$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4811.roa File: AS4811.roa (raw, json) Hash identifier: ddTKO1AsNR1SULkjlm2Hn5h6NSHZWKPAKCykA8E69zo= Subject key identifier: 7E:47:89:30:F7:A8:E8:E5:45:1C:FC:A0:13:FA:A9:12:BE:E2:30:3C Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 611110D67A26C587F3F3CB43214A2D3EACE248A6 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4811.roa Signing time: Mon 18 May 2026 03:32:42 +0000 ROA not before: Mon 18 May 2026 03:27:42 +0000 ROA not after: Mon 17 May 2027 03:32:42 +0000 asID: 4811 IP address blocks: 120.132.128.0/17 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.133.240.0/20 maxlen: 32 182.175.240.0/23 maxlen: 32 182.175.242.0/23 maxlen: 32 211.148.17.0/24 maxlen: 32 211.148.18.0/23 maxlen: 32 211.148.20.0/22 maxlen: 32 211.148.24.0/23 maxlen: 32 211.148.27.0/24 maxlen: 32 211.148.28.0/22 maxlen: 32 2403:a200:a1ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:11:10:d6:7a:26:c5:87:f3:f3:cb:43:21:4a:2d:3e:ac:e2:48:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:27:42 2026 GMT Not After : May 17 03:32:42 2027 GMT Subject: CN=7E478930F7A8E8E5451CFCA013FAA912BEE2303C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:41:a9:81:a3:b6:9b:88:3c:d4:1e:1e:bb:cc: 08:69:47:40:df:78:b6:7b:bc:68:1e:e9:f6:ca:6d: 42:9b:c3:a1:3f:f6:f8:3d:dc:06:46:0a:27:32:3c: 3e:ee:6f:25:fb:c5:31:30:8e:78:94:d0:27:98:68: 42:ef:2a:08:35:a3:3c:0a:90:83:b8:ee:19:e3:ac: 9c:65:8b:5e:6c:38:d7:0e:34:83:50:27:fc:6c:84: 8a:d9:9b:04:59:73:23:6c:c0:1d:be:56:11:0e:01: 3d:c3:3b:49:5d:ac:03:7e:e8:14:e4:17:87:46:87: ff:b1:21:5f:56:52:a9:1b:26:00:46:8a:d1:5a:eb: 62:ed:84:42:24:9e:da:8f:d6:a5:4d:27:87:80:c6: a4:2b:2b:f9:57:26:03:b1:b0:7f:c5:61:d5:c5:92: 27:2d:4f:9d:a9:58:1f:71:85:f6:9d:f8:e4:f3:3e: 95:be:11:4d:4c:63:d7:b7:49:97:9a:75:8e:2f:7b: bf:36:50:16:37:73:42:7b:54:0a:78:5f:c1:c4:7f: dd:a9:a5:17:45:b9:46:da:5e:13:2b:47:1e:d5:8c: a1:43:66:d7:54:43:0d:55:61:9a:c3:cd:d7:9a:b4: a8:3d:a7:ad:b7:e5:33:1d:5f:64:ee:29:a3:04:32: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:47:89:30:F7:A8:E8:E5:45:1C:FC:A0:13:FA:A9:12:BE:E2:30:3C X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.128.0/17 120.133.192.0/18 182.175.240.0/22 211.148.17.0-211.148.25.255 211.148.27.0-211.148.31.255 IPv6: 2403:a200:a1ff::/48 Signature Algorithm: sha256WithRSAEncryption 65:4c:61:22:6e:0d:65:e5:8f:16:f0:d2:93:d8:40:89:49:7f: 7a:ac:39:a2:7a:1d:68:74:7a:78:12:50:e7:f5:bc:6b:08:2d: ff:2f:97:21:1b:1c:44:d6:79:05:f1:d7:42:75:0e:f2:cf:5c: 2d:03:6b:ea:e4:6e:4f:2b:9a:14:5c:da:7e:a7:02:42:59:c2: c8:c5:d6:52:c1:e3:69:a2:71:78:28:a5:11:bc:b4:0b:2c:75: 4c:62:87:7d:ce:ab:a3:fa:7a:3c:34:8a:8d:4a:7b:eb:f9:0f: 10:3c:3a:3a:a5:4f:0a:76:63:bf:f0:e1:56:cf:f6:a9:95:cd: 47:03:e3:91:12:75:d5:fb:17:e8:b4:84:a2:9e:1a:9e:be:0e: e6:38:2e:de:ef:39:bb:f6:a2:01:b8:09:95:16:15:31:42:55: b8:c4:69:27:33:33:e4:3e:d3:e0:0e:12:cd:bc:41:7c:90:54: cb:9f:5b:2f:2a:e5:75:1d:9a:21:5e:04:2e:fd:45:c7:31:02: e5:25:2a:ae:80:e6:0f:04:21:0f:b5:2c:43:ae:b8:5e:c5:4b: 26:84:8d:e6:c1:87:2a:fb:cf:ae:6d:65:1a:1b:0d:54:58:26: 5b:22:21:40:36:a5:77:44:61:9d:46:06:42:5f:47:a5:3f:fa: b6:d6:2d:e3 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUYREQ1nomxYfz88tDIUotPqziSKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzI3NDJaFw0yNzA1MTcwMzMyNDJaMDMxMTAvBgNV BAMTKDdFNDc4OTMwRjdBOEU4RTU0NTFDRkNBMDEzRkFBOTEyQkVFMjMwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1QamBo7abiDzUHh67zAhpR0Df eLZ7vGge6fbKbUKbw6E/9vg93AZGCicyPD7ubyX7xTEwjniU0CeYaELvKgg1ozwK kIO47hnjrJxli15sONcONINQJ/xshIrZmwRZcyNswB2+VhEOAT3DO0ldrAN+6BTk F4dGh/+xIV9WUqkbJgBGitFa62LthEIkntqP1qVNJ4eAxqQrK/lXJgOxsH/FYdXF kictT52pWB9xhfad+OTzPpW+EU1MY9e3SZeadY4ve782UBY3c0J7VAp4X8HEf92p pRdFuUbaXhMrRx7VjKFDZtdUQw1VYZrDzdeatKg9p6235TMdX2TuKaMEMgxTAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUfkeJMPeo6OVFHPygE/qpEr7iMDwwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzQ4MTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8ESTBHMDQEAgAB MC4DBAd4hIADBAZ4hcADBAK2r/AwDAMEANOUEQMEAdOUGDAMAwQA05QbAwQF05QA MA8EAgACMAkDBwAkA6IAof8wDQYJKoZIhvcNAQELBQADggEBAGVMYSJuDWXljxbw 0pPYQIlJf3qsOaJ6HWh0engSUOf1vGsILf8vlyEbHETWeQXx10J1DvLPXC0Da+rk bk8rmhRc2n6nAkJZwsjF1lLB42micXgopRG8tAssdUxih33Oq6P6ejw0io1Ke+v5 DxA8OjqlTwp2Y7/w4VbP9qmVzUcD45ESddX7F+i0hKKeGp6+DuY4Lt7vObv2ogG4 CZUWFTFCVbjEaSczM+Q+0+AOEs28QXyQVMufWy8q5XUdmiFeBC79RccxAuUlKq6A 5g8EIQ+1LEOuuF7FSyaEjebBhyr7z65tZRobDVRYJlsiIUA2pXdEYZ1GBkJfR6U/ +rbWLeM= -----END CERTIFICATE-----Generated at Sat May 30 00:41:30 2026 by rpki-client