$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: u9OQxrqhpl1T/0ARzRa6lSxGFhl35YXPeECNJjqNd3M= Subject key identifier: 3B:DE:8D:C2:62:0B:59:56:D9:59:96:6D:22:47:E4:BB:17:9F:F9:7C Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 69F297DCE3AB3F12B87BC777B339B88DCEB03693 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4808.roa Signing time: Mon 08 Jun 2026 02:23:34 +0000 ROA not before: Mon 08 Jun 2026 02:18:34 +0000 ROA not after: Mon 07 Jun 2027 02:23:34 +0000 asID: 4808 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f2:97:dc:e3:ab:3f:12:b8:7b:c7:77:b3:39:b8:8d:ce:b0:36:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:34 2026 GMT Not After : Jun 7 02:23:34 2027 GMT Subject: CN=3BDE8DC2620B5956D959966D2247E4BB179FF97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:de:e7:6b:b0:c4:e1:71:9f:76:52:b2:7b: a8:df:f7:a8:72:99:82:c9:8e:3e:ec:6a:88:bf:35: 16:1f:b6:ed:b5:b1:c1:39:4c:aa:17:4e:ee:86:ac: c5:31:66:52:ea:f0:55:a1:8c:20:37:7d:3d:a2:1d: bb:d8:8e:5a:29:bd:d2:65:ff:1c:b0:eb:dc:1c:5f: 49:92:6c:a5:46:07:9c:ef:b8:a1:75:2c:f7:75:58: f9:0e:0f:5a:5e:69:80:2e:0d:32:63:34:4d:a2:ec: fd:71:40:43:66:86:fe:c9:5e:54:34:14:f0:f9:c4: 6a:5e:85:50:10:44:cd:1a:5b:be:4d:cd:76:56:60: 02:39:39:a8:12:0f:d4:9c:80:f2:69:06:75:74:d4: 49:ce:52:84:05:3d:c2:1e:b0:06:71:5a:ca:dc:cb: b2:98:67:46:d0:85:38:1f:70:58:da:ae:ea:36:ce: c6:80:2a:52:04:0f:d1:57:6c:a4:74:4b:da:84:07: 6c:a0:03:4b:06:ec:79:fe:3f:f3:02:0e:67:da:d2: 5e:e6:07:21:6a:12:f3:14:ce:64:a6:7c:b7:ff:e5: 76:fd:c5:02:30:85:d3:0a:12:15:44:f3:14:64:77: 4f:9f:68:4c:ab:34:93:f3:ff:1c:60:71:ef:08:ac: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:8D:C2:62:0B:59:56:D9:59:96:6D:22:47:E4:BB:17:9F:F9:7C X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption 82:4a:f7:7d:e9:d9:a0:e3:6c:2a:35:0c:3c:b1:38:61:9b:dd: a6:1a:bc:2f:b4:44:57:7d:67:6a:2a:93:b8:cb:30:31:f2:4c: 13:0f:55:7d:10:4a:d4:27:63:ee:fa:6b:be:49:84:43:d3:78: 1b:64:0c:a2:9f:0b:31:3f:fb:8b:77:ac:8d:d3:d1:2d:97:18: d7:a5:da:f9:5d:08:29:9b:7e:09:00:98:92:bf:33:41:72:f8: 69:0a:8d:c3:c6:03:ec:d5:2b:3d:b0:f4:fc:10:98:6d:a9:01: 7d:d3:53:8e:d8:ee:82:9d:e5:c8:d5:86:9f:47:de:88:36:73: 97:24:7d:5f:dd:46:3a:62:31:3c:da:7f:2d:42:dc:65:c3:e7: d1:3a:4a:b2:26:2e:ae:ca:93:d0:48:69:f0:8d:d5:ea:74:d4: 10:50:9c:31:4a:8a:59:08:e2:42:59:85:8b:86:3b:78:7d:82: d4:ad:5f:69:4f:13:11:87:3d:57:68:10:11:03:fc:2c:cf:9b: 80:99:82:9f:17:5f:b7:55:b6:d4:ff:5b:bc:44:8b:e9:a8:2c: 99:d0:18:67:96:87:a0:5d:05:a1:39:17:71:ea:ce:82:bf:b5: 9c:d4:85:56:c9:ad:da:85:bb:e8:fb:af:d5:7b:03:9d:0d:dd: 28:54:6d:90 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUafKX3OOrPxK4e8d3szm4jc6wNpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzRaFw0yNzA2MDcwMjIzMzRaMDMxMTAvBgNV BAMTKDNCREU4REMyNjIwQjU5NTZEOTU5OTY2RDIyNDdFNEJCMTc5RkY5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDY97na7DE4XGfdlKye6jf96hy mYLJjj7saoi/NRYftu21scE5TKoXTu6GrMUxZlLq8FWhjCA3fT2iHbvYjlopvdJl /xyw69wcX0mSbKVGB5zvuKF1LPd1WPkOD1peaYAuDTJjNE2i7P1xQENmhv7JXlQ0 FPD5xGpehVAQRM0aW75NzXZWYAI5OagSD9ScgPJpBnV01EnOUoQFPcIesAZxWsrc y7KYZ0bQhTgfcFjaruo2zsaAKlIED9FXbKR0S9qEB2ygA0sG7Hn+P/MCDmfa0l7m ByFqEvMUzmSmfLf/5Xb9xQIwhdMKEhVE8xRkd0+faEyrNJPz/xxgce8IrIs5AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUO96NwmILWVbZWZZtIkfkuxef+XwwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZ4GCCsGAQUFBwEHAQH/BIGOMIGLMHoE AgABMHQDAwAqngMEBzpTgAMEBzuXAAMEBzu/AAMEAmf3qDAMAwQHeISAAwQHeIUA AwMBeIYDAwF8+jALAwMBtq4DBAS2r+ADAwG3VAMEA8vEAAMEBdJNgDAMAwQF02Og AwQF02PAMAsDAwDTlwMEBdOYAAMEBtOYQDANBAIAAjAHAwUAJAOiADANBgkqhkiG 9w0BAQsFAAOCAQEAgkr3fenZoONsKjUMPLE4YZvdphq8L7REV31naiqTuMswMfJM Ew9VfRBK1Cdj7vprvkmEQ9N4G2QMop8LMT/7i3esjdPRLZcY16Xa+V0IKZt+CQCY kr8zQXL4aQqNw8YD7NUrPbD0/BCYbakBfdNTjtjugp3lyNWGn0feiDZzlyR9X91G OmIxPNp/LULcZcPn0TpKsiYursqT0Ehp8I3V6nTUEFCcMUqKWQjiQlmFi4Y7eH2C 1K1faU8TEYc9V2gQEQP8LM+bgJmCnxdft1W21P9bvESL6agsmdAYZ5aHoF0FoTkX cerOgr+1nNSFVsmt2oW76Puv1XsDnQ3dKFRtkA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:46 2026 by rpki-client