$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4134.roa File: AS4134.roa (raw, json) Hash identifier: 5ekg3RKNKtteZBYRYZXMiH6J+SA+AiJnLbNnD8EA5io= Subject key identifier: 04:8A:C4:CC:08:86:99:C6:57:9B:AC:C1:42:1F:17:AB:4F:25:50:35 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7CC606B0CB279D6606E1A5C6403D4947517DCDF9 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4134.roa Signing time: Thu 11 Jun 2026 07:36:00 +0000 ROA not before: Thu 11 Jun 2026 07:31:00 +0000 ROA not after: Thu 10 Jun 2027 07:36:00 +0000 asID: 4134 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.50.0/24 maxlen: 24 43.248.184.0/21 maxlen: 24 43.248.196.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 10:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c6:06:b0:cb:27:9d:66:06:e1:a5:c6:40:3d:49:47:51:7d:cd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jun 11 07:31:00 2026 GMT Not After : Jun 10 07:36:00 2027 GMT Subject: CN=048AC4CC088699C6579BACC1421F17AB4F255035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:21:ea:08:f5:37:49:9d:a9:60:34:58:8b: 2e:37:4f:6c:7b:14:86:75:de:3c:99:31:50:b7:e2: d9:40:a1:1f:f9:fe:24:fe:f0:73:23:d2:b9:da:5e: be:b3:2a:64:f4:d7:5d:33:a9:d4:08:2f:c9:c3:90: 6c:6b:f1:ba:a6:12:8e:07:58:17:95:17:6b:fd:24: e9:57:77:db:4e:13:bd:fe:c8:3f:1b:63:1a:a0:8e: c9:fe:67:e1:d3:8e:68:bf:d7:8b:c2:de:25:20:6e: c2:50:78:48:87:ec:86:3e:9d:8f:27:95:70:64:71: 11:ee:25:fd:95:cf:0a:73:14:e3:9b:48:c8:b9:7b: 9f:8e:77:b9:15:5b:94:98:ac:af:bc:8c:cb:42:74: d5:e7:f0:11:e2:d5:80:f8:25:54:03:07:ac:a7:2a: 74:1b:a8:6c:6a:11:51:29:04:17:a1:68:12:06:1a: dd:02:69:aa:09:11:0e:b3:bb:c7:bb:df:cf:0e:63: b3:27:64:a6:97:f0:91:b3:5f:95:d3:be:f0:62:c4: c0:7b:5c:b2:ab:0e:25:0f:c5:4b:83:96:5e:bc:3d: b9:38:8e:fa:82:39:1c:e0:f8:c3:73:09:0e:79:c0: af:97:53:46:07:9a:88:31:64:a8:43:71:e3:bb:fe: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:C4:CC:08:86:99:C6:57:9B:AC:C1:42:1F:17:AB:4F:25:50:35 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0/21 43.248.196.0/22 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 01:11:10:90:4a:45:77:3b:67:93:70:bd:7f:25:4e:e0:18:37: 01:96:52:90:ab:69:d6:c1:45:8e:8b:d6:b6:b5:71:26:8e:a2: 0e:95:3a:19:9b:74:ca:52:84:ec:15:31:1e:34:3f:c1:bd:21: dc:5e:a5:39:1c:1e:04:16:64:9a:94:3a:7c:b8:63:1d:92:a4: 4e:24:a4:f9:8a:cd:5b:dd:16:2a:7b:9f:79:0a:36:7f:a5:66: b2:b7:1b:c7:1c:a9:9c:e2:e4:41:a5:b5:8c:66:03:7a:fc:1f: 1b:91:8b:44:a0:35:b1:0c:f2:a0:0f:ce:84:5e:08:73:86:41: eb:63:fd:b6:7d:06:40:e2:1a:21:2b:0d:37:e1:99:71:7d:2c: 5b:79:55:23:58:e4:63:62:b0:cf:05:db:6b:d0:1a:cb:7b:be: f0:79:4d:d6:8d:4a:36:4a:d6:37:7e:eb:62:87:8f:75:ea:96: 7f:ee:de:ea:e6:77:31:7c:c5:07:dd:8e:c6:18:42:4f:54:96: 12:aa:60:78:56:38:63:37:88:52:cb:8b:a8:7a:0a:b2:09:f8: 03:13:ff:bb:cb:1c:2e:be:31:8a:c7:c8:b7:7c:a2:b8:6c:17: 02:57:39:5b:d8:ec:0d:f7:98:bb:d2:8a:99:bd:cc:d3:21:bc: 58:f9:c6:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUfMYGsMsnnWYG4aXGQD1JR1F9zfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA2MTEwNzMxMDBaFw0yNzA2MTAwNzM2MDBaMDMxMTAvBgNV BAMTKDA0OEFDNENDMDg4Njk5QzY1NzlCQUNDMTQyMUYxN0FCNEYyNTUwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItyHqCPU3SZ2pYDRYiy43T2x7 FIZ13jyZMVC34tlAoR/5/iT+8HMj0rnaXr6zKmT0110zqdQIL8nDkGxr8bqmEo4H WBeVF2v9JOlXd9tOE73+yD8bYxqgjsn+Z+HTjmi/14vC3iUgbsJQeEiH7IY+nY8n lXBkcRHuJf2VzwpzFOObSMi5e5+Od7kVW5SYrK+8jMtCdNXn8BHi1YD4JVQDB6yn KnQbqGxqEVEpBBehaBIGGt0CaaoJEQ6zu8e7388OY7MnZKaX8JGzX5XTvvBixMB7 XLKrDiUPxUuDll68Pbk4jvqCORzg+MNzCQ55wK+XU0YHmogxZKhDceO7/pQDAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUBIrEzAiGmcZXm6zBQh8Xq08lUDUwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzQxMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgAB MDwDBAIr8AADBAIr8TADBAMr+LgDBAIr+MQDBAJnJSwDBAJnKAwDBAJnLaADBAJn zfwDBAJn7/QDBAJv3wwwDQYJKoZIhvcNAQELBQADggEBAAEREJBKRXc7Z5NwvX8l TuAYNwGWUpCradbBRY6L1ra1cSaOog6VOhmbdMpShOwVMR40P8G9IdxepTkcHgQW ZJqUOny4Yx2SpE4kpPmKzVvdFip7n3kKNn+lZrK3G8ccqZzi5EGltYxmA3r8HxuR i0SgNbEM8qAPzoReCHOGQetj/bZ9BkDiGiErDTfhmXF9LFt5VSNY5GNisM8F22vQ Gst7vvB5TdaNSjZK1jd+62KHj3Xqln/u3urmdzF8xQfdjsYYQk9UlhKqYHhWOGM3 iFLLi6h6CrIJ+AMT/7vLHC6+MYrHyLd8orhsFwJXOVvY7A33mLvSipm9zNMhvFj5 xgI= -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:51 2026 by rpki-client