$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS9808.roa File: AS9808.roa (raw, json) Hash identifier: isSsUjIqBqLwcnpLClZ+srBakUgI8KxcUiPPayd08pY= Subject key identifier: 61:CA:D8:FE:2A:D4:3A:3D:B6:AB:5F:B5:CC:50:7B:7E:78:B6:1A:2F Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Certificate serial: 2A92123857B7BB17E833865CF689F4CFACD4447C Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS9808.roa Signing time: Mon 18 May 2026 06:30:42 +0000 ROA not before: Mon 18 May 2026 06:25:42 +0000 ROA not after: Mon 17 May 2027 06:30:42 +0000 asID: 9808 IP address blocks: 221.122.0.0/19 maxlen: 19 221.122.32.0/20 maxlen: 20 221.122.48.0/20 maxlen: 20 221.122.64.0/20 maxlen: 20 221.122.80.0/20 maxlen: 20 221.122.96.0/20 maxlen: 20 221.122.112.0/20 maxlen: 20 221.122.128.0/20 maxlen: 20 221.122.144.0/20 maxlen: 20 221.122.160.0/20 maxlen: 20 221.122.176.0/20 maxlen: 20 221.122.192.0/20 maxlen: 20 221.122.208.0/20 maxlen: 20 221.122.224.0/20 maxlen: 20 221.122.240.0/20 maxlen: 20 221.123.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 19:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:12:38:57:b7:bb:17:e8:33:86:5c:f6:89:f4:cf:ac:d4:44:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Validity Not Before: May 18 06:25:42 2026 GMT Not After : May 17 06:30:42 2027 GMT Subject: CN=61CAD8FE2AD43A3DB6AB5FB5CC507B7E78B61A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a4:eb:42:00:17:62:65:63:0f:8a:ee:93:d8: 60:18:af:9a:01:78:0e:d3:70:30:a1:d0:e1:92:ee: 3c:99:ec:82:b9:c6:10:b3:53:e7:52:03:a9:1d:7b: ac:80:03:17:89:1e:80:4d:1f:77:a1:c0:c2:ad:ec: 17:d4:88:66:de:d2:f9:df:cc:e1:05:42:19:1d:84: 69:c5:50:65:a5:60:8c:85:ce:95:d7:50:56:f7:85: dd:4e:ef:c1:3c:7f:fb:6d:56:ff:6f:7b:26:7a:e1: 12:77:00:23:3f:18:ae:d9:ce:07:1c:91:68:65:da: 9b:e4:92:5f:04:6d:d0:4d:29:b7:b2:7b:c4:21:5b: 86:d1:07:32:73:6f:60:8f:47:ae:53:38:e4:4b:15: b4:35:f1:0e:ec:c2:8e:61:0b:32:ca:65:0a:32:91: 6e:9e:76:ae:fc:87:93:d2:9f:cf:6a:66:91:7c:46: 44:0b:30:2a:ce:38:4c:42:cd:66:dd:44:fc:cf:12: ae:08:47:c5:28:1e:b1:8e:30:4c:bb:b0:62:f8:e9: 5f:be:45:ff:97:e1:5f:8f:f6:00:4a:a7:f1:c9:ad: 9e:b3:ae:9f:fa:fd:43:27:3b:07:ec:3d:43:ab:bd: 90:66:3a:d5:1d:56:ed:6c:c7:95:66:81:e4:61:37: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CA:D8:FE:2A:D4:3A:3D:B6:AB:5F:B5:CC:50:7B:7E:78:B6:1A:2F X509v3 Authority Key Identifier: keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS9808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 221.122.0.0/16 221.123.128.0/18 Signature Algorithm: sha256WithRSAEncryption 02:1e:ad:e6:30:a6:b1:f3:94:b6:8d:8d:e4:47:ba:22:22:f3: 67:4d:fd:7f:a2:00:78:f9:3b:ae:1b:c1:6c:e2:85:2b:cf:83: b0:d6:96:1e:37:6c:c0:22:d0:00:4f:e7:c5:2d:a7:97:1c:b6: c6:92:e6:5f:0b:37:83:36:23:c4:ee:4e:70:26:19:ec:a2:61: dc:60:d2:f8:00:d9:27:bf:d5:55:6e:93:94:03:76:16:a0:74: 45:d2:81:43:78:eb:0e:7e:47:9e:11:75:79:06:92:c5:75:4c: bb:24:a9:07:20:9b:99:64:09:1c:38:00:bf:40:22:8b:26:bf: af:29:d8:bb:6b:f0:80:09:99:ec:18:08:e9:ed:b5:a6:8e:c0: 0f:67:72:c1:fc:90:4d:b5:96:6a:30:b2:80:b3:95:84:bc:df: 24:83:00:f7:3f:ab:fb:34:b9:2c:44:31:4a:f8:86:56:8c:e9: 00:eb:5b:39:ea:da:86:7d:5f:6a:62:4a:ea:93:07:de:90:87: 9f:5e:b0:f1:ea:34:71:0e:6c:78:fa:36:d4:24:14:44:cd:3d: fb:17:4c:73:68:1c:93:7a:ae:2f:96:e6:d5:07:c5:ee:62:25: 28:71:ae:ab:f0:05:17:0b:de:5f:e1:2e:76:7a:aa:c5:f5:9b: 81:26:33:e6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUKpISOFe3uxfoM4Zc9on0z6zURHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNG RUFCRTlFMjAeFw0yNjA1MTgwNjI1NDJaFw0yNzA1MTcwNjMwNDJaMDMxMTAvBgNV BAMTKDYxQ0FEOEZFMkFENDNBM0RCNkFCNUZCNUNDNTA3QjdFNzhCNjFBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppOtCABdiZWMPiu6T2GAYr5oB eA7TcDCh0OGS7jyZ7IK5xhCzU+dSA6kde6yAAxeJHoBNH3ehwMKt7BfUiGbe0vnf zOEFQhkdhGnFUGWlYIyFzpXXUFb3hd1O78E8f/ttVv9veyZ64RJ3ACM/GK7Zzgcc kWhl2pvkkl8EbdBNKbeye8QhW4bRBzJzb2CPR65TOORLFbQ18Q7swo5hCzLKZQoy kW6edq78h5PSn89qZpF8RkQLMCrOOExCzWbdRPzPEq4IR8UoHrGOMEy7sGL46V++ Rf+X4V+P9gBKp/HJrZ6zrp/6/UMnOwfsPUOrvZBmOtUdVu1sx5VmgeRhN7DPAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUYcrY/irUOj22q1+1zFB7fni2Gi8wHwYDVR0j BBgwFoAU9vsF9A4hHqnY04Wm4B12rP6r6eIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYzMDUxMjUxMzA1Njc4Ny8wL0Y2RkIwNUY0MEUyMTFFQTlEOEQzODVBNkUwMUQ3 NkFDRkVBQkU5RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNGRUFCRTlFMi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MzA1MTI1MTMwNTY3ODcvMC9BUzk4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgAB MAsDAwDdegMEBt17gDANBgkqhkiG9w0BAQsFAAOCAQEAAh6t5jCmsfOUto2N5Ee6 IiLzZ039f6IAePk7rhvBbOKFK8+DsNaWHjdswCLQAE/nxS2nlxy2xpLmXws3gzYj xO5OcCYZ7KJh3GDS+ADZJ7/VVW6TlAN2FqB0RdKBQ3jrDn5HnhF1eQaSxXVMuySp ByCbmWQJHDgAv0Aiiya/rynYu2vwgAmZ7BgI6e21po7AD2dywfyQTbWWajCygLOV hLzfJIMA9z+r+zS5LEQxSviGVozpAOtbOerahn1famJK6pMH3pCHn16w8eo0cQ5s ePo21CQURM09+xdMc2gck3quL5bm1QfF7mIlKHGuq/AFFwveX+EudnqqxfWbgSYz 5g== -----END CERTIFICATE-----Generated at Sat May 23 05:07:15 2026 by rpki-client