$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa File: AS56046.roa (raw, json) Hash identifier: 8MvzYVqIb60aBw7ICs4pxcXONgJRqwTj09zKGBVIEto= Subject key identifier: A3:A6:14:18:5C:0E:E7:9A:04:D4:71:5F:76:E0:4A:14:AA:A9:9E:0B Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 09C19F20D0536212E20E9ED8DB851E1EB4C1AA12 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa Signing time: Tue 14 Jul 2026 07:19:55 +0000 ROA not before: Tue 14 Jul 2026 07:14:55 +0000 ROA not after: Tue 13 Jul 2027 07:19:55 +0000 asID: 56046 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.184.0/21 maxlen: 24 43.248.192.0/20 maxlen: 20 43.248.196.0/22 maxlen: 22 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.83.72.0/22 maxlen: 22 103.87.180.0/22 maxlen: 22 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c1:9f:20:d0:53:62:12:e2:0e:9e:d8:db:85:1e:1e:b4:c1:aa:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 14 07:14:55 2026 GMT Not After : Jul 13 07:19:55 2027 GMT Subject: CN=A3A614185C0EE79A04D4715F76E04A14AAA99E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:69:6f:87:21:0d:b4:f8:44:98:ad:9f:da: ee:6a:8f:8a:ff:7c:ac:a3:a1:65:b4:80:1a:0c:9a: 67:55:39:60:27:67:29:ed:c0:8e:da:14:42:47:be: 3e:e5:fa:10:63:1c:49:04:4a:c7:e4:1d:21:22:1d: 22:be:00:7b:19:bf:4d:28:57:51:dd:b4:05:b2:71: 88:c9:42:a3:7f:a5:93:34:eb:8d:ec:bc:28:bd:ea: 69:3e:6d:b4:a3:c7:a7:ef:db:f8:44:61:17:43:bc: 3c:e0:d9:57:76:37:2e:cd:17:9a:08:13:c7:77:2f: 72:3b:6d:57:6f:6e:cf:71:39:c5:a4:2b:85:e8:b4: d8:89:bf:45:7a:95:8c:24:c2:53:a0:48:35:c4:cd: 2b:97:97:1a:53:df:6e:8e:e2:ed:2f:a9:16:8e:a4: c3:27:28:57:83:5a:07:ce:45:fe:4e:35:4b:e2:f6: 95:34:9d:58:0f:7e:af:9c:e8:eb:91:6b:1c:55:df: 9b:4c:19:26:bd:c8:a5:c2:d9:cc:af:13:b3:42:37: 08:dc:13:bf:a5:18:e7:be:51:4b:7f:93:ce:c2:a2: 3d:28:3f:48:f0:aa:97:a6:b4:a2:02:4d:6d:f7:b0: b9:a8:6e:46:09:aa:75:9e:6b:42:f6:d0:c2:2c:52: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:14:18:5C:0E:E7:9A:04:D4:71:5F:76:E0:4A:14:AA:A9:9E:0B X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0-43.248.207.255 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.87.180.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 77:01:d8:48:e9:44:7e:67:d0:28:87:35:ad:87:10:be:5b:e9: 35:4e:e1:b2:59:3e:ad:64:6f:1d:fa:ed:89:12:07:8b:da:f9: 06:17:ca:d2:d2:a4:0f:4d:06:a0:6b:31:48:d3:8b:dc:55:80: 63:9e:2f:46:01:27:3e:8f:24:d7:9b:dc:e3:d3:cc:29:81:16: 09:59:10:ae:af:f4:1b:24:cd:c1:58:5a:73:2f:0c:6c:ff:23: 3f:3b:3b:21:35:7f:c9:56:ff:fb:71:2d:6a:ae:96:80:00:84: 5b:ad:76:f4:2e:46:5d:9c:fc:21:12:46:0f:16:af:b3:f4:d6: 6e:29:7e:32:63:2d:2c:41:8a:a9:60:2f:f2:37:fd:55:18:55: 19:4a:23:42:6b:80:07:05:ad:86:9e:c8:f7:1b:3e:2e:5a:79: 5f:08:de:63:49:1d:05:b1:45:28:b5:0d:3b:8f:62:fb:99:31: 9d:11:a7:26:f4:8a:17:17:9e:61:43:02:fa:f6:05:cc:5a:12: 5b:ab:01:c1:a1:b8:bf:56:df:28:1c:7c:13:ac:95:bf:65:d0: a5:96:fd:0d:fb:ac:07:2c:74:a0:3a:4d:55:a6:1c:33:96:9b: 47:4b:aa:25:d9:20:da:c8:55:42:be:e8:dc:46:83:5a:88:71: 74:f5:d5:23 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUCcGfINBTYhLiDp7Y24UeHrTBqhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MTQwNzE0NTVaFw0yNzA3MTMwNzE5NTVaMDMxMTAvBgNV BAMTKEEzQTYxNDE4NUMwRUU3OUEwNEQ0NzE1Rjc2RTA0QTE0QUFBOTlFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKGlvhyENtPhEmK2f2u5qj4r/ fKyjoWW0gBoMmmdVOWAnZyntwI7aFEJHvj7l+hBjHEkESsfkHSEiHSK+AHsZv00o V1HdtAWycYjJQqN/pZM0643svCi96mk+bbSjx6fv2/hEYRdDvDzg2Vd2Ny7NF5oI E8d3L3I7bVdvbs9xOcWkK4XotNiJv0V6lYwkwlOgSDXEzSuXlxpT326O4u0vqRaO pMMnKFeDWgfORf5ONUvi9pU0nVgPfq+c6OuRaxxV35tMGSa9yKXC2cyvE7NCNwjc E7+lGOe+UUt/k87Coj0oP0jwqpemtKICTW33sLmobkYJqnWea0L20MIsUpw5AgMB AAGjggInMIICIzAdBgNVHQ4EFgQUo6YUGFwO55oE1HFfduBKFKqpngswHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzU2MDQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIA ATBKAwQCK/AAAwQCK/EwMAwDBAMr+LgDBAQr+MADBAJnJSwDBAJnKAwDBAJnLaAD BAJnU0gDBAJnV7QDBAJnzfwDBAJn7/QDBAJv3wwwDQYJKoZIhvcNAQELBQADggEB AHcB2EjpRH5n0CiHNa2HEL5b6TVO4bJZPq1kbx367YkSB4va+QYXytLSpA9NBqBr MUjTi9xVgGOeL0YBJz6PJNeb3OPTzCmBFglZEK6v9BskzcFYWnMvDGz/Iz87OyE1 f8lW//txLWquloAAhFutdvQuRl2c/CESRg8Wr7P01m4pfjJjLSxBiqlgL/I3/VUY VRlKI0JrgAcFrYaeyPcbPi5aeV8I3mNJHQWxRSi1DTuPYvuZMZ0Rpyb0ihcXnmFD Avr2BcxaElurAcGhuL9W3ygcfBOslb9l0KWW/Q37rAcsdKA6TVWmHDOWm0dLqiXZ INrIVUK+6NxGg1qIcXT11SM= -----END CERTIFICATE-----Generated at Wed Jul 22 01:42:53 2026 by rpki-client