$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: VQZ0gm+tklRFSq2F/DXQqzcNJNGQWdb0huNHkgAfoME= Subject key identifier: C3:A9:C9:6F:7F:F7:B1:77:EC:B6:75:92:5B:EC:F0:B1:1F:23:CC:50 Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 0A2ADCE647768F84738AADF96CDC5F50E72162A6 Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS23724.roa Signing time: Wed 10 Jun 2026 18:08:29 +0000 ROA not before: Wed 10 Jun 2026 18:03:29 +0000 ROA not after: Wed 09 Jun 2027 18:08:29 +0000 asID: 23724 IP address blocks: 101.251.192.0/19 maxlen: 19 101.251.192.0/21 maxlen: 21 101.251.195.0/24 maxlen: 24 101.251.200.0/22 maxlen: 22 101.251.204.0/22 maxlen: 22 101.251.208.0/20 maxlen: 20 101.251.224.0/19 maxlen: 19 101.251.224.0/20 maxlen: 20 101.251.228.0/22 maxlen: 22 101.251.229.0/24 maxlen: 24 101.251.232.0/21 maxlen: 21 101.251.232.0/24 maxlen: 24 101.251.236.0/24 maxlen: 24 101.251.239.0/24 maxlen: 24 101.251.240.0/20 maxlen: 20 101.251.240.0/21 maxlen: 21 101.251.240.0/24 maxlen: 24 101.251.242.0/24 maxlen: 24 101.251.244.0/23 maxlen: 23 101.251.247.0/24 maxlen: 24 101.251.248.0/22 maxlen: 22 101.251.248.0/24 maxlen: 24 101.251.251.0/24 maxlen: 24 101.251.252.0/22 maxlen: 22 103.244.232.0/22 maxlen: 22 103.252.36.0/22 maxlen: 22 106.2.128.0/19 maxlen: 19 106.3.128.0/21 maxlen: 21 106.3.136.0/21 maxlen: 21 106.3.144.0/21 maxlen: 21 106.3.152.0/21 maxlen: 21 2400:5280:f803::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:dc:e6:47:76:8f:84:73:8a:ad:f9:6c:dc:5f:50:e7:21:62:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Jun 10 18:03:29 2026 GMT Not After : Jun 9 18:08:29 2027 GMT Subject: CN=C3A9C96F7FF7B177ECB675925BECF0B11F23CC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:af:7a:08:06:a2:46:08:46:71:fa:84:0e: 98:17:1b:00:b6:b8:5b:ed:27:69:49:65:36:1e:0d: 2b:7c:41:f1:37:6c:46:1c:af:cd:b7:79:2b:87:ee: 38:e4:11:7c:55:39:71:60:88:28:b2:1e:4f:2f:8e: c6:9b:0a:e5:de:a5:96:08:3f:5a:d3:a5:d8:79:27: 1c:f3:34:fb:6f:42:b9:92:ed:52:16:4e:60:86:cd: c9:17:53:bc:86:b0:5e:a0:18:56:23:bf:ef:f0:c0: 60:c1:ab:a2:7e:b2:e1:5f:97:a0:4e:45:dc:5b:68: 9a:86:74:09:62:ed:fd:4e:89:20:0d:82:e1:51:f8: c5:08:df:f2:ca:ec:56:85:aa:3c:85:2e:8b:2d:72: f6:42:84:bb:00:6e:a7:19:1a:72:0e:9e:de:18:df: 68:82:81:14:b8:51:3e:d4:51:be:ae:c5:c2:57:18: a8:9b:21:d1:32:97:46:e1:1b:e3:83:78:d5:56:e0: 6a:3f:a7:9c:00:fc:61:77:c1:92:b4:d0:64:0c:31: 3d:27:b6:7a:d6:59:4c:ab:52:2a:a7:38:0d:55:0b: 36:24:8b:38:fe:78:ea:39:04:80:c3:c2:ec:ac:75: d2:aa:07:75:64:01:9c:31:d4:93:39:d2:84:32:64: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A9:C9:6F:7F:F7:B1:77:EC:B6:75:92:5B:EC:F0:B1:1F:23:CC:50 X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.192.0/18 103.244.232.0/22 103.252.36.0/22 106.2.128.0/19 106.3.128.0/19 IPv6: 2400:5280:f803::/48 Signature Algorithm: sha256WithRSAEncryption 13:8f:48:15:4c:5a:41:3b:4d:69:d9:89:c4:a3:c0:69:a6:fe: 47:20:be:a6:ce:ec:e2:31:18:fd:64:d2:36:66:54:61:01:c8: f2:e5:15:1a:f5:f0:67:ca:80:a9:2a:9b:b7:74:ad:9b:6c:d4: 06:f9:96:28:ab:d0:c2:aa:9c:a5:b4:23:de:66:ee:4c:72:f8: ff:fa:2a:70:d4:c8:38:f4:7d:07:a9:a5:62:d9:76:f7:9b:fb: 05:00:4a:9d:73:53:d3:96:6f:5d:44:de:cb:94:9c:9a:93:a4: 9d:43:a2:01:e8:15:d6:cd:20:65:01:ae:11:3f:60:e0:73:82: c3:8a:be:e6:6f:44:ad:b5:62:29:23:23:cb:1e:f3:d7:86:e3: bb:ae:e1:a5:31:a9:0a:91:d7:6b:dd:24:c6:08:ff:01:d7:be: f9:71:b8:21:24:31:22:cb:bc:d1:c6:ae:a2:5d:cb:e2:7c:cf: 49:34:50:ac:3b:48:cb:d9:9f:67:bd:f7:02:9f:f5:f5:4e:d5: aa:d5:10:89:ad:8a:1f:07:6e:46:50:e5:4a:cb:45:fb:e5:b7: a0:07:d0:08:e7:40:6b:24:5e:2f:ca:35:bb:b1:25:fd:2f:63: 10:50:db:46:8b:d9:fb:9b:e3:2b:9f:a9:54:21:54:f0:26:35: dc:b3:e6:1c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUCirc5kd2j4Rziq35bNxfUOchYqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjA2MTAxODAzMjlaFw0yNzA2MDkxODA4MjlaMDMxMTAvBgNV BAMTKEMzQTlDOTZGN0ZGN0IxNzdFQ0I2NzU5MjVCRUNGMEIxMUYyM0NDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXoK96CAaiRghGcfqEDpgXGwC2 uFvtJ2lJZTYeDSt8QfE3bEYcr823eSuH7jjkEXxVOXFgiCiyHk8vjsabCuXepZYI P1rTpdh5JxzzNPtvQrmS7VIWTmCGzckXU7yGsF6gGFYjv+/wwGDBq6J+suFfl6BO RdxbaJqGdAli7f1OiSANguFR+MUI3/LK7FaFqjyFLostcvZChLsAbqcZGnIOnt4Y 32iCgRS4UT7UUb6uxcJXGKibIdEyl0bhG+ODeNVW4Go/p5wA/GF3wZK00GQMMT0n tnrWWUyrUiqnOA1VCzYkizj+eOo5BIDDwuysddKqB3VkAZwx1JM50oQyZMwjAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUw6nJb3/3sXfstnWSW+zwsR8jzFAwHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIA ATAeAwQGZfvAAwQCZ/ToAwQCZ/wkAwQFagKAAwQFagOAMA8EAgACMAkDBwAkAFKA +AMwDQYJKoZIhvcNAQELBQADggEBABOPSBVMWkE7TWnZicSjwGmm/kcgvqbO7OIx GP1k0jZmVGEByPLlFRr18GfKgKkqm7d0rZts1Ab5liir0MKqnKW0I95m7kxy+P/6 KnDUyDj0fQeppWLZdveb+wUASp1zU9OWb11E3suUnJqTpJ1DogHoFdbNIGUBrhE/ YOBzgsOKvuZvRK21YikjI8se89eG47uu4aUxqQqR12vdJMYI/wHXvvlxuCEkMSLL vNHGrqJdy+J8z0k0UKw7SMvZn2e99wKf9fVO1arVEImtih8HbkZQ5UrLRfvlt6AH 0AjnQGskXi/KNbuxJf0vYxBQ20aL2fub4yufqVQhVPAmNdyz5hw= -----END CERTIFICATE-----Generated at Sun Jun 14 00:58:48 2026 by rpki-client