$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: kJ2JPYeWOPPhRI43IVtZcb6lSAdnpj+Fd93pvgfE5/c= Subject key identifier: C9:31:09:B0:F1:AF:65:03:15:BE:53:A4:38:93:CD:E0:D8:1C:EA:86 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 0ED207E9D7F13E693155E77C31795493AF2350C0 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS23724.roa Signing time: Wed 10 Jun 2026 07:53:58 +0000 ROA not before: Wed 10 Jun 2026 07:48:58 +0000 ROA not after: Wed 09 Jun 2027 07:53:58 +0000 asID: 23724 IP address blocks: 101.237.33.0/24 maxlen: 24 101.237.34.0/24 maxlen: 24 101.237.35.0/24 maxlen: 24 101.237.36.0/24 maxlen: 24 101.237.37.0/24 maxlen: 24 101.237.38.0/24 maxlen: 24 101.237.39.0/24 maxlen: 24 101.237.40.0/24 maxlen: 24 101.237.128.0/20 maxlen: 20 106.75.0.0/19 maxlen: 19 106.75.32.0/19 maxlen: 19 106.75.64.0/19 maxlen: 19 106.75.96.0/19 maxlen: 19 117.50.0.0/19 maxlen: 19 117.50.32.0/19 maxlen: 19 117.50.64.0/19 maxlen: 19 117.50.96.0/19 maxlen: 19 117.50.128.0/19 maxlen: 19 117.50.160.0/19 maxlen: 19 117.50.192.0/19 maxlen: 19 117.50.224.0/19 maxlen: 19 2401:3480::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d2:07:e9:d7:f1:3e:69:31:55:e7:7c:31:79:54:93:af:23:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jun 10 07:48:58 2026 GMT Not After : Jun 9 07:53:58 2027 GMT Subject: CN=C93109B0F1AF650315BE53A43893CDE0D81CEA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:d1:48:43:b4:71:fa:2c:d3:3b:46:d1:6c: 7b:65:c7:c3:f0:f6:f6:a7:35:74:1e:60:87:24:7c: d2:3b:d9:a0:eb:47:8a:bb:cc:93:fe:d8:86:ed:c5: d6:10:3d:8f:87:40:46:aa:6e:cb:bf:60:3e:c4:6d: 9a:3c:d0:1c:0a:a6:2e:42:74:a1:a1:48:59:0d:4b: 02:20:9d:16:64:22:e0:36:5c:c8:68:8d:71:20:ef: 1b:c2:09:40:e8:f9:fe:ff:d9:ed:08:96:01:2a:19: 77:74:0a:51:50:7c:c2:7f:6c:8b:3f:c6:4a:ab:ba: 34:a5:04:57:8b:f7:3f:00:fc:d8:70:99:a0:5b:a1: ac:34:1e:6d:bb:b0:d1:28:27:0a:7b:f2:1d:8d:43: 51:d4:ce:90:e3:11:e5:d2:ef:49:bf:55:59:ee:e1: b8:6a:31:c3:30:06:b8:17:95:79:e9:f3:ad:ed:da: be:5d:de:4e:9b:1c:60:0d:11:69:18:3a:b0:37:83: bd:f4:cb:3b:c7:19:19:f1:4a:a7:ba:ab:1a:9b:fe: 5c:34:27:d3:5b:f0:42:8d:80:df:68:39:8b:7b:d2: 44:ed:69:9f:ee:b9:df:2f:11:7d:d6:cd:93:46:0c: 09:b6:c2:d4:ff:d5:8e:1d:71:5e:13:0a:2f:fc:85: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:31:09:B0:F1:AF:65:03:15:BE:53:A4:38:93:CD:E0:D8:1C:EA:86 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.33.0-101.237.40.255 101.237.128.0/20 106.75.0.0/17 117.50.0.0/16 IPv6: 2401:3480::/36 Signature Algorithm: sha256WithRSAEncryption 5f:5a:c2:f3:af:19:73:d9:fa:d3:ad:c4:b9:f0:98:43:ea:74: 29:5c:f4:5b:08:ad:ab:10:d1:68:e6:6f:86:45:6e:f5:bd:9a: ab:4a:9e:92:7f:0c:b5:cc:36:25:7b:47:53:f5:59:21:6d:dc: 13:2d:12:52:5a:ad:3c:ba:04:91:3c:55:ec:32:05:a1:ec:3e: 12:42:44:79:0c:6d:50:87:67:1c:6a:6b:88:b4:f0:be:70:8f: 9e:0e:f2:38:f9:1a:c3:2a:c6:31:9b:1b:89:4e:d1:b5:3f:e6: a2:7c:0b:9b:91:53:72:32:a7:dd:4b:8d:35:fa:3b:09:f4:55: ba:ae:83:97:d4:30:a7:7f:0b:fb:20:bc:16:08:f7:04:bf:ea: 03:27:7b:4f:ba:84:66:e7:de:71:25:8e:b7:47:ff:e9:51:7f: 79:db:f6:b6:3d:0a:24:39:15:d6:ff:6b:8e:fd:23:4a:78:42: 9d:a0:6a:7f:25:01:95:63:8c:da:1e:01:bc:76:ad:35:80:cb: 1f:2e:35:db:94:f9:b7:3f:27:4a:2e:e0:e6:1e:78:e1:b9:54: 0a:63:2f:5e:e0:c0:b7:f8:be:51:37:24:0b:eb:37:e7:c0:d0: 3f:60:f4:44:6f:47:49:e6:31:a1:fa:17:06:7e:1a:1b:fa:db: de:f8:cc:c9 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUDtIH6dfxPmkxVed8MXlUk68jUMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA2MTAwNzQ4NThaFw0yNzA2MDkwNzUzNThaMDMxMTAvBgNV BAMTKEM5MzEwOUIwRjFBRjY1MDMxNUJFNTNBNDM4OTNDREUwRDgxQ0VBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5tFIQ7Rx+izTO0bRbHtlx8Pw 9vanNXQeYIckfNI72aDrR4q7zJP+2IbtxdYQPY+HQEaqbsu/YD7EbZo80BwKpi5C dKGhSFkNSwIgnRZkIuA2XMhojXEg7xvCCUDo+f7/2e0IlgEqGXd0ClFQfMJ/bIs/ xkqrujSlBFeL9z8A/NhwmaBboaw0Hm27sNEoJwp78h2NQ1HUzpDjEeXS70m/VVnu 4bhqMcMwBrgXlXnp863t2r5d3k6bHGANEWkYOrA3g730yzvHGRnxSqe6qxqb/lw0 J9Nb8EKNgN9oOYt70kTtaZ/uud8vEX3WzZNGDAm2wtT/1Y4dcV4TCi/8hfhbAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUyTEJsPGvZQMVvlOkOJPN4Ngc6oYwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAlBAIA ATAfMAwDBABl7SEDBABl7SgDBARl7YADBAdqSwADAwB1MjAOBAIAAjAIAwYEJAE0 gAAwDQYJKoZIhvcNAQELBQADggEBAF9awvOvGXPZ+tOtxLnwmEPqdClc9FsIrasQ 0Wjmb4ZFbvW9mqtKnpJ/DLXMNiV7R1P1WSFt3BMtElJarTy6BJE8VewyBaHsPhJC RHkMbVCHZxxqa4i08L5wj54O8jj5GsMqxjGbG4lO0bU/5qJ8C5uRU3Iyp91LjTX6 Own0Vbqug5fUMKd/C/sgvBYI9wS/6gMne0+6hGbn3nEljrdH/+lRf3nb9rY9CiQ5 Fdb/a479I0p4Qp2gan8lAZVjjNoeAbx2rTWAyx8uNduU+bc/J0ou4OYeeOG5VApj L17gwLf4vlE3JAvrN+fA0D9g9ERvR0nmMaH6FwZ+Ghv62974zMk= -----END CERTIFICATE-----Generated at Sun Jun 14 00:58:42 2026 by rpki-client