$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4812.roa File: AS4812.roa (raw, json) Hash identifier: NTAmF1RldOWReH9okvRjh5nXMl4AHTRJFL08ZZTv2ls= Subject key identifier: D5:CD:1F:3C:14:BA:29:B4:B6:CB:60:FC:E4:B6:56:47:2A:B8:65:0A Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 1674B45CE2E05F84AB79CDC06660817F82AA7EA5 Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4812.roa Signing time: Wed 02 Sep 2026 01:37:22 +0000 ROA not before: Wed 02 Sep 2026 01:32:22 +0000 ROA not after: Wed 01 Sep 2027 01:37:22 +0000 asID: 4812 IP address blocks: 43.254.152.0/24 maxlen: 24 59.153.172.0/24 maxlen: 24 103.5.192.0/23 maxlen: 24 103.5.194.0/24 maxlen: 24 103.5.195.0/24 maxlen: 24 103.24.116.0/24 maxlen: 24 103.24.118.0/23 maxlen: 24 150.242.238.0/23 maxlen: 24 202.89.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:b4:5c:e2:e0:5f:84:ab:79:cd:c0:66:60:81:7f:82:aa:7e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Sep 2 01:32:22 2026 GMT Not After : Sep 1 01:37:22 2027 GMT Subject: CN=D5CD1F3C14BA29B4B6CB60FCE4B656472AB8650A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:df:08:a1:c3:f4:66:1b:71:bd:0c:36:62: 84:39:03:b1:c1:bb:c9:a2:24:a6:b6:c8:d9:40:eb: 9d:36:c6:d0:52:1c:13:95:0e:c9:93:df:ed:11:3d: 87:6f:1d:50:78:97:82:94:e5:7c:7a:3e:0a:5c:42: e1:95:e9:06:d6:c0:25:bd:a8:08:4c:6b:e2:40:30: 08:a7:54:1f:96:de:f4:8d:b3:8a:32:9b:64:94:77: 90:ae:d4:9b:4e:0e:a3:ce:38:2b:2b:28:19:6a:da: 45:e3:88:9e:a9:06:33:7f:a9:f2:19:e9:49:2d:5c: c1:1b:29:76:ce:d4:76:15:6c:8a:8b:15:0f:e2:dd: 01:bc:c5:4c:0b:bc:a6:8f:87:6e:20:83:6d:cb:13: ad:32:e6:67:26:94:8f:6a:f8:99:67:d4:4b:21:e4: 84:11:9b:db:d0:82:3c:b0:92:27:9e:52:9b:e7:1a: 19:85:40:2e:30:d7:7b:9b:10:fa:67:20:78:02:48: 2d:68:a2:75:28:2c:55:b9:1b:34:04:b1:03:0c:a2: 26:87:96:ba:3f:f7:56:3a:32:e6:b4:b0:96:ce:b9: 31:81:05:74:37:37:69:9a:a8:3f:48:3b:04:32:21: 68:5b:5a:9b:09:58:74:77:36:79:58:a4:64:34:a4: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CD:1F:3C:14:BA:29:B4:B6:CB:60:FC:E4:B6:56:47:2A:B8:65:0A X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4812.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.152.0/24 59.153.172.0/24 103.5.192.0/22 103.24.116.0/24 103.24.118.0/23 150.242.238.0/23 202.89.96.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:11:29:e0:0e:83:8a:ad:81:e6:3f:bd:6a:bc:45:73:85:81: 42:fa:64:05:a3:da:ac:00:ca:77:3a:68:de:59:01:3c:41:15: aa:17:54:87:7b:92:d2:db:96:80:22:3d:61:25:b6:f9:a9:3a: e1:78:58:7e:68:64:16:bf:2d:5d:45:cb:f3:9e:41:d6:ac:26: ac:36:b7:d2:13:9d:a3:ec:27:a2:4e:b1:d7:39:f0:00:90:30: 00:0a:2b:3d:ba:ab:b2:42:54:79:7f:69:8b:0b:a2:6e:5b:a9: 89:30:2e:14:e1:f2:ed:1d:78:a6:2a:05:c9:b7:50:bf:85:90: 76:a7:48:9e:d1:bd:83:96:5b:3f:9b:2b:4e:4a:3a:f1:db:88: 95:5b:3f:9e:21:4e:0c:09:92:e0:52:97:f7:4e:05:d8:35:7e: 60:4a:b5:19:ba:f5:ee:11:3d:32:4d:6f:32:4f:b8:08:f9:ea: 1e:e3:ed:2f:ea:76:f2:b1:9a:75:f6:94:97:8b:f3:0e:97:80: 35:c6:61:68:3b:4a:2f:48:d0:72:66:69:f5:4b:74:c0:44:2f: 9b:ee:c7:4c:9e:41:d2:ee:11:6d:29:29:c9:d9:78:91:50:33: 66:35:a4:46:c8:08:a1:9e:7d:24:fd:6e:29:36:9c:96:e7:71: 4d:f3:77:f9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUFnS0XOLgX4Srec3AZmCBf4KqfqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjA5MDIwMTMyMjJaFw0yNzA5MDEwMTM3MjJaMDMxMTAvBgNV BAMTKEQ1Q0QxRjNDMTRCQTI5QjRCNkNCNjBGQ0U0QjY1NjQ3MkFCODY1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQm98IocP0ZhtxvQw2YoQ5A7HB u8miJKa2yNlA6502xtBSHBOVDsmT3+0RPYdvHVB4l4KU5Xx6PgpcQuGV6QbWwCW9 qAhMa+JAMAinVB+W3vSNs4oym2SUd5Cu1JtODqPOOCsrKBlq2kXjiJ6pBjN/qfIZ 6UktXMEbKXbO1HYVbIqLFQ/i3QG8xUwLvKaPh24gg23LE60y5mcmlI9q+Jln1Esh 5IQRm9vQgjywkieeUpvnGhmFQC4w13ubEPpnIHgCSC1oonUoLFW5GzQEsQMMoiaH lro/91Y6Mua0sJbOuTGBBXQ3N2maqD9IOwQyIWhbWpsJWHR3NnlYpGQ0pNCNAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQU1c0fPBS6KbS2y2D85LZWRyq4ZQowHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzQ4MTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgAB MCoDBAAr/pgDBAA7mawDBAJnBcADBABnGHQDBAFnGHYDBAGW8u4DBADKWWAwDQYJ KoZIhvcNAQELBQADggEBAA4RKeAOg4qtgeY/vWq8RXOFgUL6ZAWj2qwAync6aN5Z ATxBFaoXVId7ktLbloAiPWEltvmpOuF4WH5oZBa/LV1Fy/OeQdasJqw2t9ITnaPs J6JOsdc58ACQMAAKKz26q7JCVHl/aYsLom5bqYkwLhTh8u0deKYqBcm3UL+FkHan SJ7RvYOWWz+bK05KOvHbiJVbP54hTgwJkuBSl/dOBdg1fmBKtRm69e4RPTJNbzJP uAj56h7j7S/qdvKxmnX2lJeL8w6XgDXGYWg7Si9I0HJmafVLdMBEL5vux0yeQdLu EW0pKcnZeJFQM2Y1pEbICKGefST9bik2nJbncU3zd/k= -----END CERTIFICATE-----Generated at Sat Sep 5 07:14:06 2026 by rpki-client