$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9808.roa File: AS9808.roa (raw, json) Hash identifier: 9DHAOxqPuZWJZQUPJlPeIiLta+TaGPyXD7TDGW80KoU= Subject key identifier: 2A:7B:77:83:40:FB:51:3E:98:0A:73:AD:28:65:19:F7:86:D1:1B:C3 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 5630CEDD15E1BDDD23193A1FA0A2EC12536B9DED Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9808.roa Signing time: Mon 08 Jun 2026 02:23:34 +0000 ROA not before: Mon 08 Jun 2026 02:18:34 +0000 ROA not after: Mon 07 Jun 2027 02:23:34 +0000 asID: 9808 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:30:ce:dd:15:e1:bd:dd:23:19:3a:1f:a0:a2:ec:12:53:6b:9d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:34 2026 GMT Not After : Jun 7 02:23:34 2027 GMT Subject: CN=2A7B778340FB513E980A73AD286519F786D11BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:e6:3e:24:ef:6c:82:85:2f:13:90:c4:92: 78:33:57:6a:0a:db:f2:77:49:30:4a:c9:21:1c:a2: 29:3f:c8:3b:f8:8c:5b:76:1f:93:8f:23:d7:09:8e: ee:85:30:ec:b6:aa:da:c3:84:6b:de:51:c9:ef:1d: bc:c8:65:7f:59:2b:67:94:df:ca:dd:19:a8:fe:24: 25:b9:24:15:8b:82:5d:6f:2b:70:01:c8:3c:41:5f: 88:61:c6:1b:ac:57:06:0c:e5:b6:b8:de:ca:1d:00: c9:31:74:d6:af:a0:1a:d1:23:6e:59:f7:66:79:82: cc:09:00:78:e5:e3:0d:37:1e:6f:ef:08:bb:18:3f: 27:70:31:70:f0:e3:27:08:71:85:60:5e:6c:73:33: 1b:b7:1b:83:61:bb:d6:b5:92:c1:31:c5:47:56:47: 8a:e4:af:44:24:e8:fb:d9:59:55:a3:1f:13:5a:4b: 41:9d:e0:9b:4d:ca:68:41:71:76:d2:45:eb:41:80: 36:7c:39:23:99:bf:f6:4c:2f:f0:5e:06:80:38:23: d5:bc:19:a5:dc:01:c4:98:ca:45:c5:fe:7f:1a:1f: 05:66:21:f8:fd:9d:c2:d7:d9:7e:08:47:d6:67:88: 00:6f:35:64:c7:b6:e6:ea:ae:89:da:07:de:fa:d7: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:77:83:40:FB:51:3E:98:0A:73:AD:28:65:19:F7:86:D1:1B:C3 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 Signature Algorithm: sha256WithRSAEncryption b0:1d:3f:e5:8e:d0:8c:df:cf:98:88:60:43:fe:2d:ae:a6:d2: aa:71:d8:2a:7c:8f:8f:48:c2:13:5f:2f:60:bb:96:5e:c6:7a: 1b:2a:fd:12:75:a2:c3:ee:4f:e2:2a:37:78:b7:38:70:03:73: d1:e1:a5:3f:20:28:f8:0f:1e:43:6b:5b:d9:5e:3d:df:4d:2d: 28:59:48:32:16:f3:fd:ff:3e:60:3c:df:b7:7b:33:53:a9:b2: db:b8:1c:e0:5e:af:1a:c3:83:94:4b:8d:f4:8e:e6:4b:2c:48: 34:b2:a9:a8:19:be:59:d2:45:1c:17:5c:5c:51:ca:84:ea:84: af:b0:06:0d:65:3c:f2:af:f7:1f:c4:4e:92:b8:5a:41:30:9f: 65:66:68:3b:ad:a6:99:d5:54:92:79:60:c4:d4:1f:13:52:89: 0c:48:f1:04:36:19:1b:de:3a:33:7f:ac:59:a4:94:66:d5:e3: a4:e4:ed:80:7b:bb:a9:f0:0a:a9:27:a7:db:35:15:65:7b:9a: b9:9b:0e:61:78:13:69:9b:11:96:5b:22:2b:60:79:00:ad:82: 1e:af:df:67:26:ad:27:69:6a:c9:88:2c:f4:c5:c4:4f:d8:0f: 64:be:43:df:11:cc:7e:a1:09:0e:a3:fc:fb:c3:09:4d:6d:3a: 4d:8f:c4:ff -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVjDO3RXhvd0jGTofoKLsElNrne0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzRaFw0yNzA2MDcwMjIzMzRaMDMxMTAvBgNV BAMTKDJBN0I3NzgzNDBGQjUxM0U5ODBBNzNBRDI4NjUxOUY3ODZEMTFCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwluY+JO9sgoUvE5DEkngzV2oK 2/J3STBKySEcoik/yDv4jFt2H5OPI9cJju6FMOy2qtrDhGveUcnvHbzIZX9ZK2eU 38rdGaj+JCW5JBWLgl1vK3AByDxBX4hhxhusVwYM5ba43sodAMkxdNavoBrRI25Z 92Z5gswJAHjl4w03Hm/vCLsYPydwMXDw4ycIcYVgXmxzMxu3G4Nhu9a1ksExxUdW R4rkr0Qk6PvZWVWjHxNaS0Gd4JtNymhBcXbSRetBgDZ8OSOZv/ZML/BeBoA4I9W8 GaXcAcSYykXF/n8aHwVmIfj9ncLX2X4IR9ZniABvNWTHtubqronaB976116JAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUKnt3g0D7UT6YCnOtKGUZ94bRG8MwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzk4MDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgY0GCCsGAQUFBwEHAQH/BH4wfDB6BAIA ATB0AwMAKp4DBAc6U4ADBAc7lwADBAc7vwADBAJn96gwDAMEB3iEgAMEB3iFAAMD AXiGAwMBfPowCwMDAbauAwQEtq/gAwMBt1QDBAPLxAADBAXSTYAwDAMEBdNjoAME BdNjwDALAwMA05cDBAXTmAADBAbTmEAwDQYJKoZIhvcNAQELBQADggEBALAdP+WO 0Izfz5iIYEP+La6m0qpx2Cp8j49IwhNfL2C7ll7Gehsq/RJ1osPuT+IqN3i3OHAD c9HhpT8gKPgPHkNrW9lePd9NLShZSDIW8/3/PmA837d7M1Opstu4HOBerxrDg5RL jfSO5kssSDSyqagZvlnSRRwXXFxRyoTqhK+wBg1lPPKv9x/ETpK4WkEwn2VmaDut ppnVVJJ5YMTUHxNSiQxI8QQ2GRveOjN/rFmklGbV46Tk7YB7u6nwCqknp9s1FWV7 mrmbDmF4E2mbEZZbIitgeQCtgh6v32cmrSdpasmILPTFxE/YD2S+Q98RzH6hCQ6j /PvDCU1tOk2PxP8= -----END CERTIFICATE-----Generated at Sat Jun 13 15:54:50 2026 by rpki-client