$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: atc3V2kNqNA+K8hLlCpSQfNr004rh0ZV925GjgrnF2Q= Subject key identifier: CB:9C:F0:19:EF:78:74:DB:DC:E4:C6:02:AD:96:A0:08:4E:BA:0E:6A Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 0324AB10BC76C4F7845FA09D51D56413C9DB646B Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS4808.roa Signing time: Thu 13 Aug 2026 02:35:51 +0000 ROA not before: Thu 13 Aug 2026 02:30:51 +0000 ROA not after: Thu 12 Aug 2027 02:35:51 +0000 asID: 4808 IP address blocks: 54.222.46.0/23 maxlen: 23 54.222.48.0/24 maxlen: 24 54.222.49.0/24 maxlen: 24 54.222.50.0/24 maxlen: 24 54.222.51.0/24 maxlen: 24 54.222.52.0/22 maxlen: 22 54.222.52.0/24 maxlen: 24 54.222.53.0/24 maxlen: 24 54.222.54.0/24 maxlen: 24 54.222.55.0/24 maxlen: 24 54.222.65.0/24 maxlen: 24 54.222.89.0/24 maxlen: 24 54.222.96.0/24 maxlen: 24 54.222.97.0/24 maxlen: 24 54.222.100.0/22 maxlen: 22 54.222.100.0/24 maxlen: 24 54.222.101.0/24 maxlen: 24 54.222.102.0/24 maxlen: 24 54.222.103.0/24 maxlen: 24 54.222.104.0/22 maxlen: 22 54.222.104.0/24 maxlen: 24 54.222.105.0/24 maxlen: 24 54.222.106.0/24 maxlen: 24 54.222.108.0/22 maxlen: 22 54.222.108.0/24 maxlen: 24 54.222.109.0/24 maxlen: 24 54.222.110.0/24 maxlen: 24 54.222.112.0/23 maxlen: 23 54.222.112.0/24 maxlen: 24 54.222.113.0/24 maxlen: 24 54.222.114.0/23 maxlen: 23 54.222.114.0/24 maxlen: 24 54.222.115.0/24 maxlen: 24 54.222.116.0/23 maxlen: 23 54.222.116.0/24 maxlen: 24 54.222.117.0/24 maxlen: 24 140.179.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:24:ab:10:bc:76:c4:f7:84:5f:a0:9d:51:d5:64:13:c9:db:64:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: Aug 13 02:30:51 2026 GMT Not After : Aug 12 02:35:51 2027 GMT Subject: CN=CB9CF019EF7874DBDCE4C602AD96A0084EBA0E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:65:78:56:70:c1:c5:d8:f2:0e:ef:0e:aa: 5d:d3:c8:c3:fb:b1:28:75:76:05:7a:ef:21:6e:0b: dc:9f:5b:ed:56:87:17:86:79:11:97:0c:ff:10:22: 8e:85:df:15:3b:eb:18:68:6d:e7:32:20:9a:02:b3: 04:68:4d:94:f3:d1:d6:41:6d:26:b9:cd:42:c7:4e: 33:87:d1:01:8e:5f:cd:68:07:98:7b:17:00:b6:a3: 3e:62:a3:16:a2:91:e7:c0:70:5c:60:8d:75:66:c3: db:39:81:06:c1:ba:bc:1d:00:7f:01:68:3e:ab:1e: 2d:97:fc:1c:72:de:f2:61:f0:a8:01:a6:b3:1a:87: 2c:7f:a4:70:49:5b:41:e6:08:75:30:7a:5b:09:c8: b1:cb:a3:4d:cf:88:ef:31:b8:40:90:35:4e:6f:b1: 86:52:ba:56:47:18:fe:04:e3:4d:24:90:87:61:fd: df:bf:99:a6:9e:ee:85:23:d9:70:98:86:81:02:d3: 63:95:43:62:79:d6:d7:a9:e9:b8:76:94:5b:81:e3: a8:ff:6b:45:d5:c7:52:c9:7d:99:d2:bb:e7:0a:74: ed:33:e7:73:45:01:40:bd:37:0b:f0:2e:e6:6d:52: e1:af:85:94:bf:51:49:b6:71:11:2d:bd:03:f9:8c: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:F0:19:EF:78:74:DB:DC:E4:C6:02:AD:96:A0:08:4E:BA:0E:6A X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.46.0-54.222.55.255 54.222.65.0/24 54.222.89.0/24 54.222.96.0/23 54.222.100.0-54.222.117.255 140.179.224.0/19 Signature Algorithm: sha256WithRSAEncryption 5c:04:ab:45:e2:f9:c1:b0:72:a5:2f:66:b3:93:5b:17:e3:18: ac:88:95:40:a7:6a:d5:d9:74:b6:cc:bc:fb:02:c1:72:36:22: 0d:0a:e1:f8:c9:eb:04:18:76:75:cf:99:25:55:85:08:2c:0a: 78:4e:ae:c5:e8:5d:92:ac:43:97:28:78:21:8d:c3:b9:7b:ca: e4:98:14:ac:f0:85:e4:1f:1f:4d:b1:2c:1d:f1:74:e7:36:72: b1:c3:1f:94:4b:13:8e:f8:c9:cd:7f:05:d1:90:37:77:8a:f9: d8:51:fd:36:63:cd:9c:51:32:fe:07:ac:05:1c:c8:81:f1:44: 68:4b:66:63:4e:de:f1:fe:f7:7e:1c:f3:5b:f4:d6:a0:5f:8e: 6f:fc:f9:29:b0:1e:0e:f3:1f:5d:91:da:2a:db:f6:a6:59:0b: 31:dc:a4:a6:e9:b4:9c:3d:db:7f:0e:92:59:41:43:74:15:34: 11:b0:71:bd:ed:09:70:5b:26:81:28:e0:01:e7:c8:5b:4c:63: 35:c7:4e:e3:e0:0a:57:42:0c:bf:79:87:28:53:39:36:d6:01: 64:2e:87:9d:63:22:6d:bd:a6:fb:62:f3:56:39:08:78:50:36: 6e:9c:47:c9:60:55:42:f1:5c:ea:b4:ec:38:c2:92:89:b9:7c: f8:c0:3a:eb -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUAySrELx2xPeEX6CdUdVkE8nbZGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA4MTMwMjMwNTFaFw0yNzA4MTIwMjM1NTFaMDMxMTAvBgNV BAMTKENCOUNGMDE5RUY3ODc0REJEQ0U0QzYwMkFEOTZBMDA4NEVCQTBFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXumV4VnDBxdjyDu8Oql3TyMP7 sSh1dgV67yFuC9yfW+1WhxeGeRGXDP8QIo6F3xU76xhobecyIJoCswRoTZTz0dZB bSa5zULHTjOH0QGOX81oB5h7FwC2oz5ioxaikefAcFxgjXVmw9s5gQbBurwdAH8B aD6rHi2X/Bxy3vJh8KgBprMahyx/pHBJW0HmCHUwelsJyLHLo03PiO8xuECQNU5v sYZSulZHGP4E400kkIdh/d+/maae7oUj2XCYhoEC02OVQ2J51tep6bh2lFuB46j/ a0XVx1LJfZnSu+cKdO0z53NFAUC9NwvwLuZtUuGvhZS/UUm2cREtvQP5jBUxAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUy5zwGe94dNvc5MYCrZagCE66DmowHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MDoEAgAB MDQwDAMEATbeLgMEAzbeMAMEADbeQQMEADbeWQMEATbeYDAMAwQCNt5kAwQBNt50 AwQFjLPgMA0GCSqGSIb3DQEBCwUAA4IBAQBcBKtF4vnBsHKlL2azk1sX4xisiJVA p2rV2XS2zLz7AsFyNiINCuH4yesEGHZ1z5klVYUILAp4Tq7F6F2SrEOXKHghjcO5 e8rkmBSs8IXkHx9NsSwd8XTnNnKxwx+USxOO+MnNfwXRkDd3ivnYUf02Y82cUTL+ B6wFHMiB8URoS2ZjTt7x/vd+HPNb9NagX45v/PkpsB4O8x9dkdoq2/amWQsx3KSm 6bScPdt/DpJZQUN0FTQRsHG97QlwWyaBKOAB58hbTGM1x07j4ApXQgy/eYcoUzk2 1gFkLoedYyJtvab7YvNWOQh4UDZunEfJYFVC8VzqtOw4wpKJuXz4wDrr -----END CERTIFICATE-----Generated at Sat Aug 29 07:30:28 2026 by rpki-client