$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4813.roa File: AS4813.roa (raw, json) Hash identifier: uZJL1JdmTFsLUlxoBHhYev3Xd/ZYoYVsUYDENbYanHo= Subject key identifier: E0:02:ED:D1:E4:13:F3:8E:47:3B:6F:19:CE:E8:04:F3:B5:98:B5:56 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 316AC9B024138FD1C082B92B17B1DB4433DE693A Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4813.roa Signing time: Tue 26 May 2026 17:34:21 +0000 ROA not before: Tue 26 May 2026 17:29:21 +0000 ROA not after: Tue 25 May 2027 17:34:21 +0000 asID: 4813 IP address blocks: 14.22.56.0/22 maxlen: 22 14.22.60.0/22 maxlen: 22 14.22.64.0/23 maxlen: 23 240e:982:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6a:c9:b0:24:13:8f:d1:c0:82:b9:2b:17:b1:db:44:33:de:69:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 17:29:21 2026 GMT Not After : May 25 17:34:21 2027 GMT Subject: CN=E002EDD1E413F38E473B6F19CEE804F3B598B556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:3f:8d:2a:ef:be:bd:42:9b:12:37:17:d1: d0:96:16:9f:4f:23:8f:e4:3f:20:e8:68:1b:ac:f2: 97:77:b0:f9:93:f8:87:46:aa:fc:1e:bb:2a:8b:fb: 3d:0c:9d:55:0a:ad:15:61:67:3b:1b:8e:3e:96:54: 4a:dd:03:7e:84:c5:48:41:c3:5c:4c:b5:f6:95:ca: db:d5:87:06:8f:78:aa:67:24:2d:c6:dc:42:54:e2: 76:37:47:4e:9f:e6:90:dc:e8:9f:fc:d8:75:96:49: 3e:2b:d8:76:56:9d:50:3a:ea:71:36:1a:46:04:20: 4f:7f:16:3a:32:d4:6b:9f:a2:25:79:3a:45:74:4f: 9a:31:10:44:a7:a2:7b:db:ba:df:64:67:31:da:f5: 3e:5e:e3:b1:8e:9e:a7:fd:27:f0:ef:70:3e:cc:b1: 09:07:e6:ce:c3:5d:08:fc:da:38:cc:a8:83:da:9f: cd:50:c5:f2:c8:b6:0d:b8:71:cf:8e:b8:b5:d8:c6: d6:f6:83:1b:be:4e:64:d3:72:38:81:ab:86:b8:e6: 7a:23:e0:9a:9a:60:01:bb:ca:aa:06:f6:6b:40:b3: e2:d4:41:46:2e:3b:6d:f8:36:de:f2:c5:b5:03:6f: 1f:e9:e0:f7:31:e8:41:40:91:e2:dd:1b:67:95:b2: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:ED:D1:E4:13:F3:8E:47:3B:6F:19:CE:E8:04:F3:B5:98:B5:56 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS4813.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.22.56.0-14.22.65.255 IPv6: 240e:982:ec00::/40 Signature Algorithm: sha256WithRSAEncryption b3:94:d1:d1:41:04:04:ce:d4:b4:94:e5:9b:49:36:12:ce:08: 91:5d:b4:c4:cb:51:7a:7e:60:b9:c5:0a:1e:61:72:48:cc:bc: f6:5f:50:e0:2d:b9:11:a7:00:93:7b:e8:52:cb:ad:04:3f:55: 58:43:cd:a2:e6:2f:24:81:e7:16:ee:66:c0:74:a2:10:d8:0d: 44:b6:b7:b3:de:8c:18:3d:37:0d:68:f1:0e:d0:43:4e:55:f9: 06:84:0c:3f:fe:f9:91:f1:86:8c:03:9d:7d:79:5a:4f:e7:56: c8:86:44:2f:16:59:37:ec:c0:54:01:03:84:23:9e:06:2a:70: 1b:56:c6:1f:36:c5:2a:93:6d:e8:de:8a:5a:a7:0c:69:f0:17: c0:04:8d:84:18:d5:7f:7e:ec:3f:dd:b1:bb:12:d4:1a:9b:18: cc:bd:4e:df:d9:c5:95:17:a4:d3:34:00:26:e2:18:c7:27:ce: 76:a6:84:c4:90:07:71:1b:0a:dd:6d:14:c2:97:04:0c:a8:c6: a2:ec:89:98:95:c0:0f:92:6c:59:8f:39:c0:cf:31:67:bd:af: 25:85:c3:71:7d:87:2b:7c:81:53:b2:95:d6:11:f9:2b:fd:0c: 30:9b:20:4b:46:6b:5c:c6:e1:df:d8:89:e3:00:04:61:0e:a0: c7:1f:39:7f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMWrJsCQTj9HAgrkrF7HbRDPeaTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE3MjkyMVoX DTI3MDUyNTE3MzQyMVowMzExMC8GA1UEAxMoRTAwMkVERDFFNDEzRjM4RTQ3M0I2 RjE5Q0VFODA0RjNCNTk4QjU1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/hP40q7769QpsSNxfR0JYWn08jj+Q/IOhoG6zyl3ew+ZP4h0aq/B67Kov7 PQydVQqtFWFnOxuOPpZUSt0DfoTFSEHDXEy19pXK29WHBo94qmckLcbcQlTidjdH Tp/mkNzon/zYdZZJPivYdladUDrqcTYaRgQgT38WOjLUa5+iJXk6RXRPmjEQRKei e9u632RnMdr1Pl7jsY6ep/0n8O9wPsyxCQfmzsNdCPzaOMyog9qfzVDF8si2Dbhx z464tdjG1vaDG75OZNNyOIGrhrjmeiPgmppgAbvKqgb2a0Cz4tRBRi47bfg23vLF tQNvH+ng9zHoQUCR4t0bZ5Wy/wkCAwEAAaOCAfowggH2MB0GA1UdDgQWBBTgAu3R 5BPzjkc7bxnO6ATztZi1VjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTNDgxMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwFAQCAAEwDjAMAwQDDhY4AwQBDhZAMA4EAgACMAgD BgAkDgmC7DANBgkqhkiG9w0BAQsFAAOCAQEAs5TR0UEEBM7UtJTlm0k2Es4IkV20 xMtRen5gucUKHmFySMy89l9Q4C25EacAk3voUsutBD9VWEPNouYvJIHnFu5mwHSi ENgNRLa3s96MGD03DWjxDtBDTlX5BoQMP/75kfGGjAOdfXlaT+dWyIZELxZZN+zA VAEDhCOeBipwG1bGHzbFKpNt6N6KWqcMafAXwASNhBjVf37sP92xuxLUGpsYzL1O 39nFlRek0zQAJuIYxyfOdqaExJAHcRsK3W0UwpcEDKjGouyJmJXAD5JsWY85wM8x Z72vJYXDcX2HK3yBU7KV1hH5K/0MMJsgS0ZrXMbh39iJ4wAEYQ6gxx85fw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:50 2026 by rpki-client