
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56040.roa
File: AS56040.roa (raw, json)
Hash identifier: HmwkCKoBQAU0uWAz5pjtRSJjSvqZi0caB0vR01UCqYc=
Subject key identifier: 01:1B:4A:DC:80:07:77:77:00:AB:F0:8A:06:93:FF:40:CA:DF:AD:C3
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 28B960E5CC84C1164933B97023FAB27C5A803725
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56040.roa
Signing time: Mon 18 May 2026 03:23:22 +0000
ROA not before: Mon 18 May 2026 03:18:22 +0000
ROA not after: Mon 17 May 2027 03:23:22 +0000
asID: 56040
IP address blocks: 120.132.128.0/17 maxlen: 32
120.133.128.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b9:60:e5:cc:84:c1:16:49:33:b9:70:23:fa:b2:7c:5a:80:37:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: May 18 03:18:22 2026 GMT
Not After : May 17 03:23:22 2027 GMT
Subject: CN=011B4ADC8007777700ABF08A0693FF40CADFADC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:7a:b7:95:00:ba:60:db:be:f0:fb:ff:05:
00:d7:5e:31:8e:e8:34:c5:40:9b:26:67:51:36:f3:
f4:da:af:f1:8a:54:50:d1:14:a1:21:fb:26:fe:b7:
72:05:cd:b1:fb:9c:20:ea:a0:42:82:0c:80:fb:f5:
36:2d:67:25:56:1b:8b:80:7f:2a:4f:93:19:51:57:
13:74:d5:1b:33:a6:60:bc:40:71:62:ee:72:30:c8:
2d:ca:56:f0:5b:d3:2c:65:f2:55:8f:9c:84:91:9c:
7e:d2:0b:4f:6d:72:bb:23:fe:0f:15:85:c7:ac:8b:
b3:de:2f:bb:54:c4:b9:7b:dd:87:c0:b2:be:c2:cb:
a3:15:07:6d:dd:34:32:8d:a4:87:81:69:80:f6:aa:
c1:d2:6d:67:a8:b8:45:96:61:5d:5c:db:2c:c4:d2:
be:e9:e4:52:91:17:08:77:46:bd:5f:c3:87:17:ed:
dd:29:13:db:f8:62:d0:0b:be:d4:a0:c5:6c:5e:b9:
a3:93:5c:90:34:34:b9:22:83:80:f9:77:e6:ed:a5:
db:5c:95:7d:a2:bb:85:bc:e2:c1:0f:62:74:73:5c:
99:5d:19:e3:4e:7f:80:75:5c:85:f1:87:98:e0:43:
06:fe:18:7f:30:8d:62:1f:82:b9:28:bc:18:12:59:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:4A:DC:80:07:77:77:00:AB:F0:8A:06:93:FF:40:CA:DF:AD:C3
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.132.128.0/17
120.133.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:63:2b:b5:34:28:1a:1c:6b:ba:18:ea:f1:f6:f2:8b:63:9d:
b8:05:73:ea:19:8a:b1:f0:26:db:4f:75:63:d4:a1:b0:ba:14:
e1:78:56:d8:b3:b8:31:a8:21:cf:d8:87:07:02:90:81:ab:03:
7e:28:fa:cf:29:7f:b1:e7:69:b9:b4:0f:57:b6:b7:30:b4:40:
16:de:68:56:b0:66:10:29:0e:58:ce:8e:f2:3b:fb:c3:af:79:
80:b2:15:4a:35:fd:7d:7e:85:74:98:c4:50:cd:65:3d:08:bd:
f2:28:e3:b9:ac:4d:7e:2e:88:c5:aa:8c:d4:34:0c:f8:8a:dd:
a6:58:03:e8:33:e1:d3:32:28:ce:75:6a:be:7b:2f:9f:3a:35:
2f:63:89:7e:0a:15:60:df:09:fe:d9:66:a3:f0:2d:4a:8b:67:
8c:b2:8a:fc:d9:35:99:af:84:f2:3a:83:80:7a:57:b3:92:12:
64:82:e2:83:a3:08:f8:38:f7:be:c7:40:c9:d0:88:ae:49:b6:
fc:ed:c7:e5:21:49:38:16:29:ab:91:b4:03:d1:48:ce:e1:93:
0a:0e:b5:b2:3e:1b:35:45:3d:e8:12:95:73:56:af:e9:b2:17:
c8:c2:bd:93:69:66:0e:0d:a1:5b:ac:a9:dd:21:79:5c:38:cc:
96:11:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:41 2026 by rpki-client