
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56040.roa
File: AS56040.roa (raw, json)
Hash identifier: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=
Subject key identifier: 1B:7C:90:ED:3E:B2:10:B2:C5:22:E1:EC:DC:5E:5D:20:E0:37:89:2D
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 4CD80E14317AEF56A74505A53A2CB5ECFC70182F
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56040.roa
Signing time: Mon 01 Jun 2026 07:13:15 +0000
ROA not before: Mon 01 Jun 2026 07:08:15 +0000
ROA not after: Mon 31 May 2027 07:13:15 +0000
asID: 56040
IP address blocks: 123.64.255.0/24 maxlen: 24
123.88.0.0/16 maxlen: 16
123.89.0.0/16 maxlen: 16
123.90.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d8:0e:14:31:7a:ef:56:a7:45:05:a5:3a:2c:b5:ec:fc:70:18:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: Jun 1 07:08:15 2026 GMT
Not After : May 31 07:13:15 2027 GMT
Subject: CN=1B7C90ED3EB210B2C522E1ECDC5E5D20E037892D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:d0:64:29:c7:36:1f:77:c8:11:8b:80:33:
9a:0a:f9:42:ed:56:d3:1c:00:59:91:82:c1:db:11:
46:1d:ed:3b:2d:b3:05:c2:58:5c:e7:6f:3e:6b:d7:
de:35:c7:d8:ad:6f:82:5e:9b:11:94:d1:9d:ec:4b:
01:68:66:19:08:77:9d:c1:90:3e:eb:ed:09:2d:d2:
e5:3e:b1:39:37:7a:18:77:59:91:9a:89:40:66:93:
93:3f:27:d4:ef:f8:78:0f:fe:b5:ca:93:3e:11:4a:
2f:a1:27:1f:18:f3:ab:0d:8e:a6:03:ee:cc:00:19:
be:c7:6e:88:2e:30:75:5d:80:8c:36:32:3e:e5:88:
35:53:9a:9c:29:e9:b8:ec:30:84:88:32:a9:e8:2e:
4e:e5:5f:7d:43:d8:02:0f:35:89:75:08:b1:f6:cb:
c8:a9:f4:63:96:6a:b6:e5:7f:2b:34:b0:f3:13:66:
3a:3b:10:71:be:c4:b8:26:20:57:b0:85:b6:95:c9:
8a:a8:00:84:f7:83:42:a5:72:a1:81:b4:10:27:dc:
2b:35:6e:38:c8:22:ee:45:ba:cf:60:c7:0f:0b:5c:
5c:d9:91:8f:e3:13:82:17:57:3b:bb:ed:02:37:44:
e9:26:7f:d2:6e:99:e9:7a:d7:5a:af:5d:bd:85:37:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:90:ED:3E:B2:10:B2:C5:22:E1:EC:DC:5E:5D:20:E0:37:89:2D
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.64.255.0/24
123.88.0.0-123.90.255.255
Signature Algorithm: sha256WithRSAEncryption
28:f9:c5:51:6a:63:b9:3e:6a:43:fa:f5:4e:aa:53:be:d1:cb:
e3:f4:a3:f2:b1:71:11:95:e2:e5:40:23:ae:4e:e8:1a:ed:94:
c6:78:11:18:2f:94:26:20:4c:f8:be:f8:74:d2:54:3b:01:63:
f4:b0:cf:52:d6:3e:a1:6f:31:48:4a:cc:9b:80:8f:37:23:04:
24:57:1f:e7:4b:bd:48:d4:18:39:93:a3:3f:52:d6:55:59:37:
2d:72:7b:80:46:36:63:29:ef:d2:33:df:d9:99:e0:b0:d0:ae:
4b:5e:4b:8d:6f:4c:21:c1:65:12:d1:4a:20:94:95:9f:1b:47:
51:ca:4c:86:4c:17:73:db:d1:17:5a:e6:92:05:de:42:dc:e1:
6b:07:33:6f:22:94:cb:c7:4b:5c:b9:83:26:b3:7a:11:9f:77:
32:fe:ba:ac:ce:fb:e1:91:c2:3c:e6:2b:4a:6c:7d:01:ff:81:
78:99:33:86:72:a0:de:1a:fd:c1:28:7e:1b:2f:5d:c5:2c:db:
e7:2d:9c:90:2e:e3:ba:85:99:c0:68:32:ee:15:46:8f:aa:51:
e7:bb:36:24:50:17:d6:eb:a8:40:8f:cd:ad:2a:ab:dd:3b:82:
6a:d6:c8:2f:91:28:a8:c4:e5:90:cd:6f:12:eb:3f:98:61:a2:
ba:36:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:41 2026 by rpki-client