$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa File: AS56046.roa (raw, json) Hash identifier: hO5MOO4KUqfrniKpdaorkO0bhP+Pd9W4UlSnmkJqq6k= Subject key identifier: 15:8F:04:E2:AA:DE:A5:71:61:7E:B9:B9:D2:BD:6D:B0:E9:3B:4B:08 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 11AE49FF4182D4521804B67950E8FD6AB0E574C8 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa Signing time: Thu 11 Jun 2026 07:36:00 +0000 ROA not before: Thu 11 Jun 2026 07:31:00 +0000 ROA not after: Thu 10 Jun 2027 07:36:00 +0000 asID: 56046 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.184.0/21 maxlen: 24 43.248.192.0/20 maxlen: 20 43.248.196.0/22 maxlen: 22 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.83.72.0/22 maxlen: 22 103.87.180.0/22 maxlen: 22 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ae:49:ff:41:82:d4:52:18:04:b6:79:50:e8:fd:6a:b0:e5:74:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jun 11 07:31:00 2026 GMT Not After : Jun 10 07:36:00 2027 GMT Subject: CN=158F04E2AADEA571617EB9B9D2BD6DB0E93B4B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:e8:11:ed:ee:eb:65:4a:34:53:c1:7a:5f: 58:3e:77:a1:ea:aa:e3:d6:81:3c:26:da:cd:67:ff: 49:bd:49:7b:d4:4d:0c:1f:7c:7c:6b:a5:4e:37:97: b7:fa:06:32:20:d1:28:22:f8:6d:25:bd:ac:14:54: 67:96:2f:b2:6d:43:ef:66:f7:b2:1a:c3:18:08:f7: 2e:00:63:87:54:86:7f:0a:69:43:ca:b5:e9:c1:6f: 96:33:66:f8:40:3d:b3:33:9d:8f:b2:15:07:8c:dd: 21:b1:cb:40:cb:87:cc:82:a3:ff:ee:79:96:58:51: 77:37:e5:0a:3c:ab:29:5a:73:ae:14:b7:41:4e:61: a6:b8:5d:81:db:49:3c:b5:fa:6e:35:eb:c4:47:a3: 1f:b9:67:66:01:9c:d6:73:8e:e3:77:0e:0c:9f:07: 95:40:5f:1a:a3:72:e6:df:f8:fc:a8:97:48:d3:bc: d0:84:dd:c5:f2:69:14:55:06:94:27:f2:7c:ca:2a: 7c:48:f3:a2:72:75:d7:64:af:1c:5f:49:77:d0:e7: c0:a2:d0:2d:2a:7b:da:52:ff:6e:57:4b:05:29:91: c7:cd:f8:62:38:d2:63:00:bc:58:92:dd:e3:ab:44: 96:e4:2b:82:76:47:de:da:64:ef:d4:7d:17:1b:87: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8F:04:E2:AA:DE:A5:71:61:7E:B9:B9:D2:BD:6D:B0:E9:3B:4B:08 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0-43.248.207.255 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.87.180.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 86:cd:2b:40:80:11:39:54:13:ed:22:75:74:d6:fe:6b:4e:2f: 23:51:2f:1d:16:0a:e4:70:4a:a4:03:24:94:9a:0e:e4:03:31: 53:5e:91:c5:cc:18:b5:ae:25:b0:3b:1e:00:12:3f:c3:f3:ee: 32:8b:10:69:27:11:a1:d5:3f:aa:15:22:b9:54:a1:79:7d:2c: e9:51:40:dd:99:a2:48:32:5f:53:79:e0:11:31:c9:15:9e:24: b4:eb:2c:09:f0:b3:f4:0a:73:f0:0f:a5:96:5d:54:48:71:b4: 91:95:3a:ee:64:a4:f8:4a:e3:9c:36:a4:b8:31:af:56:0c:08: 12:83:a7:c4:bb:22:e4:2f:0a:1b:9e:75:29:df:55:42:5e:8b: 83:34:f0:55:e8:94:12:9e:09:c2:11:00:58:3d:54:57:dd:f8: 98:ac:6a:44:2e:80:37:c5:e8:08:6f:4e:ce:90:62:34:3b:e2: 7f:8d:36:a8:ef:d7:1d:19:b2:39:2d:50:4c:24:1d:dd:56:37: 4d:0d:c6:bb:e9:aa:61:e8:58:d1:bc:5f:9d:0b:21:15:74:c3: 42:d3:03:cc:64:cc:e4:2b:af:9b:54:c6:de:4a:46:fc:d4:7a: 6e:dc:c4:57:c6:6c:b5:6e:93:c3:a0:77:fc:3c:ec:cb:24:45: ef:b7:6f:37 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUEa5J/0GC1FIYBLZ5UOj9arDldMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA2MTEwNzMxMDBaFw0yNzA2MTAwNzM2MDBaMDMxMTAvBgNV BAMTKDE1OEYwNEUyQUFERUE1NzE2MTdFQjlCOUQyQkQ2REIwRTkzQjRCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLugR7e7rZUo0U8F6X1g+d6Hq quPWgTwm2s1n/0m9SXvUTQwffHxrpU43l7f6BjIg0Sgi+G0lvawUVGeWL7JtQ+9m 97IawxgI9y4AY4dUhn8KaUPKtenBb5YzZvhAPbMznY+yFQeM3SGxy0DLh8yCo//u eZZYUXc35Qo8qylac64Ut0FOYaa4XYHbSTy1+m4168RHox+5Z2YBnNZzjuN3Dgyf B5VAXxqjcubf+Pyol0jTvNCE3cXyaRRVBpQn8nzKKnxI86JydddkrxxfSXfQ58Ci 0C0qe9pS/25XSwUpkcfN+GI40mMAvFiS3eOrRJbkK4J2R97aZO/UfRcbh1nvAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUFY8E4qrepXFhfrm50r1tsOk7SwgwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzU2MDQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIA ATBKAwQCK/AAAwQCK/EwMAwDBAMr+LgDBAQr+MADBAJnJSwDBAJnKAwDBAJnLaAD BAJnU0gDBAJnV7QDBAJnzfwDBAJn7/QDBAJv3wwwDQYJKoZIhvcNAQELBQADggEB AIbNK0CAETlUE+0idXTW/mtOLyNRLx0WCuRwSqQDJJSaDuQDMVNekcXMGLWuJbA7 HgASP8Pz7jKLEGknEaHVP6oVIrlUoXl9LOlRQN2ZokgyX1N54BExyRWeJLTrLAnw s/QKc/APpZZdVEhxtJGVOu5kpPhK45w2pLgxr1YMCBKDp8S7IuQvChuedSnfVUJe i4M08FXolBKeCcIRAFg9VFfd+JisakQugDfF6AhvTs6QYjQ74n+NNqjv1x0Zsjkt UEwkHd1WN00NxrvpqmHoWNG8X50LIRV0w0LTA8xkzOQrr5tUxt5KRvzUem7cxFfG bLVuk8Ogd/w87MskRe+3bzc= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:34 2026 by rpki-client