Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS56042.roa
File: AS56042.roa (raw, json)
Hash identifier: wdHRqSk+KVgQ6JXF4VSjcPxI7skPMMBfA1drhM+bJpA=
Subject key identifier: C3:AA:44:D1:D7:08:00:16:A6:AC:E6:A6:51:4E:02:FB:A5:C9:32:63
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 653FECA575969CB53E494DA8D50C2DCA66B3B105
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS56042.roa
Signing time: Mon 18 May 2026 02:39:58 +0000
ROA not before: Mon 18 May 2026 02:34:58 +0000
ROA not after: Mon 17 May 2027 02:39:58 +0000
asID: 56042
IP address blocks: 2409:800c::/32 maxlen: 32
2409:800c::/48 maxlen: 48
2409:800c:1::/48 maxlen: 48
2409:800d::/32 maxlen: 32
2409:800e::/32 maxlen: 32
2409:800f::/32 maxlen: 32
2409:870c::/32 maxlen: 32
2409:870d::/32 maxlen: 32
2409:870e::/32 maxlen: 32
2409:870f::/32 maxlen: 32
2409:880c::/40 maxlen: 40
2409:880d::/40 maxlen: 40
2409:880e::/40 maxlen: 40
2409:880f::/40 maxlen: 40
2409:890c::/32 maxlen: 32
2409:890d::/32 maxlen: 32
2409:890e::/32 maxlen: 32
2409:890f::/32 maxlen: 32
2409:890f:fffc::/48 maxlen: 48
2409:890f:fffd::/48 maxlen: 48
2409:890f:fffe::/48 maxlen: 48
2409:890f:ffff::/48 maxlen: 48
2409:8a0c::/32 maxlen: 32
2409:8a0c::/36 maxlen: 36
2409:8a0c:1000::/38 maxlen: 38
2409:8a0c:1400::/38 maxlen: 38
2409:8a0c:1800::/37 maxlen: 37
2409:8a0c:2000::/37 maxlen: 37
2409:8a0c:2800::/39 maxlen: 39
2409:8a0c:2a00::/40 maxlen: 40
2409:8a0c:2c00::/40 maxlen: 40
2409:8a0c:2e00::/40 maxlen: 40
2409:8a0c:3000::/40 maxlen: 40
2409:8a0c:3200::/40 maxlen: 40
2409:8a0c:3400::/40 maxlen: 40
2409:8a0c:3800::/40 maxlen: 40
2409:8a0c:3a00::/40 maxlen: 40
2409:8a0c:3c00::/40 maxlen: 40
2409:8a0c:3e00::/40 maxlen: 40
2409:8a0c:4000::/40 maxlen: 40
2409:8a0c:4200::/40 maxlen: 40
2409:8a0c:4400::/40 maxlen: 40
2409:8a0c:4600::/40 maxlen: 40
2409:8a0c:4800::/40 maxlen: 40
2409:8a0c:4a00::/40 maxlen: 40
2409:8a0c:4c00::/40 maxlen: 40
2409:8a0c:4e00::/39 maxlen: 39
2409:8a0c:5000::/37 maxlen: 37
2409:8a0c:5800::/39 maxlen: 39
2409:8a0c:5a00::/40 maxlen: 40
2409:8a0c:5c00::/40 maxlen: 40
2409:8a0c:5e00::/40 maxlen: 40
2409:8a0c:6000::/40 maxlen: 40
2409:8a0c:6200::/40 maxlen: 40
2409:8a0c:6400::/40 maxlen: 40
2409:8a0c:6600::/39 maxlen: 39
2409:8a0c:6800::/37 maxlen: 37
2409:8a0c:7000::/36 maxlen: 36
2409:8a0c:8000::/39 maxlen: 39
2409:8a0c:8200::/40 maxlen: 40
2409:8a0c:8400::/40 maxlen: 40
2409:8a0c:8600::/40 maxlen: 40
2409:8a0c:8800::/40 maxlen: 40
2409:8a0c:8a00::/40 maxlen: 40
2409:8a0c:8c00::/40 maxlen: 40
2409:8a0c:8e00::/40 maxlen: 40
2409:8a0c:9000::/40 maxlen: 40
2409:8a0c:9200::/40 maxlen: 40
2409:8a0c:9400::/40 maxlen: 40
2409:8a0c:9600::/40 maxlen: 40
2409:8a0c:9800::/40 maxlen: 40
2409:8a0c:9a00::/40 maxlen: 40
2409:8a0c:9c00::/38 maxlen: 38
2409:8a0c:a000::/36 maxlen: 36
2409:8a0c:b000::/39 maxlen: 39
2409:8a0c:b200::/39 maxlen: 39
2409:8a0c:b400::/38 maxlen: 38
2409:8a0c:b800::/37 maxlen: 37
2409:8a0c:c000::/36 maxlen: 36
2409:8a0c:d000::/38 maxlen: 38
2409:8a0c:d400::/40 maxlen: 40
2409:8a0c:d600::/40 maxlen: 40
2409:8a0c:d800::/40 maxlen: 40
2409:8a0c:da00::/40 maxlen: 40
2409:8a0c:dc00::/40 maxlen: 40
2409:8a0c:de00::/40 maxlen: 40
2409:8a0c:e000::/40 maxlen: 40
2409:8a0c:e200::/40 maxlen: 40
2409:8a0c:e400::/40 maxlen: 40
2409:8a0c:e600::/40 maxlen: 40
2409:8a0c:e800::/40 maxlen: 40
2409:8a0c:ea00::/40 maxlen: 40
2409:8a0c:ec00::/40 maxlen: 40
2409:8a0c:ee00::/39 maxlen: 39
2409:8a0c:f000::/39 maxlen: 39
2409:8a0d::/32 maxlen: 32
2409:8a0e::/32 maxlen: 32
2409:8a0f::/32 maxlen: 32
2409:8b0c::/32 maxlen: 32
2409:8b0d::/32 maxlen: 32
2409:8b0e::/32 maxlen: 32
2409:8b0f::/32 maxlen: 32
2409:8c0c::/32 maxlen: 32
2409:8c0d::/32 maxlen: 32
2409:8c0e::/32 maxlen: 32
2409:8c0f::/32 maxlen: 32
2409:8d0c::/32 maxlen: 32
2409:8d0d::/32 maxlen: 32
2409:8d0e::/32 maxlen: 32
2409:8d0f::/32 maxlen: 32
2409:8e0c::/32 maxlen: 32
2409:8e0d::/32 maxlen: 32
2409:8e0e::/32 maxlen: 32
2409:8e0f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 11:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3f:ec:a5:75:96:9c:b5:3e:49:4d:a8:d5:0c:2d:ca:66:b3:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: May 18 02:34:58 2026 GMT
Not After : May 17 02:39:58 2027 GMT
Subject: CN=C3AA44D1D7080016A6ACE6A6514E02FBA5C93263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:14:fa:7d:e5:20:e6:61:0a:98:88:8c:b8:
54:32:4d:50:72:2a:50:aa:55:2b:99:76:8a:dd:65:
5a:88:60:df:bd:f5:b0:bf:91:1f:52:d9:32:5b:b5:
e0:bf:0d:04:23:0d:59:d9:fd:ab:28:51:6e:7f:37:
80:44:64:71:97:1c:5c:cc:27:e3:12:70:7e:88:ce:
a0:4e:c1:58:6e:d5:e8:44:01:1c:64:e3:fa:6b:75:
5c:5f:fe:fb:93:cc:0b:c8:ec:25:1c:e9:5c:e2:bd:
68:21:fe:e5:b3:0c:43:96:49:10:27:76:d5:61:97:
93:fc:ac:3a:01:c8:ab:dc:43:93:2d:7f:10:c9:74:
51:a4:0a:48:91:05:c8:e6:e8:1f:5b:5f:c7:38:aa:
1d:09:c4:b4:c0:8a:d8:55:43:20:59:e0:e5:09:5f:
d3:3d:a8:1b:5f:4b:30:6a:aa:eb:fa:37:f3:3e:d6:
37:e1:91:9a:6f:41:5c:9f:31:2a:09:1d:04:6a:ee:
ac:91:bb:15:cc:3b:a6:ca:a9:55:34:b2:1b:2e:ae:
cd:e0:37:bb:1c:f4:cd:b5:f2:47:09:d0:99:70:2e:
1c:2d:6c:dd:94:b7:2f:d9:7c:b0:70:54:28:e6:32:
e9:14:a2:b5:8c:13:f3:f9:92:4f:1b:d2:3a:c1:d7:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:44:D1:D7:08:00:16:A6:AC:E6:A6:51:4E:02:FB:A5:C9:32:63
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS56042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2409:800c::/30
2409:870c::/30
2409:880c::/40
2409:880d::/40
2409:880e::/40
2409:880f::/40
2409:890c::/30
2409:8a0c::/30
2409:8b0c::/30
2409:8c0c::/30
2409:8d0c::/30
2409:8e0c::/30
Signature Algorithm: sha256WithRSAEncryption
0a:3a:be:89:04:0d:db:bd:e2:9d:32:fb:c2:19:d8:62:c7:e6:
87:65:65:ea:3d:59:3b:59:c4:c7:b0:2b:76:13:64:2f:de:20:
6a:af:fb:f3:d7:de:da:ac:8c:fd:bf:c3:64:f4:60:9e:2a:18:
61:55:02:67:23:5e:eb:e8:42:4f:3b:0f:d8:45:e5:11:4c:4d:
d9:a7:e2:8c:c5:46:43:bf:43:0e:4b:0e:9d:e3:39:ee:eb:59:
5c:c3:d1:05:e6:15:79:3b:a1:d6:27:f5:ee:93:66:51:e8:17:
ec:c0:06:c2:7b:77:78:b1:c3:05:ce:ba:47:91:bb:25:4b:26:
7d:07:7e:4c:f3:92:3c:3e:20:79:0d:4e:d1:1f:1c:73:99:2c:
85:36:18:c3:10:cf:66:84:d6:57:8a:ae:cd:e7:a6:34:3d:c5:
52:d2:5c:61:69:21:ec:bb:9b:ce:75:46:52:70:99:c6:e7:7b:
a3:8f:85:52:6d:4f:86:95:32:bb:cb:0b:14:08:b8:81:c3:73:
01:d0:8f:1f:48:89:70:ee:78:8a:f8:73:d7:91:a4:5e:ef:66:
eb:62:94:1f:4a:48:15:bd:c4:13:64:c6:32:68:8b:d6:a2:33:
75:88:a8:a4:f9:c7:8c:44:2a:0b:3e:88:03:71:73:a9:3f:c0:
b4:56:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:25:00 2026 by rpki-client