$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS9808.roa File: AS9808.roa (raw, json) Hash identifier: ukD6uHCZiHk4h+GlQsCyMcdqRNeHZgvh2Pf0jbdkj1c= Subject key identifier: 6C:AF:6C:DF:67:63:26:55:1A:C7:30:47:8D:C4:10:3D:6C:A9:36:E7 Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 74A6ED6D59D4013DF2E856867178614AA70FEE7B Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS9808.roa Signing time: Thu 13 Aug 2026 02:35:51 +0000 ROA not before: Thu 13 Aug 2026 02:30:51 +0000 ROA not after: Thu 12 Aug 2027 02:35:51 +0000 asID: 9808 IP address blocks: 54.222.46.0/23 maxlen: 23 54.222.48.0/24 maxlen: 24 54.222.49.0/24 maxlen: 24 54.222.50.0/24 maxlen: 24 54.222.51.0/24 maxlen: 24 54.222.52.0/22 maxlen: 22 54.222.52.0/24 maxlen: 24 54.222.53.0/24 maxlen: 24 54.222.54.0/24 maxlen: 24 54.222.55.0/24 maxlen: 24 54.222.65.0/24 maxlen: 24 54.222.89.0/24 maxlen: 24 54.222.96.0/24 maxlen: 24 54.222.97.0/24 maxlen: 24 54.222.100.0/22 maxlen: 22 54.222.100.0/24 maxlen: 24 54.222.101.0/24 maxlen: 24 54.222.102.0/24 maxlen: 24 54.222.103.0/24 maxlen: 24 54.222.104.0/22 maxlen: 22 54.222.104.0/24 maxlen: 24 54.222.105.0/24 maxlen: 24 54.222.106.0/24 maxlen: 24 54.222.108.0/22 maxlen: 22 54.222.108.0/24 maxlen: 24 54.222.109.0/24 maxlen: 24 54.222.110.0/24 maxlen: 24 54.222.112.0/23 maxlen: 23 54.222.112.0/24 maxlen: 24 54.222.113.0/24 maxlen: 24 54.222.114.0/23 maxlen: 23 54.222.114.0/24 maxlen: 24 54.222.115.0/24 maxlen: 24 54.222.116.0/23 maxlen: 23 54.222.116.0/24 maxlen: 24 54.222.117.0/24 maxlen: 24 140.179.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:ed:6d:59:d4:01:3d:f2:e8:56:86:71:78:61:4a:a7:0f:ee:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: Aug 13 02:30:51 2026 GMT Not After : Aug 12 02:35:51 2027 GMT Subject: CN=6CAF6CDF676326551AC730478DC4103D6CA936E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:a1:89:7c:22:5a:94:95:c8:33:2f:c1:59: 78:b1:16:a8:1d:cd:24:8e:4d:25:48:aa:63:20:7b: ef:14:17:53:5f:dd:eb:dc:a9:af:c8:88:d3:c8:1e: 2f:fe:55:2f:51:cc:51:51:0c:00:fa:02:e3:20:9e: 71:29:2a:c5:ef:92:73:b1:c8:74:4c:ae:df:35:1e: 3e:25:0d:43:73:b6:88:8d:2c:64:aa:d6:c6:cb:01: f7:40:4c:da:f6:02:39:b6:cf:9f:67:89:80:cc:61: ad:ec:98:45:22:d3:31:a4:67:68:fd:04:be:7e:cd: 02:d3:6d:41:1b:9e:18:b5:b1:c2:f9:6f:bf:35:7c: 9e:98:05:12:35:b7:1e:c1:e1:ed:6c:1a:fa:7b:20: e3:f4:30:17:23:7e:33:9d:8d:2e:ef:a9:b1:ed:c8: 69:99:6e:93:ad:5a:c8:dc:c1:7e:ba:e7:a5:fc:97: 2c:71:28:70:50:d5:8d:87:3c:8d:c8:e4:c7:25:08: 15:fb:2c:79:a4:d2:54:b8:90:e8:e5:77:f3:0f:5f: 5d:ea:bd:8f:76:20:ee:22:e6:f0:0b:06:b9:e4:7d: 2c:b5:c9:63:d9:59:70:e7:70:7e:6a:15:d3:c8:12: f5:33:b0:99:36:fe:14:51:23:7b:a8:6c:d5:0f:e2: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AF:6C:DF:67:63:26:55:1A:C7:30:47:8D:C4:10:3D:6C:A9:36:E7 X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS9808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.46.0-54.222.55.255 54.222.65.0/24 54.222.89.0/24 54.222.96.0/23 54.222.100.0-54.222.117.255 140.179.224.0/19 Signature Algorithm: sha256WithRSAEncryption 18:63:80:7f:76:43:2b:b6:41:f0:ef:fd:aa:af:b1:93:07:84: af:38:44:f8:ac:76:43:8d:22:78:e0:f1:7d:77:34:f5:df:d4: 80:93:76:76:09:77:d2:70:bf:3a:75:18:59:61:3b:14:dc:10: ef:64:8d:14:fb:a8:d9:cd:12:d9:56:48:79:b4:af:7a:f1:8e: e9:8e:cc:0d:dc:19:e5:13:84:fd:61:34:04:78:a2:30:f6:47: c1:93:1e:56:7f:61:39:a8:5e:98:e3:8a:79:fa:c4:fb:e5:10: c5:e5:76:c0:64:81:bf:a1:77:2d:9a:70:fe:ca:f9:13:09:60: a8:b4:97:d8:bd:ab:8c:50:08:ab:c8:4d:82:d4:18:72:29:90: 64:79:a8:80:33:b3:02:d1:7b:29:74:4b:c9:06:7e:28:e7:2c: fe:28:14:1b:9b:e0:10:07:0c:24:df:2e:31:90:4c:12:08:5b: 61:8c:14:a2:48:dd:ae:ec:ea:12:5c:c0:18:f0:d0:4f:f8:93: 56:2c:0e:56:7f:c3:a0:ff:62:30:5f:df:c6:b3:13:a2:4c:75: 2c:f5:99:33:12:fd:94:a2:d2:48:53:12:3d:da:80:99:0b:12: 35:97:2c:6e:15:25:04:f2:4d:20:1c:0f:b6:e7:12:00:92:7a: 19:e4:e0:ab -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUdKbtbVnUAT3y6FaGcXhhSqcP7nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA4MTMwMjMwNTFaFw0yNzA4MTIwMjM1NTFaMDMxMTAvBgNV BAMTKDZDQUY2Q0RGNjc2MzI2NTUxQUM3MzA0NzhEQzQxMDNENkNBOTM2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsg6GJfCJalJXIMy/BWXixFqgd zSSOTSVIqmMge+8UF1Nf3evcqa/IiNPIHi/+VS9RzFFRDAD6AuMgnnEpKsXvknOx yHRMrt81Hj4lDUNztoiNLGSq1sbLAfdATNr2Ajm2z59niYDMYa3smEUi0zGkZ2j9 BL5+zQLTbUEbnhi1scL5b781fJ6YBRI1tx7B4e1sGvp7IOP0MBcjfjOdjS7vqbHt yGmZbpOtWsjcwX6656X8lyxxKHBQ1Y2HPI3I5MclCBX7LHmk0lS4kOjld/MPX13q vY92IO4i5vALBrnkfSy1yWPZWXDncH5qFdPIEvUzsJk2/hRRI3uobNUP4r2bAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUbK9s32djJlUaxzBHjcQQPWypNucwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMC9BUzk4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MDoEAgAB MDQwDAMEATbeLgMEAzbeMAMEADbeQQMEADbeWQMEATbeYDAMAwQCNt5kAwQBNt50 AwQFjLPgMA0GCSqGSIb3DQEBCwUAA4IBAQAYY4B/dkMrtkHw7/2qr7GTB4SvOET4 rHZDjSJ44PF9dzT139SAk3Z2CXfScL86dRhZYTsU3BDvZI0U+6jZzRLZVkh5tK96 8Y7pjswN3BnlE4T9YTQEeKIw9kfBkx5Wf2E5qF6Y44p5+sT75RDF5XbAZIG/oXct mnD+yvkTCWCotJfYvauMUAiryE2C1BhyKZBkeaiAM7MC0XspdEvJBn4o5yz+KBQb m+AQBwwk3y4xkEwSCFthjBSiSN2u7OoSXMAY8NBP+JNWLA5Wf8Og/2IwX9/GsxOi THUs9ZkzEv2UotJIUxI92oCZCxI1lyxuFSUE8k0gHA+25xIAknoZ5OCr -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:53 2026 by rpki-client