$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4811.roa File: AS4811.roa (raw, json) Hash identifier: re88SgBUHxD9XWTj6cbJ1sbW78bcEtoKi+zUptMEn/s= Subject key identifier: FF:B6:F9:F9:47:17:A1:0F:F4:C6:07:50:72:0B:2F:84:9B:86:2B:47 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 12755AA05770C5B72EE612818058D56AA63E7FA6 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4811.roa Signing time: Mon 22 Jun 2026 15:43:51 +0000 ROA not before: Mon 22 Jun 2026 15:38:51 +0000 ROA not after: Mon 21 Jun 2027 15:43:51 +0000 asID: 4811 IP address blocks: 2405:1480:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:75:5a:a0:57:70:c5:b7:2e:e6:12:81:80:58:d5:6a:a6:3e:7f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 22 15:38:51 2026 GMT Not After : Jun 21 15:43:51 2027 GMT Subject: CN=FFB6F9F94717A10FF4C60750720B2F849B862B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:29:36:f8:80:0e:82:cf:ab:0e:e5:5b:b7: 8e:4f:87:e5:af:94:84:7a:29:0c:43:56:63:b1:9d: 35:af:0a:0e:68:dc:8c:33:5a:c7:01:ce:05:c9:77: 69:68:1a:64:ac:f2:94:d5:e0:bc:fd:a4:cd:eb:1e: 43:3c:13:79:3d:5b:36:e2:09:8f:3e:ea:1e:eb:f4: cb:db:58:59:52:8d:f5:dc:c5:ee:e8:e6:e3:a6:5b: 3d:b0:00:c7:8f:9b:46:b3:b2:5d:06:1e:aa:66:02: 14:1a:ee:09:fa:00:55:c2:1d:bf:2e:c4:64:b2:97: ec:f9:69:7c:67:1b:ef:56:98:ae:05:b4:55:20:35: 42:be:11:f3:0f:bd:9c:00:39:7c:53:8f:af:12:d0: 2f:2b:4c:29:fb:1e:d0:f2:2b:eb:63:15:79:bb:05: 95:8e:77:f5:cc:ce:32:52:0e:b8:1d:cd:dd:b8:28: 3c:96:30:b0:c9:1d:ac:c5:18:15:63:fe:f5:83:08: e5:fa:47:23:84:d2:88:bd:5b:9e:9e:b5:52:71:fe: 37:52:da:80:55:79:02:58:02:15:fc:7b:68:33:eb: 57:d4:e5:84:cf:69:5c:9c:03:f1:45:2d:e8:0c:60: 79:91:50:eb:6e:19:57:43:56:ec:2e:a0:b4:92:16: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B6:F9:F9:47:17:A1:0F:F4:C6:07:50:72:0B:2F:84:9B:86:2B:47 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS4811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1480:1000::/48 Signature Algorithm: sha256WithRSAEncryption 5f:d1:d7:43:7b:a2:54:80:5d:ae:b1:d5:47:98:e3:78:21:e4: c9:a6:f3:a0:4f:bb:0a:21:1f:cb:b7:e5:0e:20:6e:3a:ae:d2: 06:20:7c:33:fc:6b:19:3b:92:cd:19:51:93:d3:15:b0:06:d2: 31:37:91:2c:f6:bd:da:ff:52:de:80:33:03:6e:6f:dc:0b:10: fa:a7:e8:b3:a5:d3:df:cb:1f:1a:a1:80:35:48:66:4d:27:57: 1e:d3:aa:78:4a:da:e7:57:27:55:54:92:ae:35:f7:6e:5f:26: 51:ed:60:15:13:1f:5f:43:47:2c:d4:d6:07:d4:67:6c:0e:44: 17:55:8c:7a:4f:64:24:5a:2c:b1:48:6d:31:bf:cd:f0:06:ec: 30:25:92:66:30:94:31:83:65:e3:cc:28:df:49:4a:1f:df:b5: 38:79:04:67:92:f7:92:c4:08:ac:49:10:f1:a0:94:42:43:1a: f3:fd:c4:c7:a3:9c:ba:9a:c4:92:d0:80:65:4b:3b:94:b0:28: fd:a7:a8:3a:dd:21:85:6a:bb:1c:de:7f:59:e8:d6:76:4e:4d: 22:77:98:63:43:58:75:d9:6b:51:97:23:17:53:60:56:26:4f: 19:76:7c:60:96:36:b1:a8:ae:f1:b2:c1:93:2f:03:39:bc:f5: 7a:e1:73:ae -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUEnVaoFdwxbcu5hKBgFjVaqY+f6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MjIxNTM4NTFaFw0yNzA2MjExNTQzNTFaMDMxMTAvBgNV BAMTKEZGQjZGOUY5NDcxN0ExMEZGNEM2MDc1MDcyMEIyRjg0OUI4NjJCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGCk2+IAOgs+rDuVbt45Ph+Wv lIR6KQxDVmOxnTWvCg5o3IwzWscBzgXJd2loGmSs8pTV4Lz9pM3rHkM8E3k9Wzbi CY8+6h7r9MvbWFlSjfXcxe7o5uOmWz2wAMePm0azsl0GHqpmAhQa7gn6AFXCHb8u xGSyl+z5aXxnG+9WmK4FtFUgNUK+EfMPvZwAOXxTj68S0C8rTCn7HtDyK+tjFXm7 BZWOd/XMzjJSDrgdzd24KDyWMLDJHazFGBVj/vWDCOX6RyOE0oi9W56etVJx/jdS 2oBVeQJYAhX8e2gz61fU5YTPaVycA/FFLegMYHmRUOtuGVdDVuwuoLSSFhJRAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU/7b5+UcXoQ/0xgdQcgsvhJuGK0cwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC9BUzQ4MTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkBRSAEAAwDQYJKoZIhvcNAQELBQADggEBAF/R10N7olSAXa6x1UeY43gh 5Mmm86BPuwohH8u35Q4gbjqu0gYgfDP8axk7ks0ZUZPTFbAG0jE3kSz2vdr/Ut6A MwNub9wLEPqn6LOl09/LHxqhgDVIZk0nVx7TqnhK2udXJ1VUkq41925fJlHtYBUT H19DRyzU1gfUZ2wORBdVjHpPZCRaLLFIbTG/zfAG7DAlkmYwlDGDZePMKN9JSh/f tTh5BGeS95LECKxJEPGglEJDGvP9xMejnLqaxJLQgGVLO5SwKP2nqDrdIYVquxze f1no1nZOTSJ3mGNDWHXZa1GXIxdTYFYmTxl2fGCWNrGorvGywZMvAzm89Xrhc64= -----END CERTIFICATE-----Generated at Tue Jul 14 23:36:29 2026 by rpki-client