$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS4611.roa File: AS4611.roa (raw, json) Hash identifier: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM= Subject key identifier: E7:35:72:66:61:B1:B9:54:B4:A7:F1:0B:37:3A:4C:F4:BA:93:D9:38 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 4B7EF4FBAC0DDD23FA7B439C90569558FA81BBAD Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS4611.roa Signing time: Tue 26 May 2026 09:01:19 +0000 ROA not before: Tue 26 May 2026 08:56:19 +0000 ROA not after: Tue 25 May 2027 09:01:19 +0000 asID: 4611 IP address blocks: 202.108.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7e:f4:fb:ac:0d:dd:23:fa:7b:43:9c:90:56:95:58:fa:81:bb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 26 08:56:19 2026 GMT Not After : May 25 09:01:19 2027 GMT Subject: CN=E735726661B1B954B4A7F10B373A4CF4BA93D938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:da:ee:03:2e:42:80:c9:7c:fa:b1:fb:30: ba:51:4b:6d:9b:6b:e0:63:f6:a9:18:31:53:bc:dc: 17:a1:76:14:c2:8c:a9:02:8c:fb:a0:f2:68:7b:be: c9:8d:1c:a6:87:45:63:62:e0:26:e1:ce:ee:8f:97: 52:35:4d:01:2c:bd:59:f3:56:46:3b:b0:1f:44:40: c5:b2:7a:f2:7f:05:48:52:74:7a:c0:53:47:a0:a9: 3f:e3:30:af:a3:58:30:e4:f0:26:12:3b:71:9b:5c: 94:d4:f7:47:32:3d:be:7e:ca:b0:70:05:fb:47:c3: 31:d6:cf:13:6d:b4:cf:3e:73:a0:94:e4:7e:f7:10: 1b:28:b2:8d:1f:6d:93:cf:67:34:5a:0b:c4:ba:5d: 13:c1:f0:6c:32:4b:5f:de:4e:24:50:ef:b5:5d:16: d6:6d:a5:41:4a:e4:1f:ae:4f:55:71:4c:b3:01:fc: 75:23:5c:a9:18:d4:ec:fb:4e:10:34:15:c5:21:3d: 77:fb:6b:86:ac:0f:00:fe:3c:07:d0:5b:ce:0a:3d: 94:96:50:d2:02:12:a2:ac:88:69:e3:1c:2f:38:47: 7e:5e:d0:63:1c:0c:1d:6b:c9:0b:d1:92:73:ca:a6: 21:a1:84:38:20:a8:8a:c9:2d:ef:8e:bb:09:f8:74: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:72:66:61:B1:B9:54:B4:A7:F1:0B:37:3A:4C:F4:BA:93:D9:38 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS4611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.108.119.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:63:80:a6:2d:7b:2f:f8:f0:e3:fa:dc:84:7b:9a:71:09:de: e9:a4:bd:9a:51:87:79:f4:6d:31:6f:42:0b:a3:f1:8f:44:17: 26:5a:b8:64:4f:96:b0:d0:9c:c2:6a:dc:bc:a3:6f:37:9d:32: 37:6c:44:bc:06:2a:8f:89:1c:a5:55:38:b6:f2:9a:47:57:2e: 02:84:a0:e2:9d:89:69:87:99:6f:df:3b:ce:32:cb:1c:56:b1: 33:99:ab:65:c7:f3:6c:4d:fd:a4:bb:94:49:02:bd:37:46:11: be:1e:2f:c5:7f:a4:2a:81:09:23:70:84:53:5c:75:2d:ad:e1: 7b:d8:4a:ae:56:03:7f:b5:34:c7:9d:3c:ce:ea:a5:35:c3:d5: cd:44:ef:37:5a:8f:86:fc:cd:96:8e:4e:ff:bf:20:ac:d1:b4: f1:72:18:99:27:14:0d:77:be:f2:e7:2b:21:da:75:c4:34:1f: c4:e9:43:81:7e:20:08:68:56:f1:e3:d6:08:99:6e:b8:cc:de: 43:4e:6d:4b:e1:22:0c:ca:ce:13:14:f0:d9:94:e9:57:ac:dd: ad:b7:b8:b5:f4:5b:a4:06:23:4c:c9:46:c9:a5:1c:c7:3d:6b: 2f:9e:fb:d0:69:bb:9a:15:f2:9a:9b:6b:db:61:ba:95:0f:f1: 99:ca:a1:bd -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUS370+6wN3SP6e0OckFaVWPqBu60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUyNjA4NTYxOVoX DTI3MDUyNTA5MDExOVowMzExMC8GA1UEAxMoRTczNTcyNjY2MUIxQjk1NEI0QTdG MTBCMzczQTRDRjRCQTkzRDkzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMu02u4DLkKAyXz6sfswulFLbZtr4GP2qRgxU7zcF6F2FMKMqQKM+6DyaHu+ yY0cpodFY2LgJuHO7o+XUjVNASy9WfNWRjuwH0RAxbJ68n8FSFJ0esBTR6CpP+Mw r6NYMOTwJhI7cZtclNT3RzI9vn7KsHAF+0fDMdbPE220zz5zoJTkfvcQGyiyjR9t k89nNFoLxLpdE8HwbDJLX95OJFDvtV0W1m2lQUrkH65PVXFMswH8dSNcqRjU7PtO EDQVxSE9d/trhqwPAP48B9Bbzgo9lJZQ0gISoqyIaeMcLzhHfl7QYxwMHWvJC9GS c8qmIaGEOCCoiskt7467Cfh0MXECAwEAAaOCAeIwggHeMB0GA1UdDgQWBBTnNXJm YbG5VLSn8Qs3Okz0upPZODAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTNDYxMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpsdzANBgkqhkiG9w0BAQsFAAOC AQEAXGOApi17L/jw4/rchHuacQne6aS9mlGHefRtMW9CC6Pxj0QXJlq4ZE+WsNCc wmrcvKNvN50yN2xEvAYqj4kcpVU4tvKaR1cuAoSg4p2JaYeZb987zjLLHFaxM5mr ZcfzbE39pLuUSQK9N0YRvh4vxX+kKoEJI3CEU1x1La3he9hKrlYDf7U0x508zuql NcPVzUTvN1qPhvzNlo5O/78grNG08XIYmScUDXe+8ucrIdp1xDQfxOlDgX4gCGhW 8ePWCJluuMzeQ05tS+EiDMrOExTw2ZTpV6zdrbe4tfRbpAYjTMlGyaUcxz1rL577 0Gm7mhXymptr22G6lQ/xmcqhvQ== -----END CERTIFICATE-----Generated at Sat May 30 00:41:30 2026 by rpki-client