$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS23650.roa File: AS23650.roa (raw, json) Hash identifier: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc= Subject key identifier: 6C:26:83:EC:21:31:36:F4:FB:26:AE:2D:3B:65:69:3C:33:D1:95:8B Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 5AF6F530A87F9F64E3F82129C4472FA0A24BE39C Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS23650.roa Signing time: Fri 15 May 2026 08:15:56 +0000 ROA not before: Fri 15 May 2026 08:10:56 +0000 ROA not after: Fri 14 May 2027 08:15:56 +0000 asID: 23650 IP address blocks: 220.242.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 22:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f6:f5:30:a8:7f:9f:64:e3:f8:21:29:c4:47:2f:a0:a2:4b:e3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: May 15 08:10:56 2026 GMT Not After : May 14 08:15:56 2027 GMT Subject: CN=6C2683EC213136F4FB26AE2D3B65693C33D1958B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:96:78:52:4c:73:f3:58:14:ed:ae:82:38: 6f:59:78:39:65:be:8f:7b:3b:63:02:e3:4d:12:1e: c2:a0:1c:e1:86:de:80:77:38:c3:97:91:07:7a:9a: 39:2b:e9:5a:d6:d2:c7:e2:3c:8d:cf:6e:65:db:89: a9:61:ef:92:cb:6f:7f:88:d5:da:8f:f3:f8:bf:a5: 9b:1c:98:3e:f0:89:9f:be:e9:ef:03:87:ac:22:69: 70:90:78:99:d4:9a:03:74:b3:18:03:9a:89:fb:a3: b2:1b:c5:2f:4f:45:95:04:4f:05:7a:2f:57:5e:14: b0:86:02:cd:c4:53:cd:a0:48:47:b4:cc:4a:30:8c: 1e:6c:85:75:c3:e8:f1:d2:1a:5e:42:c0:7e:51:85: 6c:e1:3f:d2:54:79:41:28:ff:8e:fb:ab:fa:bc:28: b4:9f:f0:19:0e:a6:51:82:8e:35:dc:99:ec:66:89: 2a:5c:1f:35:59:40:86:3d:fb:64:7b:5e:92:27:f5: d0:eb:0a:5a:fe:8d:b7:22:b8:76:ec:e8:54:9c:c6: 91:5a:ef:9d:c1:4e:1e:56:ca:26:25:84:72:27:9b: 01:df:2c:28:4f:1d:ec:bf:08:5a:b1:41:49:3a:f8: a0:69:fc:b2:98:4c:39:6b:de:b0:e5:c9:68:86:c4: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:83:EC:21:31:36:F4:FB:26:AE:2D:3B:65:69:3C:33:D1:95:8B X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS23650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.242.180.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:66:32:21:b8:99:cf:69:f2:e6:87:70:04:e9:82:b2:6c:54: aa:0f:76:a5:0f:4a:78:bc:ad:fc:52:c9:8f:87:c6:df:ca:1e: 3f:45:f6:7e:77:3a:bf:f2:fe:9d:a3:7b:4f:ba:76:cb:4e:16: e5:66:ea:2d:23:ed:76:8b:e6:6f:d9:e8:97:10:5f:69:98:2b: 14:97:a9:07:da:e4:c3:93:2a:df:da:87:20:77:c4:44:08:67: 4e:7b:14:cc:03:b6:55:5d:dd:39:73:74:75:8f:da:ba:9b:f5: 8e:29:e9:6f:ba:82:db:c9:97:32:86:66:dd:19:a7:4c:ea:f5: a5:0a:2f:cc:52:1c:60:eb:9d:ad:15:83:88:82:66:83:12:94: 16:28:fc:11:d6:34:68:c4:76:5d:b1:74:e8:7e:95:79:d1:75: 93:21:38:1e:d1:61:58:c5:a8:86:0f:21:51:37:e5:7d:c3:a8: bb:f2:40:27:3d:0a:11:8c:a7:7f:ad:d0:61:b9:49:94:81:33: 6f:f2:5f:b8:c4:c3:36:e6:f6:69:ad:e1:dc:9c:64:e1:c5:fd: 99:56:43:fe:e6:49:1a:c2:82:5c:e8:95:06:44:18:1b:1d:dd: 0d:3d:45:6f:cc:4b:b3:4d:53:51:5e:56:2b:97:84:6d:6e:36: 04:09:05:0b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWvb1MKh/n2Tj+CEpxEcvoKJL45wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA1MTUwODEwNTZaFw0yNzA1MTQwODE1NTZaMDMxMTAvBgNV BAMTKDZDMjY4M0VDMjEzMTM2RjRGQjI2QUUyRDNCNjU2OTNDMzNEMTk1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jJZ4Ukxz81gU7a6COG9ZeDll vo97O2MC400SHsKgHOGG3oB3OMOXkQd6mjkr6VrW0sfiPI3PbmXbialh75LLb3+I 1dqP8/i/pZscmD7wiZ++6e8Dh6wiaXCQeJnUmgN0sxgDmon7o7IbxS9PRZUETwV6 L1deFLCGAs3EU82gSEe0zEowjB5shXXD6PHSGl5CwH5RhWzhP9JUeUEo/477q/q8 KLSf8BkOplGCjjXcmexmiSpcHzVZQIY9+2R7XpIn9dDrClr+jbciuHbs6FScxpFa 753BTh5WyiYlhHInmwHfLChPHey/CFqxQUk6+KBp/LKYTDlr3rDlyWiGxDXhAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUbCaD7CExNvT7Jq4tO2VpPDPRlYswHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9BUzIzNjUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQA3PK0MA0GCSqGSIb3DQEBCwUAA4IBAQAsZjIhuJnPafLmh3AE6YKybFSq D3alD0p4vK38UsmPh8bfyh4/RfZ+dzq/8v6do3tPunbLThblZuotI+12i+Zv2eiX EF9pmCsUl6kH2uTDkyrf2ocgd8RECGdOexTMA7ZVXd05c3R1j9q6m/WOKelvuoLb yZcyhmbdGadM6vWlCi/MUhxg652tFYOIgmaDEpQWKPwR1jRoxHZdsXTofpV50XWT ITge0WFYxaiGDyFRN+V9w6i78kAnPQoRjKd/rdBhuUmUgTNv8l+4xMM25vZpreHc nGThxf2ZVkP+5kkawoJc6JUGRBgbHd0NPUVvzEuzTVNRXlYrl4RtbjYECQUL -----END CERTIFICATE-----Generated at Sat Jun 6 14:39:08 2026 by rpki-client