$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56042.roa File: AS56042.roa (raw, json) Hash identifier: UKjsFxWD9jWzWhIKzWlCLqB67Q9B9HRs0lVDSAwC6go= Subject key identifier: B7:0A:37:9A:BB:12:47:B1:F5:A3:22:FA:5E:56:18:7E:A4:25:4E:0F Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 0E2D00AA19BB1111B2FA47D49AC803A9077D15BC Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56042.roa Signing time: Tue 28 Jul 2026 07:57:09 +0000 ROA not before: Tue 28 Jul 2026 07:52:09 +0000 ROA not after: Tue 27 Jul 2027 07:57:09 +0000 asID: 56042 IP address blocks: 36.212.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2d:00:aa:19:bb:11:11:b2:fa:47:d4:9a:c8:03:a9:07:7d:15:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Jul 28 07:52:09 2026 GMT Not After : Jul 27 07:57:09 2027 GMT Subject: CN=B70A379ABB1247B1F5A322FA5E56187EA4254E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9a:97:db:ed:3b:b2:20:2c:16:5a:5a:6d:7d: 15:a4:65:85:21:a1:81:d1:60:b0:94:d9:90:4d:54: 21:d7:0d:49:2a:e8:82:f4:68:ac:72:ad:22:23:60: 9a:f7:78:53:30:cf:c5:6b:e6:79:f9:73:9e:b7:b4: f1:cb:84:28:4c:5f:3a:bb:90:77:fd:2a:75:0d:0d: 40:fa:24:54:ff:f5:85:9b:29:d8:61:0e:d4:b0:73: 36:09:a8:72:11:5d:56:35:b7:9c:5b:4c:a5:e2:9e: 22:8c:66:23:48:4d:59:4e:48:b6:41:a0:da:b7:aa: f6:61:3a:9a:70:1f:49:48:1e:32:7e:96:10:f8:44: 0b:c1:16:6d:31:69:0e:1a:28:93:2d:32:25:9e:0e: 85:50:9c:c1:4f:6a:fe:f0:10:34:ed:c5:29:c6:0f: f6:99:b8:23:89:00:4a:e2:6f:01:9d:fb:6d:85:08: 2e:31:36:de:65:d1:68:d1:2f:d9:da:c5:0e:90:60: f1:30:fb:7e:d6:8b:5c:fc:4f:db:42:6c:db:a2:de: 47:a2:2c:39:d4:e6:0a:27:d9:ac:2b:d2:1d:df:29: 90:42:6e:52:d1:5c:94:4a:02:96:51:7a:01:2b:0e: 56:5f:a6:48:88:f2:91:90:3f:0a:56:09:63:94:7e: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:37:9A:BB:12:47:B1:F5:A3:22:FA:5E:56:18:7E:A4:25:4E:0F X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.212.201.0/24 Signature Algorithm: sha256WithRSAEncryption bb:70:7c:40:f1:fc:2b:20:97:17:dc:61:0d:42:10:39:bd:78: 64:42:e3:45:6b:2c:3d:ac:ee:cc:e6:2a:0c:7f:a4:8f:0d:9d: f7:36:9f:15:b5:4b:aa:02:36:bc:eb:7e:b1:cf:d8:b2:70:0f: 91:5d:10:09:34:63:8f:0f:f5:81:13:4a:8c:3a:33:4c:33:df: 05:b9:de:89:12:77:ec:8b:44:05:0e:10:0f:ad:35:f9:26:0d: 13:e1:52:94:d2:03:9f:12:76:9e:29:19:5c:82:a1:b1:ab:91: d3:4d:65:09:0f:cc:c1:b8:7f:5b:36:a0:0d:53:20:71:11:97: 00:b4:68:01:07:04:c8:f2:6e:c1:c6:f2:a1:39:50:11:1d:45: cd:25:1f:b5:b4:d4:b6:5a:4d:26:d1:71:2d:e3:2a:f5:ea:08: 06:44:61:0a:4b:4b:7b:30:02:e3:fa:7c:27:5c:76:83:c3:62: 98:ef:a7:2a:46:13:62:37:91:8a:fa:18:38:d3:d5:7f:54:07: 12:08:76:e7:fd:e9:d2:11:ec:a7:5a:c0:35:e7:05:eb:a6:37: 61:3f:6b:6f:c3:50:fb:04:6f:d6:c5:b0:c7:14:4e:f1:05:14: cd:ec:03:1f:8e:ca:91:7e:85:fa:88:9d:0c:f2:6e:a8:56:b0: 2b:70:92:60 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDi0Aqhm7ERGy+kfUmsgDqQd9FbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA3MjgwNzUyMDlaFw0yNzA3MjcwNzU3MDlaMDMxMTAvBgNV BAMTKEI3MEEzNzlBQkIxMjQ3QjFGNUEzMjJGQTVFNTYxODdFQTQyNTRFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmpfb7TuyICwWWlptfRWkZYUh oYHRYLCU2ZBNVCHXDUkq6IL0aKxyrSIjYJr3eFMwz8Vr5nn5c563tPHLhChMXzq7 kHf9KnUNDUD6JFT/9YWbKdhhDtSwczYJqHIRXVY1t5xbTKXiniKMZiNITVlOSLZB oNq3qvZhOppwH0lIHjJ+lhD4RAvBFm0xaQ4aKJMtMiWeDoVQnMFPav7wEDTtxSnG D/aZuCOJAEribwGd+22FCC4xNt5l0WjRL9naxQ6QYPEw+37Wi1z8T9tCbNui3kei LDnU5gon2awr0h3fKZBCblLRXJRKApZRegErDlZfpkiI8pGQPwpWCWOUfptlAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUtwo3mrsSR7H1oyL6XlYYfqQlTg8wHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC9BUzU2MDQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAJNTJMA0GCSqGSIb3DQEBCwUAA4IBAQC7cHxA8fwrIJcX3GENQhA5vXhk QuNFayw9rO7M5ioMf6SPDZ33Np8VtUuqAja8636xz9iycA+RXRAJNGOPD/WBE0qM OjNMM98Fud6JEnfsi0QFDhAPrTX5Jg0T4VKU0gOfEnaeKRlcgqGxq5HTTWUJD8zB uH9bNqANUyBxEZcAtGgBBwTI8m7BxvKhOVARHUXNJR+1tNS2Wk0m0XEt4yr16ggG RGEKS0t7MALj+nwnXHaDw2KY76cqRhNiN5GK+hg409V/VAcSCHbn/enSEeynWsA1 5wXrpjdhP2tvw1D7BG/WxbDHFE7xBRTN7AMfjsqRfoX6iJ0M8m6oVrArcJJg -----END CERTIFICATE-----Generated at Wed Jul 29 12:24:26 2026 by rpki-client