
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56020.roa
File: AS56020.roa (raw, json)
Hash identifier: 0sLTu+DPLeyeHTFssSu3l6BgQB8sTAdWzngp4fBzNf4=
Subject key identifier: F3:05:53:14:8E:D8:83:9E:46:56:54:28:E4:4F:34:17:42:A1:F5:6A
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 029314A8A0A95CC85A604794480FF3043E731024
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56020.roa
Signing time: Mon 18 May 2026 03:31:34 +0000
ROA not before: Mon 18 May 2026 03:26:34 +0000
ROA not after: Mon 17 May 2027 03:31:34 +0000
asID: 56020
IP address blocks: 2403:a200:a3ff::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:93:14:a8:a0:a9:5c:c8:5a:60:47:94:48:0f:f3:04:3e:73:10:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: May 18 03:26:34 2026 GMT
Not After : May 17 03:31:34 2027 GMT
Subject: CN=F30553148ED8839E46565428E44F341742A1F56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:62:28:3d:a9:d7:c9:05:c0:e2:90:6e:5f:
9b:f4:cd:9d:02:fc:86:be:a9:64:c6:2f:a7:be:6c:
bc:92:99:f9:93:81:88:ad:1d:a4:25:f3:4f:fb:c8:
c3:50:de:be:48:aa:c7:eb:f8:77:b8:7c:a3:e7:95:
1c:67:1d:69:5f:ba:51:23:17:39:7b:06:e1:72:fc:
b6:f2:e5:65:bb:7e:a1:cf:af:b2:ff:6f:57:a5:12:
e4:56:70:6a:dc:4d:b4:2f:b1:9a:3a:57:b1:fa:65:
ad:00:d3:a9:c3:bf:9b:89:0e:8f:a0:4a:45:d7:8e:
bc:80:30:da:06:1f:75:01:4b:2a:9e:2a:bb:f8:c7:
12:6b:66:f9:aa:7b:c4:7f:20:e0:8c:85:b1:ce:b9:
75:f4:5c:b6:a4:e4:ed:71:fd:e4:4d:8f:bb:92:ed:
92:dc:50:48:ee:a5:d6:6e:71:9f:00:8e:42:ee:99:
8b:a2:6f:c7:87:86:63:aa:00:20:3f:fc:2f:64:f5:
ad:52:79:6c:be:bb:97:79:5d:d3:f0:07:58:9c:8b:
a0:fd:43:9c:62:7f:8a:9b:5b:54:61:15:11:61:1f:
f9:a7:2e:3b:2e:79:bd:70:63:c2:44:b4:42:8b:4f:
76:5d:d0:da:01:27:78:6e:0c:8e:29:d5:9a:7a:9d:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:53:14:8E:D8:83:9E:46:56:54:28:E4:4F:34:17:42:A1:F5:6A
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:a200:a3ff::/48
Signature Algorithm: sha256WithRSAEncryption
3b:bc:5e:46:f0:eb:4f:bb:3c:7d:1c:6f:90:57:4b:76:22:44:
70:14:ff:01:2e:f9:fc:35:9a:00:56:ec:79:64:58:9c:4c:0d:
60:33:50:7e:64:c8:fb:82:0b:bd:eb:2a:b2:ae:e7:92:ad:9e:
de:b4:e9:d1:5a:12:4b:78:7a:47:cc:e8:70:9f:e5:6d:37:1e:
7a:f3:1f:72:c5:c8:f1:77:9b:45:be:6b:e1:78:81:ea:a7:bf:
e6:54:df:41:06:56:49:4b:10:10:2c:cb:5c:53:0c:b6:15:5e:
a8:6f:85:8a:04:96:46:e5:5a:65:45:a3:a5:94:83:d2:f3:14:
d1:36:ef:be:90:7d:3b:48:d2:c3:97:bf:a1:8e:ed:31:c3:3d:
73:20:d7:e2:16:e8:c3:b0:b0:46:86:df:ac:43:31:4b:e5:ec:
4e:97:78:7f:13:28:b3:ce:45:72:06:23:ad:1e:95:50:6f:8b:
60:ee:98:e8:5d:d2:33:fb:71:c5:c7:eb:0a:3b:37:73:28:b3:
fb:b3:13:88:cd:cd:b6:fd:a7:4e:05:75:82:a9:8e:bc:27:8f:
bf:6a:cb:1b:0c:7c:d2:cb:37:cc:38:6d:05:ca:39:06:18:a7:
ef:c0:bf:e7:0f:b5:28:68:6d:7b:a5:34:40:f3:ce:6b:9d:f9:
6e:37:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:40 2026 by rpki-client