$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56040.roa File: AS56040.roa (raw, json) Hash identifier: iYGl/gNHGLrzYh+vcqbWhBRoH/rRahPy0AthZgqClSI= Subject key identifier: 74:3C:9B:DF:DC:31:D5:59:7E:EC:52:C7:1B:F4:72:9E:AB:00:71:97 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 530459078DEAD4DB7C92B2002D7B8A1B9C8B4D62 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56040.roa Signing time: Mon 25 May 2026 07:49:28 +0000 ROA not before: Mon 25 May 2026 07:44:28 +0000 ROA not after: Mon 24 May 2027 07:49:28 +0000 asID: 56040 IP address blocks: 117.48.192.0/24 maxlen: 24 117.48.195.0/24 maxlen: 24 117.48.216.0/24 maxlen: 24 117.48.217.0/24 maxlen: 24 117.48.218.0/24 maxlen: 24 117.48.232.0/24 maxlen: 24 117.48.233.0/24 maxlen: 24 117.48.234.0/24 maxlen: 24 120.132.117.0/24 maxlen: 24 120.132.118.0/24 maxlen: 24 120.132.119.0/24 maxlen: 24 120.132.120.0/22 maxlen: 23 120.132.124.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:04:59:07:8d:ea:d4:db:7c:92:b2:00:2d:7b:8a:1b:9c:8b:4d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: May 25 07:44:28 2026 GMT Not After : May 24 07:49:28 2027 GMT Subject: CN=743C9BDFDC31D5597EEC52C71BF4729EAB007197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:27:e2:60:70:76:05:f6:cd:a3:27:6c:de:70: 6b:fe:ce:9a:a5:13:07:01:28:56:58:88:2a:d5:07: 32:2f:ae:b2:51:6e:4c:d4:f5:43:49:9a:3f:7f:73: 2f:a5:7f:10:c2:93:41:5e:e8:4d:11:d8:c3:69:ed: 5d:0a:cf:c3:07:d7:08:d8:2e:84:03:28:2d:95:bb: 3a:97:87:0b:df:36:6d:d1:3a:4a:01:ec:ba:48:b0: fb:8b:74:f5:a2:19:37:71:21:47:68:18:8f:1d:09: 6c:1a:ca:70:65:5d:80:af:6d:cf:2f:56:30:ce:84: 4c:93:e5:6f:fd:3d:1c:be:7f:df:77:c3:4c:1f:5e: 7a:67:f3:7d:52:25:83:8b:65:d6:d6:29:2c:cb:d6: 8b:bc:b3:e3:33:ca:02:10:fb:ac:9a:b5:4d:b1:ff: 30:8f:43:78:c7:87:7e:3d:f8:1c:e4:32:e3:6f:26: 6b:3b:0e:3c:93:59:45:be:82:21:bc:a8:3d:a5:b2: 4d:c9:7e:d8:47:e6:3c:42:90:53:94:e6:bd:05:75: 5b:bb:80:20:c4:22:a3:12:01:7c:82:c1:f3:c9:b2: 24:d1:c8:53:b9:b1:58:98:8e:14:f4:ff:30:2a:1e: a9:62:69:68:a1:c3:19:0c:38:85:f3:aa:0a:2b:27: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3C:9B:DF:DC:31:D5:59:7E:EC:52:C7:1B:F4:72:9E:AB:00:71:97 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.48.192.0/24 117.48.195.0/24 117.48.216.0-117.48.218.255 117.48.232.0-117.48.234.255 120.132.117.0-120.132.127.255 Signature Algorithm: sha256WithRSAEncryption ae:d0:d3:21:84:ed:92:a0:4b:69:73:08:60:08:5a:47:10:ff: 9b:a1:79:ae:a4:f5:d4:17:7d:7b:f2:39:4e:d6:1d:d9:fa:4c: 01:a1:d8:46:ef:d5:74:56:11:6f:71:c8:54:85:af:96:d6:e6: 7a:b6:dd:8a:b8:d1:89:6d:98:43:53:16:ed:b3:cd:38:50:40: a8:c7:7a:8e:ff:d9:c5:51:b0:23:2c:8a:74:b2:3d:40:7d:77: 73:4b:e4:97:b4:f6:02:91:d3:9c:1d:f8:b2:04:c5:c9:b2:63: 25:1b:d8:ff:0a:9e:a4:f9:55:28:95:c6:5d:17:a4:39:13:d4: 43:1e:95:85:ea:3c:67:e1:02:a1:c8:45:44:51:db:33:f6:bc: 6f:5d:a4:b7:a9:72:f0:61:84:5d:1f:11:1e:6d:73:ff:69:10: 3b:03:4b:a9:6d:29:db:a3:c8:36:9d:91:b3:b6:df:ec:07:57: 4a:4d:66:77:f9:3f:3b:5d:01:22:0f:b0:61:e8:41:3e:61:bd: bc:33:ac:76:fa:4c:65:00:53:7d:9d:c5:75:ee:e9:d6:b3:2c: 81:12:7e:01:f5:13:ef:48:4d:83:17:e0:e1:f5:bb:ad:bb:a8: b0:d7:fb:29:82:aa:e1:ed:1c:56:e2:c0:17:c2:9f:88:51:b0: 4d:04:64:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUUwRZB43q1Nt8krIALXuKG5yLTWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA1MjUwNzQ0MjhaFw0yNzA1MjQwNzQ5MjhaMDMxMTAvBgNV BAMTKDc0M0M5QkRGREMzMUQ1NTk3RUVDNTJDNzFCRjQ3MjlFQUIwMDcxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJ+JgcHYF9s2jJ2zecGv+zpql EwcBKFZYiCrVBzIvrrJRbkzU9UNJmj9/cy+lfxDCk0Fe6E0R2MNp7V0Kz8MH1wjY LoQDKC2VuzqXhwvfNm3ROkoB7LpIsPuLdPWiGTdxIUdoGI8dCWwaynBlXYCvbc8v VjDOhEyT5W/9PRy+f993w0wfXnpn831SJYOLZdbWKSzL1ou8s+MzygIQ+6yatU2x /zCPQ3jHh349+BzkMuNvJms7DjyTWUW+giG8qD2lsk3JfthH5jxCkFOU5r0FdVu7 gCDEIqMSAXyCwfPJsiTRyFO5sViYjhT0/zAqHqliaWihwxkMOIXzqgorJyrFAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUdDyb39wx1Vl+7FLHG/RynqsAcZcwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC9BUzU2MDQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIA ATA2AwQAdTDAAwQAdTDDMAwDBAN1MNgDBAB1MNowDAMEA3Uw6AMEAHUw6jAMAwQA eIR1AwQHeIQAMA0GCSqGSIb3DQEBCwUAA4IBAQCu0NMhhO2SoEtpcwhgCFpHEP+b oXmupPXUF3178jlO1h3Z+kwBodhG79V0VhFvcchUha+W1uZ6tt2KuNGJbZhDUxbt s804UECox3qO/9nFUbAjLIp0sj1AfXdzS+SXtPYCkdOcHfiyBMXJsmMlG9j/Cp6k +VUolcZdF6Q5E9RDHpWF6jxn4QKhyEVEUdsz9rxvXaS3qXLwYYRdHxEebXP/aRA7 A0upbSnbo8g2nZGztt/sB1dKTWZ3+T87XQEiD7Bh6EE+Yb28M6x2+kxlAFN9ncV1 7unWsyyBEn4B9RPvSE2DF+Dh9butu6iw1/spgqrh7RxW4sAXwp+IUbBNBGSZ -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:30 2026 by rpki-client