$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: I5t5JfcDj/REI/z+GABxYf6Q1TadCnhkOopdPXIylT8= Subject key identifier: 9B:97:42:D5:DC:F8:9F:DB:12:CC:85:81:9C:EE:60:F0:F8:9F:B0:E3 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 1A46E2C4E98B1A993C3549B283DEC3F8B358B33C Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS4837.roa Signing time: Mon 29 Jun 2026 15:16:26 +0000 ROA not before: Mon 29 Jun 2026 15:11:26 +0000 ROA not after: Mon 28 Jun 2027 15:16:26 +0000 asID: 4837 IP address blocks: 101.50.8.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:46:e2:c4:e9:8b:1a:99:3c:35:49:b2:83:de:c3:f8:b3:58:b3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jun 29 15:11:26 2026 GMT Not After : Jun 28 15:16:26 2027 GMT Subject: CN=9B9742D5DCF89FDB12CC85819CEE60F0F89FB0E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:54:aa:0c:3c:a9:4b:6d:ac:8d:be:7a:4c: d7:47:3a:38:12:32:66:6a:e3:2a:10:21:83:16:28: 2d:2f:ad:e8:56:8c:0c:64:4c:70:21:a9:52:7d:61: 70:a0:d4:6d:dc:3f:d2:78:9c:d5:55:dd:bd:41:bc: 5d:6b:1a:1b:60:b2:fa:09:f8:54:ef:37:27:8c:62: d2:06:6d:71:7a:2e:86:bb:d7:dd:d3:03:00:8d:73: d9:d1:3c:6a:e4:6c:a8:a5:9a:36:96:bb:93:f6:d1: 3d:5b:1b:c9:9e:19:f4:fa:55:42:47:0f:61:df:80: 7c:ba:0e:d9:6b:6e:70:61:95:a9:f6:4d:a8:54:bd: 42:f6:ed:cb:26:6a:36:5d:2a:f1:0c:7c:5a:9c:6f: 88:38:0d:64:92:42:6f:bf:8a:38:10:66:5e:f5:62: bf:07:50:84:2f:bc:1d:8e:1e:ca:c8:86:bc:b0:b8: da:33:68:5f:73:20:dd:a2:17:6e:02:59:e4:f7:55: fc:c9:96:08:da:2c:7b:b0:a0:58:9d:f0:fb:24:4d: 6b:31:b5:ef:53:f1:6a:27:41:04:71:d7:e6:cf:35: 97:5e:d7:b1:5f:69:89:a0:02:59:05:6f:26:33:2d: 15:df:81:73:0c:b6:e7:20:c0:f7:1f:9c:36:12:80: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:42:D5:DC:F8:9F:DB:12:CC:85:81:9C:EE:60:F0:F8:9F:B0:E3 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.50.8.0/21 Signature Algorithm: sha256WithRSAEncryption 71:7b:7c:9b:d1:87:55:77:fd:86:3a:ec:36:04:c4:d8:91:d3: 8b:f9:50:33:ca:96:be:c3:cb:2a:ef:a8:02:5f:35:c4:0d:3a: 3e:5e:f4:f1:53:ca:ca:bb:e4:d9:03:ce:ef:f5:8f:ca:3b:42: c5:e6:15:a9:00:06:4f:56:a6:f1:0d:58:4d:da:2d:72:6a:13: c7:84:a8:0d:93:e4:80:8d:6c:30:7e:68:2c:0f:c4:b9:87:4b: 83:f2:a0:93:0e:54:1a:53:55:60:82:8c:28:e2:67:62:c9:c0: 00:e9:dd:40:83:ad:ca:3f:96:16:39:35:3b:11:d6:2e:ba:c1: 53:c7:38:bd:6c:37:75:ae:cd:77:fb:82:bb:de:0d:3c:5d:71: 6f:6e:6b:c0:ac:c4:58:1e:36:52:b6:23:13:73:db:9f:16:c5: 5d:3f:5b:52:74:ff:e2:7b:2d:1d:e5:b3:0a:89:93:46:c5:c5: e1:92:fb:ca:97:e0:a8:33:d3:3a:26:5c:e3:26:6b:28:c4:86: 4d:a9:e8:91:18:e2:ec:fa:45:71:12:8d:36:da:73:9a:cf:79: e0:b0:1d:3b:83:31:27:93:a5:62:4f:51:f8:83:0c:e0:9b:6f: dd:75:a8:13:97:4a:ba:95:31:7d:05:8a:74:46:ae:1d:36:23: 5b:e8:40:cf -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUGkbixOmLGpk8NUmyg97D+LNYszwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA2MjkxNTExMjZaFw0yNzA2MjgxNTE2MjZaMDMxMTAvBgNV BAMTKDlCOTc0MkQ1RENGODlGREIxMkNDODU4MTlDRUU2MEYwRjg5RkIwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDedlSqDDypS22sjb56TNdHOjgS MmZq4yoQIYMWKC0vrehWjAxkTHAhqVJ9YXCg1G3cP9J4nNVV3b1BvF1rGhtgsvoJ +FTvNyeMYtIGbXF6Loa7193TAwCNc9nRPGrkbKilmjaWu5P20T1bG8meGfT6VUJH D2HfgHy6DtlrbnBhlan2TahUvUL27csmajZdKvEMfFqcb4g4DWSSQm+/ijgQZl71 Yr8HUIQvvB2OHsrIhrywuNozaF9zIN2iF24CWeT3VfzJlgjaLHuwoFid8PskTWsx te9T8WonQQRx1+bPNZde17FfaYmgAlkFbyYzLRXfgXMMtucgwPcfnDYSgOkDAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQUm5dC1dz4n9sSzIWBnO5g8PifsOMwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANlMggwDQYJKoZIhvcNAQELBQADggEBAHF7fJvRh1V3/YY67DYExNiR04v5 UDPKlr7DyyrvqAJfNcQNOj5e9PFTysq75NkDzu/1j8o7QsXmFakABk9WpvENWE3a LXJqE8eEqA2T5ICNbDB+aCwPxLmHS4PyoJMOVBpTVWCCjCjiZ2LJwADp3UCDrco/ lhY5NTsR1i66wVPHOL1sN3WuzXf7grveDTxdcW9ua8CsxFgeNlK2IxNz258WxV0/ W1J0/+J7LR3lswqJk0bFxeGS+8qX4Kgz0zomXOMmayjEhk2p6JEY4uz6RXESjTba c5rPeeCwHTuDMSeTpWJPUfiDDOCbb911qBOXSrqVMX0FinRGrh02I1voQM8= -----END CERTIFICATE-----Generated at Tue Jul 14 21:53:58 2026 by rpki-client