$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS4837.roa File: AS4837.roa (raw, json) Hash identifier: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw= Subject key identifier: CE:DB:FB:86:D3:23:9C:3D:3E:75:03:11:E6:17:97:46:25:E3:CF:C3 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 7D87678EA59D6466E075F8D01E5EB1186ECA8F76 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS4837.roa Signing time: Thu 16 Apr 2026 06:17:22 +0000 ROA not before: Thu 16 Apr 2026 06:12:22 +0000 ROA not after: Thu 15 Apr 2027 06:17:22 +0000 asID: 4837 IP address blocks: 117.72.0.0/16 maxlen: 24 117.72.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:87:67:8e:a5:9d:64:66:e0:75:f8:d0:1e:5e:b1:18:6e:ca:8f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 16 06:12:22 2026 GMT Not After : Apr 15 06:17:22 2027 GMT Subject: CN=CEDBFB86D3239C3D3E750311E617974625E3CFC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:8c:28:4c:71:08:af:df:15:33:18:2d:6f: 1a:06:28:31:f1:84:00:c5:97:e7:2b:7c:6c:2e:a8: d6:28:ec:68:cd:46:ab:9a:fd:ca:9b:13:c8:2a:f5: 17:9b:38:f2:c4:e8:94:bf:89:2d:20:cd:3b:ca:dd: 61:e1:bc:04:90:a3:b5:4a:64:88:b3:8f:bd:a8:1e: 04:c8:42:fb:22:51:95:6f:55:47:41:fb:51:c9:c5: a7:c0:b5:6a:5a:fd:2d:47:af:7b:e5:7b:d4:74:73: b8:c2:0d:8a:70:ee:da:16:1e:0d:87:1b:bb:9f:98: 3d:bb:91:18:95:47:29:92:6d:23:c4:d1:4c:a7:4b: e4:68:54:f5:a9:7e:b5:b9:b5:fd:b0:0e:03:4a:df: a4:67:42:64:a9:36:57:bc:e9:6b:4f:dd:06:91:88: ec:7a:76:2d:db:fc:46:4d:9b:c0:9c:08:c0:b5:e4: 31:9b:17:db:d7:72:c7:02:eb:f7:a2:7b:9e:7b:05: ef:51:fc:1e:dd:dc:7f:42:07:de:06:c8:36:0f:e5: 01:b4:6f:fa:1f:ed:8c:cf:f1:f9:89:e1:e9:58:a1: c2:c8:c7:2b:65:7f:fc:79:00:47:8a:27:02:57:91: 2c:c4:34:18:37:d1:53:94:6d:16:cb:3c:aa:fe:4f: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DB:FB:86:D3:23:9C:3D:3E:75:03:11:E6:17:97:46:25:E3:CF:C3 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS4837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption c2:7a:fa:09:da:b7:9d:94:c9:4f:0d:b2:81:06:a7:16:03:ab: 10:98:fa:cc:6b:48:98:68:89:ad:25:ab:8f:bf:ce:7e:58:7e: ce:d9:3c:de:2e:39:7f:7a:e1:2e:ea:73:6c:ef:90:4a:23:c4: 4c:d8:3f:dd:ec:3b:43:a2:6c:a8:ec:82:59:92:fe:35:8a:2e: a6:2d:ac:82:36:cb:5e:46:2d:84:f2:7c:cf:c2:81:81:54:25: 7b:ff:bd:f7:f2:18:86:01:fa:ec:93:dd:db:75:45:fa:13:ff: 18:15:68:77:40:7b:ec:42:a0:b5:42:bb:5f:7d:99:a7:d5:38: 9c:d7:10:9a:46:22:b6:d4:ea:71:b6:3a:f1:ac:f9:c4:ed:9f: 93:da:a4:b4:d0:e6:87:34:7f:1d:71:93:b0:8c:72:12:fd:04: a0:dd:12:a4:37:2a:de:d1:12:92:fb:ca:b6:92:ad:94:09:d3: c7:49:ec:2d:44:4c:d6:7d:8b:d1:74:f9:73:10:a3:3f:6d:5c: a0:a4:f8:79:4b:ff:c5:41:7f:60:65:19:2d:49:1a:f7:f0:f5: 27:38:08:92:53:61:b1:74:a5:10:37:00:6d:4f:2f:16:55:c5: dd:d2:17:2b:76:b6:62:44:f3:18:08:94:12:ba:0c:c6:c1:cb: b0:1d:56:8d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUfYdnjqWdZGbgdfjQHl6xGG7Kj3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTYwNjEyMjJaFw0yNzA0MTUwNjE3MjJaMDMxMTAvBgNV BAMTKENFREJGQjg2RDMyMzlDM0QzRTc1MDMxMUU2MTc5NzQ2MjVFM0NGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyIwoTHEIr98VMxgtbxoGKDHx hADFl+crfGwuqNYo7GjNRqua/cqbE8gq9RebOPLE6JS/iS0gzTvK3WHhvASQo7VK ZIizj72oHgTIQvsiUZVvVUdB+1HJxafAtWpa/S1Hr3vle9R0c7jCDYpw7toWHg2H G7ufmD27kRiVRymSbSPE0UynS+RoVPWpfrW5tf2wDgNK36RnQmSpNle86WtP3QaR iOx6di3b/EZNm8CcCMC15DGbF9vXcscC6/eie557Be9R/B7d3H9CB94GyDYP5QG0 b/of7YzP8fmJ4elYocLIxytlf/x5AEeKJwJXkSzENBg30VOUbRbLPKr+T711AgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUztv7htMjnD0+dQMR5heXRiXjz8MwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzQ4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB1SDANBgkqhkiG9w0BAQsFAAOCAQEAwnr6Cdq3nZTJTw2ygQanFgOrEJj6 zGtImGiJrSWrj7/Oflh+ztk83i45f3rhLupzbO+QSiPETNg/3ew7Q6JsqOyCWZL+ NYoupi2sgjbLXkYthPJ8z8KBgVQle/+99/IYhgH67JPd23VF+hP/GBVod0B77EKg tUK7X32Zp9U4nNcQmkYittTqcbY68az5xO2fk9qktNDmhzR/HXGTsIxyEv0EoN0S pDcq3tESkvvKtpKtlAnTx0nsLURM1n2L0XT5cxCjP21coKT4eUv/xUF/YGUZLUka 9/D1JzgIklNhsXSlEDcAbU8vFlXF3dIXK3a2YkTzGAiUEroMxsHLsB1WjQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:13:38 2026 by rpki-client