:41: 69:41:1e:ac:23:08:80:db:ab:7e:6e:b9:f9:32:a9:d4:5a:67: 20:5f:64:bc:18:1f:1f:5b:1b:7e:04:8f:e3:b5:c6:e2:37:4d: 11:f0:a5:be:dd:3a:94:bf:08:01:91:cf:87:d0:10:4f:f1:cd: 47:41:a5:eb:78:65:1d:3b:50:d9:a1:09:3d:4e:a6:be:8d:37: e8:7a:ce:8a:18:10:72:86:3c:3d:0a:90:01:7d:76:e8:fa:e1: 5a:dc:26:6e:ab:77:78:c1:28:d8:ab:75:04:a0:51:cc:9d:c6: ff:1f:3b:ef:b2:64:05:d8:21:de:69:0b:e9:97:3c:5e:df:cd: e3:33:9f:d5:b0:3e:5e:0c:e6:07:68:8c:d1:96:79:30:cc:af: 5f:b7:58:fb:e9:55:0f:2a:30:9c:49:cc:18:7a:fc:1c:68:bb: f2:45:45:9f:61:84:27:17:53:50:7a:48:89:22:61:84:f6:a9: 2d:02:0a:ce -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYhndIE7phYjZzfEF4zXHSKS53B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MDcwMjQ1MzdaFw0yNzA3MDYwMjUwMzdaMDMxMTAvBgNV BAMTKDQwRUY0RUZBMjYxNjc0NjhCMUZFMzEyQzk1RDI0NEMyNTJGOTg4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeV5EjDhzQ4vShcmq41LeI7kjP 3prIGmeTR9xHWIMXqLpk3OR6Auiyk4EdGE/x0TRgYLq3sQLoQ9q/ukogRgsTC572 D5KvIiLt6meaR00qCnXVOqMOGdNh0eKbxIZtTEyzJM3ss1EO2YMzwjunpI2s664s A0lOgvfzdo3uPlCNQWOiQRsQZxT2gAXJFLIMUpl5rXissrjNiXr8s/Lbm3Rv5N5F JpAfjeWHTor96/hSnhgPWPhZc2vQWNURGsU8QB9hs/kJ4abdm7mlXB1io9kTqJG8 JEqtW6gC9nLU9FpZf4xTIf5x+XFyeAKDTjtIfC8nkEdY+eh5aK2R1ieYbHfFAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUQO9O+iYWdGix/jEsldJEwlL5iIwwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwfwYIKwYBBQUHAQcBAf8EcDBuMGwEAgAB MGYDBAAr4jADBAAr4jQwDAMEACviNwMEBiviAAMEASviTgMEAivicAMEBCvigAME AyvjODAMAwQAK+NFAwQDK+NAAwQCK/hoAwQDK/h4AwQCK/iQAwQCK/jQMAwDBAFn t3oDBAFnt3wwDQYJKoZIhvcNAQELBQADggEBAIVe8vLMX1BJ/B2OEMbTfIIGaAJv 38rbHB1ZVd8l96kwG9Hlj00sO0mURc7DjRctBBauzJYRYOU9y1dlu8aE0XQhbmxf qtLnQWlBHqwjCIDbq35uufkyqdRaZyBfZLwYHx9bG34Ej+O1xuI3TRHwpb7dOpS/ CAGRz4fQEE/xzUdBpet4ZR07UNmhCT1Opr6NN+h6zooYEHKGPD0KkAF9duj64Vrc Jm6rd3jBKNirdQSgUcydxv8fO++yZAXYId5pC+mXPF7fzeMzn9WwPl4M5gdojNGW eTDMr1+3WPvpVQ8qMJxJzBh6/Bxou/JFRZ9hhCcXU1B6SIkiYYT2qS0CCs4= -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:16 2026 by rpki-client