$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E= Subject key identifier: 83:A4:BB:E8:41:1B:6F:87:97:AC:66:E6:E7:A3:81:6D:9A:5D:E1:0C Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 1964DD3155EAE8065E0A8B24FB7C26A0E73F73F6 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS23724.roa Signing time: Sun 17 May 2026 10:00:01 +0000 ROA not before: Sun 17 May 2026 09:55:01 +0000 ROA not after: Sun 16 May 2027 10:00:01 +0000 asID: 23724 IP address blocks: 106.13.244.0/22 maxlen: 24 106.13.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:64:dd:31:55:ea:e8:06:5e:0a:8b:24:fb:7c:26:a0:e7:3f:73:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: May 17 09:55:01 2026 GMT Not After : May 16 10:00:01 2027 GMT Subject: CN=83A4BBE8411B6F8797AC66E6E7A3816D9A5DE10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:40:a9:bc:36:c7:f2:25:16:e5:ab:c7:19: ca:26:7e:4d:2a:37:a4:32:6f:bd:ff:e2:72:d5:64: 34:a2:1c:cb:30:66:06:f9:63:4d:af:1f:72:ca:00: 91:cd:30:ff:e7:6e:c9:2e:08:22:34:a2:5a:cc:21: 8c:3c:df:a0:0a:3c:57:37:8c:da:18:d5:c3:78:d4: 1b:91:bf:e2:9e:67:5a:b0:68:4d:b5:cb:e9:25:f9: 9d:dd:10:1b:82:25:cd:c7:1d:10:ba:21:49:15:c9: a7:c4:59:2a:df:b2:23:ae:a6:6c:16:b3:d1:1c:de: ff:78:df:58:eb:21:81:ce:60:1a:25:7c:6e:c5:ad: 8f:39:73:e3:a9:45:8c:91:01:a6:84:7b:1e:42:de: 13:34:a9:2f:55:31:bb:d7:f5:95:c8:91:16:a6:49: 66:44:f8:55:24:0c:44:4e:74:82:b2:02:7e:0b:12: 85:65:b3:90:56:4d:8d:af:6f:17:93:f1:f1:02:22: 9c:9a:b1:ba:c7:11:f9:11:d2:2f:b6:00:8c:6e:e1: e7:65:b8:65:79:6f:52:18:d9:02:21:97:12:fe:a0: 65:77:cb:85:d9:e6:0d:d2:36:2f:ad:f2:7e:11:ff: 05:c7:7f:75:d5:6e:cc:b7:17:65:ca:01:19:0c:85: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A4:BB:E8:41:1B:6F:87:97:AC:66:E6:E7:A3:81:6D:9A:5D:E1:0C X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.13.244.0-106.13.249.255 Signature Algorithm: sha256WithRSAEncryption 99:a2:33:a2:91:69:9c:5d:b0:ab:51:0e:ec:a4:42:dc:68:e5: d6:47:26:06:c9:50:5c:cc:80:84:2d:72:b1:44:b1:5d:09:24: 58:ac:62:8b:be:5f:8e:bd:68:c4:f3:f3:c2:6f:97:6e:c0:04: c6:c4:d2:4d:ba:14:77:09:77:e3:67:24:13:c0:ff:8f:3e:af: a2:07:53:ea:eb:d0:39:2a:62:52:a6:19:06:06:dd:04:87:e1: 99:d8:59:f7:0e:30:57:be:20:2d:e7:c9:aa:cb:3a:1c:12:a3: a2:d0:3f:63:17:5f:03:d6:9b:8a:10:d8:2f:b9:2c:90:fb:bc: 5c:1d:0e:e9:28:81:3f:1b:6d:b9:e4:4e:6f:5a:5d:05:93:7b: 7b:25:eb:fd:2a:b3:d6:4a:7b:a6:c0:09:59:18:3d:7e:7c:f0: d4:59:7d:fc:8f:a3:4c:f1:66:bb:f7:c9:d5:9a:ef:06:23:3c: 19:fc:f1:9e:22:5f:fe:2f:72:97:2a:a3:41:d3:0d:7a:00:0b: 9f:2d:2b:69:0c:dd:37:18:8f:e4:38:86:3c:61:24:6f:5b:05: 54:43:27:d1:73:8c:58:56:83:ac:b0:1e:df:b8:92:60:7b:76: ce:a4:01:4d:24:be:91:32:a7:76:e4:7a:c8:52:65:22:6c:c5: 8e:cf:d7:be -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUGWTdMVXq6AZeCosk+3wmoOc/c/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA1MTcwOTU1MDFaFw0yNzA1MTYxMDAwMDFaMDMxMTAvBgNV BAMTKDgzQTRCQkU4NDExQjZGODc5N0FDNjZFNkU3QTM4MTZEOUE1REUxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC250CpvDbH8iUW5avHGcomfk0q N6Qyb73/4nLVZDSiHMswZgb5Y02vH3LKAJHNMP/nbskuCCI0olrMIYw836AKPFc3 jNoY1cN41BuRv+KeZ1qwaE21y+kl+Z3dEBuCJc3HHRC6IUkVyafEWSrfsiOupmwW s9Ec3v9431jrIYHOYBolfG7FrY85c+OpRYyRAaaEex5C3hM0qS9VMbvX9ZXIkRam SWZE+FUkDEROdIKyAn4LEoVls5BWTY2vbxeT8fECIpyasbrHEfkR0i+2AIxu4edl uGV5b1IY2QIhlxL+oGV3y4XZ5g3SNi+t8n4R/wXHf3XVbsy3F2XKARkMhaYNAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUg6S76EEbb4eXrGbm56OBbZpd4QwwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIA ATAOMAwDBAJqDfQDBAFqDfgwDQYJKoZIhvcNAQELBQADggEBAJmiM6KRaZxdsKtR DuykQtxo5dZHJgbJUFzMgIQtcrFEsV0JJFisYou+X469aMTz88Jvl27ABMbE0k26 FHcJd+NnJBPA/48+r6IHU+rr0DkqYlKmGQYG3QSH4ZnYWfcOMFe+IC3nyarLOhwS o6LQP2MXXwPWm4oQ2C+5LJD7vFwdDukogT8bbbnkTm9aXQWTe3sl6/0qs9ZKe6bA CVkYPX588NRZffyPo0zxZrv3ydWa7wYjPBn88Z4iX/4vcpcqo0HTDXoAC58tK2kM 3TcYj+Q4hjxhJG9bBVRDJ9FzjFhWg6ywHt+4kmB7ds6kAU0kvpEyp3bkeshSZSJs xY7P174= -----END CERTIFICATE-----Generated at Fri May 29 23:49:12 2026 by rpki-client