$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56048.roa File: AS56048.roa (raw, json) Hash identifier: 1Xbjapn/Zchsez5Gx24tMvCUu6Dxq0q/O8+kFAP9KP4= Subject key identifier: 00:C7:7A:AC:11:7B:85:49:E4:57:54:A5:7C:04:B3:5A:96:DE:94:66 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 4A5E8AB722D97D2EA49CCE6E41EFA0962E022C32 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56048.roa Signing time: Wed 24 Jun 2026 02:51:44 +0000 ROA not before: Wed 24 Jun 2026 02:46:44 +0000 ROA not after: Wed 23 Jun 2027 02:51:44 +0000 asID: 56048 IP address blocks: 114.112.80.0/20 maxlen: 20 114.112.81.0/24 maxlen: 24 114.112.82.0/24 maxlen: 24 114.112.83.0/24 maxlen: 24 114.112.84.0/24 maxlen: 24 114.112.85.0/24 maxlen: 24 114.112.86.0/24 maxlen: 24 114.112.88.0/24 maxlen: 24 114.112.91.0/24 maxlen: 24 114.112.92.0/24 maxlen: 24 114.112.94.0/24 maxlen: 24 114.112.95.0/24 maxlen: 24 114.113.144.0/20 maxlen: 24 116.90.80.0/20 maxlen: 24 121.52.208.0/20 maxlen: 24 218.245.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5e:8a:b7:22:d9:7d:2e:a4:9c:ce:6e:41:ef:a0:96:2e:02:2c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 24 02:46:44 2026 GMT Not After : Jun 23 02:51:44 2027 GMT Subject: CN=00C77AAC117B8549E45754A57C04B35A96DE9466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:9f:d8:8d:a6:2d:4c:9d:3b:a7:06:e0:de: 44:d4:b7:08:37:5a:08:78:b3:eb:bc:06:ab:44:ca: 6a:d3:f5:66:45:bc:4e:c5:1e:82:4d:d6:ce:87:91: f1:a5:a0:c5:8e:4c:4b:4f:10:48:41:53:43:7a:0b: e8:c8:e2:5f:19:eb:42:5e:0b:19:8d:9c:51:81:07: 6b:70:e7:06:58:ba:de:31:37:29:b7:88:4a:ac:90: b8:db:cc:13:67:8f:7e:f2:7d:7a:de:b7:e0:94:3c: fc:17:44:2b:75:73:97:7d:ee:4a:59:b2:9e:cc:2c: aa:20:bb:f6:fe:96:53:92:1e:5c:53:64:9a:fb:fb: 5f:eb:4f:a6:a0:c5:0d:8b:8c:49:3c:bd:8d:6e:1b: 6a:59:08:86:77:d2:4d:14:5b:e9:ee:4d:25:18:53: 2e:fe:23:59:5e:4e:f2:dc:96:43:ce:6b:72:d1:e1: 90:37:3f:66:1e:6f:c9:ca:95:d2:20:1e:09:74:97: c3:9a:c0:a9:9b:e8:2b:90:d0:f3:54:6c:54:e8:c7: 3b:a0:1d:15:0a:e3:d8:cf:dd:b7:0c:dd:83:d8:3e: cf:a3:9c:96:93:bc:a1:8b:88:37:7a:03:cc:ed:1a: 9e:2c:8f:c9:f9:95:f9:42:e1:d6:04:08:d5:0d:e3: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:7A:AC:11:7B:85:49:E4:57:54:A5:7C:04:B3:5A:96:DE:94:66 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.112.80.0/20 114.113.144.0/20 116.90.80.0/20 121.52.208.0/20 218.245.0.0/19 Signature Algorithm: sha256WithRSAEncryption 06:33:18:87:f2:02:09:95:fd:e7:06:e9:9c:e2:75:2d:0f:1b: c4:5f:bb:1e:a7:f0:6b:86:07:0a:b5:18:b1:0f:e3:85:09:a9: 09:93:98:4a:e7:05:e2:2b:b7:e5:cb:e4:c7:b2:54:67:c9:23: a9:02:e6:ca:88:d6:9e:f9:7c:64:06:cf:f9:3b:de:a5:fe:60: 97:b0:24:5c:3c:45:91:df:40:87:63:21:6c:3b:f5:b9:1a:43: 6b:e3:c5:37:4c:36:59:d2:84:9f:2c:f1:cd:c7:9b:bd:aa:bf: cb:b5:1c:f7:e0:61:f1:6f:7c:bb:82:18:1d:6e:81:4b:27:22: 5b:c1:74:da:65:9d:03:d2:bc:21:f7:ea:1e:e4:8b:27:0d:b0: d0:b0:10:77:7a:34:84:18:3c:f9:c7:87:ac:bc:e0:87:40:d7: 2a:58:61:ba:04:0a:df:8d:3e:40:fc:ee:31:e9:a4:e3:c1:d1: f0:7b:e2:69:c3:c8:51:12:f0:b0:0d:4e:d4:0e:72:ee:a3:39: c0:df:76:ac:aa:c8:6f:db:fa:1c:83:35:17:c7:45:a4:ce:d5: 6a:4a:90:12:40:96:6a:ae:0d:2a:dc:3d:92:8e:14:88:15:05: 9c:39:c1:27:78:b2:bd:2d:50:0d:91:d2:30:3c:26:a4:d7:0d: 44:31:15:44 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUSl6KtyLZfS6knM5uQe+gli4CLDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MjQwMjQ2NDRaFw0yNzA2MjMwMjUxNDRaMDMxMTAvBgNV BAMTKDAwQzc3QUFDMTE3Qjg1NDlFNDU3NTRBNTdDMDRCMzVBOTZERTk0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7J/YjaYtTJ07pwbg3kTUtwg3 Wgh4s+u8BqtEymrT9WZFvE7FHoJN1s6HkfGloMWOTEtPEEhBU0N6C+jI4l8Z60Je CxmNnFGBB2tw5wZYut4xNym3iEqskLjbzBNnj37yfXret+CUPPwXRCt1c5d97kpZ sp7MLKogu/b+llOSHlxTZJr7+1/rT6agxQ2LjEk8vY1uG2pZCIZ30k0UW+nuTSUY Uy7+I1leTvLclkPOa3LR4ZA3P2Yeb8nKldIgHgl0l8OawKmb6CuQ0PNUbFToxzug HRUK49jP3bcM3YPYPs+jnJaTvKGLiDd6A8ztGp4sj8n5lflC4dYECNUN45OJAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUAMd6rBF7hUnkV1SlfASzWpbelGYwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzU2MDQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIA ATAeAwQEcnBQAwQEcnGQAwQEdFpQAwQEeTTQAwQF2vUAMA0GCSqGSIb3DQEBCwUA A4IBAQAGMxiH8gIJlf3nBumc4nUtDxvEX7sep/BrhgcKtRixD+OFCakJk5hK5wXi K7fly+THslRnySOpAubKiNae+XxkBs/5O96l/mCXsCRcPEWR30CHYyFsO/W5GkNr 48U3TDZZ0oSfLPHNx5u9qr/LtRz34GHxb3y7ghgdboFLJyJbwXTaZZ0D0rwh9+oe 5IsnDbDQsBB3ejSEGDz5x4esvOCHQNcqWGG6BArfjT5A/O4x6aTjwdHwe+Jpw8hR EvCwDU7UDnLuoznA33asqshv2/ocgzUXx0WkztVqSpASQJZqrg0q3D2SjhSIFQWc OcEneLK9LVANkdIwPCak1w1EMRVE -----END CERTIFICATE-----Generated at Fri Jul 24 17:48:01 2026 by rpki-client