Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: 5twtJaahqZp+4hqHTKcq+cMmrac8wS1qIh6yLevWsoc=
Subject key identifier: A1:A5:41:35:21:07:17:31:60:3B:EC:E2:5C:AD:B3:E3:5D:CB:B5:34
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1CEB10DBE95E6E687DDEDAB9BB710818F47E8FA8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23724.roa
Signing time: Thu 04 Jun 2026 16:05:59 +0000
ROA not before: Thu 04 Jun 2026 16:00:59 +0000
ROA not after: Thu 03 Jun 2027 16:05:59 +0000
asID: 23724
IP address blocks: 1.203.94.0/24 maxlen: 24
1.203.95.0/24 maxlen: 24
1.203.115.0/24 maxlen: 24
1.203.124.0/22 maxlen: 22
36.110.128.0/19 maxlen: 19
36.110.160.0/19 maxlen: 19
36.110.186.0/24 maxlen: 24
36.110.192.0/19 maxlen: 19
36.110.192.0/24 maxlen: 24
36.110.224.0/19 maxlen: 19
36.110.226.0/24 maxlen: 24
36.110.227.0/24 maxlen: 24
36.111.80.0/24 maxlen: 24
36.111.81.0/24 maxlen: 24
36.111.82.0/23 maxlen: 23
36.111.88.0/24 maxlen: 24
36.111.148.0/24 maxlen: 24
36.111.149.0/24 maxlen: 24
36.111.150.0/23 maxlen: 23
36.112.128.0/24 maxlen: 24
36.112.129.0/24 maxlen: 24
36.112.130.0/24 maxlen: 24
36.112.131.0/24 maxlen: 24
36.112.132.0/24 maxlen: 24
36.112.133.0/24 maxlen: 24
36.112.134.0/24 maxlen: 24
36.112.135.0/24 maxlen: 24
36.112.136.0/24 maxlen: 24
36.112.137.0/24 maxlen: 24
36.112.138.0/24 maxlen: 24
36.112.139.0/24 maxlen: 24
36.112.142.0/23 maxlen: 23
36.112.145.0/24 maxlen: 24
36.112.146.0/24 maxlen: 24
36.112.147.0/24 maxlen: 24
36.112.148.0/24 maxlen: 24
36.112.149.0/24 maxlen: 24
36.112.150.0/24 maxlen: 24
36.112.154.0/24 maxlen: 24
36.112.155.0/24 maxlen: 24
36.112.156.0/24 maxlen: 24
36.112.157.0/24 maxlen: 24
36.112.158.0/24 maxlen: 24
36.112.159.0/24 maxlen: 24
36.112.168.0/24 maxlen: 24
36.112.169.0/24 maxlen: 24
36.112.235.0/24 maxlen: 24
106.0.4.0/23 maxlen: 23
106.0.6.0/23 maxlen: 23
106.37.0.0/19 maxlen: 19
106.37.32.0/20 maxlen: 20
106.37.48.0/23 maxlen: 23
106.37.56.0/23 maxlen: 23
106.37.72.0/24 maxlen: 24
106.37.73.0/24 maxlen: 24
106.37.74.0/24 maxlen: 24
106.37.75.0/24 maxlen: 24
106.38.128.0/21 maxlen: 21
106.38.136.0/23 maxlen: 23
106.38.138.0/23 maxlen: 23
106.38.138.0/24 maxlen: 24
106.38.139.0/24 maxlen: 24
106.38.176.0/20 maxlen: 20
106.38.182.0/24 maxlen: 24
106.38.192.0/19 maxlen: 19
106.38.211.0/24 maxlen: 24
106.38.222.0/24 maxlen: 24
106.38.224.0/19 maxlen: 19
106.38.234.0/24 maxlen: 24
106.38.235.0/24 maxlen: 24
106.38.252.0/24 maxlen: 24
106.39.160.0/19 maxlen: 19
106.39.164.0/24 maxlen: 24
106.39.192.0/19 maxlen: 19
106.39.224.0/19 maxlen: 19
106.39.224.0/20 maxlen: 20
106.63.3.0/24 maxlen: 24
106.63.4.0/24 maxlen: 24
106.63.5.0/24 maxlen: 24
106.63.6.0/24 maxlen: 24
106.63.7.0/24 maxlen: 24
106.63.8.0/24 maxlen: 24
106.63.9.0/24 maxlen: 24
106.63.10.0/24 maxlen: 24
106.63.54.0/23 maxlen: 23
106.120.144.0/20 maxlen: 20
106.120.153.0/24 maxlen: 24
106.120.160.0/19 maxlen: 19
106.120.172.0/24 maxlen: 24
106.120.232.0/23 maxlen: 23
106.121.0.0/19 maxlen: 19
106.121.64.0/19 maxlen: 19
106.121.128.0/18 maxlen: 18
113.59.224.0/23 maxlen: 23
113.59.226.0/23 maxlen: 23
183.78.180.0/24 maxlen: 24
183.78.181.0/24 maxlen: 24
183.78.182.0/23 maxlen: 23
203.0.104.0/23 maxlen: 23
203.2.116.0/22 maxlen: 22
203.83.232.0/21 maxlen: 21
203.176.92.0/24 maxlen: 24
203.176.93.0/24 maxlen: 24
203.176.94.0/24 maxlen: 24
203.176.95.0/24 maxlen: 24
203.189.0.0/23 maxlen: 23
203.189.6.0/23 maxlen: 23
203.191.0.0/23 maxlen: 23
203.202.236.0/23 maxlen: 23
218.30.25.0/24 maxlen: 24
218.30.26.0/23 maxlen: 23
218.30.26.0/24 maxlen: 24
218.30.28.0/23 maxlen: 23
218.30.96.0/19 maxlen: 19
218.30.97.0/24 maxlen: 24
218.30.99.0/24 maxlen: 24
218.30.107.0/24 maxlen: 24
218.30.115.0/24 maxlen: 24
219.141.220.0/24 maxlen: 24
219.142.78.0/24 maxlen: 24
219.142.118.0/24 maxlen: 24
220.181.0.0/19 maxlen: 19
220.181.8.0/24 maxlen: 24
220.181.25.0/24 maxlen: 24
220.181.27.0/24 maxlen: 24
220.181.28.0/24 maxlen: 24
220.181.29.0/24 maxlen: 24
220.181.30.0/24 maxlen: 24
220.181.31.0/24 maxlen: 24
220.181.32.0/19 maxlen: 19
220.181.55.0/24 maxlen: 24
220.181.64.0/20 maxlen: 20
220.181.68.0/24 maxlen: 24
220.181.71.0/24 maxlen: 24
220.181.75.0/24 maxlen: 24
220.181.76.0/24 maxlen: 24
220.181.77.0/24 maxlen: 24
220.181.78.0/24 maxlen: 24
220.181.80.0/20 maxlen: 20
220.181.83.0/24 maxlen: 24
220.181.84.0/24 maxlen: 24
220.181.95.0/24 maxlen: 24
220.181.96.0/19 maxlen: 19
220.181.116.0/24 maxlen: 24
220.181.120.0/24 maxlen: 24
220.181.122.0/24 maxlen: 24
220.181.128.0/20 maxlen: 20
220.181.128.0/24 maxlen: 24
220.181.144.0/24 maxlen: 24
220.181.148.0/22 maxlen: 22
220.181.152.0/21 maxlen: 21
220.181.152.0/24 maxlen: 24
220.181.160.0/21 maxlen: 21
220.181.168.0/21 maxlen: 21
220.181.177.0/24 maxlen: 24
220.181.178.0/23 maxlen: 23
220.181.180.0/22 maxlen: 22
220.181.184.0/22 maxlen: 22
220.181.188.0/23 maxlen: 23
220.181.188.0/24 maxlen: 24
220.181.191.0/24 maxlen: 24
240e:0:9000::/37 maxlen: 37
240e:0:9800::/37 maxlen: 37
240e:83::/37 maxlen: 37
240e:83:ff00::/40 maxlen: 40
240e:108:49::/48 maxlen: 48
240e:108:80::/48 maxlen: 48
240e:108:1002::/48 maxlen: 48
240e:108:100b::/48 maxlen: 48
240e:900:8::/47 maxlen: 47
240e:904::/32 maxlen: 32
240e:904:2802::/48 maxlen: 48
240e:904:2803::/48 maxlen: 48
240e:905::/32 maxlen: 32
240e:906::/32 maxlen: 32
240e:907::/32 maxlen: 32
240e:980:4900::/40 maxlen: 40
240e:980:8000::/40 maxlen: 40
240e:981:200::/40 maxlen: 40
240e:981:400::/40 maxlen: 40
240e:981:600::/40 maxlen: 40
240e:981:900::/40 maxlen: 40
240e:981:9300::/41 maxlen: 41
240e:981:9380::/41 maxlen: 41
240e:981:f500::/40 maxlen: 40
240e:983::/48 maxlen: 48
240e:983:2::/48 maxlen: 48
240e:983:3::/48 maxlen: 48
240e:983:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:eb:10:db:e9:5e:6e:68:7d:de:da:b9:bb:71:08:18:f4:7e:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:00:59 2026 GMT
Not After : Jun 3 16:05:59 2027 GMT
Subject: CN=A1A5413521071731603BECE25CADB3E35DCBB534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:f9:60:0f:e7:52:9e:cf:b8:87:af:ca:6e:
c6:54:39:af:c4:14:74:19:ff:99:ac:7e:dd:4e:8a:
e2:6e:41:8d:b9:bd:07:be:8b:3e:0a:57:c4:fd:30:
4b:6c:73:7f:63:a4:c6:ef:7b:57:dd:06:df:fd:ec:
ea:43:0e:ed:b3:70:a4:11:da:9a:d2:3c:5c:9e:24:
ab:3f:e3:29:5b:67:4c:c5:ec:5e:d0:a9:df:b9:fb:
02:c4:da:e6:13:60:e6:60:e5:d6:d5:72:9e:82:78:
d2:a4:a2:d2:15:bb:bc:21:04:5b:8d:df:16:0b:34:
31:5d:76:b3:b5:6b:a1:54:cb:77:0f:1b:71:b2:49:
41:be:89:6d:11:c4:2c:ca:a1:12:6e:88:9a:97:5e:
9c:46:3c:c7:46:4e:2c:89:0e:2c:8a:45:7e:ad:8b:
1d:92:31:ae:33:8f:7c:b3:9c:93:a4:70:aa:b0:f7:
60:c0:9e:28:79:b9:0f:45:74:76:91:ba:71:61:be:
99:18:fe:c8:6f:2c:19:ea:ef:58:59:f2:cf:96:3e:
28:a5:53:9e:84:5c:48:89:93:a9:3a:9c:d4:b7:99:
4f:8c:4b:e9:2d:c0:7d:84:12:11:3d:95:6c:b7:a4:
b8:0b:f3:45:28:07:64:55:12:2b:91:7e:79:12:ac:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:41:35:21:07:17:31:60:3B:EC:E2:5C:AD:B3:E3:5D:CB:B5:34
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.203.94.0/23
1.203.115.0/24
1.203.124.0/22
36.110.128.0/17
36.111.80.0/22
36.111.88.0/24
36.111.148.0/22
36.112.128.0-36.112.139.255
36.112.142.0/23
36.112.145.0-36.112.150.255
36.112.154.0-36.112.159.255
36.112.168.0/23
36.112.235.0/24
106.0.4.0/22
106.37.0.0-106.37.49.255
106.37.56.0/23
106.37.72.0/22
106.38.128.0-106.38.139.255
106.38.176.0-106.38.255.255
106.39.160.0-106.39.255.255
106.63.3.0-106.63.10.255
106.63.54.0/23
106.120.144.0-106.120.191.255
106.120.232.0/23
106.121.0.0/19
106.121.64.0/19
106.121.128.0/18
113.59.224.0/22
183.78.180.0/22
203.0.104.0/23
203.2.116.0/22
203.83.232.0/21
203.176.92.0/22
203.189.0.0/23
203.189.6.0/23
203.191.0.0/23
203.202.236.0/23
218.30.25.0-218.30.29.255
218.30.96.0/19
219.141.220.0/24
219.142.78.0/24
219.142.118.0/24
220.181.0.0-220.181.144.255
220.181.148.0-220.181.175.255
220.181.177.0-220.181.189.255
220.181.191.0/24
IPv6:
240e:0:9000::/36
240e:83::/37
240e:83:ff00::/40
240e:108:49::/48
240e:108:80::/48
240e:108:1002::/48
240e:108:100b::/48
240e:900:8::/47
240e:904::/30
240e:980:4900::/40
240e:980:8000::/40
240e:981:200::/40
240e:981:400::/40
240e:981:600::/40
240e:981:900::/40
240e:981:9300::/40
240e:981:f500::/40
240e:983::/48
240e:983:2::-240e:983:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:e2:d2:66:6e:4a:e8:ef:e8:b9:1e:33:23:7f:70:7e:af:33:
b2:96:9c:c6:c0:84:ab:cf:95:4d:ee:ed:32:be:8e:ca:88:58:
7a:2f:f7:dc:ba:b7:e7:a3:5f:24:68:32:2b:e3:e5:6c:43:c3:
18:3e:e8:d1:a1:3e:20:1d:6b:e0:72:ae:8c:8f:c4:49:c2:1e:
f9:29:b3:40:5e:f6:4c:fb:f5:77:6d:8b:dd:85:41:d4:d6:2e:
d3:ed:20:e5:f8:5f:04:6d:cc:9b:fb:aa:2c:06:15:be:99:be:
4e:eb:e7:2e:bd:4b:3c:e6:55:69:60:64:de:18:f9:9c:b4:1b:
d1:ed:4a:0d:b7:d9:63:a1:a4:20:4c:ec:f8:57:65:6a:a9:aa:
e3:85:ad:8a:ee:1b:4c:6b:62:d2:cf:3b:20:23:e6:4f:85:9c:
bd:33:9a:70:73:fa:8a:fb:06:31:e2:5c:2c:fb:d5:19:23:73:
28:e3:4f:ec:51:19:8d:6c:af:2e:60:62:ad:43:78:df:7e:3a:
d0:3b:37:7a:8b:9a:c4:59:2a:32:d0:5c:9b:70:da:3b:ab:7c:
fa:ea:d4:dc:40:36:c0:0f:ec:7f:ff:e7:7b:0c:c1:91:ef:00:
da:ae:b7:ed:d2:fb:b6:ac:51:d6:90:23:1f:23:9f:a0:a2:c2:
4d:3f:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:48 2026 by rpki-client