$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56048.roa File: AS56048.roa (raw, json) Hash identifier: 5zXzSkrBQUFfid6aK1Hyf4IH0zjb8rUH3Vawr//Qfho= Subject key identifier: BE:5F:90:72:9C:81:58:19:3E:89:A7:AD:98:90:B9:32:C1:96:D4:52 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 263C4B555A383182F75228DE8B4F0EC024980D81 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56048.roa Signing time: Wed 17 Jun 2026 13:08:44 +0000 ROA not before: Wed 17 Jun 2026 13:03:44 +0000 ROA not after: Wed 16 Jun 2027 13:08:44 +0000 asID: 56048 IP address blocks: 42.158.0.0/16 maxlen: 32 58.82.0.0/17 maxlen: 32 58.83.0.0/17 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 118.30.0.0/16 maxlen: 32 118.195.0.0/17 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 123.61.0.0/16 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 2403:a200:a2ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3c:4b:55:5a:38:31:82:f7:52:28:de:8b:4f:0e:c0:24:98:0d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 17 13:03:44 2026 GMT Not After : Jun 16 13:08:44 2027 GMT Subject: CN=BE5F90729C8158193E89A7AD9890B932C196D452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:ba:70:80:03:40:8f:4d:4e:cc:c1:ec:30: bc:c5:1c:a6:ba:5f:dd:88:45:c3:eb:40:45:5c:e1: c4:c4:89:cc:69:ac:8d:0f:85:a8:1d:7c:92:4e:5d: d6:2e:6c:6b:05:6f:89:58:6d:0f:21:a7:7f:07:89: 98:45:fd:b2:6d:f7:d3:66:ab:60:be:d4:8f:c6:4a: cf:b5:f8:2c:d9:d3:c8:09:f5:4e:de:4b:6b:07:f5: 3b:50:1c:5e:43:b6:86:5b:ea:14:03:0e:58:c8:77: 62:7d:69:76:de:25:8d:e5:a8:d2:33:ac:2e:78:83: 78:6b:56:e5:ec:62:0b:14:36:36:ee:a3:e0:b8:13: e6:7c:a6:25:10:2f:ec:1d:5e:8e:80:3f:1f:22:d3: c1:75:51:4d:c5:74:5c:23:3b:a3:18:33:76:24:8f: 22:dd:1e:2c:d1:f9:e6:f4:68:7c:ea:50:ba:2e:b6: c4:a0:f9:fc:7d:5c:ff:da:40:bb:ca:47:64:8d:f6: da:21:13:03:ae:c9:95:35:6c:37:85:60:74:9a:3d: 12:fe:5b:bb:ab:13:52:6c:9c:49:27:97:5e:0f:a8: 65:77:1d:37:8a:08:50:fd:3a:6d:31:ce:4a:9e:d1: 38:c2:f6:41:dd:a4:39:c3:f3:af:c6:f2:8f:2a:24: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5F:90:72:9C:81:58:19:3E:89:A7:AD:98:90:B9:32:C1:96:D4:52 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.82.0.0/17 58.83.0.0/16 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 118.30.0.0/16 118.195.0.0/17 120.132.128.0-120.133.127.255 120.134.0.0/15 123.61.0.0/16 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption 74:b8:bb:5c:a6:a1:f4:72:4a:fd:4f:51:0b:cd:62:ed:79:41: 90:3a:00:5a:84:e8:27:47:50:67:c1:7b:86:e8:48:76:05:4e: 72:f0:5f:fe:28:48:ea:f9:5c:51:80:37:a1:60:b7:0b:a2:02: 05:f2:2b:96:a3:f7:68:db:24:e1:58:e3:a4:7b:38:1a:86:8f: 80:67:bf:0b:90:c7:17:19:21:23:83:58:f2:80:f5:94:62:c8: d6:11:b3:98:c8:8e:81:7c:1a:82:44:cd:c8:b4:01:ad:f7:db: 2e:d9:81:62:10:f8:39:22:29:42:c5:e7:9b:be:e8:8d:71:dc: b0:74:16:45:80:08:06:42:83:f9:ae:2d:7e:a4:04:b3:44:24: 8e:1f:3a:c9:b0:e2:5e:1f:84:b2:92:b4:08:fb:66:3f:9c:41: f4:fb:21:8b:db:a1:01:2e:d7:8e:4b:df:25:ff:32:d2:76:a5: 60:d2:60:c9:36:12:65:9f:2c:42:a7:72:68:7a:be:a4:7a:fe: 57:c5:6b:b1:3c:2e:a7:6e:4c:a9:ae:59:d1:2d:02:9b:38:0c: 4d:3b:1d:0f:d9:92:6a:ec:4a:5f:17:80:23:e1:e1:d3:2f:3b: 8c:c6:3c:3a:06:50:ef:98:5c:95:9b:62:f3:98:d3:c9:e1:20: 1c:4f:b1:ba -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUJjxLVVo4MYL3Uijei08OwCSYDYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MTcxMzAzNDRaFw0yNzA2MTYxMzA4NDRaMDMxMTAvBgNV BAMTKEJFNUY5MDcyOUM4MTU4MTkzRTg5QTdBRDk4OTBCOTMyQzE5NkQ0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQrpwgANAj01OzMHsMLzFHKa6 X92IRcPrQEVc4cTEicxprI0PhagdfJJOXdYubGsFb4lYbQ8hp38HiZhF/bJt99Nm q2C+1I/GSs+1+CzZ08gJ9U7eS2sH9TtQHF5DtoZb6hQDDljId2J9aXbeJY3lqNIz rC54g3hrVuXsYgsUNjbuo+C4E+Z8piUQL+wdXo6APx8i08F1UU3FdFwjO6MYM3Yk jyLdHizR+eb0aHzqULoutsSg+fx9XP/aQLvKR2SN9tohEwOuyZU1bDeFYHSaPRL+ W7urE1JsnEknl14PqGV3HTeKCFD9Om0xzkqe0TjC9kHdpDnD86/G8o8qJKFPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUvl+QcpyBWBk+iaetmJC5MsGW1FIwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzU2MDQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCB kAQCAAEwgYkDAwAqngMEBzpSAAMDADpTAwQHO5cAAwQHO78AAwQCZ/eoAwMAdh4D BAd2wwAwDAMEB3iEgAMEB3iFAAMDAXiGAwMAez0DAwF8+jALAwMBtq4DBAS2r+AD AwG3VAMEA8vEAAMEBdJNgDAMAwQF02OgAwQF02PAMAsDAwDTlwMEBdOYAAMEBtOY QDANBAIAAjAHAwUAJAOiADANBgkqhkiG9w0BAQsFAAOCAQEAdLi7XKah9HJK/U9R C81i7XlBkDoAWoToJ0dQZ8F7huhIdgVOcvBf/ihI6vlcUYA3oWC3C6ICBfIrlqP3 aNsk4VjjpHs4GoaPgGe/C5DHFxkhI4NY8oD1lGLI1hGzmMiOgXwagkTNyLQBrffb LtmBYhD4OSIpQsXnm77ojXHcsHQWRYAIBkKD+a4tfqQEs0Qkjh86ybDiXh+EspK0 CPtmP5xB9Pshi9uhAS7XjkvfJf8y0nalYNJgyTYSZZ8sQqdyaHq+pHr+V8VrsTwu p25Mqa5Z0S0CmzgMTTsdD9mSauxKXxeAI+Hh0y87jMY8OgZQ75hclZti85jTyeEg HE+xug== -----END CERTIFICATE-----Generated at Fri Jul 24 14:51:45 2026 by rpki-client