$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE= Subject key identifier: 2F:3F:78:15:2E:AB:00:85:59:B6:71:1A:66:A3:25:93:D4:7A:DF:FB Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 7F05CD8CEF85D2E90D13B898C9B839E347E5359F Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS4837.roa Signing time: Mon 20 Apr 2026 05:05:15 +0000 ROA not before: Mon 20 Apr 2026 05:00:15 +0000 ROA not after: Mon 19 Apr 2027 05:05:15 +0000 asID: 4837 IP address blocks: 103.40.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:05:cd:8c:ef:85:d2:e9:0d:13:b8:98:c9:b8:39:e3:47:e5:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 20 05:00:15 2026 GMT Not After : Apr 19 05:05:15 2027 GMT Subject: CN=2F3F78152EAB008559B6711A66A32593D47ADFFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:3b:15:ae:75:dd:cc:4f:78:cb:ad:15:95: d4:ab:ae:4b:f6:81:4c:6e:58:27:2b:13:bf:e3:55: 0c:73:4a:96:9e:04:7b:25:16:5c:41:a8:4b:ad:fa: c8:b4:31:52:83:bf:af:73:0d:3d:63:3a:c5:4f:bd: 23:7f:df:98:3f:9e:59:6f:8c:33:bc:07:95:32:10: 07:b6:44:30:ea:88:d4:96:aa:d3:3c:11:6b:12:cc: 2f:3a:44:62:7f:fa:a6:41:93:4b:95:ef:fa:62:36: 53:a9:38:19:1c:df:d4:c8:c7:2b:92:7d:02:5c:14: 94:bf:67:c0:93:3b:e7:92:38:a8:aa:b3:74:1c:bd: 28:93:1a:aa:c5:08:8f:da:89:0a:fb:34:02:f5:d3: 3e:18:7a:50:78:0c:1f:b2:96:db:2e:f3:39:5f:9c: 20:ca:51:a8:a4:d9:5b:09:54:cd:89:00:d7:b8:98: 3a:3e:26:39:23:e7:b2:2f:01:b9:ac:ee:d4:a4:54: cf:75:4a:14:1a:60:9a:0e:02:c5:93:4a:1e:e5:ad: ac:6e:3d:f6:75:d0:6d:54:cf:a3:8f:8c:c9:c9:ff: e2:02:0e:34:57:59:e6:ee:71:cf:71:1a:f1:37:3f: 6b:de:3f:2b:ab:ca:31:a0:8a:2d:8b:19:cd:67:a6: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:78:15:2E:AB:00:85:59:B6:71:1A:66:A3:25:93:D4:7A:DF:FB X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.232.0/22 Signature Algorithm: sha256WithRSAEncryption 29:f5:7f:76:09:97:ea:22:c6:dc:07:e4:68:10:73:e0:75:4c: cc:26:d8:f9:92:a0:9e:d2:b7:d7:2e:9b:58:9a:f0:ce:83:7b: db:6d:92:42:92:1a:6a:d3:ad:d7:4b:03:67:13:45:60:72:62: 65:a3:bf:5d:09:44:7b:9e:d2:71:68:4a:09:74:b0:b6:1d:fc: 23:da:73:7a:6a:b6:c5:e8:15:6c:27:c3:92:e0:88:65:7b:9d: e3:8e:0a:46:0f:cf:90:0a:ca:e4:b0:8e:e3:83:a3:a5:e8:03: ae:52:00:16:4c:96:47:5a:13:4f:dc:82:f7:90:63:ee:72:dc: 6f:61:f3:96:cc:4b:f4:79:ce:b6:fb:63:43:62:46:d0:3e:35: a6:48:8d:63:99:0b:65:5c:f3:97:d8:58:75:9f:5c:41:32:a0: eb:84:b2:5c:ca:38:9a:bf:b0:80:72:b8:10:6c:f1:5b:6c:b9: af:eb:d0:3f:a5:1e:42:c5:83:63:05:08:bf:47:1d:1f:dc:3b: 4f:93:d9:dc:6e:e4:62:0e:80:40:d9:59:58:79:50:97:fc:f6: c9:c4:9a:b4:41:82:01:21:03:32:e0:be:22:a1:dd:9f:d9:af: 25:01:f6:1a:49:dc:b8:4f:6b:c8:bf:15:e8:84:f7:69:ca:ca: 5e:18:d5:bf -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUfwXNjO+F0ukNE7iYybg540flNZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MjAwNTAwMTVaFw0yNzA0MTkwNTA1MTVaMDMxMTAvBgNV BAMTKDJGM0Y3ODE1MkVBQjAwODU1OUI2NzExQTY2QTMyNTkzRDQ3QURGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JzsVrnXdzE94y60VldSrrkv2 gUxuWCcrE7/jVQxzSpaeBHslFlxBqEut+si0MVKDv69zDT1jOsVPvSN/35g/nllv jDO8B5UyEAe2RDDqiNSWqtM8EWsSzC86RGJ/+qZBk0uV7/piNlOpOBkc39TIxyuS fQJcFJS/Z8CTO+eSOKiqs3QcvSiTGqrFCI/aiQr7NAL10z4YelB4DB+yltsu8zlf nCDKUaik2VsJVM2JANe4mDo+Jjkj57IvAbms7tSkVM91ShQaYJoOAsWTSh7lraxu PfZ10G1Uz6OPjMnJ/+ICDjRXWebucc9xGvE3P2vePyuryjGgii2LGc1nplv5AgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQULz94FS6rAIVZtnEaZqMlk9R63/swHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnKOgwDQYJKoZIhvcNAQELBQADggEBACn1f3YJl+oixtwH5GgQc+B1TMwm 2PmSoJ7St9cum1ia8M6De9ttkkKSGmrTrddLA2cTRWByYmWjv10JRHue0nFoSgl0 sLYd/CPac3pqtsXoFWwnw5LgiGV7neOOCkYPz5AKyuSwjuODo6XoA65SABZMlkda E0/cgveQY+5y3G9h85bMS/R5zrb7Y0NiRtA+NaZIjWOZC2Vc85fYWHWfXEEyoOuE slzKOJq/sIByuBBs8Vtsua/r0D+lHkLFg2MFCL9HHR/cO0+T2dxu5GIOgEDZWVh5 UJf89snEmrRBggEhAzLgviKh3Z/ZryUB9hpJ3LhPa8i/FeiE92nKyl4Y1b8= -----END CERTIFICATE-----Generated at Mon Apr 20 15:01:55 2026 by rpki-client