$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56041.roa File: AS56041.roa (raw, json) Hash identifier: j3MydZIwFzbA7pEJNS2KQQkkIo227SN882DriyfZV7M= Subject key identifier: EE:A2:37:BB:32:3B:62:35:B6:A4:7F:C9:A3:0E:4D:81:06:2A:DB:61 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 4475A204E23E3352721FAB2F88126DB0484C9028 Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56041.roa Signing time: Thu 03 Sep 2026 17:14:25 +0000 ROA not before: Thu 03 Sep 2026 17:09:25 +0000 ROA not after: Thu 02 Sep 2027 17:14:25 +0000 asID: 56041 IP address blocks: 36.212.195.0/24 maxlen: 24 36.212.244.0/22 maxlen: 22 36.212.244.0/24 maxlen: 24 36.212.245.0/24 maxlen: 24 36.212.246.0/24 maxlen: 24 36.212.247.0/24 maxlen: 24 36.212.248.0/21 maxlen: 21 36.212.248.0/24 maxlen: 24 36.212.249.0/24 maxlen: 24 36.212.250.0/24 maxlen: 24 36.212.251.0/24 maxlen: 24 36.212.252.0/24 maxlen: 24 36.212.253.0/24 maxlen: 24 36.212.254.0/24 maxlen: 24 36.212.255.0/24 maxlen: 24 36.213.56.0/21 maxlen: 21 36.213.56.0/24 maxlen: 24 36.213.57.0/24 maxlen: 24 36.213.58.0/24 maxlen: 24 36.213.59.0/24 maxlen: 24 36.213.60.0/24 maxlen: 24 36.213.61.0/24 maxlen: 24 36.213.62.0/24 maxlen: 24 36.213.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:75:a2:04:e2:3e:33:52:72:1f:ab:2f:88:12:6d:b0:48:4c:90:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Sep 3 17:09:25 2026 GMT Not After : Sep 2 17:14:25 2027 GMT Subject: CN=EEA237BB323B6235B6A47FC9A30E4D81062ADB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:86:88:52:79:ba:e0:68:d4:25:af:9a:9a: 4f:fb:a3:54:3e:a4:9a:79:f6:05:88:6a:f2:8d:e7: 22:77:00:37:72:68:8a:d9:29:91:a0:b8:59:ce:e4: 26:90:0c:e1:ae:38:0b:00:d5:cf:98:5c:3c:49:38: 9c:02:c5:da:56:f0:3a:0f:95:68:ea:ed:e6:99:df: 97:4d:02:5c:89:ab:16:ce:0a:5b:9a:9d:df:fa:dc: 51:49:7b:1f:4e:5a:3d:2b:fa:af:72:6e:3a:9c:ab: 20:ec:e6:42:38:ee:68:14:54:43:35:41:f8:49:b5: 96:66:12:ca:f8:ac:88:cd:22:41:63:80:5a:af:88: f7:7b:7e:18:1b:0c:73:30:d5:c4:ae:ed:60:ed:19: 25:1a:a6:5c:4c:7d:9c:ad:0a:c6:19:a1:10:db:1d: e4:a2:94:92:ec:16:5f:99:f1:1d:d6:a2:10:77:d2: 54:06:46:5e:49:61:b7:b9:46:e4:b1:7f:13:0b:ff: 5d:a8:9b:e5:2b:dd:6f:ff:17:16:6f:d9:7d:85:9c: e2:e5:23:2e:fc:4d:b4:ea:14:cc:4b:8b:bb:78:d5: 0b:53:2c:02:9d:d4:ec:bb:ae:fa:33:ef:19:e3:4d: 0e:4c:59:2b:6c:1c:d6:9e:90:e7:43:ad:1b:8e:d2: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:37:BB:32:3B:62:35:B6:A4:7F:C9:A3:0E:4D:81:06:2A:DB:61 X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56041.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.212.195.0/24 36.212.244.0-36.212.255.255 36.213.56.0/21 Signature Algorithm: sha256WithRSAEncryption b9:6e:ff:92:71:f9:fc:97:55:6b:d8:37:66:db:2d:bc:94:14: 64:9c:a7:89:fb:50:49:10:37:b0:e3:89:a2:66:72:55:d4:b8: 61:fc:82:44:78:68:22:1b:d5:b7:19:b1:72:b3:ec:21:c6:03: 4e:2e:e4:f0:34:de:1b:70:4b:a5:94:28:34:53:2a:43:ac:1d: 79:66:bd:96:df:fd:d8:3f:b8:31:3d:6a:08:46:eb:bb:80:e4: 0d:8f:32:75:c3:81:e7:48:bd:67:39:1a:c2:27:fa:14:ea:55: 3c:6e:0e:47:68:0d:dd:6b:0c:c3:6f:90:0f:19:7d:df:6b:11: 24:7c:53:ff:92:fc:cb:87:ec:f9:4c:43:7f:20:b8:cd:25:01: 64:bd:69:4b:a7:ec:a8:f6:82:82:a1:8a:80:b1:98:96:d8:75: c7:9c:6e:b3:dd:df:21:52:48:ab:99:29:dc:a8:05:f9:c2:69: 88:43:16:de:93:b3:67:e7:98:5f:50:24:d9:70:21:a9:94:28: 79:ef:c1:85:b8:76:eb:b1:10:4f:ae:ed:6d:93:11:df:8d:49: 25:29:ca:52:be:a8:12:69:c0:7c:03:84:b6:07:88:0b:d6:81: 2a:06:2b:cf:f3:8d:ef:e2:f6:74:4c:c8:fc:86:95:e8:fc:0c: 98:3a:49:dd -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIURHWiBOI+M1JyH6sviBJtsEhMkCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA5MDMxNzA5MjVaFw0yNzA5MDIxNzE0MjVaMDMxMTAvBgNV BAMTKEVFQTIzN0JCMzIzQjYyMzVCNkE0N0ZDOUEzMEU0RDgxMDYyQURCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDYaIUnm64GjUJa+amk/7o1Q+ pJp59gWIavKN5yJ3ADdyaIrZKZGguFnO5CaQDOGuOAsA1c+YXDxJOJwCxdpW8DoP lWjq7eaZ35dNAlyJqxbOCluand/63FFJex9OWj0r+q9ybjqcqyDs5kI47mgUVEM1 QfhJtZZmEsr4rIjNIkFjgFqviPd7fhgbDHMw1cSu7WDtGSUaplxMfZytCsYZoRDb HeSilJLsFl+Z8R3WohB30lQGRl5JYbe5RuSxfxML/12om+Ur3W//FxZv2X2FnOLl Iy78TbTqFMxLi7t41QtTLAKd1Oy7rvoz7xnjTQ5MWStsHNaekOdDrRuO0mirAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU7qI3uzI7YjW2pH/Jow5NgQYq22EwHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC9BUzU2MDQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIA ATAZAwQAJNTDMAsDBAIk1PQDAwAk1AMEAyTVODANBgkqhkiG9w0BAQsFAAOCAQEA uW7/knH5/JdVa9g3ZtstvJQUZJyniftQSRA3sOOJomZyVdS4YfyCRHhoIhvVtxmx crPsIcYDTi7k8DTeG3BLpZQoNFMqQ6wdeWa9lt/92D+4MT1qCEbru4DkDY8ydcOB 50i9Zzkawif6FOpVPG4OR2gN3WsMw2+QDxl932sRJHxT/5L8y4fs+UxDfyC4zSUB ZL1pS6fsqPaCgqGKgLGYlth1x5xus93fIVJIq5kp3KgF+cJpiEMW3pOzZ+eYX1Ak 2XAhqZQoee/Bhbh267EQT67tbZMR341JJSnKUr6oEmnAfAOEtgeIC9aBKgYrz/ON 7+L2dEzI/IaV6PwMmDpJ3Q== -----END CERTIFICATE-----Generated at Thu Sep 10 20:07:16 2026 by rpki-client