$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa File: AS56046.roa (raw, json) Hash identifier: COSuSnKuIA5XxbG6NsxnzR13nyADomRzg6qqNnHlAbM= Subject key identifier: 63:57:B3:9B:0D:5B:A1:3D:71:62:AE:79:BE:14:77:FD:32:C7:2B:E4 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 17BAF544031560B70DB48F05EF91CA17961C5B31 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa Signing time: Wed 23 Sep 2026 12:36:45 +0000 ROA not before: Wed 23 Sep 2026 12:31:45 +0000 ROA not after: Wed 22 Sep 2027 12:36:45 +0000 asID: 56046 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.248.192.0/20 maxlen: 20 43.248.200.0/22 maxlen: 22 43.248.200.0/23 maxlen: 23 43.248.202.0/23 maxlen: 23 43.248.204.0/22 maxlen: 22 103.87.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ba:f5:44:03:15:60:b7:0d:b4:8f:05:ef:91:ca:17:96:1c:5b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 23 12:31:45 2026 GMT Not After : Sep 22 12:36:45 2027 GMT Subject: CN=6357B39B0D5BA13D7162AE79BE1477FD32C72BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:7e:a7:64:7d:42:40:03:f8:33:f3:91:69: d9:02:e3:77:5a:cc:67:b7:95:1c:6e:fb:d8:13:c7: d0:35:f4:81:8f:0c:cb:d1:35:58:71:07:98:85:70: 82:b4:91:ed:47:ca:15:92:26:31:30:7f:06:76:b9: 0d:72:39:3d:f4:08:8b:a3:d3:71:f9:ba:e1:be:90: 2d:f8:5a:62:45:09:ad:f9:1e:20:04:08:df:f6:d0: c6:f9:bd:ef:0e:77:1a:d6:9e:9e:06:da:af:d3:84: d3:65:ca:de:e3:02:4c:ea:5b:2d:46:aa:4f:01:64: 04:f7:75:c8:4c:23:64:17:f5:39:44:34:c6:9c:87: 1f:33:74:6d:61:2e:01:a3:c1:a2:9b:e6:29:5b:bd: bb:21:82:db:4e:6f:3b:b1:7b:5e:c3:a4:cb:80:a1: 7c:62:9c:a7:b0:b0:17:60:11:a7:93:64:a0:18:3b: d0:bf:7e:7d:81:6d:2c:5c:1f:60:47:3f:d3:38:74: 08:3e:b0:01:24:d2:94:2d:d2:25:4f:8f:be:2d:12: 5c:54:01:6f:40:96:cb:e6:16:0e:11:c4:4f:c4:51: 35:7d:48:5f:dd:fa:f4:63:92:06:05:9e:fc:c9:e3: 35:27:00:30:05:54:1d:f2:07:3e:ee:64:08:d7:40: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:B3:9B:0D:5B:A1:3D:71:62:AE:79:BE:14:77:FD:32:C7:2B:E4 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS56046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.248.192.0/20 103.87.180.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:4e:3a:18:bb:48:20:7d:ef:67:3d:f2:a6:67:9e:7c:35:a1: 41:19:85:52:8e:05:b2:4f:7a:11:c8:eb:86:c2:f7:37:5d:1b: 98:c8:2b:77:83:44:df:45:6c:b8:62:42:9c:34:69:c4:b6:9e: 05:54:ad:d5:74:f3:99:71:88:01:36:21:2e:8b:3a:3c:56:de: 55:8a:7a:3e:0b:9f:e5:28:2b:d2:53:fd:07:d7:4f:0b:f9:28: 6f:6f:3b:9a:a9:10:d0:ea:56:63:11:aa:0c:02:48:22:07:ee: f8:fe:96:17:2b:9c:d9:8d:07:03:70:d0:c9:dd:6f:0a:b9:7c: b2:fa:ff:04:c1:7f:26:cf:e8:44:e6:2b:a7:1f:c6:e6:8a:b7: 30:ea:17:c6:80:cb:ca:b8:f1:77:96:a8:b6:41:42:20:c0:b8: 34:6d:e9:22:02:85:50:06:77:90:ee:64:ce:15:c1:41:c8:c3: e9:c4:fe:a2:eb:ad:f9:1c:34:57:ac:1d:7a:67:50:c7:33:f9: 68:a1:08:d4:ea:b1:f8:f5:de:48:45:b3:c4:c2:62:08:9f:ee: 8b:34:07:5a:cd:89:35:a9:84:ad:df:ee:25:5f:28:85:d1:4c: 4d:bd:39:8f:66:32:03:6c:56:85:3a:f1:39:e4:1d:1b:aa:82: fb:27:d7:83 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUF7r1RAMVYLcNtI8F75HKF5YcWzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjMxMjMxNDVaFw0yNzA5MjIxMjM2NDVaMDMxMTAvBgNV BAMTKDYzNTdCMzlCMEQ1QkExM0Q3MTYyQUU3OUJFMTQ3N0ZEMzJDNzJCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpn6nZH1CQAP4M/ORadkC43da zGe3lRxu+9gTx9A19IGPDMvRNVhxB5iFcIK0ke1HyhWSJjEwfwZ2uQ1yOT30CIuj 03H5uuG+kC34WmJFCa35HiAECN/20Mb5ve8OdxrWnp4G2q/ThNNlyt7jAkzqWy1G qk8BZAT3dchMI2QX9TlENMachx8zdG1hLgGjwaKb5ilbvbshgttObzuxe17DpMuA oXxinKewsBdgEaeTZKAYO9C/fn2BbSxcH2BHP9M4dAg+sAEk0pQt0iVPj74tElxU AW9AlsvmFg4RxE/EUTV9SF/d+vRjkgYFnvzJ4zUnADAFVB3yBz7uZAjXQDAVAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUY1ezmw1boT1xYq55vhR3/TLHK+QwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzU2MDQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA ATASAwQCK/AAAwQEK/jAAwQCZ1e0MA0GCSqGSIb3DQEBCwUAA4IBAQCfTjoYu0gg fe9nPfKmZ558NaFBGYVSjgWyT3oRyOuGwvc3XRuYyCt3g0TfRWy4YkKcNGnEtp4F VK3VdPOZcYgBNiEuizo8Vt5Vino+C5/lKCvSU/0H108L+ShvbzuaqRDQ6lZjEaoM AkgiB+74/pYXK5zZjQcDcNDJ3W8KuXyy+v8EwX8mz+hE5iunH8bmircw6hfGgMvK uPF3lqi2QUIgwLg0bekiAoVQBneQ7mTOFcFByMPpxP6i6635HDRXrB16Z1DHM/lo oQjU6rH49d5IRbPEwmIIn+6LNAdazYk1qYSt3+4lXyiF0UxNvTmPZjIDbFaFOvE5 5B0bqoL7J9eD -----END CERTIFICATE-----Generated at Sat Sep 26 14:19:50 2026 by rpki-client