$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: A/3edimCOZBPSpIK5xYGrmqDvuq4JdDc71VER3fVQSE= Subject key identifier: 54:26:66:9B:06:00:11:2F:D1:BD:47:BC:15:DB:73:09:D2:24:CA:00 Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Certificate serial: 2496E3BF1FA39A3CECFA73E150CA4CDB9A133883 Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS4808.roa Signing time: Mon 18 May 2026 06:30:42 +0000 ROA not before: Mon 18 May 2026 06:25:42 +0000 ROA not after: Mon 17 May 2027 06:30:42 +0000 asID: 4808 IP address blocks: 101.254.99.0/24 maxlen: 24 101.254.100.0/22 maxlen: 22 101.254.104.0/21 maxlen: 21 221.122.48.0/20 maxlen: 20 221.122.64.0/20 maxlen: 20 221.122.80.0/20 maxlen: 20 221.122.96.0/20 maxlen: 20 221.122.112.0/20 maxlen: 20 2400:b700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 19:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:96:e3:bf:1f:a3:9a:3c:ec:fa:73:e1:50:ca:4c:db:9a:13:38:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Validity Not Before: May 18 06:25:42 2026 GMT Not After : May 17 06:30:42 2027 GMT Subject: CN=5426669B0600112FD1BD47BC15DB7309D224CA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:cd:6e:b0:0f:a1:fd:66:3a:af:bb:4b:0c: cc:ce:b6:8f:0c:cd:b2:5a:63:fb:8e:15:66:bb:c7: e7:b6:46:ba:79:3b:b1:7f:cf:6d:38:2f:f9:b4:48: 89:0c:2f:00:b1:62:c8:32:76:be:ee:25:cb:92:3f: ff:40:6a:ec:5b:d4:c7:2e:ee:11:c0:6a:6e:72:d6: 6a:ed:97:2b:9c:c5:d3:d2:61:f3:52:eb:55:ec:df: fb:25:ec:db:f6:7f:aa:92:b9:44:3a:05:1f:a2:1c: 40:8f:17:ad:f7:46:e5:ac:62:25:91:dd:95:6e:fe: 17:f0:45:61:bf:7f:01:4f:0c:1f:90:09:3f:6c:ac: 3e:f1:cb:d3:33:a7:5a:8f:a5:c0:ff:52:48:18:ba: bf:04:12:5a:4d:81:35:44:3c:45:9d:50:ec:9d:d8: a9:af:56:bd:a1:74:fe:23:39:8e:38:96:28:84:53: 89:33:80:09:e6:5e:39:c4:23:1f:96:45:75:e0:e7: ec:01:ed:06:02:2c:0e:b7:7d:19:36:73:e3:2c:67: 39:c7:90:33:86:d0:d1:00:69:62:9f:71:7c:11:af: 6a:23:04:62:0b:a0:72:7d:4d:53:54:2e:11:f7:e7: 69:e6:76:11:80:ea:2a:e7:00:01:a9:d9:03:a9:fe: 76:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:26:66:9B:06:00:11:2F:D1:BD:47:BC:15:DB:73:09:D2:24:CA:00 X509v3 Authority Key Identifier: keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.254.99.0-101.254.111.255 221.122.48.0-221.122.127.255 IPv6: 2400:b700::/48 Signature Algorithm: sha256WithRSAEncryption 8d:40:68:cf:cb:a5:ae:1c:7e:c6:4e:4e:67:39:96:38:08:d9: 7d:42:fd:36:a0:b7:72:38:31:e9:38:38:f4:15:63:6a:c6:5f: 30:cc:6f:b7:1d:0c:81:90:0b:68:2c:5f:51:e0:cc:d9:d7:83: 11:d4:3f:a4:09:36:fb:e6:2c:ed:df:6f:07:05:5b:bd:ee:b6: 81:4b:7c:da:d4:ef:18:21:77:38:d3:8f:0c:78:f5:4f:90:95: b1:ee:6f:aa:22:62:34:47:b5:7d:ae:b9:98:56:a1:5f:30:eb: 22:e6:d3:db:6c:65:31:6b:56:34:3a:dc:67:61:fe:39:d6:4a: 9d:21:c8:70:43:05:6e:87:22:a6:d9:cc:e8:08:47:38:f9:35: 0d:36:a4:cd:88:0f:99:97:d6:d8:00:c8:6c:ef:c2:7e:c5:38: 60:da:83:40:0a:2c:ae:6e:d0:f3:03:bf:da:20:23:8d:e3:31: cd:4d:bc:99:cf:06:94:9a:aa:89:c6:97:2c:1b:0d:dd:fd:59: 15:64:5e:58:5f:3a:f9:ff:77:b4:ed:0d:03:e9:c6:77:0c:eb: 2d:aa:59:c9:57:92:6e:6f:0b:42:9f:34:f5:c9:cc:97:ce:9e: 7f:0c:14:c2:d5:fa:04:e8:b9:e4:f7:c2:90:83:11:67:13:24: a1:27:65:62 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUJJbjvx+jmjzs+nPhUMpM25oTOIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNG RUFCRTlFMjAeFw0yNjA1MTgwNjI1NDJaFw0yNzA1MTcwNjMwNDJaMDMxMTAvBgNV BAMTKDU0MjY2NjlCMDYwMDExMkZEMUJENDdCQzE1REI3MzA5RDIyNENBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbcc1usA+h/WY6r7tLDMzOto8M zbJaY/uOFWa7x+e2Rrp5O7F/z204L/m0SIkMLwCxYsgydr7uJcuSP/9Aauxb1Mcu 7hHAam5y1mrtlyucxdPSYfNS61Xs3/sl7Nv2f6qSuUQ6BR+iHECPF633RuWsYiWR 3ZVu/hfwRWG/fwFPDB+QCT9srD7xy9Mzp1qPpcD/UkgYur8EElpNgTVEPEWdUOyd 2KmvVr2hdP4jOY44liiEU4kzgAnmXjnEIx+WRXXg5+wB7QYCLA63fRk2c+MsZznH kDOG0NEAaWKfcXwRr2ojBGILoHJ9TVNULhH352nmdhGA6irnAAGp2QOp/naDAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUVCZmmwYAES/RvUe8FdtzCdIkygAwHwYDVR0j BBgwFoAU9vsF9A4hHqnY04Wm4B12rP6r6eIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYzMDUxMjUxMzA1Njc4Ny8wL0Y2RkIwNUY0MEUyMTFFQTlEOEQzODVBNkUwMUQ3 NkFDRkVBQkU5RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNGRUFCRTlFMi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MzA1MTI1MTMwNTY3ODcvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCIEAgAB MBwwDAMEAGX+YwMEBGX+YDAMAwQE3XowAwQH3XoAMA8EAgACMAkDBwAkALcAAAAw DQYJKoZIhvcNAQELBQADggEBAI1AaM/Lpa4cfsZOTmc5ljgI2X1C/Tagt3I4Mek4 OPQVY2rGXzDMb7cdDIGQC2gsX1HgzNnXgxHUP6QJNvvmLO3fbwcFW73utoFLfNrU 7xghdzjTjwx49U+QlbHub6oiYjRHtX2uuZhWoV8w6yLm09tsZTFrVjQ63Gdh/jnW Sp0hyHBDBW6HIqbZzOgIRzj5NQ02pM2ID5mX1tgAyGzvwn7FOGDag0AKLK5u0PMD v9ogI43jMc1NvJnPBpSaqonGlywbDd39WRVkXlhfOvn/d7TtDQPpxncM6y2qWclX km5vC0KfNPXJzJfOnn8MFMLV+gToueT3wpCDEWcTJKEnZWI= -----END CERTIFICATE-----Generated at Sat May 23 05:07:15 2026 by rpki-client