$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E= Subject key identifier: 0C:C5:1B:6B:44:0B:0F:A2:0D:5E:30:10:F9:C6:DB:EF:6C:EB:8F:87 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 74D81027F278C3B4E8CDA2F517605C0000C2E09F Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS4808.roa Signing time: Thu 04 Jun 2026 01:42:54 +0000 ROA not before: Thu 04 Jun 2026 01:37:54 +0000 ROA not after: Thu 03 Jun 2027 01:42:54 +0000 asID: 4808 IP address blocks: 103.244.80.0/22 maxlen: 22 114.118.0.0/21 maxlen: 21 114.118.8.0/21 maxlen: 21 114.118.16.0/21 maxlen: 21 114.118.24.0/21 maxlen: 21 114.118.32.0/21 maxlen: 21 114.118.40.0/21 maxlen: 21 114.118.48.0/21 maxlen: 21 114.118.56.0/21 maxlen: 21 114.118.64.0/21 maxlen: 21 114.118.72.0/21 maxlen: 21 114.118.80.0/21 maxlen: 21 114.118.88.0/21 maxlen: 21 114.118.96.0/21 maxlen: 21 120.132.32.0/22 maxlen: 22 120.132.36.0/22 maxlen: 22 120.132.40.0/22 maxlen: 22 120.132.44.0/22 maxlen: 22 120.132.48.0/22 maxlen: 22 120.132.52.0/22 maxlen: 22 120.132.56.0/22 maxlen: 22 120.132.60.0/22 maxlen: 22 120.132.64.0/22 maxlen: 22 120.132.68.0/22 maxlen: 22 120.132.72.0/22 maxlen: 22 120.132.76.0/22 maxlen: 22 120.132.80.0/22 maxlen: 22 120.132.84.0/22 maxlen: 22 120.132.88.0/22 maxlen: 22 120.132.92.0/22 maxlen: 22 123.59.0.0/19 maxlen: 19 123.59.32.0/19 maxlen: 19 123.59.64.0/19 maxlen: 19 123.59.96.0/19 maxlen: 19 123.59.128.0/19 maxlen: 19 123.59.160.0/19 maxlen: 19 123.59.192.0/19 maxlen: 19 123.59.224.0/19 maxlen: 19 180.150.176.0/22 maxlen: 22 180.150.180.0/22 maxlen: 22 180.150.184.0/22 maxlen: 22 180.150.188.0/22 maxlen: 22 2406:cf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:10:27:f2:78:c3:b4:e8:cd:a2:f5:17:60:5c:00:00:c2:e0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jun 4 01:37:54 2026 GMT Not After : Jun 3 01:42:54 2027 GMT Subject: CN=0CC51B6B440B0FA20D5E3010F9C6DBEF6CEB8F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:85:de:41:07:2d:a2:dc:ab:86:48:14:8c: 4e:f1:fa:f2:08:8c:82:bb:1e:d8:a7:f1:58:77:98: 10:c7:31:af:2e:fa:ff:71:50:a2:5f:9a:f8:85:1d: 6f:65:83:58:fa:f8:d9:8c:c8:dc:00:e3:9e:60:f4: a2:4d:83:0b:2e:73:89:14:e7:66:ea:63:3a:63:e4: 74:e9:db:f1:4d:12:20:a5:64:f4:e5:d7:c5:13:48: 6a:b6:91:bb:93:84:77:78:e8:bd:d4:28:40:28:40: 9d:e7:a9:d3:88:00:55:57:7d:ff:a7:12:54:fd:65: 81:82:13:a7:74:cb:d1:5b:4b:33:18:fc:fb:ae:cb: 16:c2:f4:9a:55:28:c9:f6:3c:55:1c:68:31:6c:ce: 19:6c:26:0e:af:75:47:42:97:8a:84:b6:4e:77:52: 54:46:a0:52:a5:b1:1a:84:8c:77:11:b0:05:2a:c5: 15:77:e6:bc:17:7a:29:64:54:61:16:50:c6:60:44: 43:8a:d4:0f:40:d8:5b:36:6b:af:10:2e:54:b9:ac: a4:b5:9a:dc:24:35:20:dd:72:0f:75:23:09:1e:2a: 50:97:bd:54:f1:11:eb:37:12:5f:ff:d6:dd:97:e2: 83:e6:3f:2f:42:46:46:a7:4f:2a:50:21:70:5b:83: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:1B:6B:44:0B:0F:A2:0D:5E:30:10:F9:C6:DB:EF:6C:EB:8F:87 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.80.0/22 114.118.0.0-114.118.103.255 120.132.32.0-120.132.95.255 123.59.0.0/16 180.150.176.0/20 IPv6: 2406:cf00::/48 Signature Algorithm: sha256WithRSAEncryption 0a:1e:3b:a4:42:8a:15:dc:5a:ed:ef:f1:10:30:51:0e:9e:ea: 7c:f4:9a:ac:97:2b:13:1b:7b:4a:83:fc:8d:1a:b0:c1:17:bb: f3:92:6f:26:4a:29:c4:c7:00:fc:30:38:2e:dd:a8:97:73:3c: f3:35:a9:fc:b4:e2:6e:ca:77:c3:f3:f9:09:60:3b:c8:ea:30: 6d:fa:06:f0:91:6a:32:2b:1b:0d:1d:85:03:9f:5b:fb:ac:d4: b4:6b:13:57:f8:c6:a1:db:e6:3b:cf:47:d4:cf:e0:a8:1c:2e: 23:d5:65:d0:cd:82:25:03:24:09:52:cb:ca:e1:59:d2:1c:3c: cb:71:14:fb:36:e7:37:2c:b1:3a:e4:7a:a2:d7:62:ac:b9:bc: 01:6a:d1:21:68:3f:a9:d3:51:cd:f6:69:7d:18:44:fa:46:e8: fe:35:ed:22:09:cb:90:a5:15:5d:81:74:bc:2b:8c:6a:63:81: 70:9d:cc:3c:80:3f:e9:dd:e8:78:12:ea:06:61:e7:71:0e:4a: dc:ca:94:c2:5e:5d:d9:27:ad:fb:0d:9a:22:12:16:84:7c:a8: 17:63:90:f8:2f:1c:ea:1f:dd:0d:c7:39:e1:69:45:12:da:ef: 2f:26:0a:48:92:dc:90:5d:13:20:ef:80:ea:8f:6a:01:9c:0b: aa:53:18:29 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUdNgQJ/J4w7TozaL1F2BcAADC4J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA2MDQwMTM3NTRaFw0yNzA2MDMwMTQyNTRaMDMxMTAvBgNV BAMTKDBDQzUxQjZCNDQwQjBGQTIwRDVFMzAxMEY5QzZEQkVGNkNFQjhGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUoXeQQctotyrhkgUjE7x+vII jIK7Htin8Vh3mBDHMa8u+v9xUKJfmviFHW9lg1j6+NmMyNwA455g9KJNgwsuc4kU 52bqYzpj5HTp2/FNEiClZPTl18UTSGq2kbuThHd46L3UKEAoQJ3nqdOIAFVXff+n ElT9ZYGCE6d0y9FbSzMY/PuuyxbC9JpVKMn2PFUcaDFszhlsJg6vdUdCl4qEtk53 UlRGoFKlsRqEjHcRsAUqxRV35rwXeilkVGEWUMZgREOK1A9A2Fs2a68QLlS5rKS1 mtwkNSDdcg91IwkeKlCXvVTxEes3El//1t2X4oPmPy9CRkanTypQIXBbg9eZAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUDMUba0QLD6INXjAQ+cbb72zrj4cwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVgYIKwYBBQUHAQcBAf8ERzBFMDIEAgAB MCwDBAJn9FAwCwMDAXJ2AwQDcnZgMAwDBAV4hCADBAV4hEADAwB7OwMEBLSWsDAP BAIAAjAJAwcAJAbPAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAKHjukQooV3Frt7/EQ MFEOnup89JqslysTG3tKg/yNGrDBF7vzkm8mSinExwD8MDgu3aiXczzzNan8tOJu ynfD8/kJYDvI6jBt+gbwkWoyKxsNHYUDn1v7rNS0axNX+Mah2+Y7z0fUz+CoHC4j 1WXQzYIlAyQJUsvK4VnSHDzLcRT7Nuc3LLE65Hqi12KsubwBatEhaD+p01HN9ml9 GET6Ruj+Ne0iCcuQpRVdgXS8K4xqY4Fwncw8gD/p3eh4EuoGYedxDkrcypTCXl3Z J637DZoiEhaEfKgXY5D4LxzqH90NxznhaUUS2u8vJgpIktyQXRMg74Dqj2oBnAuq Uxgp -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:44 2026 by rpki-client