$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4847.roa File: AS4847.roa (raw, json) Hash identifier: 3rkjW99xQWcKDBNK98Xl6QzkJQaB+U43s7sVMj+RwZA= Subject key identifier: C3:35:3F:18:A6:43:BB:CA:5A:4B:CF:D9:A7:B8:AA:88:0D:53:8F:7C Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 1721A3826A890C9CC849BB3C41479641A3D2CFFF Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4847.roa Signing time: Mon 08 Jun 2026 02:23:34 +0000 ROA not before: Mon 08 Jun 2026 02:18:34 +0000 ROA not after: Mon 07 Jun 2027 02:23:34 +0000 asID: 4847 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:21:a3:82:6a:89:0c:9c:c8:49:bb:3c:41:47:96:41:a3:d2:cf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:34 2026 GMT Not After : Jun 7 02:23:34 2027 GMT Subject: CN=C3353F18A643BBCA5A4BCFD9A7B8AA880D538F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:57:ac:c7:2d:9e:93:88:81:d3:b2:86:75: 95:4c:c5:61:11:7e:02:af:ef:6f:6d:43:9c:90:15: c6:00:7f:16:fe:36:8b:cd:61:aa:4e:1d:e1:25:1b: ce:8e:d7:38:b5:c0:89:b9:61:df:f0:87:78:6e:1c: 70:f9:a3:59:9b:42:8a:57:7f:18:96:44:87:37:44: 40:95:bc:91:99:80:1e:81:5e:15:d0:7c:f0:54:8f: 08:1b:58:1a:aa:4b:2a:84:81:70:94:3f:32:42:d7: bd:1a:ef:b1:c6:da:9f:e3:e2:5e:a7:64:91:56:3d: 6c:27:87:a0:a7:2d:2c:69:6a:89:dc:07:09:0e:00: f8:bf:76:e5:96:e3:96:0c:ef:04:0b:ca:32:f7:e9: 3d:91:62:ad:d4:b5:5f:02:f6:51:e8:6b:e9:a2:1e: fa:0f:bc:99:b5:ec:cb:fc:82:78:c0:a7:d8:54:ce: 3b:70:3e:a4:e5:c1:bb:ad:b7:d2:5b:54:63:79:10: 19:49:45:7d:5e:e4:48:b2:ba:1a:bb:3d:99:93:c3: e8:57:65:fd:35:49:8c:83:4e:57:7d:15:14:10:19: b5:0a:e6:d5:05:24:47:50:c2:dc:f9:eb:e0:5f:dd: f5:96:27:5d:1a:a9:78:77:2e:55:0f:c6:2c:5a:f1: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:3F:18:A6:43:BB:CA:5A:4B:CF:D9:A7:B8:AA:88:0D:53:8F:7C X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS4847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption ac:14:b2:59:59:15:4e:ff:b0:d4:ed:51:41:35:2f:97:04:89: ad:e0:9e:ae:5a:1b:03:36:21:92:7f:be:0e:b1:0e:51:d1:0f: f0:5c:b7:43:12:47:a9:4a:a0:e4:e4:6d:26:b6:83:cf:ba:71: d8:55:56:2c:43:fb:c4:17:90:ae:51:45:b2:2d:fd:d1:61:25: be:dd:ab:76:a2:f0:a4:2d:88:1b:ac:4f:71:c5:0c:ab:ba:a6: a3:e1:aa:59:69:81:bd:81:fc:ec:50:16:4c:42:21:9a:9e:31: 6a:a1:86:f0:1b:34:25:3a:2b:99:1d:92:5b:f6:e4:bd:69:a9: b2:e4:69:12:1a:56:96:30:08:26:94:82:d8:53:1c:e5:42:95: 4c:92:cd:96:41:ca:5d:5d:9d:1b:05:91:29:b4:0d:2e:d1:bd: 95:7e:03:e2:19:da:c8:ea:fd:3e:b9:7d:0e:14:74:2c:0e:cb: 5b:13:eb:e8:95:3e:38:fc:c4:3f:8e:b6:e1:fd:dd:9d:b9:84: c9:6b:36:9e:90:fb:bf:0a:33:e6:6f:24:ae:60:8f:ed:cf:94: a1:5b:55:32:ea:e2:6a:a2:96:8e:ce:36:b5:db:25:6b:33:75: fd:66:f2:f2:40:58:f4:e5:99:23:ad:09:e9:e1:5a:a9:6d:cf: 5a:02:09:95 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUFyGjgmqJDJzISbs8QUeWQaPSz/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzRaFw0yNzA2MDcwMjIzMzRaMDMxMTAvBgNV BAMTKEMzMzUzRjE4QTY0M0JCQ0E1QTRCQ0ZEOUE3QjhBQTg4MEQ1MzhGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1Fesxy2ek4iB07KGdZVMxWER fgKv729tQ5yQFcYAfxb+NovNYapOHeElG86O1zi1wIm5Yd/wh3huHHD5o1mbQopX fxiWRIc3RECVvJGZgB6BXhXQfPBUjwgbWBqqSyqEgXCUPzJC170a77HG2p/j4l6n ZJFWPWwnh6CnLSxpaoncBwkOAPi/duWW45YM7wQLyjL36T2RYq3UtV8C9lHoa+mi HvoPvJm17Mv8gnjAp9hUzjtwPqTlwbutt9JbVGN5EBlJRX1e5Eiyuhq7PZmTw+hX Zf01SYyDTld9FRQQGbUK5tUFJEdQwtz56+Bf3fWWJ10aqXh3LlUPxixa8XTvAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUwzU/GKZDu8paS8/Zp7iqiA1Tj3wwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzQ4NDcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZgGCCsGAQUFBwEHAQH/BIGIMIGFMHQE AgABMG4DAwAqngMEBzpTgAMEBzuXAAMEBzu/AAMEAmf3qDAMAwQHeISAAwQHeIUA AwMBeIYDAwF8+jALAwMBtq4DBAS2r+ADAwG3VAMEBdJNgDAMAwQF02OgAwQF02PA MAsDAwDTlwMEBdOYAAMEBtOYQDANBAIAAjAHAwUAJAOiADANBgkqhkiG9w0BAQsF AAOCAQEArBSyWVkVTv+w1O1RQTUvlwSJreCerlobAzYhkn++DrEOUdEP8Fy3QxJH qUqg5ORtJraDz7px2FVWLEP7xBeQrlFFsi390WElvt2rdqLwpC2IG6xPccUMq7qm o+GqWWmBvYH87FAWTEIhmp4xaqGG8Bs0JTormR2SW/bkvWmpsuRpEhpWljAIJpSC 2FMc5UKVTJLNlkHKXV2dGwWRKbQNLtG9lX4D4hnayOr9Prl9DhR0LA7LWxPr6JU+ OPzEP4624f3dnbmEyWs2npD7vwoz5m8krmCP7c+UoVtVMuriaqKWjs42tdslazN1 /Wby8kBY9OWZI60J6eFaqW3PWgIJlQ== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:46 2026 by rpki-client