$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24423.roa File: AS24423.roa (raw, json) Hash identifier: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc= Subject key identifier: 25:B7:9E:F3:61:88:3F:E9:E7:35:14:10:DF:D4:F4:EE:9D:96:0C:3A Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 76E4D3EC2AFBA49C76791708CCD8EC1B21849FA1 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24423.roa Signing time: Thu 04 Jun 2026 02:22:48 +0000 ROA not before: Thu 04 Jun 2026 02:17:48 +0000 ROA not after: Thu 03 Jun 2027 02:22:48 +0000 asID: 24423 IP address blocks: 240a:41b0::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e4:d3:ec:2a:fb:a4:9c:76:79:17:08:cc:d8:ec:1b:21:84:9f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jun 4 02:17:48 2026 GMT Not After : Jun 3 02:22:48 2027 GMT Subject: CN=25B79EF361883FE9E7351410DFD4F4EE9D960C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:5e:85:c7:b3:45:17:92:b8:58:2c:46:c2: 57:16:69:75:3f:e5:39:c0:6b:73:c5:cc:76:22:37: 77:eb:cb:4c:3a:9d:89:b2:98:c4:cb:d7:71:c2:f8: f7:77:4f:10:af:f4:e8:92:e9:71:1b:3c:af:cf:e5: 54:06:e0:b6:9c:2e:5c:66:7e:ea:7c:f1:94:08:ad: 36:65:97:ab:ed:44:d3:5a:62:fc:13:5e:9b:09:54: 06:1b:6e:56:58:7f:77:48:f6:5c:bf:38:d8:86:d2: 8a:7f:a8:5c:37:e7:bb:a5:3f:e6:eb:f2:d6:0e:79: fb:06:c9:fc:56:ca:72:d1:91:52:49:4d:6d:4d:17: a8:a2:a8:5c:68:8a:f8:c0:84:94:e9:f0:fe:f6:ce: cc:46:60:d5:22:f9:93:63:d8:ae:24:6a:de:99:de: f2:f8:aa:d3:00:f8:e9:59:6f:15:55:3d:11:c2:07: 9e:0c:71:81:ca:da:96:7a:3d:5f:bf:58:49:95:dc: 58:31:54:59:eb:62:f4:a6:8b:c2:e7:aa:42:39:61: 35:d9:d6:06:c9:35:eb:fd:e6:fc:b7:22:2e:7a:04: 1b:c8:18:f2:cb:e3:a5:b4:ac:5d:67:32:85:b8:cc: 4a:3d:b6:04:72:86:73:89:86:56:09:9e:f9:fa:7b: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B7:9E:F3:61:88:3F:E9:E7:35:14:10:DF:D4:F4:EE:9D:96:0C:3A X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS24423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:41b0::/34 Signature Algorithm: sha256WithRSAEncryption de:9b:ba:c9:fb:c6:21:23:a9:bb:85:3a:75:a5:6e:e0:f4:15: 08:0e:79:1a:aa:7f:8f:86:8e:85:84:db:e3:03:f2:43:34:48: 79:d8:28:ad:60:75:f3:b3:2c:7f:07:c5:31:0e:45:ba:b1:e2: db:98:ef:f1:48:54:ba:cf:fb:ab:64:19:30:66:ed:af:78:a5: 07:e2:42:7e:c7:14:92:40:df:72:a8:56:16:64:0a:99:52:50: 00:dd:4a:54:1a:cd:19:ec:33:47:84:b5:d8:e6:ed:94:1c:9b: 86:79:15:be:dd:5b:ad:03:b6:97:c0:a5:d8:f9:69:44:ff:11: 5b:c9:7c:7f:d4:f6:f6:e7:2a:33:5b:89:83:d7:f0:34:66:c1: 4f:e9:c3:df:cd:ef:ff:e2:cb:ae:0d:25:15:e7:25:f5:c7:66: d8:92:fd:8d:40:d6:76:f1:14:a9:5d:39:68:f6:f3:b5:eb:61: 5f:75:97:87:0c:ca:01:76:1d:bd:71:53:b0:2a:30:75:91:81: 89:2d:af:6b:dd:c4:a9:49:9c:1b:17:a7:d9:18:da:13:1c:e2: 9d:a6:4f:11:e8:0b:f2:35:ef:b0:b5:a5:48:92:21:98:55:e6: a2:c9:16:57:4b:63:3e:c0:7a:7b:6a:31:d7:5a:2d:bf:ac:9f: 48:eb:2c:76 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUduTT7Cr7pJx2eRcIzNjsGyGEn6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjA2MDQwMjE3NDhaFw0yNzA2MDMwMjIyNDhaMDMxMTAvBgNV BAMTKDI1Qjc5RUYzNjE4ODNGRTlFNzM1MTQxMERGRDRGNEVFOUQ5NjBDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcV6Fx7NFF5K4WCxGwlcWaXU/ 5TnAa3PFzHYiN3fry0w6nYmymMTL13HC+Pd3TxCv9OiS6XEbPK/P5VQG4LacLlxm fup88ZQIrTZll6vtRNNaYvwTXpsJVAYbblZYf3dI9ly/ONiG0op/qFw357ulP+br 8tYOefsGyfxWynLRkVJJTW1NF6iiqFxoivjAhJTp8P72zsxGYNUi+ZNj2K4kat6Z 3vL4qtMA+OlZbxVVPRHCB54McYHK2pZ6PV+/WEmV3FgxVFnrYvSmi8LnqkI5YTXZ 1gbJNev95vy3Ii56BBvIGPLL46W0rF1nMoW4zEo9tgRyhnOJhlYJnvn6e4qJAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUJbee82GIP+nnNRQQ39T07p2WDDowHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzI0NDIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA AjAIAwYGJApBsAAwDQYJKoZIhvcNAQELBQADggEBAN6busn7xiEjqbuFOnWlbuD0 FQgOeRqqf4+GjoWE2+MD8kM0SHnYKK1gdfOzLH8HxTEORbqx4tuY7/FIVLrP+6tk GTBm7a94pQfiQn7HFJJA33KoVhZkCplSUADdSlQazRnsM0eEtdjm7ZQcm4Z5Fb7d W60DtpfApdj5aUT/EVvJfH/U9vbnKjNbiYPX8DRmwU/pw9/N7//iy64NJRXnJfXH ZtiS/Y1A1nbxFKldOWj287XrYV91l4cMygF2Hb1xU7AqMHWRgYktr2vdxKlJnBsX p9kY2hMc4p2mTxHoC/I177C1pUiSIZhV5qLJFldLYz7AentqMddaLb+sn0jrLHY= -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:15 2026 by rpki-client