$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa File: AS56046.roa (raw, json) Hash identifier: KEbqMidhadUY5jA0UfsNlvzMY2zR8IPeYHFTl06GyuY= Subject key identifier: D5:BB:ED:52:9D:DD:6A:E5:FC:D7:DA:C8:A6:31:FF:FA:4A:C5:63:8A Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4759F585FB1986B9BBD9EE33A6AD361D4A79EF1C Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa Signing time: Thu 13 Aug 2026 05:14:28 +0000 ROA not before: Thu 13 Aug 2026 05:09:28 +0000 ROA not after: Thu 12 Aug 2027 05:14:28 +0000 asID: 56046 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.248.184.0/21 maxlen: 21 43.248.192.0/20 maxlen: 20 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.87.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:59:f5:85:fb:19:86:b9:bb:d9:ee:33:a6:ad:36:1d:4a:79:ef:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Aug 13 05:09:28 2026 GMT Not After : Aug 12 05:14:28 2027 GMT Subject: CN=D5BBED529DDD6AE5FCD7DAC8A631FFFA4AC5638A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:2a:16:e9:a8:fe:ea:3e:76:20:e8:88:8b: 12:cb:49:d9:4d:ce:6c:f8:a0:ae:12:a8:54:e4:bc: bb:9f:2f:9c:04:46:a8:c4:95:81:35:2b:a6:41:8d: ab:09:d3:b8:40:69:73:fb:75:ef:03:0a:6c:67:c1: 56:8e:08:3d:ea:3a:95:9e:1c:04:4c:75:0b:73:4c: 44:06:f0:72:0e:5c:74:01:2d:91:c6:8e:2b:1b:3b: 83:dd:11:53:a9:3b:ca:63:c7:8f:e4:32:44:c9:89: ff:05:2d:52:d6:b4:9f:11:58:f3:bd:a2:eb:93:66: be:93:2e:7a:70:c4:8c:ce:01:a0:4e:42:54:da:a0: 6e:52:9a:01:17:e9:02:1b:e3:b2:0c:05:fd:57:53: f3:74:24:77:64:a9:96:a1:5c:c6:ff:2b:c1:3e:32: be:6b:d7:46:1e:3c:40:80:8f:50:62:9b:0b:28:09: f1:ac:8d:79:42:18:b4:70:88:d7:f8:a6:32:c5:ee: e7:b1:a7:f8:04:87:bc:5c:da:65:9e:82:7f:83:bc: ca:48:e6:fc:c2:31:d9:34:34:89:51:3e:d3:bd:89: 8f:9d:16:e9:24:21:c3:f0:a0:09:fe:79:f3:54:f2: 65:06:e4:d1:e4:a7:18:ac:43:66:df:e9:9e:36:6e: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BB:ED:52:9D:DD:6A:E5:FC:D7:DA:C8:A6:31:FF:FA:4A:C5:63:8A X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.248.184.0-43.248.207.255 103.87.180.0/22 Signature Algorithm: sha256WithRSAEncryption 08:19:29:ab:cb:52:03:75:4e:5e:20:e5:36:73:c3:98:d5:c4: 7b:03:ec:01:c0:19:69:58:b7:83:b3:47:5e:f6:7b:96:17:3b: 86:18:95:22:5d:70:5f:22:59:cf:75:6d:fd:27:26:1b:16:f9: 7c:fc:92:27:1d:bb:e3:fd:58:27:96:49:bb:09:ca:a7:95:1e: 2f:f7:e8:e2:51:9a:23:81:52:cf:84:2e:38:70:1e:b6:a4:ce: f5:2d:fc:a4:b7:b0:f8:fe:31:8b:45:8d:3c:5a:42:be:51:c6: 83:e7:04:71:df:1c:c1:3b:f5:23:39:d7:53:85:f7:72:b9:45: 9b:b3:f5:18:4c:e9:ac:83:4b:8c:6d:b3:1d:25:c4:be:83:05: 8f:df:b1:a4:ad:34:2d:17:31:71:d8:af:22:de:c9:86:19:a9: 66:a5:54:18:d7:80:e8:b4:a0:1c:dd:d6:b8:f0:dd:aa:7a:19: 80:10:30:36:f0:66:9f:0b:9d:f5:c4:86:b1:d5:b0:35:73:59: 21:3e:c4:f0:5d:59:2c:81:f1:6e:fe:9c:4e:f0:7b:f5:03:4e: 79:ec:d1:99:ac:61:8a:fd:01:9c:f6:41:80:56:d8:3b:ed:a6: 29:7b:6f:08:da:08:e8:54:9f:a7:87:ca:c6:20:7d:bb:96:35: c3:26:56:cc -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUR1n1hfsZhrm72e4zpq02HUp57xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA4MTMwNTA5MjhaFw0yNzA4MTIwNTE0MjhaMDMxMTAvBgNV BAMTKEQ1QkJFRDUyOURERDZBRTVGQ0Q3REFDOEE2MzFGRkZBNEFDNTYzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkCoW6aj+6j52IOiIixLLSdlN zmz4oK4SqFTkvLufL5wERqjElYE1K6ZBjasJ07hAaXP7de8DCmxnwVaOCD3qOpWe HARMdQtzTEQG8HIOXHQBLZHGjisbO4PdEVOpO8pjx4/kMkTJif8FLVLWtJ8RWPO9 ouuTZr6TLnpwxIzOAaBOQlTaoG5SmgEX6QIb47IMBf1XU/N0JHdkqZahXMb/K8E+ Mr5r10YePECAj1BimwsoCfGsjXlCGLRwiNf4pjLF7uexp/gEh7xc2mWegn+DvMpI 5vzCMdk0NIlRPtO9iY+dFukkIcPwoAn+efNU8mUG5NHkpxisQ2bf6Z42blptAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQU1bvtUp3dauX819rIpjH/+krFY4owHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzU2MDQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIA ATAaAwQCK/AAMAwDBAMr+LgDBAQr+MADBAJnV7QwDQYJKoZIhvcNAQELBQADggEB AAgZKavLUgN1Tl4g5TZzw5jVxHsD7AHAGWlYt4OzR172e5YXO4YYlSJdcF8iWc91 bf0nJhsW+Xz8kicdu+P9WCeWSbsJyqeVHi/36OJRmiOBUs+ELjhwHrakzvUt/KS3 sPj+MYtFjTxaQr5RxoPnBHHfHME79SM511OF93K5RZuz9RhM6ayDS4xtsx0lxL6D BY/fsaStNC0XMXHYryLeyYYZqWalVBjXgOi0oBzd1rjw3ap6GYAQMDbwZp8LnfXE hrHVsDVzWSE+xPBdWSyB8W7+nE7we/UDTnns0ZmsYYr9AZz2QYBW2Dvtpil7bwja COhUn6eHysYgfbuWNcMmVsw= -----END CERTIFICATE-----Generated at Sat Sep 5 08:56:29 2026 by rpki-client