$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s= Subject key identifier: 1B:58:7B:E2:B7:25:ED:E6:B9:68:60:11:B0:24:08:A0:41:C3:F0:11 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 1A2B73983D97F50CFBC3F9BF9E67976833C2D151 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS4837.roa Signing time: Mon 25 May 2026 05:58:28 +0000 ROA not before: Mon 25 May 2026 05:53:28 +0000 ROA not after: Mon 24 May 2027 05:58:28 +0000 asID: 4837 IP address blocks: 117.48.144.0/22 maxlen: 22 117.48.148.0/22 maxlen: 22 117.48.152.0/22 maxlen: 22 117.48.156.0/22 maxlen: 22 120.132.0.0/19 maxlen: 19 120.132.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2b:73:98:3d:97:f5:0c:fb:c3:f9:bf:9e:67:97:68:33:c2:d1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: May 25 05:53:28 2026 GMT Not After : May 24 05:58:28 2027 GMT Subject: CN=1B587BE2B725EDE6B9686011B02408A041C3F011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:bc:90:92:83:df:a4:d3:ec:9e:2b:1b:20: f3:32:e0:d3:21:aa:b5:fb:09:c5:1b:8e:83:f2:53: 1e:60:b1:c6:ba:05:5c:28:8f:6f:f3:1a:85:c0:a3: 28:d2:65:82:28:86:6d:b8:5a:05:14:01:e5:bf:e5: 32:11:6d:72:8a:1f:43:2a:c8:2e:b7:aa:74:81:70: 28:f0:59:a1:61:1e:a9:7f:37:0e:96:a5:39:94:35: 6b:4e:80:3a:40:dd:4b:f8:dc:fc:07:ed:b8:f0:f8: b3:c8:e7:e7:9e:50:d0:7a:e0:38:20:9e:62:91:56: 8e:a9:6c:4b:a5:5d:be:21:2a:14:ac:fe:6b:ae:71: 1d:e2:e0:b1:99:07:a4:0e:45:ef:49:20:54:44:3f: 75:3d:27:19:96:79:56:03:05:8a:6b:ca:6e:a1:0e: 4e:9c:f5:ec:17:fd:13:d1:fc:de:2e:f1:de:7e:ca: 3e:2e:5c:27:49:f3:16:a0:e6:7a:e0:d8:a6:a1:c6: e9:74:34:41:dc:ad:53:a1:4f:c4:f4:f0:cb:f7:88: fe:90:6d:16:a8:6e:da:d3:90:bf:a2:66:1d:cd:74: 87:cd:b7:fb:57:97:11:05:e2:71:5d:92:bf:63:fd: 29:0f:3a:31:8c:c5:b4:ff:83:68:3c:6e:0e:df:5c: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:7B:E2:B7:25:ED:E6:B9:68:60:11:B0:24:08:A0:41:C3:F0:11 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.48.144.0/20 120.132.0.0/19 120.132.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:ae:25:5e:59:20:99:bf:17:3b:1c:7f:e4:fd:59:b9:87:02: 81:1f:e3:08:3c:a6:33:d1:95:f8:16:4c:3b:30:6b:84:eb:d9: ed:27:35:f1:b7:2e:7c:48:1d:ab:1a:c7:50:91:d2:91:86:e3: b5:82:38:a7:b2:06:55:32:21:77:38:f7:49:3a:98:25:e7:a2: 2d:1d:19:25:54:9e:d3:27:6c:99:4f:0d:2c:a9:2b:57:2c:3d: 41:eb:2b:96:f3:45:f6:09:05:6e:f4:ee:fc:2d:35:64:48:6d: df:b2:5b:c8:1c:d7:d1:c2:7a:2c:49:42:1c:70:e7:a8:8f:5c: a5:d3:23:cc:fb:13:96:dd:cf:dd:b0:a4:f3:2d:3b:48:e8:ad: 8e:5e:37:15:35:29:da:c3:c1:50:53:48:96:8c:6c:d1:ee:bb: 75:69:70:f3:ae:7a:10:52:46:cd:f8:2e:42:f4:1b:dc:36:ca: 27:c5:a3:4c:1d:b7:d8:0f:55:b8:88:df:01:84:18:ff:a0:28: f3:bd:75:13:0b:9d:ea:3f:5a:e9:90:89:75:21:4d:f0:d9:5b: d3:7b:66:5b:37:85:a6:a4:94:2a:7e:9c:0c:9a:cc:f2:c0:b5: 0d:dd:13:59:98:54:a6:72:53:7a:83:f2:12:45:dd:4a:75:55: d7:30:04:a3 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUGitzmD2X9Qz7w/m/nmeXaDPC0VEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA1MjUwNTUzMjhaFw0yNzA1MjQwNTU4MjhaMDMxMTAvBgNV BAMTKDFCNTg3QkUyQjcyNUVERTZCOTY4NjAxMUIwMjQwOEEwNDFDM0YwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ybyQkoPfpNPsnisbIPMy4NMh qrX7CcUbjoPyUx5gsca6BVwoj2/zGoXAoyjSZYIohm24WgUUAeW/5TIRbXKKH0Mq yC63qnSBcCjwWaFhHql/Nw6WpTmUNWtOgDpA3Uv43PwH7bjw+LPI5+eeUNB64Dgg nmKRVo6pbEulXb4hKhSs/muucR3i4LGZB6QORe9JIFREP3U9JxmWeVYDBYprym6h Dk6c9ewX/RPR/N4u8d5+yj4uXCdJ8xag5nrg2Kahxul0NEHcrVOhT8T08Mv3iP6Q bRaobtrTkL+iZh3NdIfNt/tXlxEF4nFdkr9j/SkPOjGMxbT/g2g8bg7fXCPBAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUG1h74rcl7ea5aGARsCQIoEHD8BEwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgAB MBIDBAR1MJADBAV4hAADBAR4hGAwDQYJKoZIhvcNAQELBQADggEBAF+uJV5ZIJm/ Fzscf+T9WbmHAoEf4wg8pjPRlfgWTDswa4Tr2e0nNfG3LnxIHasax1CR0pGG47WC OKeyBlUyIXc490k6mCXnoi0dGSVUntMnbJlPDSypK1csPUHrK5bzRfYJBW707vwt NWRIbd+yW8gc19HCeixJQhxw56iPXKXTI8z7E5bdz92wpPMtO0jorY5eNxU1KdrD wVBTSJaMbNHuu3VpcPOuehBSRs34LkL0G9w2yifFo0wdt9gPVbiI3wGEGP+gKPO9 dRMLneo/WumQiXUhTfDZW9N7Zls3haaklCp+nAyazPLAtQ3dE1mYVKZyU3qD8hJF 3Up1VdcwBKM= -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:31 2026 by rpki-client