$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4835.roa File: AS4835.roa (raw, json) Hash identifier: jAlH6Xn9Wx5euSm8I4X3tFNqFODKHPGDOqig5p/XK0k= Subject key identifier: 7C:26:28:E7:AF:D3:70:98:B6:F5:C5:81:3F:91:C9:97:BE:85:F1:2C Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 15A7389C6FA292918ABBD2D66A747A8021B1F06C Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4835.roa Signing time: Mon 08 Jun 2026 02:23:34 +0000 ROA not before: Mon 08 Jun 2026 02:18:34 +0000 ROA not after: Mon 07 Jun 2027 02:23:34 +0000 asID: 4835 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a7:38:9c:6f:a2:92:91:8a:bb:d2:d6:6a:74:7a:80:21:b1:f0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:34 2026 GMT Not After : Jun 7 02:23:34 2027 GMT Subject: CN=7C2628E7AFD37098B6F5C5813F91C997BE85F12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:2b:f0:4e:de:a9:1a:40:a1:9b:91:b4:1e: 08:38:22:0d:78:1b:cf:df:c2:e3:df:04:8f:9e:f4: b3:88:8f:e0:b9:01:e2:90:7d:a4:49:8f:4c:f3:e3: a9:18:44:c8:da:ec:f8:ab:30:53:24:f6:e9:4d:59: f3:51:1a:53:b6:e2:1e:50:d3:2a:a9:76:56:57:4d: 39:f7:be:20:72:f6:07:7d:2d:b0:51:5f:c4:b5:32: 77:19:c1:88:93:24:bf:10:90:7c:78:6a:72:ca:08: e6:1f:53:18:c3:25:69:6e:8f:b1:fe:20:7c:bc:b3: 2c:d7:98:da:90:e0:86:86:a1:c0:17:cc:6d:42:6b: d0:92:cd:72:1d:30:af:61:0a:26:c7:73:40:79:49: 4e:8a:8a:dd:31:83:a4:a3:61:8f:08:7e:d6:4f:dc: 30:8f:8e:f6:fa:7a:47:b6:d9:03:38:63:83:76:e5: d1:45:f5:00:d5:c4:ec:82:08:bb:cf:bc:6c:1e:bc: 0d:2d:32:f2:ea:bb:a0:4e:d1:52:db:e6:7d:17:d4: 3d:d9:aa:42:e5:44:6d:6c:a9:bb:33:07:f3:05:d0: 0b:6c:eb:8a:e7:a9:61:3a:62:f5:18:81:65:a6:50: c2:80:59:d6:bc:41:4e:6c:6e:68:a5:4c:23:9b:19: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:26:28:E7:AF:D3:70:98:B6:F5:C5:81:3F:91:C9:97:BE:85:F1:2C X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4d:dc:d6:1e:4f:de:a5:ba:99:c7:af:02:af:9d:32:f5:32:66: 7d:33:9e:ba:90:c8:5e:aa:ec:c8:e6:66:54:d9:d1:25:69:32: 13:04:c4:83:a5:a4:0f:1c:78:16:e6:eb:10:18:c4:fb:31:27: 8b:45:9c:00:89:ca:cd:c3:0f:fd:04:57:a3:99:1b:9c:5e:08: 9c:28:a5:1b:22:75:94:fd:9b:da:7e:39:14:eb:11:60:b6:10: 99:e2:af:da:08:90:26:db:c1:d2:dd:35:7a:da:f4:fc:dc:2d: 9d:cc:3d:3e:fd:79:a2:8e:e0:e6:9f:94:b4:27:db:5c:42:84: ce:0b:f0:bd:f3:19:9f:80:96:e4:a4:1a:8a:d0:ac:49:a5:93: f4:ab:3b:76:66:37:57:d3:34:e7:2b:e8:bb:14:b3:fd:9a:ff: 0f:89:68:c4:a7:0e:d2:1c:dc:57:f2:4b:fa:f6:7c:f9:af:b1: 85:9d:50:8d:9f:3a:81:5b:d7:d6:3e:7a:59:f8:aa:d3:bc:77: 92:29:6d:d1:aa:96:63:84:f1:35:07:e5:07:54:04:c5:63:43: 01:29:ce:30:ed:38:71:0a:b1:08:52:10:b8:d5:de:80:e8:c3: cb:5c:be:64:70:e7:24:18:c6:cc:ff:dd:c7:0f:05:27:45:d6: f8:21:b1:8c -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUFac4nG+ikpGKu9LWanR6gCGx8GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzRaFw0yNzA2MDcwMjIzMzRaMDMxMTAvBgNV BAMTKDdDMjYyOEU3QUZEMzcwOThCNkY1QzU4MTNGOTFDOTk3QkU4NUYxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVCvwTt6pGkChm5G0Hgg4Ig14 G8/fwuPfBI+e9LOIj+C5AeKQfaRJj0zz46kYRMja7PirMFMk9ulNWfNRGlO24h5Q 0yqpdlZXTTn3viBy9gd9LbBRX8S1MncZwYiTJL8QkHx4anLKCOYfUxjDJWluj7H+ IHy8syzXmNqQ4IaGocAXzG1Ca9CSzXIdMK9hCibHc0B5SU6Kit0xg6SjYY8IftZP 3DCPjvb6eke22QM4Y4N25dFF9QDVxOyCCLvPvGwevA0tMvLqu6BO0VLb5n0X1D3Z qkLlRG1sqbszB/MF0Ats64rnqWE6YvUYgWWmUMKAWda8QU5sbmilTCObGaUjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUfCYo56/TcJi29cWBP5HJl76F8SwwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzQ4MzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgY0GCCsGAQUFBwEHAQH/BH4wfDB6BAIA ATB0AwMAKp4DBAc6U4ADBAc7lwADBAc7vwADBAJn96gwDAMEB3iEgAMEB3iFAAMD AXiGAwMBfPowCwMDAbauAwQEtq/gAwMBt1QDBAPLxAADBAXSTYAwDAMEBdNjoAME BdNjwDALAwMA05cDBAXTmAADBAbTmEAwDQYJKoZIhvcNAQELBQADggEBAE3c1h5P 3qW6mcevAq+dMvUyZn0znrqQyF6q7MjmZlTZ0SVpMhMExIOlpA8ceBbm6xAYxPsx J4tFnACJys3DD/0EV6OZG5xeCJwopRsidZT9m9p+ORTrEWC2EJnir9oIkCbbwdLd NXra9PzcLZ3MPT79eaKO4OaflLQn21xChM4L8L3zGZ+AluSkGorQrEmlk/SrO3Zm N1fTNOcr6LsUs/2a/w+JaMSnDtIc3FfyS/r2fPmvsYWdUI2fOoFb19Y+eln4qtO8 d5IpbdGqlmOE8TUH5QdUBMVjQwEpzjDtOHEKsQhSELjV3oDow8tcvmRw5yQYxsz/ 3ccPBSdF1vghsYw= -----END CERTIFICATE-----Generated at Fri Jun 12 02:15:16 2026 by rpki-client