$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: kqByL1Zclk4Qwl77KzCp9upUtOuASsLyyK2yfuSlb18= Subject key identifier: A6:44:B6:40:77:FD:C0:62:C0:FE:80:28:78:90:C3:E6:91:97:51:6F Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 1ABEDBD3AA4F50C532A94947CE7087866FEBCC2C Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4808.roa Signing time: Wed 10 Jun 2026 08:12:47 +0000 ROA not before: Wed 10 Jun 2026 08:07:47 +0000 ROA not after: Wed 09 Jun 2027 08:12:47 +0000 asID: 4808 IP address blocks: 210.72.160.0/19 maxlen: 19 210.74.64.0/23 maxlen: 23 210.77.32.0/21 maxlen: 21 210.77.40.0/21 maxlen: 21 210.77.48.0/20 maxlen: 20 210.77.58.0/23 maxlen: 23 211.94.64.0/18 maxlen: 18 211.94.128.0/18 maxlen: 18 211.99.64.0/19 maxlen: 19 211.144.224.0/19 maxlen: 19 211.145.0.0/20 maxlen: 20 211.145.16.0/20 maxlen: 20 211.145.32.0/19 maxlen: 19 211.145.64.0/20 maxlen: 20 211.147.32.0/19 maxlen: 19 211.155.32.0/19 maxlen: 19 211.167.176.0/20 maxlen: 20 220.194.0.0/18 maxlen: 18 220.206.192.0/22 maxlen: 22 220.207.0.0/22 maxlen: 22 220.207.80.0/20 maxlen: 20 220.207.176.0/22 maxlen: 22 220.207.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:be:db:d3:aa:4f:50:c5:32:a9:49:47:ce:70:87:86:6f:eb:cc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 10 08:07:47 2026 GMT Not After : Jun 9 08:12:47 2027 GMT Subject: CN=A644B64077FDC062C0FE80287890C3E69197516F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:03:10:ec:7a:ac:45:2e:93:13:ab:63:c2: 08:40:ea:f1:1c:df:ef:4f:9d:81:ba:47:c9:7b:b0: de:a9:41:8a:d5:31:c3:c7:2f:af:00:bb:52:ba:59: f1:23:2b:82:e8:2b:89:68:74:3f:0f:96:ed:68:79: 65:d6:65:1a:1e:c9:d7:48:e3:20:41:c6:be:56:b4: 1f:b3:4d:5a:f7:a9:fd:e7:3f:b4:e7:3a:45:cc:3a: 4f:be:04:57:29:25:f6:7f:a9:03:38:08:79:ec:a9: 84:09:68:22:7f:20:b2:a4:ea:4a:d1:88:49:66:3a: 32:28:3e:3a:c5:ef:83:12:d8:c6:27:0b:d6:41:f4: fe:6d:65:dc:a0:e9:05:b5:8c:cd:c6:8a:c7:69:0d: 9b:b3:06:b2:c0:84:e5:11:3b:2c:97:5e:c2:cb:18: 43:63:e3:3a:1e:ca:d6:86:ee:d9:63:5e:d1:f0:2b: 79:d5:a0:c2:48:8b:fa:75:5f:53:1d:ce:c4:16:ab: a7:d8:c2:91:d5:a1:ae:aa:50:b4:81:cf:75:38:2e: 23:d7:30:71:96:af:65:fb:b4:5b:88:9c:a7:2a:3b: 16:a5:1b:08:e7:b1:a0:54:ad:7a:71:ed:a0:ff:9e: 22:5a:cd:c5:c1:ae:f1:65:21:f9:ee:01:32:bb:24: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:B6:40:77:FD:C0:62:C0:FE:80:28:78:90:C3:E6:91:97:51:6F X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.72.160.0/19 210.74.64.0/23 210.77.32.0/19 211.94.64.0-211.94.191.255 211.99.64.0/19 211.144.224.0-211.145.79.255 211.147.32.0/19 211.155.32.0/19 211.167.176.0/20 220.194.0.0/18 220.206.192.0/22 220.207.0.0/22 220.207.80.0/20 220.207.176.0/22 220.207.254.0/23 Signature Algorithm: sha256WithRSAEncryption 45:94:ad:12:c1:01:0f:02:af:64:20:f3:f8:b5:5f:95:f5:7f: e7:c4:50:03:75:aa:59:d6:e4:0a:f6:e6:b2:c6:34:72:ac:39: 7d:88:a6:a5:b7:42:14:2a:f8:de:34:94:9d:61:6a:b7:43:c4: 55:d6:ba:71:83:f8:7a:16:e8:dd:05:89:9e:dc:4a:d7:81:09: 2c:3f:ba:36:54:0f:d3:19:13:42:ea:44:c8:06:e5:da:dd:af: 86:80:91:a8:01:26:46:21:1d:e7:05:16:0f:a3:c1:be:ef:b1: c6:24:44:a1:21:48:84:cb:1b:2e:10:c8:1a:c9:bc:f5:1d:38: 07:17:6d:cd:e5:70:80:62:cb:02:bd:cd:af:8d:d7:12:ee:59: 83:a4:a2:1c:63:eb:a6:7a:70:16:23:94:af:a0:59:bc:98:31: 0a:d6:12:b2:c8:6c:97:12:9d:05:1b:7d:c9:56:ef:31:ab:58: 38:d5:d6:52:c6:78:02:05:bc:75:8c:9e:b0:4d:a6:e6:c3:b6: e3:b5:22:9a:bf:ae:0b:0e:e3:6c:aa:e5:90:07:d6:1d:90:72: 89:04:aa:01:d4:68:7c:de:99:9b:87:52:c4:19:07:95:95:84: e2:cb:89:d8:36:f5:7e:d2:6b:bc:e2:65:4c:3c:4b:5b:c4:92: db:69:c0:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGr7b06pPUMUyqUlHznCHhm/rzCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MTAwODA3NDdaFw0yNzA2MDkwODEyNDdaMDMxMTAvBgNV BAMTKEE2NDRCNjQwNzdGREMwNjJDMEZFODAyODc4OTBDM0U2OTE5NzUxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9AMQ7HqsRS6TE6tjwghA6vEc 3+9PnYG6R8l7sN6pQYrVMcPHL68Au1K6WfEjK4LoK4lodD8Plu1oeWXWZRoeyddI 4yBBxr5WtB+zTVr3qf3nP7TnOkXMOk++BFcpJfZ/qQM4CHnsqYQJaCJ/ILKk6krR iElmOjIoPjrF74MS2MYnC9ZB9P5tZdyg6QW1jM3GisdpDZuzBrLAhOUROyyXXsLL GENj4zoeytaG7tljXtHwK3nVoMJIi/p1X1MdzsQWq6fYwpHVoa6qULSBz3U4LiPX MHGWr2X7tFuInKcqOxalGwjnsaBUrXpx7aD/niJazcXBrvFlIfnuATK7JPupAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpkS2QHf9wGLA/oAoeJDD5pGXUW8wHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYMGCCsGAQUFBwEHAQH/BHQwcjBwBAIA ATBqAwQF0kigAwQB0kpAAwQF0k0gMAwDBAbTXkADBAbTXoADBAXTY0AwDAMEBdOQ 4AMEBNORQAMEBdOTIAMEBdObIAMEBNOnsAMEBtzCAAMEAtzOwAMEAtzPAAMEBNzP UAMEAtzPsAMEAdzP/jANBgkqhkiG9w0BAQsFAAOCAQEARZStEsEBDwKvZCDz+LVf lfV/58RQA3WqWdbkCvbmssY0cqw5fYimpbdCFCr43jSUnWFqt0PEVda6cYP4ehbo 3QWJntxK14EJLD+6NlQP0xkTQupEyAbl2t2vhoCRqAEmRiEd5wUWD6PBvu+xxiRE oSFIhMsbLhDIGsm89R04BxdtzeVwgGLLAr3Nr43XEu5Zg6SiHGPrpnpwFiOUr6BZ vJgxCtYSsshslxKdBRt9yVbvMatYONXWUsZ4AgW8dYyesE2m5sO247Uimr+uCw7j bKrlkAfWHZByiQSqAdRofN6Zm4dSxBkHlZWE4suJ2Db1ftJrvOJlTDxLW8SS22nA mA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:45 2026 by rpki-client