$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS4808.roa File: AS4808.roa (raw, json) Hash identifier: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ= Subject key identifier: B3:B2:AB:6A:DC:DA:EA:8D:DF:A7:14:D8:D2:EB:47:90:FF:1D:0B:88 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 3041562C91891AF0FAC0EFA8EA110ED502850324 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS4808.roa Signing time: Thu 16 Apr 2026 06:29:06 +0000 ROA not before: Thu 16 Apr 2026 06:24:06 +0000 ROA not after: Thu 15 Apr 2027 06:29:06 +0000 asID: 4808 IP address blocks: 101.124.0.0/16 maxlen: 24 101.124.0.0/20 maxlen: 20 101.124.19.0/24 maxlen: 24 101.124.22.0/24 maxlen: 24 101.124.62.0/24 maxlen: 24 114.67.128.0/17 maxlen: 24 114.67.131.0/24 maxlen: 24 114.67.136.0/24 maxlen: 24 114.67.150.0/24 maxlen: 24 114.67.152.0/22 maxlen: 22 114.67.156.0/24 maxlen: 24 114.67.159.0/24 maxlen: 24 114.67.224.0/19 maxlen: 19 116.196.64.0/18 maxlen: 24 116.198.0.0/16 maxlen: 24 116.198.0.0/18 maxlen: 18 116.198.11.0/24 maxlen: 24 116.198.64.0/21 maxlen: 21 116.198.72.0/22 maxlen: 22 116.198.96.0/19 maxlen: 19 117.72.0.0/16 maxlen: 24 117.72.1.0/24 maxlen: 24 2402:db40::/32 maxlen: 48 2403:1ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:41:56:2c:91:89:1a:f0:fa:c0:ef:a8:ea:11:0e:d5:02:85:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 16 06:24:06 2026 GMT Not After : Apr 15 06:29:06 2027 GMT Subject: CN=B3B2AB6ADCDAEA8DDFA714D8D2EB4790FF1D0B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:ab:9b:55:50:c9:9a:ee:96:a9:2c:f7:3f: e6:e1:fb:22:f4:e3:06:ab:5b:fb:03:f5:41:a6:22: 19:8a:20:c9:80:dd:cc:82:aa:03:1d:bd:db:92:cd: 9a:1d:0d:66:3f:39:f8:71:80:12:48:88:30:0f:4d: 9d:c2:f6:d1:28:0f:7d:1f:e7:49:63:d2:0a:1e:d1: 07:af:03:af:bc:cb:a5:bc:b2:e3:c7:d5:65:21:f2: 34:6d:5d:2a:12:39:7b:43:f8:3e:59:81:06:a7:d8: 3d:9b:d3:fc:ed:86:b3:58:46:3a:c6:62:5e:f4:ed: b2:d4:70:da:23:e0:99:0d:18:46:9e:7a:24:70:35: 53:e5:7a:01:e4:1f:f2:81:d1:e7:31:35:df:2a:f7: c5:48:81:ae:e1:24:54:a5:18:ba:84:a0:d5:27:ce: e1:21:de:a2:a4:36:15:66:ca:e9:1b:65:6b:7d:6e: ce:85:12:e0:ca:04:02:e0:52:e5:6d:de:93:3d:3a: 0e:bd:4c:f3:a9:14:b3:eb:af:84:b2:65:3a:84:86: 55:18:fc:59:55:c9:9e:55:25:53:f2:3a:17:73:9e: 27:0e:63:e7:9e:af:ea:af:c6:aa:11:da:96:26:c5: 81:f1:a8:93:72:82:1d:6a:66:21:69:82:6a:80:7d: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B2:AB:6A:DC:DA:EA:8D:DF:A7:14:D8:D2:EB:47:90:FF:1D:0B:88 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS4808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.124.0.0/16 114.67.128.0/17 116.196.64.0/18 116.198.0.0/16 117.72.0.0/16 IPv6: 2402:db40::/32 2403:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:33:17:34:fd:9a:d4:9b:88:fd:a6:c9:c5:2c:b8:a7:91:59: f3:88:c8:57:22:79:ee:84:13:99:3c:2b:d9:0f:2c:a8:d5:58: a8:44:42:67:dd:d5:ec:1c:1f:52:7c:44:1a:69:6f:48:62:9d: c5:55:49:76:fb:65:d7:ff:2d:a6:35:a2:c1:a0:47:3f:66:58: 61:56:68:23:0a:6d:1c:54:94:2b:79:9e:ec:ea:84:8d:f1:a2: 99:42:8a:7a:98:7d:31:43:de:17:4f:38:4d:9e:3a:0c:26:31: 1b:c6:a4:21:d0:17:aa:27:15:2c:07:bb:4d:c0:a4:81:4e:4e: 61:8e:ff:4b:ad:b6:a4:6c:2a:7b:15:cf:be:b0:de:06:68:d4: 07:ca:8e:95:9d:01:43:b0:bc:45:36:e9:b7:2f:46:e2:c7:69: b3:08:03:01:5f:df:be:2b:58:16:71:b1:f1:ad:49:a0:fe:6e: 25:3c:12:be:f4:24:d2:c7:e6:a2:8f:a3:ea:3b:6d:0b:e7:bf: fc:d9:42:40:88:32:1e:79:89:f0:9d:f5:f0:cb:f6:52:11:ad: 79:a7:a2:43:cc:7a:dd:58:92:9d:a7:2f:3f:ee:6d:23:3f:e3: 8c:7e:a2:a2:07:b9:ba:54:fb:87:b4:84:56:8a:91:dc:38:ec: f1:70:64:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUMEFWLJGJGvD6wO+o6hEO1QKFAyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTYwNjI0MDZaFw0yNzA0MTUwNjI5MDZaMDMxMTAvBgNV BAMTKEIzQjJBQjZBRENEQUVBOERERkE3MTREOEQyRUI0NzkwRkYxRDBCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZaubVVDJmu6WqSz3P+bh+yL0 4warW/sD9UGmIhmKIMmA3cyCqgMdvduSzZodDWY/OfhxgBJIiDAPTZ3C9tEoD30f 50lj0goe0QevA6+8y6W8suPH1WUh8jRtXSoSOXtD+D5ZgQan2D2b0/zthrNYRjrG Yl707bLUcNoj4JkNGEaeeiRwNVPlegHkH/KB0ecxNd8q98VIga7hJFSlGLqEoNUn zuEh3qKkNhVmyukbZWt9bs6FEuDKBALgUuVt3pM9Og69TPOpFLPrr4SyZTqEhlUY /FlVyZ5VJVPyOhdznicOY+eer+qvxqoR2pYmxYHxqJNygh1qZiFpgmqAfcuXAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUs7Kratza6o3fpxTY0utHkP8dC4gwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzQ4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUHAQcBAf8EOzA5MCEEAgAB MBsDAwBlfAMEB3JDgAMEBnTEQAMDAHTGAwMAdUgwFAQCAAIwDgMFACQC20ADBQAk Ax7AMA0GCSqGSIb3DQEBCwUAA4IBAQBuMxc0/ZrUm4j9psnFLLinkVnziMhXInnu hBOZPCvZDyyo1VioREJn3dXsHB9SfEQaaW9IYp3FVUl2+2XX/y2mNaLBoEc/Zlhh VmgjCm0cVJQreZ7s6oSN8aKZQop6mH0xQ94XTzhNnjoMJjEbxqQh0BeqJxUsB7tN wKSBTk5hjv9LrbakbCp7Fc++sN4GaNQHyo6VnQFDsLxFNum3L0bix2mzCAMBX9++ K1gWcbHxrUmg/m4lPBK+9CTSx+aij6PqO20L57/82UJAiDIeeYnwnfXwy/ZSEa15 p6JDzHrdWJKdpy8/7m0jP+OMfqKiB7m6VPuHtIRWipHcOOzxcGRU -----END CERTIFICATE-----Generated at Fri Apr 17 06:14:07 2026 by rpki-client