$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23611.roa File: AS23611.roa (raw, json) Hash identifier: Pq384gbn2ccJsYnrgadXtE48MN1/ImCsbuMNVxRSV1o= Subject key identifier: D9:1C:2F:44:DD:C7:92:A6:DA:32:4B:66:A5:F6:6E:9B:96:A3:14:3C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 3D65D67A247D3FF7279D9347623D495D8FE18AC1 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23611.roa Signing time: Fri 29 May 2026 16:05:56 +0000 ROA not before: Fri 29 May 2026 16:00:56 +0000 ROA not after: Fri 28 May 2027 16:05:56 +0000 asID: 23611 IP address blocks: 106.115.224.0/20 maxlen: 20 106.119.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:65:d6:7a:24:7d:3f:f7:27:9d:93:47:62:3d:49:5d:8f:e1:8a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 29 16:00:56 2026 GMT Not After : May 28 16:05:56 2027 GMT Subject: CN=D91C2F44DDC792A6DA324B66A5F66E9B96A3143C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d7:a2:78:11:f2:98:9f:39:f8:6c:b2:57:50: 3b:3f:4e:1f:75:91:a0:55:0f:e4:a3:2a:d4:87:e7: 42:46:ce:37:85:ed:78:1d:0c:96:d9:05:f5:11:9e: ba:fa:a5:e5:26:35:7b:5c:b3:8e:85:4f:22:82:8e: 18:ce:ca:d3:cb:d9:42:33:b4:69:8b:a9:49:d9:5e: b4:2f:90:47:9d:e7:53:78:5d:c9:e8:b8:0b:3b:fb: da:74:97:09:30:f3:10:5f:72:40:73:f4:92:c9:4c: fc:55:2d:24:18:23:87:c0:d2:5b:2e:6f:89:c9:52: 61:50:d1:c4:e4:63:ea:7f:9d:8a:3d:58:da:1d:29: b8:9b:78:81:e3:ad:31:85:64:11:ac:cc:37:e6:3f: ae:36:36:04:d0:6e:b4:41:39:ad:fa:e7:6c:aa:2f: 87:43:d7:cb:3e:7c:11:dd:61:37:8c:a3:14:a1:73: 9a:b5:ee:91:9a:44:e3:1f:9f:b7:ad:5c:e9:2c:96: 59:df:3f:b9:3b:a7:38:18:98:f3:ea:cf:17:15:f2: d6:4e:da:d7:a7:fd:98:78:55:b6:82:80:08:44:8b: a9:25:ad:c2:a2:36:86:ec:e3:10:c0:2b:b2:ab:e8: de:97:8b:3f:4c:6c:d9:9b:03:33:91:02:c5:d4:bc: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1C:2F:44:DD:C7:92:A6:DA:32:4B:66:A5:F6:6E:9B:96:A3:14:3C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.115.224.0/20 106.119.80.0/20 Signature Algorithm: sha256WithRSAEncryption 46:e5:8c:9a:ec:a2:43:6f:45:d4:31:2a:9d:ce:f9:b9:04:dc: 65:c0:20:2f:05:e4:32:fd:aa:e9:b3:ea:92:a4:7b:f8:d9:24: f1:f0:58:2b:45:94:07:3a:d6:49:b3:5b:1a:1f:b7:c4:66:c1: 64:0b:41:33:5a:05:c5:77:c6:65:dc:0d:09:8e:bf:43:cd:4c: d0:a6:60:6c:31:a1:d9:25:18:25:14:5b:ae:f8:3a:12:b4:ca: f1:2f:d0:82:6d:32:c2:9c:eb:67:41:c7:82:82:6b:2d:41:c3: 87:9d:74:fe:09:11:37:94:a8:05:d6:87:bc:0d:97:3e:04:8f: 55:71:4e:52:d4:a1:04:17:ff:7a:22:40:d5:2b:f1:3f:48:ad: 9d:14:75:12:58:b2:96:75:5c:04:fa:5e:f9:ef:a6:f0:3a:de: 40:98:47:bf:b3:c3:d0:43:3a:ff:a8:36:21:f9:49:c0:1b:88: e6:dd:5c:e0:61:87:41:b5:73:56:ad:37:dc:90:14:5c:b9:09: 5a:12:fe:83:ac:20:e0:d7:31:05:56:e2:b4:6c:af:a8:57:5e: 11:8b:0c:c2:ba:e2:75:75:19:29:23:71:46:c2:48:08:22:f8: 68:4e:fe:36:2c:ba:b4:f2:16:46:b3:36:ec:8a:3b:f5:7e:ed: 71:4f:14:53 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUPWXWeiR9P/cnnZNHYj1JXY/hisEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyOTE2MDA1NloX DTI3MDUyODE2MDU1NlowMzExMC8GA1UEAxMoRDkxQzJGNDREREM3OTJBNkRBMzI0 QjY2QTVGNjZFOUI5NkEzMTQzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHXongR8pifOfhssldQOz9OH3WRoFUP5KMq1IfnQkbON4XteB0MltkF9RGe uvql5SY1e1yzjoVPIoKOGM7K08vZQjO0aYupSdletC+QR53nU3hdyei4Czv72nSX CTDzEF9yQHP0kslM/FUtJBgjh8DSWy5viclSYVDRxORj6n+dij1Y2h0puJt4geOt MYVkEazMN+Y/rjY2BNButEE5rfrnbKovh0PXyz58Ed1hN4yjFKFzmrXukZpE4x+f t61c6SyWWd8/uTunOBiY8+rPFxXy1k7a16f9mHhVtoKACESLqSWtwqI2huzjEMAr sqvo3peLP0xs2ZsDM5ECxdS8oXsCAwEAAaOCAekwggHlMB0GA1UdDgQWBBTZHC9E 3ceSptoyS2al9m6blqMUPDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMjM2MTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBARqc+ADBARqd1AwDQYJKoZIhvcN AQELBQADggEBAEbljJrsokNvRdQxKp3O+bkE3GXAIC8F5DL9qumz6pKke/jZJPHw WCtFlAc61kmzWxoft8RmwWQLQTNaBcV3xmXcDQmOv0PNTNCmYGwxodklGCUUW674 OhK0yvEv0IJtMsKc62dBx4KCay1Bw4eddP4JETeUqAXWh7wNlz4Ej1VxTlLUoQQX /3oiQNUr8T9IrZ0UdRJYspZ1XAT6XvnvpvA63kCYR7+zw9BDOv+oNiH5ScAbiObd XOBhh0G1c1atN9yQFFy5CVoS/oOsIODXMQVW4rRsr6hXXhGLDMK64nV1GSkjcUbC SAgi+GhO/jYsurTyFkazNuyKO/V+7XFPFFM= -----END CERTIFICATE-----Generated at Sun Jun 14 06:30:55 2026 by rpki-client