$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS9811.roa File: AS9811.roa (raw, json) Hash identifier: iYZ5GcgY6k3QKJIThMRgNbaCPaW5ynhbDcXLMlvYgWU= Subject key identifier: 98:E3:1C:7B:E5:0C:7C:D1:20:BD:17:71:7F:67:9B:BB:CD:3F:9E:BC Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 4AEAD239917CF20E09E0BFD7364B461CC562ACD3 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS9811.roa Signing time: Fri 14 Aug 2026 08:06:56 +0000 ROA not before: Fri 14 Aug 2026 08:01:56 +0000 ROA not after: Fri 13 Aug 2027 08:06:56 +0000 asID: 9811 IP address blocks: 202.106.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 03:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ea:d2:39:91:7c:f2:0e:09:e0:bf:d7:36:4b:46:1c:c5:62:ac:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: Aug 14 08:01:56 2026 GMT Not After : Aug 13 08:06:56 2027 GMT Subject: CN=98E31C7BE50C7CD120BD17717F679BBBCD3F9EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:04:32:f1:bf:87:3e:6c:35:2b:f9:13:e3: 68:5d:fb:d9:1a:12:97:6e:0d:0a:80:71:08:ed:4c: 7c:fe:0a:c1:f7:cf:eb:d6:d6:e1:ca:fb:a4:86:de: ae:ad:30:35:fe:02:a8:51:94:81:fb:eb:fb:56:f5: b2:00:d4:b3:63:32:7c:9c:73:2a:c9:b1:5f:a7:52: 29:a8:7c:c7:5d:0a:7a:13:28:8c:b2:bb:0a:22:3e: 5c:18:3c:b6:79:0d:17:ee:c7:0f:bd:a0:eb:93:31: 05:a6:78:a2:cc:44:82:e0:da:64:ee:dd:41:06:67: 0f:6d:1d:66:23:e7:40:ff:1c:da:f9:40:12:bf:e5: f3:f7:d0:3b:f6:a8:24:dd:ba:90:49:d4:c7:c4:14: 6c:ff:2e:e4:54:ac:40:e8:4d:36:ce:76:67:45:18: 08:ec:19:88:d3:ab:ba:a8:74:96:c9:47:e4:93:04: 82:f3:33:d9:d7:2f:ba:95:3a:c2:42:9a:2c:aa:26: 8a:a7:5a:89:ca:19:f0:7c:69:9d:97:02:ca:91:c1: d3:57:cb:26:97:d5:5f:b3:05:da:68:fd:cb:97:97: c6:75:6b:ac:b6:c3:f1:69:b4:2b:14:08:43:92:0f: 7b:56:de:83:48:49:62:7c:70:e4:d2:ca:00:e4:ba: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:1C:7B:E5:0C:7C:D1:20:BD:17:71:7F:67:9B:BB:CD:3F:9E:BC X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS9811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.106.127.0/24 Signature Algorithm: sha256WithRSAEncryption 11:c6:d8:f3:c5:03:a8:13:98:1c:77:56:08:fb:6f:a8:c9:a6: c6:89:5f:5d:cf:11:29:2d:0e:c4:88:5e:a8:cd:91:64:4e:ec: 82:8a:a5:80:10:f4:b1:83:67:7c:8a:40:ee:18:62:b8:54:bc: da:0a:af:d9:76:00:02:59:27:4c:36:dc:d0:3e:52:d8:66:25: 24:37:75:46:fa:61:09:a8:a8:3b:12:c7:73:bd:26:bc:e1:21: 8b:5e:47:55:c8:d7:59:0a:93:04:1f:58:90:10:bd:5c:08:b8: 23:ed:5f:e5:08:cf:51:19:74:c7:c7:96:98:26:dc:5c:db:b2: f6:8a:45:d2:03:0a:28:10:86:65:e7:b1:88:12:cd:9b:22:f7: 59:b4:dd:c2:74:2a:2d:23:cb:72:49:10:ea:36:db:5b:d8:77: ab:0e:d8:38:4c:cc:42:06:83:8c:00:18:7e:98:93:f9:f6:4c: 1b:98:73:5b:93:fc:2e:24:b2:fb:de:fc:4d:85:38:15:4a:d1: 0c:22:fd:91:e1:95:4e:67:71:ff:49:45:26:64:78:db:78:55: df:5d:01:ee:50:7a:5c:62:e6:ce:42:91:0a:ce:90:88:1b:4e: ed:fe:15:b5:88:0e:5b:41:f2:60:ef:4b:0a:24:b8:90:ca:3e: 48:f4:73:43 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUSurSOZF88g4J4L/XNktGHMVirNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDgxNDA4MDE1NloX DTI3MDgxMzA4MDY1NlowMzExMC8GA1UEAxMoOThFMzFDN0JFNTBDN0NEMTIwQkQx NzcxN0Y2NzlCQkJDRDNGOUVCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdABDLxv4c+bDUr+RPjaF372RoSl24NCoBxCO1MfP4KwffP69bW4cr7pIbe rq0wNf4CqFGUgfvr+1b1sgDUs2MyfJxzKsmxX6dSKah8x10KehMojLK7CiI+XBg8 tnkNF+7HD72g65MxBaZ4osxEguDaZO7dQQZnD20dZiPnQP8c2vlAEr/l8/fQO/ao JN26kEnUx8QUbP8u5FSsQOhNNs52Z0UYCOwZiNOruqh0lslH5JMEgvMz2dcvupU6 wkKaLKomiqdaicoZ8HxpnZcCypHB01fLJpfVX7MF2mj9y5eXxnVrrLbD8Wm0KxQI Q5IPe1beg0hJYnxw5NLKAOS6ygsCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBSY4xx7 5Qx80SC9F3F/Z5u7zT+evDAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTOTgxMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpqfzANBgkqhkiG9w0BAQsFAAOC AQEAEcbY88UDqBOYHHdWCPtvqMmmxolfXc8RKS0OxIheqM2RZE7sgoqlgBD0sYNn fIpA7hhiuFS82gqv2XYAAlknTDbc0D5S2GYlJDd1RvphCaioOxLHc70mvOEhi15H VcjXWQqTBB9YkBC9XAi4I+1f5QjPURl0x8eWmCbcXNuy9opF0gMKKBCGZeexiBLN myL3WbTdwnQqLSPLckkQ6jbbW9h3qw7YOEzMQgaDjAAYfpiT+fZMG5hzW5P8LiSy +978TYU4FUrRDCL9keGVTmdx/0lFJmR423hV310B7lB6XGLmzkKRCs6QiBtO7f4V tYgOW0HyYO9LCiS4kMo+SPRzQw== -----END CERTIFICATE-----Generated at Sat Aug 22 06:52:08 2026 by rpki-client