$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56048.roa File: AS56048.roa (raw, json) Hash identifier: YIwW5TqDxLYY6jf4PmqjmaFw3l37RQYuApX0c9ZHRio= Subject key identifier: 5B:FC:72:AF:EF:1A:08:77:4E:1F:3C:8E:96:C0:4D:28:E9:9F:1B:E4 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 0F337EC9C933FB8037102DB4E47F88F9C452485F Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56048.roa Signing time: Mon 08 Jun 2026 02:23:34 +0000 ROA not before: Mon 08 Jun 2026 02:18:34 +0000 ROA not after: Mon 07 Jun 2027 02:23:34 +0000 asID: 56048 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 2403:a200:a2ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:33:7e:c9:c9:33:fb:80:37:10:2d:b4:e4:7f:88:f9:c4:52:48:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:34 2026 GMT Not After : Jun 7 02:23:34 2027 GMT Subject: CN=5BFC72AFEF1A08774E1F3C8E96C04D28E99F1BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:1f:7b:1b:28:b6:3f:4d:f0:b4:18:4a:9a: f9:7e:da:6a:8c:b2:7c:48:ce:53:e0:24:de:15:0f: 66:29:46:fb:39:23:51:e4:ba:21:26:5a:fd:c7:79: dc:1e:43:49:06:b5:24:03:cb:1e:cd:7e:8e:44:19: d7:5a:cb:25:93:50:2b:d2:42:3b:1b:d1:7b:1f:09: 4f:26:bc:09:dd:44:3a:2a:2f:59:08:be:81:9c:00: 08:b7:0a:59:cb:2d:a4:4e:ef:c2:ba:fa:d2:2f:0b: 61:4d:39:84:1f:69:bb:7f:1e:b1:3c:96:c4:1b:88: 26:3f:e6:cd:20:8a:68:17:df:58:1d:79:88:7a:7c: dd:7c:a7:98:0c:5b:39:00:96:ef:46:05:e5:c1:2d: 90:8c:06:6c:d7:85:33:19:f5:39:0d:7d:e1:9d:22: 0c:30:00:d5:dd:e8:5e:b0:83:c4:43:48:59:3e:3a: 73:a2:a4:ac:1d:a7:19:b6:40:b1:48:0b:20:9d:81: 36:ba:6c:8f:00:5e:e8:44:40:f1:10:48:a6:9c:25: eb:9a:fc:8d:c6:4d:56:72:0b:74:c6:14:40:06:4e: ad:34:12:ee:61:c8:b5:75:6b:a3:7c:70:b5:ba:ae: 6b:2a:54:a1:3f:58:5a:7a:e4:e4:36:ad:7a:94:11: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FC:72:AF:EF:1A:08:77:4E:1F:3C:8E:96:C0:4D:28:E9:9F:1B:E4 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption 25:89:eb:b3:80:cf:85:27:48:d6:fa:2b:15:72:80:18:b8:31: 2f:1c:d3:2d:26:28:35:94:3a:ea:60:55:30:cb:e1:d9:80:98: 73:24:54:5b:29:65:60:22:2a:e9:b7:d1:01:c5:2f:e1:f6:9a: d1:6b:0d:db:5e:1a:92:b6:68:10:a3:cc:4a:12:07:1a:f0:48: 9a:78:70:bc:92:33:bf:4a:9b:d4:5b:34:e5:93:67:48:b0:8e: fd:6c:ed:6a:a9:c0:67:fc:36:b4:b7:8c:99:37:73:c5:4a:a3: 94:d2:4c:d7:51:e1:7e:17:76:a0:80:68:f0:40:93:49:43:43: bd:b7:fa:24:d6:2a:37:41:47:f0:36:78:7e:e1:2e:25:7a:cc: bd:4b:93:e2:38:37:86:6e:78:fc:1b:ae:46:71:89:5e:2f:df: 6c:ec:90:83:b0:79:6f:e2:81:79:75:e8:d4:5c:3c:d7:57:b9: 81:76:0a:c9:87:8a:e0:94:68:52:f4:54:0a:28:dd:a0:02:9f: ec:c8:f3:0c:3a:e5:65:ac:3d:4d:18:2a:20:02:0f:5f:33:d2: f8:39:84:af:2f:9e:6b:6c:77:53:5e:e4:5f:77:d3:13:0b:47: 79:3a:86:9c:7d:3d:ef:e3:ac:4a:c0:28:b7:7a:4d:64:52:a0: 12:0f:40:a2 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUDzN+yckz+4A3EC205H+I+cRSSF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzRaFw0yNzA2MDcwMjIzMzRaMDMxMTAvBgNV BAMTKDVCRkM3MkFGRUYxQTA4Nzc0RTFGM0M4RTk2QzA0RDI4RTk5RjFCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWx97Gyi2P03wtBhKmvl+2mqM snxIzlPgJN4VD2YpRvs5I1HkuiEmWv3HedweQ0kGtSQDyx7Nfo5EGddayyWTUCvS Qjsb0XsfCU8mvAndRDoqL1kIvoGcAAi3ClnLLaRO78K6+tIvC2FNOYQfabt/HrE8 lsQbiCY/5s0gimgX31gdeYh6fN18p5gMWzkAlu9GBeXBLZCMBmzXhTMZ9TkNfeGd IgwwANXd6F6wg8RDSFk+OnOipKwdpxm2QLFICyCdgTa6bI8AXuhEQPEQSKacJeua /I3GTVZyC3TGFEAGTq00Eu5hyLV1a6N8cLW6rmsqVKE/WFp65OQ2rXqUEYszAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUW/xyr+8aCHdOHzyOlsBNKOmfG+QwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzU2MDQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizB6 BAIAATB0AwMAKp4DBAc6U4ADBAc7lwADBAc7vwADBAJn96gwDAMEB3iEgAMEB3iF AAMDAXiGAwMBfPowCwMDAbauAwQEtq/gAwMBt1QDBAPLxAADBAXSTYAwDAMEBdNj oAMEBdNjwDALAwMA05cDBAXTmAADBAbTmEAwDQQCAAIwBwMFACQDogAwDQYJKoZI hvcNAQELBQADggEBACWJ67OAz4UnSNb6KxVygBi4MS8c0y0mKDWUOupgVTDL4dmA mHMkVFspZWAiKum30QHFL+H2mtFrDdteGpK2aBCjzEoSBxrwSJp4cLySM79Km9Rb NOWTZ0iwjv1s7WqpwGf8NrS3jJk3c8VKo5TSTNdR4X4XdqCAaPBAk0lDQ723+iTW KjdBR/A2eH7hLiV6zL1Lk+I4N4ZuePwbrkZxiV4v32zskIOweW/igXl16NRcPNdX uYF2CsmHiuCUaFL0VAoo3aACn+zI8ww65WWsPU0YKiACD18z0vg5hK8vnmtsd1Ne 5F930xMLR3k6hpx9Pe/jrErAKLd6TWRSoBIPQKI= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:41 2026 by rpki-client