$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4811.roa File: AS4811.roa (raw, json) Hash identifier: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo= Subject key identifier: 0C:FF:E2:A7:E4:A0:D9:FB:6F:0E:02:FA:58:CD:24:1C:09:7C:61:C7 Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 702481DAB2C62ADCB12087E61F95E6A04377590B Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4811.roa Signing time: Tue 16 Jun 2026 14:57:16 +0000 ROA not before: Tue 16 Jun 2026 14:52:16 +0000 ROA not after: Tue 15 Jun 2027 14:57:16 +0000 asID: 4811 IP address blocks: 116.63.32.0/19 maxlen: 19 116.63.96.0/20 maxlen: 20 116.63.112.0/21 maxlen: 21 116.63.120.0/21 maxlen: 21 116.63.192.0/18 maxlen: 18 116.196.192.0/21 maxlen: 21 122.9.64.0/19 maxlen: 19 122.112.192.0/22 maxlen: 22 2409:27fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:24:81:da:b2:c6:2a:dc:b1:20:87:e6:1f:95:e6:a0:43:77:59:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jun 16 14:52:16 2026 GMT Not After : Jun 15 14:57:16 2027 GMT Subject: CN=0CFFE2A7E4A0D9FB6F0E02FA58CD241C097C61C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:53:cb:37:94:3c:a8:e7:d8:1c:53:eb:3f: 36:18:c2:d8:cf:12:21:bd:fb:ae:51:6b:f3:88:3b: c1:01:45:2e:da:9f:87:4d:04:39:70:d2:d4:d7:c3: 15:70:da:32:9c:7b:a8:df:4b:cb:cc:c8:a2:cb:7c: 8b:80:b7:24:8b:fa:93:6a:d7:6d:b1:69:b8:f4:22: 96:4a:7e:8e:23:39:a6:86:97:08:7a:8a:58:1d:c1: 97:24:00:10:97:18:a6:f3:19:6b:a2:31:0a:45:2f: 62:76:d2:21:5b:ca:ac:db:9c:a5:bb:cf:67:79:de: ae:a1:61:a8:ca:09:82:6c:4d:0f:d1:a1:16:8e:e3: c8:8b:e4:09:2a:a9:cf:57:f3:ad:35:5c:5f:8e:1a: 18:f6:93:0f:2f:30:bb:24:32:b7:d8:46:51:ce:75: 41:9c:66:07:a5:a6:fc:29:ec:15:ae:f4:10:ca:fd: b2:c5:08:71:5c:d4:6f:63:39:7b:87:e6:f5:cf:50: 30:62:e6:71:f5:75:f2:3b:47:55:9d:e2:a6:24:0e: 72:39:17:f7:98:84:f9:5c:3e:c1:c9:ac:ca:f0:fb: 03:32:f1:65:c4:30:f8:80:c7:5d:d9:63:2b:fc:2f: 53:91:a4:c6:90:1d:6a:42:51:18:b2:31:70:c1:4a: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FF:E2:A7:E4:A0:D9:FB:6F:0E:02:FA:58:CD:24:1C:09:7C:61:C7 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.63.32.0/19 116.63.96.0/19 116.63.192.0/18 116.196.192.0/21 122.9.64.0/19 122.112.192.0/22 IPv6: 2409:27fb::/48 Signature Algorithm: sha256WithRSAEncryption 39:f7:19:8b:08:54:a4:9e:b1:97:c7:c3:a1:a0:19:e2:f7:90: 9a:04:a9:8a:bf:da:ed:16:c4:22:e7:71:4a:05:01:d2:cb:c6: 35:1f:e9:3d:29:41:ec:85:11:bd:24:2d:dc:b0:2c:10:40:15: 6b:e7:6d:90:1b:39:73:7e:4d:74:8d:95:43:24:8e:eb:c5:ce: 32:07:1a:04:06:5c:93:3e:87:79:30:2b:ee:68:f6:de:12:cd: 60:bb:11:97:a6:b4:7c:f5:83:77:29:6a:6f:08:57:f4:d8:e5: 52:ef:ac:5c:ea:1a:c3:be:08:60:5a:23:5e:d7:c5:b0:bd:30: 2f:40:ba:7f:d9:2c:84:96:51:e4:64:36:9c:72:4b:c9:b0:41: 9e:d7:a1:90:8d:99:78:1c:b7:d7:b6:f2:ae:47:03:d4:64:48: 75:e1:97:0c:95:4a:da:96:ab:4c:18:c3:8e:e1:49:bc:8f:95: 04:51:e3:54:e4:79:66:cf:69:2d:00:4a:e9:0b:d1:eb:23:95: d0:f9:80:b1:8e:b1:23:80:b1:ad:3f:dd:04:37:44:6a:a3:24: 7c:7c:eb:0b:1f:70:8a:fb:fa:6a:cb:b5:a3:71:13:b8:84:3b: 26:bf:6a:b1:e3:f4:12:f5:4b:e7:77:f8:d8:c9:11:8c:39:9e: 0d:e1:05:f8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcCSB2rLGKtyxIIfmH5XmoEN3WQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA2MTYxNDUyMTZaFw0yNzA2MTUxNDU3MTZaMDMxMTAvBgNV BAMTKDBDRkZFMkE3RTRBMEQ5RkI2RjBFMDJGQTU4Q0QyNDFDMDk3QzYxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF31PLN5Q8qOfYHFPrPzYYwtjP EiG9+65Ra/OIO8EBRS7an4dNBDlw0tTXwxVw2jKce6jfS8vMyKLLfIuAtySL+pNq 122xabj0IpZKfo4jOaaGlwh6ilgdwZckABCXGKbzGWuiMQpFL2J20iFbyqzbnKW7 z2d53q6hYajKCYJsTQ/RoRaO48iL5Akqqc9X8601XF+OGhj2kw8vMLskMrfYRlHO dUGcZgelpvwp7BWu9BDK/bLFCHFc1G9jOXuH5vXPUDBi5nH1dfI7R1Wd4qYkDnI5 F/eYhPlcPsHJrMrw+wMy8WXEMPiAx13ZYyv8L1ORpMaQHWpCURiyMXDBSuglAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUDP/ip+Sg2ftvDgL6WM0kHAl8YccwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzQ4MTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUHAQcBAf8EPzA9MCoEAgAB MCQDBAV0PyADBAV0P2ADBAZ0P8ADBAN0xMADBAV6CUADBAJ6cMAwDwQCAAIwCQMH ACQJJ/sAADANBgkqhkiG9w0BAQsFAAOCAQEAOfcZiwhUpJ6xl8fDoaAZ4veQmgSp ir/a7RbEIudxSgUB0svGNR/pPSlB7IURvSQt3LAsEEAVa+dtkBs5c35NdI2VQySO 68XOMgcaBAZckz6HeTAr7mj23hLNYLsRl6a0fPWDdylqbwhX9NjlUu+sXOoaw74I YFojXtfFsL0wL0C6f9kshJZR5GQ2nHJLybBBntehkI2ZeBy317byrkcD1GRIdeGX DJVK2parTBjDjuFJvI+VBFHjVOR5Zs9pLQBK6QvR6yOV0PmAsY6xI4CxrT/dBDdE aqMkfHzrCx9wivv6asu1o3ETuIQ7Jr9qseP0EvVL53f42MkRjDmeDeEF+A== -----END CERTIFICATE-----Generated at Tue Jul 14 23:36:28 2026 by rpki-client