$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS17623.roa File: AS17623.roa (raw, json) Hash identifier: nB5fm3t83wX9uuJv7xVlmfTi+8o2UUUanzraExu/RGc= Subject key identifier: 35:D8:EC:CA:8F:82:A6:0C:D6:66:96:41:1E:50:85:E4:FC:0D:61:61 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 67DAFB325DAC8721FC8C2BE6A1008F3A436277C3 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS17623.roa Signing time: Tue 09 Jun 2026 08:20:30 +0000 ROA not before: Tue 09 Jun 2026 08:15:30 +0000 ROA not after: Tue 08 Jun 2027 08:20:30 +0000 asID: 17623 IP address blocks: 106.3.224.0/21 maxlen: 21 106.3.224.0/22 maxlen: 22 106.3.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:da:fb:32:5d:ac:87:21:fc:8c:2b:e6:a1:00:8f:3a:43:62:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 9 08:15:30 2026 GMT Not After : Jun 8 08:20:30 2027 GMT Subject: CN=35D8ECCA8F82A60CD66696411E5085E4FC0D6161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:33:1c:cd:88:cb:ba:a6:9d:f4:13:c5:c4: 5b:0c:55:06:4f:49:2a:ad:d4:83:d6:ec:2b:fc:3e: e7:47:69:35:c8:aa:6d:8c:36:9b:bf:4f:2b:32:f2: 0d:9e:94:c4:78:07:25:91:48:e9:0e:bb:30:17:b7: b3:0e:bd:40:08:9b:64:16:6f:ef:ff:2d:5c:c0:f4: 71:fa:76:a7:b1:08:30:46:53:c3:0f:f9:1e:c5:c0: 38:4d:7b:cb:22:86:62:90:95:72:fd:c1:fd:4d:1e: 47:42:0c:0e:9a:6f:99:f4:a6:e3:29:aa:80:14:ef: b3:5f:78:e7:41:1e:82:bc:5f:f3:d7:7a:57:30:6f: da:dd:d5:ce:a8:d4:09:fa:0e:d5:6b:d1:04:6f:1d: c7:1a:02:4e:2b:18:76:db:09:7c:6f:e2:13:19:cc: bb:6a:eb:a9:d2:33:1e:eb:52:a2:b7:83:1a:0b:74: d3:6e:9e:80:03:56:54:6e:0a:b4:b2:4f:c2:68:d7: 53:b6:ba:00:c1:aa:b0:b0:0e:13:4b:4f:66:1a:c6: 33:0a:07:6a:74:0a:7d:a5:61:3b:ca:8a:c8:b0:a7: 11:fc:fd:bc:ab:e3:3f:0d:f0:44:cc:62:59:c8:31: ea:9e:9e:3c:71:ee:91:4e:75:f7:6b:b0:30:e5:57: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:EC:CA:8F:82:A6:0C:D6:66:96:41:1E:50:85:E4:FC:0D:61:61 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS17623.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.3.224.0/21 Signature Algorithm: sha256WithRSAEncryption 0f:e7:af:9c:98:26:da:52:65:e4:af:ca:4f:31:1a:26:81:5a: 1c:bd:3c:34:5b:a1:69:5a:55:8a:ce:71:9a:6a:66:85:b9:64: 76:b0:45:e0:e9:01:3c:65:7a:cd:63:c8:80:11:41:f0:3f:07: 65:fe:c0:84:30:a4:cb:14:76:35:bc:65:0d:a8:54:a3:e9:22: 4f:01:60:3a:47:f4:37:12:84:e7:3f:06:05:ff:d0:65:db:56: af:79:0a:24:07:e3:0e:12:3e:97:51:a9:f3:e8:b4:6d:88:d3: 0e:f9:d5:7e:7c:e9:5b:e4:87:7a:38:d4:11:e5:2d:1e:70:ee: d8:23:5c:8f:14:67:a2:d8:cc:bf:e6:31:49:f1:6e:bb:b0:d8: bd:66:6a:b8:88:31:85:c8:65:82:d9:56:12:af:b0:aa:93:90: d0:82:75:91:c1:35:28:fb:01:eb:68:7b:68:df:72:77:54:03: 81:23:6a:26:87:38:33:78:a4:fa:5e:5c:e2:e8:ee:2c:e6:16: 5b:bd:64:52:15:53:25:89:ad:98:a1:f9:e2:28:a1:92:a2:09: b7:89:0e:a7:e5:e0:be:0c:b5:90:91:dd:a7:c6:b4:02:49:d1: ec:0e:5d:cf:e3:f5:dd:96:2e:b5:df:d5:aa:af:ef:1b:45:dd: 88:04:fb:3a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZ9r7Ml2shyH8jCvmoQCPOkNid8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MDkwODE1MzBaFw0yNzA2MDgwODIwMzBaMDMxMTAvBgNV BAMTKDM1RDhFQ0NBOEY4MkE2MENENjY2OTY0MTFFNTA4NUU0RkMwRDYxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGTMczYjLuqad9BPFxFsMVQZP SSqt1IPW7Cv8PudHaTXIqm2MNpu/Tysy8g2elMR4ByWRSOkOuzAXt7MOvUAIm2QW b+//LVzA9HH6dqexCDBGU8MP+R7FwDhNe8sihmKQlXL9wf1NHkdCDA6ab5n0puMp qoAU77NfeOdBHoK8X/PXelcwb9rd1c6o1An6DtVr0QRvHccaAk4rGHbbCXxv4hMZ zLtq66nSMx7rUqK3gxoLdNNunoADVlRuCrSyT8Jo11O2ugDBqrCwDhNLT2YaxjMK B2p0Cn2lYTvKisiwpxH8/byr4z8N8ETMYlnIMeqenjxx7pFOdfdrsDDlV3fZAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUNdjsyo+CpgzWZpZBHlCF5PwNYWEwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzE3NjIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQDagPgMA0GCSqGSIb3DQEBCwUAA4IBAQAP56+cmCbaUmXkr8pPMRomgVoc vTw0W6FpWlWKznGaamaFuWR2sEXg6QE8ZXrNY8iAEUHwPwdl/sCEMKTLFHY1vGUN qFSj6SJPAWA6R/Q3EoTnPwYF/9Bl21aveQokB+MOEj6XUanz6LRtiNMO+dV+fOlb 5Id6ONQR5S0ecO7YI1yPFGei2My/5jFJ8W67sNi9Zmq4iDGFyGWC2VYSr7Cqk5DQ gnWRwTUo+wHraHto33J3VAOBI2omhzgzeKT6Xlzi6O4s5hZbvWRSFVMlia2Yofni KKGSogm3iQ6n5eC+DLWQkd2nxrQCSdHsDl3P4/Xdli6139Wqr+8bRd2IBPs6 -----END CERTIFICATE-----Generated at Sat Jun 13 12:41:59 2026 by rpki-client