$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: ZewmzNIAwf8DhZ3J1AddFyjYjxEjzCT3WSYZ20AD6/U= Subject key identifier: 09:81:8C:13:A1:D1:55:B8:EF:55:C2:62:42:EF:8D:0F:65:A2:10:8C Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 37A099CB500EA051B7A61FB5A9C3E141DC96DDDF Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS4808.roa Signing time: Thu 20 Aug 2026 09:16:05 +0000 ROA not before: Thu 20 Aug 2026 09:11:05 +0000 ROA not after: Thu 19 Aug 2027 09:16:05 +0000 asID: 4808 IP address blocks: 43.196.232.0/22 maxlen: 22 119.253.32.0/20 maxlen: 20 119.253.48.0/21 maxlen: 21 119.253.56.0/21 maxlen: 21 119.253.64.0/20 maxlen: 20 119.253.80.0/20 maxlen: 20 119.254.0.0/20 maxlen: 20 119.254.224.0/20 maxlen: 20 124.42.64.0/19 maxlen: 19 124.42.96.0/19 maxlen: 19 2400:7fc0:111::/48 maxlen: 48 2400:7fc0:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a0:99:cb:50:0e:a0:51:b7:a6:1f:b5:a9:c3:e1:41:dc:96:dd:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: Aug 20 09:11:05 2026 GMT Not After : Aug 19 09:16:05 2027 GMT Subject: CN=09818C13A1D155B8EF55C26242EF8D0F65A2108C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:82:ed:2e:38:f4:6c:d1:ca:48:72:08:c2: 4f:ff:a9:5d:e1:01:ef:82:16:fa:63:fd:35:dc:06: a1:5e:bf:1f:4a:08:f9:0e:c5:50:73:f1:15:6a:44: 9b:24:60:13:12:f4:8c:f1:23:a5:e2:90:55:fb:61: dd:a8:09:cb:3b:1e:5f:be:43:f1:ac:64:13:76:64: df:19:2f:cf:75:3b:78:63:b0:46:81:41:77:8e:11: 97:66:d5:d8:04:80:eb:65:c0:4d:b5:1e:27:85:10: 33:98:8d:98:66:7c:67:c1:12:17:d2:07:82:66:90: ac:6e:80:85:9e:f6:71:41:9a:b8:2b:e2:55:9b:db: 25:94:7e:d0:8c:df:b0:a4:0f:c7:4d:a9:cf:33:39: 9a:15:f2:1a:86:f0:9b:01:72:67:21:6e:dc:06:82: 18:6e:bd:a0:4b:21:92:21:28:68:0a:62:bb:34:17: e9:8a:25:7a:00:07:d6:29:c7:a7:05:e3:26:4c:e9: a7:68:1c:b5:c9:e0:4f:19:3d:d0:ff:74:c8:80:0c: a1:97:1d:dd:a5:8d:d8:94:70:e1:30:5c:11:6c:9a: 35:8d:6a:37:d5:54:4b:c7:45:1b:fb:81:4c:80:e8: 2f:8b:69:32:93:21:81:31:b0:99:2e:4a:ac:a1:5d: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:8C:13:A1:D1:55:B8:EF:55:C2:62:42:EF:8D:0F:65:A2:10:8C X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.196.232.0/22 119.253.32.0-119.253.95.255 119.254.0.0/20 119.254.224.0/20 124.42.64.0/18 IPv6: 2400:7fc0:111::-2400:7fc0:112:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8e:84:cf:1e:ad:4c:1d:59:54:0a:bb:50:7a:eb:67:b7:2b:54: 0f:97:46:e6:1a:3d:6d:2e:00:4f:6f:87:a2:dc:24:1e:ea:c2: f4:b9:da:3e:35:b8:2a:b8:8f:a4:ad:b7:bd:a2:67:12:01:7c: f4:c4:61:c8:db:c5:57:7c:3c:fc:0f:c7:e2:7c:7b:c4:d5:21: f6:3b:3d:54:0f:dc:f7:fc:33:7b:c8:08:f8:dd:dc:ba:ba:80: 96:a2:32:04:1f:fb:89:60:f6:b3:d1:0d:f7:d8:fe:48:4d:b8: b6:65:fd:86:df:1b:a2:64:e1:93:70:51:44:74:b7:47:23:53: ba:91:77:ec:77:8d:ad:31:c1:e6:2e:d5:1e:11:57:79:73:64: ac:4e:14:3b:d4:cb:1a:b4:54:84:7e:67:20:a0:ce:8c:82:fd: 85:f4:b3:2d:bf:0d:67:de:b3:81:87:c4:68:58:9e:21:6c:33: 69:f3:37:39:0a:34:39:bf:fc:c9:82:00:b4:b9:5e:ae:47:07: 76:c2:6b:af:0b:d0:ce:f0:c6:12:50:11:11:c6:2c:8f:65:52: 4a:48:76:f7:91:48:8a:9b:f8:0b:d5:a1:3d:16:0f:9f:53:e4: 3c:e8:7d:d3:21:d6:28:a7:7f:e8:e8:bd:8b:c0:10:37:17:3d: e8:cb:8b:85 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUN6CZy1AOoFG3ph+1qcPhQdyW3d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjA4MjAwOTExMDVaFw0yNzA4MTkwOTE2MDVaMDMxMTAvBgNV BAMTKDA5ODE4QzEzQTFEMTU1QjhFRjU1QzI2MjQyRUY4RDBGNjVBMjEwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYrYLtLjj0bNHKSHIIwk//qV3h Ae+CFvpj/TXcBqFevx9KCPkOxVBz8RVqRJskYBMS9IzxI6XikFX7Yd2oCcs7Hl++ Q/GsZBN2ZN8ZL891O3hjsEaBQXeOEZdm1dgEgOtlwE21HieFEDOYjZhmfGfBEhfS B4JmkKxugIWe9nFBmrgr4lWb2yWUftCM37CkD8dNqc8zOZoV8hqG8JsBcmchbtwG ghhuvaBLIZIhKGgKYrs0F+mKJXoAB9Ypx6cF4yZM6adoHLXJ4E8ZPdD/dMiADKGX Hd2ljdiUcOEwXBFsmjWNajfVVEvHRRv7gUyA6C+LaTKTIYExsJkuSqyhXVOvAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUCYGME6HRVbjvVcJiQu+ND2WiEIwwHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWwYIKwYBBQUHAQcBAf8ETDBKMCwEAgAB MCYDBAIrxOgwDAMEBXf9IAMEBXf9QAMEBHf+AAMEBHf+4AMEBnwqQDAaBAIAAjAU MBIDBwAkAH/AAREDBwAkAH/AARIwDQYJKoZIhvcNAQELBQADggEBAI6Ezx6tTB1Z VAq7UHrrZ7crVA+XRuYaPW0uAE9vh6LcJB7qwvS52j41uCq4j6Stt72iZxIBfPTE YcjbxVd8PPwPx+J8e8TVIfY7PVQP3Pf8M3vICPjd3Lq6gJaiMgQf+4lg9rPRDffY /khNuLZl/YbfG6Jk4ZNwUUR0t0cjU7qRd+x3ja0xweYu1R4RV3lzZKxOFDvUyxq0 VIR+ZyCgzoyC/YX0sy2/DWfes4GHxGhYniFsM2nzNzkKNDm//MmCALS5Xq5HB3bC a68L0M7wxhJQERHGLI9lUkpIdveRSIqb+AvVoT0WD59T5DzofdMh1iinf+jovYvA EDcXPejLi4U= -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:42 2026 by rpki-client