$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56040.roa File: AS56040.roa (raw, json) Hash identifier: S03Z930RtSoH79KDzS2k8drefwtjoeI56VCdlze2G38= Subject key identifier: 74:58:B3:EB:06:01:1D:15:74:B0:F7:2F:9E:5B:B9:36:E9:B5:29:ED Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 30F3D4A8A942B357D72389B4C5328D95D4D2D097 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56040.roa Signing time: Wed 29 Jul 2026 14:36:00 +0000 ROA not before: Wed 29 Jul 2026 14:31:00 +0000 ROA not after: Wed 28 Jul 2027 14:36:00 +0000 asID: 56040 IP address blocks: 117.48.192.0/24 maxlen: 24 117.48.195.0/24 maxlen: 24 117.48.216.0/24 maxlen: 24 117.48.217.0/24 maxlen: 24 117.48.218.0/24 maxlen: 24 117.48.232.0/24 maxlen: 24 117.48.233.0/24 maxlen: 24 117.48.234.0/24 maxlen: 24 120.132.117.0/24 maxlen: 24 120.132.118.0/24 maxlen: 24 120.132.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f3:d4:a8:a9:42:b3:57:d7:23:89:b4:c5:32:8d:95:d4:d2:d0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jul 29 14:31:00 2026 GMT Not After : Jul 28 14:36:00 2027 GMT Subject: CN=7458B3EB06011D1574B0F72F9E5BB936E9B529ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:32:fb:ee:b7:6a:99:43:16:9d:ed:25:6c: e8:db:09:70:79:e2:e4:81:71:49:dc:5b:05:d7:f8: 61:35:d4:92:ac:1b:12:19:41:ff:22:ea:c5:98:71: 97:31:da:6a:91:53:cb:51:b6:86:1c:6d:20:0a:f8: a0:fd:aa:7e:af:79:a0:59:50:f5:8c:5c:4e:22:dd: b8:28:f1:f2:13:c6:dc:cc:74:ec:0e:70:ca:9c:96: c0:68:3d:79:bb:18:bf:f4:25:18:68:33:ce:7d:e9: 5f:55:19:8f:72:78:31:f3:d3:7e:0a:fe:e0:12:69: 11:2a:13:b0:b4:3b:c2:bf:05:44:70:cb:3e:23:70: 4b:05:33:b3:84:6a:e6:01:64:be:9b:f1:5f:9f:03: 8e:3a:ab:08:37:32:91:d7:3d:88:20:ac:93:ff:24: 51:fd:b9:11:63:bb:88:cf:a2:ba:e2:0c:02:26:cf: 6d:f2:18:16:04:c3:49:9a:48:9c:3b:b1:ed:66:0e: d4:44:d4:3b:43:ac:54:bc:e0:e4:62:80:d0:48:ba: a5:ab:5f:34:e6:27:f1:e0:d4:91:e6:db:3e:f7:80: 99:25:bb:b9:d4:2a:fa:15:a9:cf:4e:59:a1:50:f2: 09:26:8b:e9:c6:3f:9f:71:ad:bf:79:63:d9:b3:e8: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:58:B3:EB:06:01:1D:15:74:B0:F7:2F:9E:5B:B9:36:E9:B5:29:ED X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.48.192.0/24 117.48.195.0/24 117.48.216.0-117.48.218.255 117.48.232.0-117.48.234.255 120.132.117.0-120.132.119.255 Signature Algorithm: sha256WithRSAEncryption 36:b6:28:48:f3:d1:14:dc:fb:7d:ae:44:52:b5:0e:4f:d8:78: 0b:d6:58:59:34:82:9e:ec:19:ae:bf:22:bd:23:b5:8d:23:bc: 11:99:5c:f3:80:66:4b:8e:5f:eb:ef:87:bf:01:e6:8c:a1:d5: 27:ff:79:39:bd:db:bb:6c:8b:72:dd:25:8e:72:e3:a0:e9:c5: c1:a9:e0:67:8d:00:fa:d8:e4:26:c4:01:d0:80:da:af:53:db: 1e:6e:92:c7:36:da:39:f7:bf:ce:07:54:f9:93:e2:d0:cd:d3: 34:b8:0a:17:94:ce:da:4b:c4:45:5c:b9:2e:c8:ce:c2:f6:a4: 9c:20:3e:70:ef:67:e9:e0:6e:85:56:f4:e1:c9:ca:a5:ee:22: 0c:9e:27:22:e7:d6:04:2b:ba:41:c7:d6:85:08:1c:b1:af:0e: 9e:15:2c:3a:71:e8:c9:9c:af:50:c4:77:ec:80:da:6c:30:e4: 53:04:27:e5:c5:96:23:6d:cc:47:36:f1:8c:72:28:e8:51:93: e3:fc:54:ad:5f:97:d7:a8:f6:81:05:77:ee:ed:75:43:0d:28: da:cd:0b:17:1f:e9:5c:d0:72:3c:1b:4d:75:aa:85:c7:70:a5: 4c:d3:d0:26:37:fd:34:30:32:bd:e6:b9:b0:32:7c:ea:23:49: 4f:af:37:3c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUMPPUqKlCs1fXI4m0xTKNldTS0JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA3MjkxNDMxMDBaFw0yNzA3MjgxNDM2MDBaMDMxMTAvBgNV BAMTKDc0NThCM0VCMDYwMTFEMTU3NEIwRjcyRjlFNUJCOTM2RTlCNTI5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEjL77rdqmUMWne0lbOjbCXB5 4uSBcUncWwXX+GE11JKsGxIZQf8i6sWYcZcx2mqRU8tRtoYcbSAK+KD9qn6veaBZ UPWMXE4i3bgo8fITxtzMdOwOcMqclsBoPXm7GL/0JRhoM8596V9VGY9yeDHz034K /uASaREqE7C0O8K/BURwyz4jcEsFM7OEauYBZL6b8V+fA446qwg3MpHXPYggrJP/ JFH9uRFju4jPorriDAImz23yGBYEw0maSJw7se1mDtRE1DtDrFS84ORigNBIuqWr XzTmJ/Hg1JHm2z73gJklu7nUKvoVqc9OWaFQ8gkmi+nGP59xrb95Y9mz6P6RAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUdFiz6wYBHRV0sPcvnlu5Num1Ke0wHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC9BUzU2MDQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIA ATA2AwQAdTDAAwQAdTDDMAwDBAN1MNgDBAB1MNowDAMEA3Uw6AMEAHUw6jAMAwQA eIR1AwQDeIRwMA0GCSqGSIb3DQEBCwUAA4IBAQA2tihI89EU3Pt9rkRStQ5P2HgL 1lhZNIKe7BmuvyK9I7WNI7wRmVzzgGZLjl/r74e/AeaModUn/3k5vdu7bIty3SWO cuOg6cXBqeBnjQD62OQmxAHQgNqvU9sebpLHNto597/OB1T5k+LQzdM0uAoXlM7a S8RFXLkuyM7C9qScID5w72fp4G6FVvThycql7iIMnici59YEK7pBx9aFCByxrw6e FSw6cejJnK9QxHfsgNpsMORTBCflxZYjbcxHNvGMcijoUZPj/FStX5fXqPaBBXfu 7XVDDSjazQsXH+lc0HI8G011qoXHcKVM09AmN/00MDK95rmwMnzqI0lPrzc8 -----END CERTIFICATE-----Generated at Thu Sep 10 17:29:07 2026 by rpki-client