$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS4809.roa File: AS4809.roa (raw, json) Hash identifier: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4= Subject key identifier: 9F:E2:53:52:B8:7D:F6:D3:37:EE:EC:FF:FC:7D:09:CA:B7:3A:BF:95 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 0EB597DD9DCB7C006F8C6AB3FBBF846B45000812 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS4809.roa Signing time: Tue 16 Jun 2026 17:54:06 +0000 ROA not before: Tue 16 Jun 2026 17:49:06 +0000 ROA not after: Tue 15 Jun 2027 17:54:06 +0000 asID: 4809 IP address blocks: 144.7.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b5:97:dd:9d:cb:7c:00:6f:8c:6a:b3:fb:bf:84:6b:45:00:08:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 16 17:49:06 2026 GMT Not After : Jun 15 17:54:06 2027 GMT Subject: CN=9FE25352B87DF6D337EEECFFFC7D09CAB73ABF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:7f:e9:71:4f:b0:ff:4e:23:bd:18:cc:cc: b9:7d:d6:89:da:e7:13:6c:97:32:c2:9c:60:da:16: f3:f6:59:60:79:5d:1d:6a:c0:f6:62:bf:93:5e:9e: 00:f7:3f:6c:66:cb:59:9e:ed:b1:1d:c3:3b:54:3a: 8e:27:d4:95:65:6e:fe:74:96:76:58:28:80:d1:56: fc:ab:b0:35:c2:35:15:9d:aa:0b:05:d5:c6:e9:d8: 81:03:86:1d:22:83:d1:ad:84:2e:94:68:4d:dc:1a: 6a:3c:ae:c5:a5:d9:74:4b:88:b0:bb:d0:13:a3:88: ed:83:04:27:82:12:1e:4d:7b:38:70:cf:f7:9f:b9: a9:0a:b8:01:fd:94:f4:00:bc:71:05:0b:17:82:5e: c4:52:e3:f2:14:7b:21:26:85:56:aa:15:66:53:9a: 92:06:cb:8f:f0:51:b4:9d:57:ab:3d:67:26:d8:23: b9:6f:9a:b2:51:f3:e2:23:e1:26:58:b0:2d:a3:54: 11:7e:83:ea:01:09:dd:44:8f:c4:5a:0b:67:1d:0d: fd:b8:a7:03:a4:4f:6e:bb:e4:10:1f:1a:9f:de:7f: e8:f0:e8:04:47:7b:a7:bb:74:03:6f:d4:56:bb:06: 12:70:43:09:54:22:34:bd:65:33:ec:c2:c0:78:b5: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E2:53:52:B8:7D:F6:D3:37:EE:EC:FF:FC:7D:09:CA:B7:3A:BF:95 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS4809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.7.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:28:b3:e3:bc:b5:81:68:a4:29:7d:93:96:19:d1:ef:49:3d: 43:d5:7e:e2:ac:7c:ae:05:1c:21:82:d0:6e:23:59:3c:b0:36: 5a:7a:e5:dc:bc:d8:c3:e2:40:81:ad:9e:44:d0:c1:c7:23:a4: c5:52:08:27:f1:7d:0b:7c:ba:62:e7:50:d2:bf:e8:13:04:31: d3:ae:8c:1b:e0:02:50:fc:9f:1b:4b:02:a7:03:1f:16:df:0b: 72:61:0b:02:f7:04:37:08:53:0d:0c:9d:5c:c0:31:7e:d2:9f: de:ce:48:80:a5:3c:42:c1:25:d6:34:aa:d7:47:3c:8f:ee:a8: 37:92:61:18:4f:2e:81:9e:f2:ae:05:5b:c9:14:39:5e:3b:d4: dc:95:d1:48:7f:d9:9b:c6:78:a3:13:71:6c:0a:d1:21:6a:1c: 2a:3d:94:ef:5f:77:1c:f6:d3:e2:03:9a:7c:15:0f:5d:e1:80: a0:9c:fd:bd:c3:f9:a7:25:ce:42:4d:c7:68:d4:4f:36:65:97: 86:d1:16:2b:95:c9:de:44:cd:11:6e:7a:4a:2a:01:21:1e:c2: 82:bf:db:87:e2:69:02:13:bf:77:c9:ec:ae:0d:fa:68:9f:29: 93:79:16:35:60:cd:6c:81:15:a2:9a:6f:b2:72:c3:f8:f2:3d: 0c:bb:26:92 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUDrWX3Z3LfABvjGqz+7+Ea0UACBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNloX DTI3MDYxNTE3NTQwNlowMzExMC8GA1UEAxMoOUZFMjUzNTJCODdERjZEMzM3RUVF Q0ZGRkM3RDA5Q0FCNzNBQkY5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7zf+lxT7D/TiO9GMzMuX3WidrnE2yXMsKcYNoW8/ZZYHldHWrA9mK/k16e APc/bGbLWZ7tsR3DO1Q6jifUlWVu/nSWdlgogNFW/KuwNcI1FZ2qCwXVxunYgQOG HSKD0a2ELpRoTdwaajyuxaXZdEuIsLvQE6OI7YMEJ4ISHk17OHDP95+5qQq4Af2U 9AC8cQULF4JexFLj8hR7ISaFVqoVZlOakgbLj/BRtJ1Xqz1nJtgjuW+aslHz4iPh JliwLaNUEX6D6gEJ3USPxFoLZx0N/binA6RPbrvkEB8an95/6PDoBEd7p7t0A2/U VrsGEnBDCVQiNL1lM+zCwHi1pukCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBSf4lNS uH320zfu7P/8fQnKtzq/lTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wL0FTNDgwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApAHADANBgkqhkiG9w0BAQsFAAOC AQEALyiz47y1gWikKX2TlhnR70k9Q9V+4qx8rgUcIYLQbiNZPLA2Wnrl3LzYw+JA ga2eRNDBxyOkxVIIJ/F9C3y6YudQ0r/oEwQx066MG+ACUPyfG0sCpwMfFt8LcmEL AvcENwhTDQydXMAxftKf3s5IgKU8QsEl1jSq10c8j+6oN5JhGE8ugZ7yrgVbyRQ5 XjvU3JXRSH/Zm8Z4oxNxbArRIWocKj2U7193HPbT4gOafBUPXeGAoJz9vcP5pyXO Qk3HaNRPNmWXhtEWK5XJ3kTNEW56SioBIR7Cgr/bh+JpAhO/d8nsrg36aJ8pk3kW NWDNbIEVoppvsnLD+PI9DLsmkg== -----END CERTIFICATE-----Generated at Wed Jul 15 00:54:38 2026 by rpki-client