$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56040.roa File: AS56040.roa (raw, json) Hash identifier: 3bqqTEtc2kB4w7+uOPEjWG3QMW57JDCFKmDdTgJ4caQ= Subject key identifier: 77:6E:8C:D2:72:45:4A:73:48:75:06:29:76:59:13:34:FC:7B:98:A5 Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D Certificate serial: 62BE182B009C655170E03E545D0B753B3DE6A2A8 Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56040.roa Signing time: Mon 11 May 2026 14:41:22 +0000 ROA not before: Mon 11 May 2026 14:36:22 +0000 ROA not after: Mon 10 May 2027 14:41:22 +0000 asID: 56040 IP address blocks: 123.88.0.0/16 maxlen: 16 123.89.0.0/16 maxlen: 16 123.90.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:be:18:2b:00:9c:65:51:70:e0:3e:54:5d:0b:75:3b:3d:e6:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D Validity Not Before: May 11 14:36:22 2026 GMT Not After : May 10 14:41:22 2027 GMT Subject: CN=776E8CD272454A734875062976591334FC7B98A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:a8:08:78:90:f1:79:8d:6b:7f:8f:e0:df: 6b:4f:3c:55:df:9a:9c:d6:8e:cf:b6:c0:3b:c3:9f: ce:e0:ed:fd:98:18:f9:bc:3c:88:f0:00:89:a9:e7: 01:b8:93:0d:13:16:ea:62:00:ac:82:31:28:7e:37: a2:d3:71:b5:88:9b:ed:94:ba:ae:08:e1:09:76:a1: c0:d9:a5:f1:fa:f6:77:4d:b7:9e:17:b4:3e:e2:09: cc:4b:17:49:a6:22:02:8c:7c:e7:15:49:9a:2d:5a: 70:93:00:bc:5d:11:71:a6:79:af:9c:92:69:6b:9a: d4:f1:4f:b4:0c:33:10:7d:c0:39:aa:f8:e6:d0:72: 4a:b3:1b:ed:94:42:c0:05:36:a0:6f:eb:d9:cb:4e: bd:e5:bb:5a:24:b3:04:87:85:88:db:30:6c:bb:1f: 1b:9e:e1:0f:04:1e:98:00:9d:f6:cc:c7:e9:77:82: 84:06:ac:3e:75:e2:8d:88:c8:f9:ee:d8:b6:46:ea: e7:d5:74:72:88:c9:06:cb:75:54:13:69:74:fe:fa: c2:2f:90:bc:6d:fb:0a:0f:16:2d:d0:57:cd:93:d4: 6c:63:95:15:50:ae:54:99:37:46:7e:a4:30:68:43: f7:16:df:f7:98:11:62:09:39:2c:7d:96:93:2e:b4: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:8C:D2:72:45:4A:73:48:75:06:29:76:59:13:34:FC:7B:98:A5 X509v3 Authority Key Identifier: keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.88.0.0-123.90.255.255 Signature Algorithm: sha256WithRSAEncryption 70:ec:ce:45:ce:6d:64:00:26:22:dc:e8:70:c4:5f:c1:09:b6: 20:03:28:4d:f1:71:92:c3:22:f4:67:1e:7f:25:69:8f:47:0c: 6a:18:c7:8e:71:a7:d0:fd:cd:12:7f:6d:95:92:21:83:6e:db: 30:62:50:b9:75:56:4f:1b:93:f7:78:3e:b1:7a:57:33:11:3b: b1:33:30:2f:36:15:8c:d3:4c:6c:17:94:8f:c8:d8:a7:36:d5: 31:90:ea:05:42:0d:72:b4:e8:b7:b5:ab:76:d3:51:90:31:0c: c0:4a:67:21:79:db:2d:fa:20:15:1c:1c:d1:67:1c:c6:02:f7: 42:c7:59:74:d0:47:e6:02:6b:fb:fc:5f:78:c7:19:2a:ea:13: 52:8c:69:62:e6:80:af:2d:c8:25:f5:de:15:37:c4:21:f9:ee: ec:e8:24:46:1e:cc:b5:d9:25:5e:2d:eb:41:7c:88:f8:d7:84: fa:17:23:0f:b4:b5:d4:23:8f:6c:66:94:81:09:f1:8e:e8:75: 3e:36:e8:3c:0f:ca:79:1d:5b:76:82:8a:3a:4c:d1:ac:e6:30: f0:3d:82:14:d9:8a:64:59:88:16:51:17:f7:d1:68:78:dd:19: b5:68:aa:d0:5d:36:3a:c8:ea:ed:aa:22:cf:bf:e1:7d:07:ad: 8f:db:e3:17 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUYr4YKwCcZVFw4D5UXQt1Oz3moqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2Rjkx Q0U0RTk1RDAeFw0yNjA1MTExNDM2MjJaFw0yNzA1MTAxNDQxMjJaMDMxMTAvBgNV BAMTKDc3NkU4Q0QyNzI0NTRBNzM0ODc1MDYyOTc2NTkxMzM0RkM3Qjk4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflagIeJDxeY1rf4/g32tPPFXf mpzWjs+2wDvDn87g7f2YGPm8PIjwAImp5wG4kw0TFupiAKyCMSh+N6LTcbWIm+2U uq4I4Ql2ocDZpfH69ndNt54XtD7iCcxLF0mmIgKMfOcVSZotWnCTALxdEXGmea+c kmlrmtTxT7QMMxB9wDmq+ObQckqzG+2UQsAFNqBv69nLTr3lu1okswSHhYjbMGy7 Hxue4Q8EHpgAnfbMx+l3goQGrD514o2IyPnu2LZG6ufVdHKIyQbLdVQTaXT++sIv kLxt+woPFi3QV82T1GxjlRVQrlSZN0Z+pDBoQ/cW3/eYEWIJOSx9lpMutL4dAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUd26M0nJFSnNIdQYpdlkTNPx7mKUwHwYDVR0j BBgwFoAUfzNe5KM9B8QsOMRexkim+Rzk6V0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjIyMDQ0MTY5MDcwMTg0MS8wLzdGMzM1RUU0QTMzRDA3QzQyQzM4QzQ1RUM2NDhB NkY5MUNFNEU5NUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2RjkxQ0U0RTk1RC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYyMjA0NDE2OTA3MDE4NDEvMC9BUzU2MDQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMMAoDAwN7WAMDAHtaMA0GCSqGSIb3DQEBCwUAA4IBAQBw7M5Fzm1kACYi3Ohw xF/BCbYgAyhN8XGSwyL0Zx5/JWmPRwxqGMeOcafQ/c0Sf22VkiGDbtswYlC5dVZP G5P3eD6xelczETuxMzAvNhWM00xsF5SPyNinNtUxkOoFQg1ytOi3tat201GQMQzA Smchedst+iAVHBzRZxzGAvdCx1l00EfmAmv7/F94xxkq6hNSjGli5oCvLcgl9d4V N8Qh+e7s6CRGHsy12SVeLetBfIj414T6FyMPtLXUI49sZpSBCfGO6HU+Nug8D8p5 HVt2goo6TNGs5jDwPYIU2YpkWYgWURf30Wh43Rm1aKrQXTY6yOrtqiLPv+F9B62P 2+MX -----END CERTIFICATE-----Generated at Wed May 13 07:57:36 2026 by rpki-client