$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS9808.roa File: AS9808.roa (raw, json) Hash identifier: bKTisg5ZU02numEagJWN6w1xFT+lGFIzsUo73yTloM4= Subject key identifier: D0:F6:BB:7C:86:67:64:E8:F8:94:F1:A0:45:F9:97:30:02:07:01:59 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 2692A1612992F7A9D17F0C564D3AB8D010BC560A Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS9808.roa Signing time: Wed 24 Jun 2026 09:42:20 +0000 ROA not before: Wed 24 Jun 2026 09:37:20 +0000 ROA not after: Wed 23 Jun 2027 09:42:20 +0000 asID: 9808 IP address blocks: 106.75.0.0/20 maxlen: 20 106.75.16.0/20 maxlen: 20 106.75.32.0/20 maxlen: 20 106.75.48.0/20 maxlen: 20 106.75.64.0/20 maxlen: 20 106.75.80.0/20 maxlen: 20 106.75.96.0/20 maxlen: 20 106.75.112.0/20 maxlen: 20 117.50.0.0/20 maxlen: 20 117.50.16.0/20 maxlen: 20 117.50.32.0/20 maxlen: 20 117.50.48.0/20 maxlen: 20 117.50.64.0/20 maxlen: 20 117.50.80.0/20 maxlen: 20 117.50.96.0/20 maxlen: 20 117.50.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:92:a1:61:29:92:f7:a9:d1:7f:0c:56:4d:3a:b8:d0:10:bc:56:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jun 24 09:37:20 2026 GMT Not After : Jun 23 09:42:20 2027 GMT Subject: CN=D0F6BB7C866764E8F894F1A045F9973002070159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:a5:3c:37:63:9e:52:20:8a:72:66:46:0d: 2c:33:31:f4:6d:81:5f:5d:84:60:b7:d7:9d:0c:b9: ce:a7:62:51:56:fb:31:45:44:2c:6f:15:df:2c:f1: 64:de:ac:f6:31:a9:f6:92:6f:e8:30:76:55:50:25: f2:fe:0f:fd:98:c0:e2:8c:1b:44:d4:8e:84:da:95: a9:a1:fb:9c:3e:0a:02:8b:91:2f:5b:ce:21:3b:5b: 54:b5:3f:89:34:87:ca:86:32:06:4c:6c:2e:48:1d: 77:ca:28:3e:57:73:96:81:cf:1f:a5:c3:ff:2a:e2: 64:75:76:c2:46:2b:e0:69:a7:42:e1:83:b7:be:27: f9:f4:15:6a:9d:90:31:71:e5:76:39:e6:b8:5d:31: 83:b2:fd:de:85:2e:1e:52:45:bc:05:5e:20:26:e4: d6:3d:45:b6:80:37:2f:36:82:0d:da:dc:19:ee:d7: 2a:eb:22:64:36:de:c4:09:e6:8e:59:f0:60:b2:12: 38:12:2f:43:ef:5f:ec:ee:0d:f5:11:6c:07:c0:87: a5:5e:60:50:83:47:a8:71:c1:8e:6e:c7:7a:d6:96: 3b:27:8e:8c:b1:2d:e1:ed:a4:6b:b8:40:c1:f6:1f: 82:68:91:c2:e7:26:6b:b9:d7:19:92:78:96:d8:7f: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:BB:7C:86:67:64:E8:F8:94:F1:A0:45:F9:97:30:02:07:01:59 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS9808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.0.0/17 117.50.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2a:11:4d:5b:c4:1e:8c:d7:76:1e:72:23:0f:dc:8b:cb:dc:de: 27:ed:c9:5b:ec:73:0d:4c:3f:63:88:07:70:72:d0:4b:9f:7a: 34:5c:e3:79:cb:8a:34:0d:2e:49:c5:37:9e:f9:39:b2:0b:88: 4a:5f:7f:da:5c:bc:37:68:ad:fd:52:49:57:d6:f3:3f:a3:9f: ff:8a:60:11:cb:cd:ac:75:ab:7b:73:73:5f:57:0b:11:1b:50: a1:2b:3e:79:ae:5e:c1:34:46:f1:cc:f3:52:6e:8b:85:ee:e4: 6f:76:df:5d:d1:03:9e:01:4d:07:3d:f6:b9:f1:12:a7:b0:56: a2:0b:b3:ff:a3:74:67:94:4d:f6:4f:65:73:8e:2f:a4:2f:e9: 6b:83:52:a4:45:8f:59:ac:66:3c:af:ac:c7:42:79:66:34:ab: e2:70:41:ff:7f:20:8c:7c:78:0a:7d:f4:b5:50:c1:a4:18:67: 68:50:8a:63:4d:6e:b6:15:5f:82:62:92:e5:d1:50:2a:ab:45: 59:5a:80:3b:e7:4d:ee:11:e8:e2:3d:8f:d4:3a:26:64:f3:1e: ff:87:54:d7:b3:5f:4a:00:5f:d8:cb:69:80:6a:b8:cf:42:f9: 6f:ce:d9:bb:f2:10:6a:38:81:b2:35:a3:58:9e:4b:8b:34:b0: f4:ca:ba:d7 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJpKhYSmS96nRfwxWTTq40BC8VgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA2MjQwOTM3MjBaFw0yNzA2MjMwOTQyMjBaMDMxMTAvBgNV BAMTKEQwRjZCQjdDODY2NzY0RThGODk0RjFBMDQ1Rjk5NzMwMDIwNzAxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6qU8N2OeUiCKcmZGDSwzMfRt gV9dhGC3150Muc6nYlFW+zFFRCxvFd8s8WTerPYxqfaSb+gwdlVQJfL+D/2YwOKM G0TUjoTalamh+5w+CgKLkS9bziE7W1S1P4k0h8qGMgZMbC5IHXfKKD5Xc5aBzx+l w/8q4mR1dsJGK+Bpp0Lhg7e+J/n0FWqdkDFx5XY55rhdMYOy/d6FLh5SRbwFXiAm 5NY9RbaANy82gg3a3Bnu1yrrImQ23sQJ5o5Z8GCyEjgSL0PvX+zuDfURbAfAh6Ve YFCDR6hxwY5ux3rWljsnjoyxLeHtpGu4QMH2H4JokcLnJmu51xmSeJbYf2HZAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU0Pa7fIZnZOj4lPGgRfmXMAIHAVkwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzk4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAdqSwADBAd1MgAwDQYJKoZIhvcNAQELBQADggEBACoRTVvEHozXdh5yIw/c i8vc3iftyVvscw1MP2OIB3By0EufejRc43nLijQNLknFN575ObILiEpff9pcvDdo rf1SSVfW8z+jn/+KYBHLzax1q3tzc19XCxEbUKErPnmuXsE0RvHM81Jui4Xu5G92 313RA54BTQc99rnxEqewVqILs/+jdGeUTfZPZXOOL6Qv6WuDUqRFj1msZjyvrMdC eWY0q+JwQf9/IIx8eAp99LVQwaQYZ2hQimNNbrYVX4JikuXRUCqrRVlagDvnTe4R 6OI9j9Q6JmTzHv+HVNezX0oAX9jLaYBquM9C+W/O2bvyEGo4gbI1o1ieS4s0sPTK utc= -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:49 2026 by rpki-client