Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=
Subject key identifier: FD:D6:6F:E4:5F:A4:B9:A8:0C:83:86:A2:6A:B9:CB:34:0C:58:D6:46
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 62B54E6A6B66F4F53FB708149A8391D49E054142
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS23724.roa
Signing time: Thu 04 Jun 2026 02:21:35 +0000
ROA not before: Thu 04 Jun 2026 02:16:35 +0000
ROA not after: Thu 03 Jun 2027 02:21:35 +0000
asID: 23724
IP address blocks: 103.244.80.0/22 maxlen: 22
114.118.0.0/21 maxlen: 21
114.118.8.0/21 maxlen: 21
114.118.16.0/21 maxlen: 21
114.118.24.0/21 maxlen: 21
114.118.64.0/21 maxlen: 21
114.118.72.0/21 maxlen: 21
114.118.80.0/21 maxlen: 21
114.118.88.0/21 maxlen: 21
114.118.96.0/21 maxlen: 21
114.118.104.0/21 maxlen: 21
114.118.112.0/21 maxlen: 21
114.118.120.0/21 maxlen: 21
117.48.0.0/22 maxlen: 22
117.48.4.0/22 maxlen: 22
117.48.8.0/22 maxlen: 22
117.48.12.0/22 maxlen: 22
117.48.16.0/22 maxlen: 22
117.48.20.0/22 maxlen: 22
117.48.24.0/22 maxlen: 22
117.48.28.0/22 maxlen: 22
117.48.32.0/22 maxlen: 22
117.48.36.0/22 maxlen: 22
117.48.40.0/22 maxlen: 22
117.48.44.0/22 maxlen: 22
117.48.48.0/22 maxlen: 22
117.48.52.0/22 maxlen: 22
117.48.56.0/22 maxlen: 22
117.48.60.0/22 maxlen: 22
117.48.64.0/22 maxlen: 22
117.48.68.0/22 maxlen: 22
117.48.72.0/22 maxlen: 22
117.48.76.0/22 maxlen: 22
117.48.80.0/22 maxlen: 22
117.48.84.0/22 maxlen: 22
117.48.88.0/22 maxlen: 22
117.48.100.0/22 maxlen: 22
117.48.104.0/22 maxlen: 22
117.48.108.0/22 maxlen: 22
117.48.112.0/22 maxlen: 22
117.48.116.0/22 maxlen: 22
117.48.120.0/22 maxlen: 22
117.48.124.0/22 maxlen: 22
120.132.32.0/22 maxlen: 22
120.132.36.0/22 maxlen: 22
120.132.40.0/22 maxlen: 22
120.132.44.0/22 maxlen: 22
120.132.48.0/22 maxlen: 22
120.132.52.0/22 maxlen: 22
120.132.56.0/22 maxlen: 22
120.132.60.0/22 maxlen: 22
120.132.64.0/22 maxlen: 22
120.132.68.0/22 maxlen: 22
120.132.72.0/22 maxlen: 22
120.132.76.0/22 maxlen: 22
120.132.80.0/22 maxlen: 22
120.132.84.0/22 maxlen: 22
120.132.88.0/22 maxlen: 22
120.132.92.0/22 maxlen: 22
123.59.0.0/19 maxlen: 19
123.59.32.0/19 maxlen: 19
123.59.64.0/19 maxlen: 19
123.59.96.0/19 maxlen: 19
123.59.128.0/19 maxlen: 19
123.59.160.0/19 maxlen: 19
123.59.192.0/19 maxlen: 19
123.59.224.0/19 maxlen: 19
180.150.176.0/22 maxlen: 22
180.150.180.0/22 maxlen: 22
180.150.184.0/22 maxlen: 22
180.150.188.0/22 maxlen: 22
203.100.92.0/22 maxlen: 22
2406:cf00::/48 maxlen: 48
2406:cf00:1000::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b5:4e:6a:6b:66:f4:f5:3f:b7:08:14:9a:83:91:d4:9e:05:41:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: Jun 4 02:16:35 2026 GMT
Not After : Jun 3 02:21:35 2027 GMT
Subject: CN=FDD66FE45FA4B9A80C8386A26AB9CB340C58D646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:39:3d:34:fd:95:36:16:50:74:b8:6a:da:
c0:48:38:03:3b:c8:18:98:f0:b7:f4:e1:e9:e8:3a:
b3:de:28:8b:3b:05:0d:f4:11:c3:07:ba:bd:1e:1f:
3b:30:48:62:58:59:ca:15:09:c5:ed:10:07:b1:4a:
1a:69:e7:d4:f7:64:17:d6:08:50:24:83:35:34:55:
13:08:07:89:26:2e:a6:89:28:d1:16:a1:dc:4b:de:
62:5f:dd:9a:74:b5:bc:7e:78:ec:0a:68:0b:21:b5:
e1:7f:44:61:8d:b7:6a:91:bb:dd:95:31:4a:44:5a:
6e:30:db:1e:ed:16:17:55:97:e5:52:b8:9b:e6:1a:
e6:6a:a2:e6:db:18:4c:59:48:39:58:00:ba:73:da:
16:fc:98:fc:95:ac:27:89:b8:52:7c:d5:a4:6e:82:
55:78:9f:a3:55:d6:8d:f1:39:76:44:ed:db:34:6d:
bd:5a:9a:d2:be:0f:8a:d9:e4:28:f2:b2:78:0f:86:
69:83:ec:f8:87:04:63:46:1c:2f:30:43:55:b7:e9:
94:84:c7:06:35:8e:52:6f:a9:a0:b8:0d:9a:46:61:
7f:af:bc:6d:6e:68:bf:f3:8c:51:03:f1:52:73:12:
29:fc:2b:84:5f:13:de:e6:77:65:d4:24:e5:ae:1e:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:6F:E4:5F:A4:B9:A8:0C:83:86:A2:6A:B9:CB:34:0C:58:D6:46
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.80.0/22
114.118.0.0/19
114.118.64.0/18
117.48.0.0-117.48.91.255
117.48.100.0-117.48.127.255
120.132.32.0-120.132.95.255
123.59.0.0/16
180.150.176.0/20
203.100.92.0/22
IPv6:
2406:cf00::/48
2406:cf00:1000::/43
Signature Algorithm: sha256WithRSAEncryption
61:d7:d3:00:2c:f3:b8:d8:a8:0f:4d:54:88:5f:2c:4f:03:96:
db:34:23:49:d7:1f:7c:fe:db:5a:f8:71:63:eb:95:25:b7:00:
0f:6d:20:ef:9b:6b:67:05:34:0e:1a:bc:94:70:d8:09:0e:b9:
87:ef:6f:fc:ed:6e:1c:2a:f0:b3:0b:d1:53:a9:d3:a8:3a:52:
30:31:02:99:54:e3:25:82:f5:70:e9:6b:bb:7c:b0:2a:93:64:
40:df:19:33:16:97:88:ac:59:c0:23:da:7b:a5:a1:18:5b:23:
7a:b9:bf:3c:d2:6a:d4:a2:b4:6c:7b:eb:98:f7:40:9e:91:dc:
3e:36:18:77:c5:63:33:58:02:53:0b:cf:40:93:6d:a1:f6:33:
4c:08:e0:f7:be:41:8e:64:bb:e7:73:3c:ea:c7:44:08:11:9d:
ed:62:d7:12:c6:32:27:ab:1a:ba:5a:0b:4a:26:e6:4c:34:a0:
ff:44:a1:3b:b9:23:fe:c0:5c:43:fe:36:03:28:c2:f5:0e:f2:
46:fe:c4:ee:7b:aa:cb:72:25:9b:b4:a7:ec:36:bf:79:b8:5f:
c2:c0:95:6d:f3:0b:e6:e6:bc:9b:ec:6d:a1:95:6e:5c:7d:ce:
2a:ba:8e:ca:7a:6b:6f:89:8f:18:33:1b:6a:dd:09:41:35:6b:
9b:eb:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:38 2026 by rpki-client