$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: ea+cPwwS0LBVuUEwWrKPu7+ygJBaq9i/HHmuJmTnrLM= Subject key identifier: FF:FF:D0:43:CB:A9:26:23:AD:23:B4:5D:4C:5D:3C:44:6B:C3:D1:A8 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4D0EE680DE2333C9672AC544F093802D082025FB Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa Signing time: Fri 12 Jun 2026 07:44:17 +0000 ROA not before: Fri 12 Jun 2026 07:39:17 +0000 ROA not after: Fri 11 Jun 2027 07:44:17 +0000 asID: 4837 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.192.0/20 maxlen: 20 43.248.196.0/22 maxlen: 22 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.83.72.0/22 maxlen: 22 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:e6:80:de:23:33:c9:67:2a:c5:44:f0:93:80:2d:08:20:25:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jun 12 07:39:17 2026 GMT Not After : Jun 11 07:44:17 2027 GMT Subject: CN=FFFFD043CBA92623AD23B45D4C5D3C446BC3D1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:47:b0:4d:e9:6b:ed:32:46:3a:c0:ab:0c: 42:19:62:70:35:84:57:2b:bd:71:c9:3f:99:e0:86: 25:13:28:1f:29:88:ce:45:a3:5d:56:aa:89:8a:94: 84:ba:91:1c:1c:e0:96:ca:d2:36:a8:d3:c3:5f:60: fb:e6:fc:7c:3c:e7:b8:81:4a:9d:ea:c4:9e:1e:d9: 57:e9:29:23:96:91:37:ca:13:5d:ae:3f:ed:76:44: 0e:f0:8f:8a:b6:b9:c6:e6:ec:85:b4:df:1e:19:a1: cc:84:ae:9e:63:a6:7f:61:01:c6:a7:a1:cd:e3:a9: a0:6e:d1:57:15:87:26:15:11:0b:19:fe:e9:a5:00: 44:bf:6d:29:24:aa:30:8d:e6:d9:43:28:b2:33:de: 88:61:de:24:a9:a3:ed:e3:c7:8a:26:16:30:12:2e: ef:7e:87:80:2d:8b:85:64:1e:97:83:7d:64:71:64: 88:4f:4c:09:07:ab:4e:f3:03:83:d1:4e:35:50:9f: 93:92:6f:fa:ab:8e:d3:51:4c:98:b1:67:a3:0d:05: ac:e1:ae:7b:fd:e7:6c:b9:dd:aa:0f:ee:88:bd:47: 3d:4f:0d:47:6b:37:32:15:88:07:b3:9a:87:83:35: 26:43:9b:8c:92:8f:0e:4a:91:75:7f:37:82:2c:5f: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FF:D0:43:CB:A9:26:23:AD:23:B4:5D:4C:5D:3C:44:6B:C3:D1:A8 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.192.0/20 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:cc:b5:31:d4:7a:5a:0d:ec:c6:3e:e7:cd:c4:82:78:ee:4d: 1b:17:11:7f:1d:36:45:07:d5:e8:b4:db:9c:6d:d7:51:5f:96: 7a:cc:b8:90:6a:ea:c9:58:63:ef:da:1b:ec:44:53:10:13:53: f8:28:88:54:ca:ae:9d:a5:27:33:e8:9d:7f:6f:bb:fc:f6:f2: 86:69:6c:92:be:8b:13:23:98:b7:93:cf:4b:55:1c:23:6f:5a: cf:00:24:3c:e4:a6:57:b1:53:6d:62:2b:22:ae:f1:aa:7e:c9: 61:6b:39:d3:7d:d3:af:09:d1:cf:84:c4:cc:15:ab:25:11:62: f5:25:c1:3d:a4:d6:8e:bd:c6:0a:a0:8f:45:26:1d:fd:43:60: 38:1a:37:fb:ef:d4:8c:6f:1c:64:19:34:ca:f6:28:14:cf:80: c0:d8:41:e9:d0:c9:a3:85:c2:aa:96:33:8b:f4:97:55:43:6a: 7a:8e:8c:83:0f:a7:17:22:f3:60:09:19:99:27:fc:ea:01:3b: d5:b1:b6:19:5c:e6:04:28:72:2c:ef:05:01:b3:81:7b:e1:14: 5d:11:92:6b:1b:cb:5d:f5:00:2b:61:b6:d8:6b:7c:2c:c6:c8: d0:47:bb:ca:69:66:69:1e:c3:db:a6:ab:a5:42:3e:23:81:2d: cf:ef:30:fe -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUTQ7mgN4jM8lnKsVE8JOALQggJfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA2MTIwNzM5MTdaFw0yNzA2MTEwNzQ0MTdaMDMxMTAvBgNV BAMTKEZGRkZEMDQzQ0JBOTI2MjNBRDIzQjQ1RDRDNUQzQzQ0NkJDM0QxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglEewTelr7TJGOsCrDEIZYnA1 hFcrvXHJP5nghiUTKB8piM5Fo11WqomKlIS6kRwc4JbK0jao08NfYPvm/Hw857iB Sp3qxJ4e2VfpKSOWkTfKE12uP+12RA7wj4q2ucbm7IW03x4ZocyErp5jpn9hAcan oc3jqaBu0VcVhyYVEQsZ/umlAES/bSkkqjCN5tlDKLIz3ohh3iSpo+3jx4omFjAS Lu9+h4Ati4VkHpeDfWRxZIhPTAkHq07zA4PRTjVQn5OSb/qrjtNRTJixZ6MNBazh rnv952y53aoP7oi9Rz1PDUdrNzIViAezmoeDNSZDm4ySjw5KkXV/N4IsXwwdAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQU///QQ8upJiOtI7RdTF08RGvD0agwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgAB MDwDBAIr8AADBAIr8TADBAQr+MADBAJnJSwDBAJnKAwDBAJnLaADBAJnU0gDBAJn zfwDBAJn7/QDBAJv3wwwDQYJKoZIhvcNAQELBQADggEBAEvMtTHUeloN7MY+583E gnjuTRsXEX8dNkUH1ei025xt11FflnrMuJBq6slYY+/aG+xEUxATU/goiFTKrp2l JzPonX9vu/z28oZpbJK+ixMjmLeTz0tVHCNvWs8AJDzkplexU21iKyKu8ap+yWFr OdN9068J0c+ExMwVqyURYvUlwT2k1o69xgqgj0UmHf1DYDgaN/vv1IxvHGQZNMr2 KBTPgMDYQenQyaOFwqqWM4v0l1VDanqOjIMPpxci82AJGZkn/OoBO9Wxthlc5gQo cizvBQGzgXvhFF0Rkmsby131ACthtthrfCzGyNBHu8ppZmkew9umq6VCPiOBLc/v MP4= -----END CERTIFICATE-----Generated at Sun Jun 14 02:58:41 2026 by rpki-client