$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: HOSy44I8TAfzl179iUsOIXLlEYYRMj22TosTQJAxADc= Subject key identifier: F1:66:88:27:50:5B:4F:F9:A4:64:CC:DD:B6:AC:7E:68:11:DA:A2:93 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 512D0A2040693B65889E36BA6B2C7E693413E899 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa Signing time: Thu 11 Jun 2026 07:36:00 +0000 ROA not before: Thu 11 Jun 2026 07:31:00 +0000 ROA not after: Thu 10 Jun 2027 07:36:00 +0000 asID: 4837 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.184.0/21 maxlen: 24 43.248.192.0/20 maxlen: 20 43.248.196.0/22 maxlen: 22 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.83.72.0/22 maxlen: 22 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 10:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2d:0a:20:40:69:3b:65:88:9e:36:ba:6b:2c:7e:69:34:13:e8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jun 11 07:31:00 2026 GMT Not After : Jun 10 07:36:00 2027 GMT Subject: CN=F1668827505B4FF9A464CCDDB6AC7E6811DAA293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:34:f4:89:35:91:9d:b4:a6:ba:ab:27:aa: 54:1e:a4:8d:2f:29:b5:ba:7a:cb:fe:48:8f:30:9b: 04:0e:21:35:21:11:46:ac:f3:96:38:d1:9e:3e:0f: f5:c5:b1:d2:df:1a:c6:cd:92:32:9c:5e:c8:49:33: f1:4d:c0:0b:db:8e:50:cd:9e:4e:fa:23:e9:34:2a: 7f:9b:e7:c6:e5:52:90:98:57:d0:f0:8f:89:41:c2: e5:b3:b4:da:58:9f:aa:70:b1:a9:e0:2e:e0:5f:10: 5d:c3:7a:26:57:57:0f:00:c9:7f:e7:2d:3c:65:d8: 76:eb:45:03:e2:16:aa:5b:da:f0:18:7a:f1:d9:d0: 54:11:97:28:92:f3:3e:8a:e5:f1:be:20:e5:bc:0f: db:7f:1b:74:2a:2c:22:6b:87:af:6d:3f:fd:e4:6d: 81:45:67:6b:44:79:9b:a1:7b:7b:d1:0f:47:10:35: d0:97:5f:61:a2:96:d0:61:fc:3e:c6:af:ea:7a:7f: 18:90:83:c1:d4:d4:3c:72:4c:2d:93:2a:7a:ea:e8: 6b:e9:b2:71:f5:a0:ad:2d:fb:86:b8:d3:20:20:80: e2:82:d8:aa:fa:47:24:9c:19:51:a7:1e:9b:1c:63: a8:10:f5:f4:cf:d8:ee:f5:ce:76:84:16:48:b2:9e: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:66:88:27:50:5B:4F:F9:A4:64:CC:DD:B6:AC:7E:68:11:DA:A2:93 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0-43.248.207.255 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption a6:c5:97:0a:85:97:ac:cd:35:b6:42:35:41:21:d8:65:b5:0e: 11:52:b8:a7:ac:26:c6:dd:d8:13:7f:37:37:aa:1a:71:09:7b: 3b:88:a8:fd:fd:06:c7:8b:22:dd:a9:00:29:ab:81:bd:93:dc: a5:f6:3b:43:b1:14:25:8e:be:3f:cc:5c:5a:5f:75:ed:3f:8e: c4:06:23:57:0a:27:ad:3f:7d:ed:e3:32:26:6f:53:ec:db:21: 25:6b:f3:ab:6c:67:dd:1f:73:3d:bc:91:2f:46:ed:ab:14:21: 8c:dc:1c:15:79:c7:f1:50:67:56:c6:e3:51:14:6f:2b:e8:d2: 64:ab:2a:77:e3:3c:ca:c5:ee:eb:14:92:ff:b3:95:0f:95:cc: a1:f9:fb:f5:75:bb:4f:cf:a8:9a:18:5c:3d:c2:80:0d:a8:7a: 5a:61:c9:76:cf:bb:0b:71:24:e7:30:86:1e:58:46:e8:96:a4: 55:1c:11:d4:bf:59:cb:9a:c8:00:fe:dc:2e:9e:89:ff:86:01: 2f:5c:61:37:e9:8f:3a:7b:d2:e8:bd:b7:e9:fc:31:13:5a:a1: ec:db:97:7b:0b:62:7c:de:ba:48:78:c3:aa:d6:7e:08:6a:23: 60:34:ee:e8:51:bb:b4:a5:41:25:a5:1f:0b:ee:66:74:ed:8a: 30:7e:b6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUUS0KIEBpO2WInja6ayx+aTQT6JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA2MTEwNzMxMDBaFw0yNzA2MTAwNzM2MDBaMDMxMTAvBgNV BAMTKEYxNjY4ODI3NTA1QjRGRjlBNDY0Q0NEREI2QUM3RTY4MTFEQUEyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZDT0iTWRnbSmuqsnqlQepI0v KbW6esv+SI8wmwQOITUhEUas85Y40Z4+D/XFsdLfGsbNkjKcXshJM/FNwAvbjlDN nk76I+k0Kn+b58blUpCYV9Dwj4lBwuWztNpYn6pwsangLuBfEF3DeiZXVw8AyX/n LTxl2HbrRQPiFqpb2vAYevHZ0FQRlyiS8z6K5fG+IOW8D9t/G3QqLCJrh69tP/3k bYFFZ2tEeZuhe3vRD0cQNdCXX2GiltBh/D7Gr+p6fxiQg8HU1DxyTC2TKnrq6Gvp snH1oK0t+4a40yAggOKC2Kr6RyScGVGnHpscY6gQ9fTP2O71znaEFkiynioBAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQU8WaIJ1BbT/mkZMzdtqx+aBHaopMwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYIKwYBBQUHAQcBAf8ETjBMMEoEAgAB MEQDBAIr8AADBAIr8TAwDAMEAyv4uAMEBCv4wAMEAmclLAMEAmcoDAMEAmctoAME AmdTSAMEAmfN/AMEAmfv9AMEAm/fDDANBgkqhkiG9w0BAQsFAAOCAQEApsWXCoWX rM01tkI1QSHYZbUOEVK4p6wmxt3YE383N6oacQl7O4io/f0Gx4si3akAKauBvZPc pfY7Q7EUJY6+P8xcWl917T+OxAYjVwonrT997eMyJm9T7NshJWvzq2xn3R9zPbyR L0btqxQhjNwcFXnH8VBnVsbjURRvK+jSZKsqd+M8ysXu6xSS/7OVD5XMofn79XW7 T8+omhhcPcKADah6WmHJds+7C3Ek5zCGHlhG6JakVRwR1L9Zy5rIAP7cLp6J/4YB L1xhN+mPOnvS6L236fwxE1qh7NuXewtifN66SHjDqtZ+CGojYDTu6FG7tKVBJaUf C+5mdO2KMH62CQ== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:31 2026 by rpki-client