$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: euEc+RjirJYaRKybliwjFWrtpGZVXwMXOgDlGiO0Oao= Subject key identifier: 31:F3:C4:AC:1F:C8:A7:B5:88:91:D7:8B:98:A5:48:EA:12:D1:96:B0 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 3614BF6F99F190DD013FA8E9ED4CBC981A334EDA Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4808.roa Signing time: Wed 10 Jun 2026 07:15:33 +0000 ROA not before: Wed 10 Jun 2026 07:10:33 +0000 ROA not after: Wed 09 Jun 2027 07:15:33 +0000 asID: 4808 IP address blocks: 114.113.144.0/20 maxlen: 24 116.90.80.0/20 maxlen: 24 121.52.208.0/20 maxlen: 24 121.58.156.0/23 maxlen: 23 122.200.104.0/22 maxlen: 22 122.200.120.0/22 maxlen: 22 122.200.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 11:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:14:bf:6f:99:f1:90:dd:01:3f:a8:e9:ed:4c:bc:98:1a:33:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 10 07:10:33 2026 GMT Not After : Jun 9 07:15:33 2027 GMT Subject: CN=31F3C4AC1FC8A7B58891D78B98A548EA12D196B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:01:0a:3d:d7:0f:ef:88:32:20:51:92:f3: c7:13:14:1c:c2:b5:b5:24:63:07:39:d5:54:79:c8: 0c:cb:6a:ba:4c:07:5b:38:7a:01:c4:9d:bf:67:ec: fe:fc:96:e7:f2:12:07:eb:88:d2:a7:b3:d5:5e:85: 3c:58:2b:0c:4a:75:77:f7:e9:b1:01:ce:cf:2c:cb: c2:68:1e:81:80:0f:23:12:85:a8:38:57:6a:07:8c: 2f:fe:45:28:04:a7:21:46:23:76:30:b8:c7:7e:14: 74:40:83:df:b9:da:a4:30:8b:43:b0:fe:dd:4d:79: 97:9a:84:24:7e:30:55:8a:89:ad:01:72:fd:c2:a1: ca:b3:73:53:d3:9c:cf:1d:42:7e:ee:96:2f:db:66: af:29:16:7a:5a:4e:ce:ec:e9:bb:fc:8b:2d:78:3a: ff:1f:d7:de:6a:8e:9c:7f:8a:71:49:48:b7:29:59: 5e:4e:43:fe:c4:8d:ef:91:3d:7a:38:bd:e7:64:58: 7e:a4:3a:14:67:f5:fe:d9:c5:6e:6e:64:7c:5c:65: fb:a2:8c:b1:62:c4:51:a4:4a:63:b2:dd:22:fc:a7: ff:81:7f:18:be:8f:ef:d9:f1:ac:97:78:a6:f8:59: 27:7a:10:f6:2b:67:51:5d:62:a0:cc:23:42:6d:7b: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:C4:AC:1F:C8:A7:B5:88:91:D7:8B:98:A5:48:EA:12:D1:96:B0 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.113.144.0/20 116.90.80.0/20 121.52.208.0/20 121.58.156.0/23 122.200.104.0/22 122.200.120.0-122.200.124.255 Signature Algorithm: sha256WithRSAEncryption 8a:75:7d:26:f5:b6:41:9f:23:de:9e:f9:32:61:93:f1:17:6e: e4:e0:09:f4:38:56:10:d0:8a:50:4c:74:11:a5:e1:66:e6:3c: e9:0e:70:1d:96:12:d3:78:ef:65:2f:82:85:5a:30:c8:fd:b5: 2f:a8:25:d0:65:94:be:d5:02:f4:88:78:3f:4e:da:e8:4a:f6: 51:fd:93:89:ed:86:9a:b2:06:4c:81:32:b1:5a:23:66:01:b5: e6:7b:b0:36:43:c3:b3:bb:07:8b:71:b7:f2:f9:56:23:7e:5c: ba:30:b1:7f:1c:69:83:a8:9e:c5:b9:7a:52:2f:90:5c:38:e8: 36:2d:b7:8f:29:5e:c1:04:ac:ba:47:23:e9:cf:23:a4:f3:32: e3:ea:e8:eb:05:f2:07:a7:97:6d:e1:40:55:af:b3:82:04:55: 6d:32:eb:97:66:8f:5f:c8:f4:e1:dd:48:87:95:e0:92:a3:aa: 95:0b:47:44:97:52:7f:24:ef:33:06:ff:b3:29:37:58:65:23: 49:1f:5b:0d:74:44:ac:0c:53:d6:2f:2b:37:1b:61:3e:a2:ac: c4:06:6f:33:de:ba:f2:19:31:6a:82:a4:af:63:6f:09:dc:c4: 83:d9:8b:ae:8a:b9:0a:11:a0:3e:be:84:fe:dc:6b:14:c2:fb: 98:65:f7:dc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUNhS/b5nxkN0BP6jp7Uy8mBozTtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MTAwNzEwMzNaFw0yNzA2MDkwNzE1MzNaMDMxMTAvBgNV BAMTKDMxRjNDNEFDMUZDOEE3QjU4ODkxRDc4Qjk4QTU0OEVBMTJEMTk2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LQEKPdcP74gyIFGS88cTFBzC tbUkYwc51VR5yAzLarpMB1s4egHEnb9n7P78lufyEgfriNKns9VehTxYKwxKdXf3 6bEBzs8sy8JoHoGADyMShag4V2oHjC/+RSgEpyFGI3YwuMd+FHRAg9+52qQwi0Ow /t1NeZeahCR+MFWKia0Bcv3Cocqzc1PTnM8dQn7uli/bZq8pFnpaTs7s6bv8iy14 Ov8f195qjpx/inFJSLcpWV5OQ/7Eje+RPXo4vedkWH6kOhRn9f7ZxW5uZHxcZfui jLFixFGkSmOy3SL8p/+Bfxi+j+/Z8ayXeKb4WSd6EPYrZ1FdYqDMI0Jte8KzAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUMfPErB/Ip7WIkdeLmKVI6hLRlrAwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcBAf8ENjA0MDIEAgAB MCwDBARycZADBAR0WlADBAR5NNADBAF5OpwDBAJ6yGgwDAMEA3rIeAMEAHrIfDAN BgkqhkiG9w0BAQsFAAOCAQEAinV9JvW2QZ8j3p75MmGT8Rdu5OAJ9DhWENCKUEx0 EaXhZuY86Q5wHZYS03jvZS+ChVowyP21L6gl0GWUvtUC9Ih4P07a6Er2Uf2Tie2G mrIGTIEysVojZgG15nuwNkPDs7sHi3G38vlWI35cujCxfxxpg6iexbl6Ui+QXDjo Ni23jylewQSsukcj6c8jpPMy4+ro6wXyB6eXbeFAVa+zggRVbTLrl2aPX8j04d1I h5XgkqOqlQtHRJdSfyTvMwb/syk3WGUjSR9bDXRErAxT1i8rNxthPqKsxAZvM966 8hkxaoKkr2NvCdzEg9mLroq5ChGgPr6E/txrFML7mGX33A== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:44 2026 by rpki-client