$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS9808.roa File: AS9808.roa (raw, json) Hash identifier: t4WerZCYzTuir9tKvNEp3fsoBfQB4wPhTOUpMSZMOwM= Subject key identifier: B5:6C:D3:23:08:10:A8:B6:33:58:B1:71:4F:83:04:DA:71:F1:87:71 Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C Certificate serial: 353BE8734D4808E3890785C554BF84B67243B021 Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS9808.roa Signing time: Thu 20 Aug 2026 09:16:05 +0000 ROA not before: Thu 20 Aug 2026 09:11:05 +0000 ROA not after: Thu 19 Aug 2027 09:16:05 +0000 asID: 9808 IP address blocks: 43.196.232.0/22 maxlen: 22 2400:7fc0:111::/48 maxlen: 48 2400:7fc0:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3b:e8:73:4d:48:08:e3:89:07:85:c5:54:bf:84:b6:72:43:b0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C Validity Not Before: Aug 20 09:11:05 2026 GMT Not After : Aug 19 09:16:05 2027 GMT Subject: CN=B56CD3230810A8B63358B1714F8304DA71F18771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:ea:b7:8a:96:6d:28:f6:f8:65:fa:ab:9c: 53:11:38:e0:f3:22:30:77:f7:27:af:00:3b:01:2f: 45:3f:76:33:42:6b:bb:fe:21:87:3a:f4:fc:30:ab: 13:46:28:03:5c:25:d5:fe:24:67:7d:3a:b7:c1:89: f7:5b:92:f3:fe:d2:de:35:6c:c3:82:30:a3:d4:25: f8:f8:a6:ef:bd:d7:a7:b1:b8:a7:8a:9c:38:fd:0a: a6:c2:8e:ba:4f:70:53:f0:ba:84:cf:fd:ed:fe:7f: 9f:5f:05:40:d7:a8:7d:84:a2:b2:f7:c0:8d:11:4f: 1d:a9:a9:93:a4:bb:c6:18:b2:16:b3:bc:34:f3:e3: 72:78:0f:11:01:57:10:b1:3d:03:75:6d:56:00:6a: 04:65:03:23:d0:30:8f:70:cf:c6:29:26:db:7a:50: b0:f9:be:a6:61:90:ff:9e:fe:49:1e:7f:07:cb:ff: 65:a0:ad:19:d0:07:ed:8d:bc:5a:74:eb:45:59:04: bd:1f:9b:b7:a6:6e:62:17:f0:ed:f3:6d:92:e6:cb: 19:fa:ed:0a:07:4d:6d:c4:6d:86:75:5d:9b:66:39: 4c:a0:29:85:34:00:98:8b:ca:85:00:b6:7d:c1:d0: 17:f5:97:58:de:07:aa:1f:ae:d4:f7:36:de:03:7b: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:D3:23:08:10:A8:B6:33:58:B1:71:4F:83:04:DA:71:F1:87:71 X509v3 Authority Key Identifier: keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS9808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.196.232.0/22 IPv6: 2400:7fc0:111::-2400:7fc0:112:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 99:96:d7:99:44:16:e5:95:cd:7b:2f:93:9f:7e:11:7e:7d:62: e9:0d:6b:a8:e5:b0:2f:f5:b9:e9:30:cd:02:47:28:34:f3:90: 81:d5:24:20:e9:ce:ab:7d:63:16:2e:6e:1e:26:3e:27:b5:49: 4f:48:a5:5c:98:c2:93:33:28:0a:0f:c3:15:cf:cf:d4:66:b6: 73:eb:83:3a:e8:e0:66:45:bf:f3:a7:03:b0:3f:6c:99:01:61: c2:20:60:21:05:0f:63:cf:5b:23:bc:e9:29:e6:d4:ef:8a:b2: e5:76:50:95:b7:c8:44:4b:cf:1f:c8:42:ec:4e:6a:43:41:4a: 8a:6a:16:2e:d0:c1:ea:a3:2b:4f:03:ae:02:dd:a9:00:af:e3: 6d:19:88:d6:53:82:67:f5:fd:7d:b4:67:62:5f:34:f3:cc:b7: ce:76:29:c3:d6:66:88:54:20:7a:1a:0b:57:33:98:2a:52:86: 09:0a:43:eb:0a:85:68:34:50:9e:2b:c1:3a:5b:bc:0e:3c:9f: 67:2c:5d:89:87:ee:04:5c:a4:0e:f8:95:76:b9:30:80:9b:5a: 31:2d:62:06:a1:55:bc:c1:aa:b0:0e:5e:b1:3b:66:40:25:64: 84:7c:fe:62:9e:7a:e9:57:93:91:1e:20:5f:dc:d2:14:3f:b4: 83:9c:b4:29 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUNTvoc01ICOOJB4XFVL+EtnJDsCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFG Mjc1QkQ4QzAeFw0yNjA4MjAwOTExMDVaFw0yNzA4MTkwOTE2MDVaMDMxMTAvBgNV BAMTKEI1NkNEMzIzMDgxMEE4QjYzMzU4QjE3MTRGODMwNERBNzFGMTg3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMruq3ipZtKPb4ZfqrnFMROODz IjB39yevADsBL0U/djNCa7v+IYc69PwwqxNGKANcJdX+JGd9OrfBifdbkvP+0t41 bMOCMKPUJfj4pu+916exuKeKnDj9CqbCjrpPcFPwuoTP/e3+f59fBUDXqH2EorL3 wI0RTx2pqZOku8YYshazvDTz43J4DxEBVxCxPQN1bVYAagRlAyPQMI9wz8YpJtt6 ULD5vqZhkP+e/kkefwfL/2WgrRnQB+2NvFp060VZBL0fm7embmIX8O3zbZLmyxn6 7QoHTW3EbYZ1XZtmOUygKYU0AJiLyoUAtn3B0Bf1l1jeB6ofrtT3Nt4DexkhAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUtWzTIwgQqLYzWLFxT4ME2nHxh3EwHwYDVR0j BBgwFoAUn/Z5pIvatYIBN8JRMzzoMfJ1vYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8xLzlGRjY3OUE0OEJEQUI1ODIwMTM3QzI1MTMzM0NF ODMxRjI3NUJEOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZGNjc5QTQ4QkRBQjU4MjAxMzdDMjUxMzMzQ0U4MzFGMjc1QkQ4Qy5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMS9BUzk4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMAwEAgAB MAYDBAIrxOgwGgQCAAIwFDASAwcAJAB/wAERAwcAJAB/wAESMA0GCSqGSIb3DQEB CwUAA4IBAQCZlteZRBbllc17L5OffhF+fWLpDWuo5bAv9bnpMM0CRyg085CB1SQg 6c6rfWMWLm4eJj4ntUlPSKVcmMKTMygKD8MVz8/UZrZz64M66OBmRb/zpwOwP2yZ AWHCIGAhBQ9jz1sjvOkp5tTvirLldlCVt8hES88fyELsTmpDQUqKahYu0MHqoytP A64C3akAr+NtGYjWU4Jn9f19tGdiXzTzzLfOdinD1maIVCB6GgtXM5gqUoYJCkPr CoVoNFCeK8E6W7wOPJ9nLF2Jh+4EXKQO+JV2uTCAm1oxLWIGoVW8waqwDl6xO2ZA JWSEfP5innrpV5ORHiBf3NIUP7SDnLQp -----END CERTIFICATE-----Generated at Sat Aug 29 06:20:20 2026 by rpki-client