$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: zHaMAYve+2PCnEtXqQ8K96TcAw9reFXkvjJIWnT3c5A= Subject key identifier: EA:77:9C:76:B5:3C:3D:16:45:CC:D3:FD:2A:38:CA:71:15:52:C5:77 Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 0A6040BDD10B0A5C4E27EB267390AC06C966B0CB Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS4837.roa Signing time: Fri 05 Jun 2026 06:31:05 +0000 ROA not before: Fri 05 Jun 2026 06:26:05 +0000 ROA not after: Fri 04 Jun 2027 06:31:05 +0000 asID: 4837 IP address blocks: 139.170.0.0/16 maxlen: 16 139.208.0.0/13 maxlen: 13 157.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:60:40:bd:d1:0b:0a:5c:4e:27:eb:26:73:90:ac:06:c9:66:b0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: Jun 5 06:26:05 2026 GMT Not After : Jun 4 06:31:05 2027 GMT Subject: CN=EA779C76B53C3D1645CCD3FD2A38CA711552C577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:b9:3d:4c:c3:d6:66:fc:28:dd:0c:38:fd: 37:6b:af:eb:9b:2f:d5:8a:a0:00:80:c1:30:dc:e4: e3:fb:4c:23:52:4d:9f:70:28:86:f7:e6:bc:93:07: c9:18:67:96:92:ab:bf:52:95:73:a8:6e:84:97:b2: 19:45:f3:57:72:3f:42:a5:20:bb:0b:12:a4:b4:2a: ae:a2:11:5b:95:c3:66:96:93:14:eb:bd:a6:fc:cf: 28:5f:79:07:c7:36:b4:04:b2:17:8d:1a:9b:e1:7f: 06:75:53:32:51:61:11:51:de:c4:5a:ba:bb:56:25: 7c:da:70:ef:25:fb:79:69:8d:9d:14:cf:d5:a1:c1: d0:40:61:06:ac:5d:02:c6:6e:70:24:9b:00:6e:36: 3c:c8:fd:74:b0:1c:1c:db:2b:7a:59:5e:c6:5e:4d: 83:b6:b2:9e:50:92:00:27:82:5a:67:55:61:d7:e5: 2f:1d:4c:06:62:25:de:3f:47:bb:7e:91:eb:9c:df: 08:40:79:a5:10:d9:4a:51:81:bb:a0:43:78:e6:da: 82:85:a5:06:2c:62:c5:80:7a:11:56:91:06:da:d9: c4:1f:a1:78:db:74:c2:a3:92:8f:6f:d1:e8:c4:05: ab:b5:2e:0a:3e:55:8f:c4:1a:41:92:fc:51:62:2a: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:77:9C:76:B5:3C:3D:16:45:CC:D3:FD:2A:38:CA:71:15:52:C5:77 X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.170.0.0/16 139.208.0.0/13 157.0.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:01:11:b8:ae:43:11:8a:f0:6e:fd:6c:f1:78:c8:e7:59:fc: 54:47:05:bd:49:2d:a8:0e:cf:9e:71:c8:96:55:dc:64:3d:52: a3:c6:cb:76:19:ff:ad:5c:de:27:6c:3c:1d:b7:8d:1b:2a:14: e3:10:6f:d0:da:12:32:ee:a5:fc:63:d9:5d:83:94:58:0d:39: b2:2b:d2:8d:de:cb:2a:bb:96:39:85:b0:0c:fb:49:be:4d:1e: 61:4e:37:d0:24:d1:79:75:ac:5b:28:48:27:58:42:07:53:7a: f2:cf:f6:4d:ed:c3:28:e4:87:f7:7a:b7:e0:4a:9c:da:6c:5e: e1:b7:64:e8:fe:e0:a7:9b:c9:d8:1a:73:d2:68:bd:91:ca:3b: 9f:b5:90:8c:ea:b7:aa:26:61:fa:6a:d7:c2:e6:ba:d5:6f:7d: a9:f2:fe:3e:4c:80:2c:d2:33:48:a0:33:2d:09:7d:0d:de:82: 24:79:81:ba:d9:75:f8:0f:0f:9a:92:9f:18:97:d3:29:9d:6d: 17:20:98:40:59:5b:19:29:cd:2e:a5:15:a8:a3:9f:a1:fe:12: c8:97:06:bd:ab:dd:91:a7:45:c5:69:16:46:74:91:9f:6c:cb: 22:8d:b6:9a:d5:83:ec:6b:b3:02:ce:92:b4:48:7d:0c:8a:5b: 01:68:6e:44 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUCmBAvdELClxOJ+smc5CsBslmsMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDYwNTA2MjYwNVoX DTI3MDYwNDA2MzEwNVowMzExMC8GA1UEAxMoRUE3NzlDNzZCNTNDM0QxNjQ1Q0NE M0ZEMkEzOENBNzExNTUyQzU3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKu9uT1Mw9Zm/CjdDDj9N2uv65sv1YqgAIDBMNzk4/tMI1JNn3AohvfmvJMH yRhnlpKrv1KVc6huhJeyGUXzV3I/QqUguwsSpLQqrqIRW5XDZpaTFOu9pvzPKF95 B8c2tASyF40am+F/BnVTMlFhEVHexFq6u1YlfNpw7yX7eWmNnRTP1aHB0EBhBqxd AsZucCSbAG42PMj9dLAcHNsrellexl5Ng7aynlCSACeCWmdVYdflLx1MBmIl3j9H u36R65zfCEB5pRDZSlGBu6BDeObagoWlBixixYB6EVaRBtrZxB+heNt0wqOSj2/R 6MQFq7UuCj5Vj8QaQZL8UWIqAQECAwEAAaOCAeswggHnMB0GA1UdDgQWBBTqd5x2 tTw9FkXM0/0qOMpxFVLFdzAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8wL0FTNDgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAo BggrBgEFBQcBBwEB/wQZMBcwFQQCAAEwDwMDAIuqAwMDi9ADAwCdADANBgkqhkiG 9w0BAQsFAAOCAQEAbgERuK5DEYrwbv1s8XjI51n8VEcFvUktqA7PnnHIllXcZD1S o8bLdhn/rVzeJ2w8HbeNGyoU4xBv0NoSMu6l/GPZXYOUWA05sivSjd7LKruWOYWw DPtJvk0eYU430CTReXWsWyhIJ1hCB1N68s/2Te3DKOSH93q34Eqc2mxe4bdk6P7g p5vJ2Bpz0mi9kco7n7WQjOq3qiZh+mrXwua61W99qfL+PkyALNIzSKAzLQl9Dd6C JHmButl1+A8PmpKfGJfTKZ1tFyCYQFlbGSnNLqUVqKOfof4SyJcGvavdkadFxWkW RnSRn2zLIo22mtWD7GuzAs6StEh9DIpbAWhuRA== -----END CERTIFICATE-----Generated at Fri Jun 12 06:42:24 2026 by rpki-client