$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS56046.roa File: AS56046.roa (raw, json) Hash identifier: HLsn9oUBMKPFVruk78wyq4D7p3b/BZMNS7vsPLrkGog= Subject key identifier: A9:14:B3:C7:80:27:8A:FC:E0:8C:E9:D8:4A:66:79:75:2A:FE:E7:DB Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 69A9F1FA00CEE1171C30F36E35B9495F2E3A2B88 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS56046.roa Signing time: Tue 07 Jul 2026 02:50:38 +0000 ROA not before: Tue 07 Jul 2026 02:45:38 +0000 ROA not after: Tue 06 Jul 2027 02:50:38 +0000 asID: 56046 IP address blocks: 43.226.48.0/24 maxlen: 24 43.226.52.0/24 maxlen: 24 43.226.55.0/24 maxlen: 24 43.226.56.0/21 maxlen: 24 43.226.78.0/23 maxlen: 24 43.226.112.0/22 maxlen: 24 43.226.128.0/20 maxlen: 24 43.227.56.0/21 maxlen: 24 43.227.69.0/24 maxlen: 24 43.227.70.0/23 maxlen: 24 43.248.104.0/22 maxlen: 24 43.248.120.0/21 maxlen: 24 43.248.144.0/22 maxlen: 24 43.248.208.0/22 maxlen: 24 103.183.122.0/23 maxlen: 24 103.183.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a9:f1:fa:00:ce:e1:17:1c:30:f3:6e:35:b9:49:5f:2e:3a:2b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 7 02:45:38 2026 GMT Not After : Jul 6 02:50:38 2027 GMT Subject: CN=A914B3C780278AFCE08CE9D84A6679752AFEE7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:b8:59:7f:f3:84:de:83:97:d5:2c:3d:8a: af:88:8b:17:65:97:4c:e9:04:c2:3c:91:d8:23:10: c6:b3:e1:e5:e5:8f:bf:6e:32:d4:3e:84:ab:2c:5f: f6:d9:e8:f4:eb:4f:99:e0:75:43:af:83:e2:9f:7d: 84:6b:73:67:69:9b:a6:5e:e0:70:ae:1c:a6:1d:02: 98:e0:fd:6d:92:7f:cd:ff:20:22:d6:b2:ec:be:70: d2:88:7d:fa:a1:b5:83:82:8b:57:46:ef:b5:bb:33: 23:58:a4:76:13:d2:cd:3c:75:73:20:6c:f9:eb:95: 40:96:d0:22:f1:ee:40:0b:25:68:5a:85:e9:f0:5c: 3d:5a:d1:18:d1:0f:ab:1d:a7:47:d5:4e:6a:01:e5: b7:08:b5:8a:7d:17:ff:03:ce:b7:2f:23:04:79:c6: 5d:a0:f4:ad:f5:21:2e:ea:5c:59:e3:4a:a3:d1:aa: 4d:e5:5a:d3:07:1f:5a:a6:be:33:a3:68:15:3e:ad: 52:18:17:8b:81:6c:84:21:39:f4:ca:81:41:8c:63: 94:4e:a0:32:86:0e:89:7f:6a:e6:15:e5:52:a7:f0: c6:be:9a:c0:b3:a8:a0:00:e1:f8:79:d7:1c:dd:67: 99:9c:b7:64:0e:90:bf:45:81:cc:2c:43:ff:1c:7e: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:B3:C7:80:27:8A:FC:E0:8C:E9:D8:4A:66:79:75:2A:FE:E7:DB X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/AS56046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.48.0/24 43.226.52.0/24 43.226.55.0-43.226.63.255 43.226.78.0/23 43.226.112.0/22 43.226.128.0/20 43.227.56.0/21 43.227.69.0-43.227.71.255 43.248.104.0/22 43.248.120.0/21 43.248.144.0/22 43.248.208.0/22 103.183.122.0-103.183.125.255 Signature Algorithm: sha256WithRSAEncryption 78:b4:61:87:b4:3e:a4:af:c0:d1:76:7a:1f:2b:06:e4:6e:73: aa:4f:a7:5f:09:06:99:71:9c:67:d5:0b:7e:7b:7b:72:f4:70: 34:0f:ec:fb:3d:fc:23:d5:05:b3:85:7f:fc:02:d5:ff:d1:fb: 9d:62:13:e6:2e:c5:9b:51:86:cc:3a:db:26:29:c1:a8:08:fb: 80:2c:f1:97:7b:44:41:fb:b2:7e:36:5f:4a:57:e5:25:41:75: 3b:7b:24:eb:c6:73:9c:d1:3c:6e:73:f1:16:7f:04:ad:43:ae: 33:31:e7:7c:58:ed:19:1d:94:0c:10:59:72:29:1c:89:b6:76: fb:f7:ea:dc:48:ac:f0:b6:f9:d7:d5:05:ea:68:1e:c9:3a:20: 38:ba:6e:2b:95:b7:d9:56:76:5b:00:a7:2e:7c:45:69:50:f3: 01:69:b4:93:48:c5:88:df:ee:ca:33:41:82:bd:16:0f:7e:59: 4a:8b:9f:ae:11:7c:c2:5b:82:e5:86:37:a9:c7:92:e5:b3:5e: bf:49:db:89:43:55:45:81:6a:3e:b7:2a:7e:66:cc:a3:8d:91: 87:e9:f1:76:18:d3:39:46:85:0e:bd:b7:7e:e8:e5:fe:dd:6e: d1:54:53:1f:70:83:dc:50:b0:41:3a:8d:be:0f:92:87:46:3d: b8:4c:16:e9 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUaanx+gDO4RccMPNuNblJXy46K4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MDcwMjQ1MzhaFw0yNzA3MDYwMjUwMzhaMDMxMTAvBgNV BAMTKEE5MTRCM0M3ODAyNzhBRkNFMDhDRTlEODRBNjY3OTc1MkFGRUU3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1t7hZf/OE3oOX1Sw9iq+Iixdl l0zpBMI8kdgjEMaz4eXlj79uMtQ+hKssX/bZ6PTrT5ngdUOvg+KffYRrc2dpm6Ze 4HCuHKYdApjg/W2Sf83/ICLWsuy+cNKIffqhtYOCi1dG77W7MyNYpHYT0s08dXMg bPnrlUCW0CLx7kALJWhahenwXD1a0RjRD6sdp0fVTmoB5bcItYp9F/8DzrcvIwR5 xl2g9K31IS7qXFnjSqPRqk3lWtMHH1qmvjOjaBU+rVIYF4uBbIQhOfTKgUGMY5RO oDKGDol/auYV5VKn8Ma+msCzqKAA4fh51xzdZ5mct2QOkL9FgcwsQ/8cfiNFAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUqRSzx4AnivzgjOnYSmZ5dSr+59swHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC9BUzU2MDQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIA ATBmAwQAK+IwAwQAK+I0MAwDBAAr4jcDBAYr4gADBAEr4k4DBAIr4nADBAQr4oAD BAMr4zgwDAMEACvjRQMEAyvjQAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQB Z7d6AwQBZ7d8MA0GCSqGSIb3DQEBCwUAA4IBAQB4tGGHtD6kr8DRdnofKwbkbnOq T6dfCQaZcZxn1Qt+e3ty9HA0D+z7Pfwj1QWzhX/8AtX/0fudYhPmLsWbUYbMOtsm KcGoCPuALPGXe0RB+7J+Nl9KV+UlQXU7eyTrxnOc0Txuc/EWfwStQ64zMed8WO0Z HZQMEFlyKRyJtnb79+rcSKzwtvnX1QXqaB7JOiA4um4rlbfZVnZbAKcufEVpUPMB abSTSMWI3+7KM0GCvRYPfllKi5+uEXzCW4Llhjepx5Lls16/SduJQ1VFgWo+typ+ ZsyjjZGH6fF2GNM5RoUOvbd+6OX+3W7RVFMfcIPcULBBOo2+D5KHRj24TBbp -----END CERTIFICATE-----Generated at Wed Jul 22 01:38:43 2026 by rpki-client