$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9808.roa File: AS9808.roa (raw, json) Hash identifier: ye6ywKwRv1nK66VqHE0/0lZ6g+5XsJsrvu3apxrl808= Subject key identifier: E3:F1:89:62:B0:C1:DE:E9:DF:32:35:8B:A8:78:1F:0A:30:A5:DB:55 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 3412D953C255B67206D06CD0C2A2F181667CD74F Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9808.roa Signing time: Mon 18 May 2026 03:20:37 +0000 ROA not before: Mon 18 May 2026 03:15:37 +0000 ROA not after: Mon 17 May 2027 03:20:37 +0000 asID: 9808 IP address blocks: 42.158.0.0/16 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:d9:53:c2:55:b6:72:06:d0:6c:d0:c2:a2:f1:81:66:7c:d7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:15:37 2026 GMT Not After : May 17 03:20:37 2027 GMT Subject: CN=E3F18962B0C1DEE9DF32358BA8781F0A30A5DB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:b1:0b:1e:c7:dd:53:d5:05:04:86:87:25: 8c:de:bc:2c:81:e7:2a:ea:3a:62:25:65:ff:38:d8: 4d:c2:be:14:29:64:5f:c0:96:a1:4f:7c:25:ab:7f: f9:b5:d3:2d:6c:4b:22:f1:06:36:51:1e:28:84:9e: 6f:2c:0e:04:53:fb:82:1c:28:5d:ce:be:fe:cb:cb: b8:4d:19:dc:f7:91:96:e7:d4:bf:e1:53:42:06:57: 4c:61:b1:13:e6:f2:4f:ff:49:a4:dc:4d:26:a9:2d: 10:a5:2e:fc:19:6f:fb:f7:e6:bb:0f:f7:7e:89:40: 38:07:cd:da:7a:c7:3c:33:e0:f9:1f:ce:fe:94:5f: f1:79:3b:27:59:fc:ad:f8:e9:30:cd:d4:ca:77:44: 71:6f:e9:17:66:48:8d:5f:4f:61:c3:50:ee:37:fd: 41:d0:d8:fc:53:9b:7e:8f:9e:06:9d:be:36:85:17: 73:c6:b5:56:e1:05:90:08:1f:a0:2c:67:8a:29:6b: dd:82:fe:7b:4b:8a:ab:6e:d2:6f:32:9b:73:8c:b1: 51:40:fe:e5:5e:78:a2:a4:e9:6b:cb:4f:6f:4f:5a: 03:e4:a4:b3:9c:37:93:ca:c3:22:2b:0f:9e:3a:95: 24:de:30:97:14:0d:f2:43:13:aa:94:90:ef:98:31: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:89:62:B0:C1:DE:E9:DF:32:35:8B:A8:78:1F:0A:30:A5:DB:55 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 Signature Algorithm: sha256WithRSAEncryption 1d:43:0e:2d:79:5d:e0:81:88:4d:0c:12:6f:93:09:a4:61:49: 21:7d:b1:0f:fa:a8:ec:ff:94:60:05:f7:61:38:31:a5:73:30: f8:ef:54:7b:49:21:e1:fa:07:e6:01:b4:ad:c7:73:07:ee:be: d8:55:d7:64:36:53:b0:35:7a:a3:46:b7:b3:99:d7:60:2e:73: e8:9d:ca:92:71:0d:2b:22:f2:53:c0:56:f0:26:6f:c9:1f:27: 94:df:f3:7a:e2:99:47:4b:7f:7f:ed:55:b6:3c:5a:40:c4:33: a7:13:e6:59:d2:0d:ba:42:6d:b3:fd:39:7b:ee:f5:22:77:74: 84:3c:aa:c2:f1:bd:c3:cf:23:d1:48:f5:6c:a5:e1:0e:15:28: a0:ab:e1:aa:9a:9e:12:d8:8a:3b:32:fd:7c:33:f6:98:9b:8a: 2a:d1:cb:02:2c:69:fa:63:c9:ae:2f:68:4a:43:69:9b:1f:d2: 03:25:58:1b:0d:8a:5b:9e:5f:50:c8:df:28:30:43:8f:9a:a6: 87:88:82:1f:e7:9d:75:70:1e:dc:65:75:93:05:d8:3e:1a:4b: aa:ce:78:55:45:d2:b6:47:b1:50:98:5f:3f:72:7c:4a:71:be: a7:bc:de:f1:3f:85:2f:b7:d1:61:e2:74:ea:57:c6:10:96:a8: ba:fc:eb:4d -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUNBLZU8JVtnIG0GzQwqLxgWZ8108wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzE1MzdaFw0yNzA1MTcwMzIwMzdaMDMxMTAvBgNV BAMTKEUzRjE4OTYyQjBDMURFRTlERjMyMzU4QkE4NzgxRjBBMzBBNURCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvrELHsfdU9UFBIaHJYzevCyB 5yrqOmIlZf842E3CvhQpZF/AlqFPfCWrf/m10y1sSyLxBjZRHiiEnm8sDgRT+4Ic KF3Ovv7Ly7hNGdz3kZbn1L/hU0IGV0xhsRPm8k//SaTcTSapLRClLvwZb/v35rsP 936JQDgHzdp6xzwz4Pkfzv6UX/F5OydZ/K346TDN1Mp3RHFv6RdmSI1fT2HDUO43 /UHQ2PxTm36PngadvjaFF3PGtVbhBZAIH6AsZ4opa92C/ntLiqtu0m8ym3OMsVFA /uVeeKKk6WvLT29PWgPkpLOcN5PKwyIrD546lSTeMJcUDfJDE6qUkO+YMf+LAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU4/GJYrDB3unfMjWLqHgfCjCl21UwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzk4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYcGCCsGAQUFBwEHAQH/BHgwdjB0BAIA ATBuAwMAKp4DBAc7lwADBAc7vwADBAJn96gwDAMEB3iEgAMEB3iFAAMDAXiGAwMB fPowCwMDAbauAwQEtq/gAwMBt1QDBAPLxAADBAXSTYAwDAMEBdNjoAMEBdNjwDAL AwMA05cDBAXTmAADBAbTmEAwDQYJKoZIhvcNAQELBQADggEBAB1DDi15XeCBiE0M Em+TCaRhSSF9sQ/6qOz/lGAF92E4MaVzMPjvVHtJIeH6B+YBtK3HcwfuvthV12Q2 U7A1eqNGt7OZ12Auc+idypJxDSsi8lPAVvAmb8kfJ5Tf83rimUdLf3/tVbY8WkDE M6cT5lnSDbpCbbP9OXvu9SJ3dIQ8qsLxvcPPI9FI9Wyl4Q4VKKCr4aqanhLYijsy /Xwz9pibiirRywIsafpjya4vaEpDaZsf0gMlWBsNilueX1DI3ygwQ4+apoeIgh/n nXVwHtxldZMF2D4aS6rOeFVF0rZHsVCYXz9yfEpxvqe83vE/hS+30WHidOpXxhCW qLr8600= -----END CERTIFICATE-----Generated at Sat May 30 00:41:30 2026 by rpki-client