$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: bYuokEQIWh4Vsk4e3lXzUmB8evpzlN/0ohXz5GXDX90= Subject key identifier: 36:03:A3:30:DA:BC:C8:7F:CB:9E:4C:1C:AA:65:37:FD:C2:50:EC:B8 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 2A04D8AA2D034D8451BA2F111B0688D5074B5417 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS23724.roa Signing time: Wed 13 May 2026 07:39:25 +0000 ROA not before: Wed 13 May 2026 07:34:25 +0000 ROA not after: Wed 12 May 2027 07:39:25 +0000 asID: 23724 IP address blocks: 101.237.34.0/24 maxlen: 24 101.237.37.0/24 maxlen: 24 101.237.128.0/20 maxlen: 20 106.75.0.0/19 maxlen: 19 106.75.32.0/19 maxlen: 19 106.75.64.0/19 maxlen: 19 106.75.96.0/19 maxlen: 19 117.50.0.0/19 maxlen: 19 117.50.32.0/19 maxlen: 19 117.50.64.0/19 maxlen: 19 117.50.96.0/19 maxlen: 19 117.50.128.0/19 maxlen: 19 117.50.160.0/19 maxlen: 19 117.50.192.0/19 maxlen: 19 117.50.224.0/19 maxlen: 19 2401:3480::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:04:d8:aa:2d:03:4d:84:51:ba:2f:11:1b:06:88:d5:07:4b:54:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 13 07:34:25 2026 GMT Not After : May 12 07:39:25 2027 GMT Subject: CN=3603A330DABCC87FCB9E4C1CAA6537FDC250ECB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:8d:cf:52:22:7c:0a:8b:41:36:e3:59:b5: a2:bc:42:64:72:d2:96:54:4e:9d:8d:1f:68:26:42: fc:aa:16:e5:50:29:64:23:7b:82:df:32:e1:e1:f5: d4:30:87:b0:33:4b:f9:26:c2:38:14:2b:5b:f4:97: e5:cb:ea:15:af:38:21:d1:33:8e:cb:1d:85:2d:de: 93:c5:64:ad:5c:71:93:cb:24:6a:23:92:10:e0:a6: 03:3f:cf:8e:35:a4:8e:67:4d:68:c6:6f:48:c4:50: 57:83:dc:f8:18:32:ec:27:f3:50:53:7d:41:cd:81: 42:58:26:5d:52:bd:bb:14:69:5c:7f:46:94:ff:68: 45:53:d6:89:00:81:27:4d:9c:34:db:40:6b:31:a6: 03:48:76:1f:c6:42:89:b7:76:22:ff:0d:13:34:f8: 65:a1:9f:5d:ee:74:66:01:59:6f:be:9f:e9:19:67: 20:57:eb:d3:06:2d:2f:a1:5a:8b:e0:5a:52:c6:cb: 52:94:77:21:fe:7f:25:9a:d1:db:f6:44:60:d6:57: 4d:81:0f:50:9e:3a:cf:67:90:10:60:09:a8:71:80: aa:08:f7:24:df:e0:9a:29:63:ee:45:86:4d:e2:81: dc:02:a2:69:48:30:48:60:25:14:d1:0a:c3:d1:f3: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:A3:30:DA:BC:C8:7F:CB:9E:4C:1C:AA:65:37:FD:C2:50:EC:B8 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.34.0/24 101.237.37.0/24 101.237.128.0/20 106.75.0.0/17 117.50.0.0/16 IPv6: 2401:3480::/36 Signature Algorithm: sha256WithRSAEncryption d2:8f:00:e3:30:b0:5b:75:1e:1f:a3:87:66:ca:f4:d7:bc:13: 3d:65:f5:1d:53:ea:13:3c:ba:1c:03:ea:52:7e:2c:47:11:3d: 92:0c:91:4c:aa:af:be:1e:ad:0e:b9:65:f0:e7:13:5a:01:01: ab:8b:cb:84:89:03:47:b1:1a:d7:f9:1e:1c:68:40:67:c5:8b: ce:7f:57:38:da:f4:ba:f9:21:f5:19:bc:24:dd:8c:be:67:a2: ac:6d:32:37:cd:33:62:73:c3:98:59:85:87:a9:e4:f7:36:b6: 3b:dc:c5:97:d0:96:22:7f:f4:67:94:1a:26:aa:23:36:de:3e: 39:03:10:92:77:38:45:a9:92:36:42:50:68:7c:dd:ee:6d:a5: 96:8d:b9:08:05:fc:2f:4f:a8:da:43:02:ba:77:37:e4:a9:20: e6:a5:1d:b3:aa:7f:1a:f8:97:f6:80:89:05:65:c3:17:2b:aa: db:b1:d8:5a:59:64:64:0c:65:a0:00:10:c9:11:65:e0:48:1b: cb:c0:82:3e:15:a6:77:1f:35:d1:1b:a0:80:0d:0b:b7:e4:db: 72:d8:7a:d4:a9:f2:67:89:ce:5a:64:98:39:67:0f:e0:99:29: 2d:c6:56:8a:b7:5b:8e:70:02:4b:af:ce:37:1d:e3:06:4c:04: 7f:93:2a:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKgTYqi0DTYRRui8RGwaI1QdLVBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTMwNzM0MjVaFw0yNzA1MTIwNzM5MjVaMDMxMTAvBgNV BAMTKDM2MDNBMzMwREFCQ0M4N0ZDQjlFNEMxQ0FBNjUzN0ZEQzI1MEVDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedI3PUiJ8CotBNuNZtaK8QmRy 0pZUTp2NH2gmQvyqFuVQKWQje4LfMuHh9dQwh7AzS/kmwjgUK1v0l+XL6hWvOCHR M47LHYUt3pPFZK1ccZPLJGojkhDgpgM/z441pI5nTWjGb0jEUFeD3PgYMuwn81BT fUHNgUJYJl1SvbsUaVx/RpT/aEVT1okAgSdNnDTbQGsxpgNIdh/GQom3diL/DRM0 +GWhn13udGYBWW++n+kZZyBX69MGLS+hWovgWlLGy1KUdyH+fyWa0dv2RGDWV02B D1CeOs9nkBBgCahxgKoI9yTf4JopY+5Fhk3igdwComlIMEhgJRTRCsPR8zyRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUNgOjMNq8yH/LnkwcqmU3/cJQ7LgwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAjBAIA ATAdAwQAZe0iAwQAZe0lAwQEZe2AAwQHaksAAwMAdTIwDgQCAAIwCAMGBCQBNIAA MA0GCSqGSIb3DQEBCwUAA4IBAQDSjwDjMLBbdR4fo4dmyvTXvBM9ZfUdU+oTPLoc A+pSfixHET2SDJFMqq++Hq0OuWXw5xNaAQGri8uEiQNHsRrX+R4caEBnxYvOf1c4 2vS6+SH1Gbwk3Yy+Z6KsbTI3zTNic8OYWYWHqeT3NrY73MWX0JYif/RnlBomqiM2 3j45AxCSdzhFqZI2QlBofN3ubaWWjbkIBfwvT6jaQwK6dzfkqSDmpR2zqn8a+Jf2 gIkFZcMXK6rbsdhaWWRkDGWgABDJEWXgSBvLwII+FaZ3HzXRG6CADQu35Nty2HrU qfJnic5aZJg5Zw/gmSktxlaKt1uOcAJLr843HeMGTAR/kyob -----END CERTIFICATE-----Generated at Sat May 30 00:41:30 2026 by rpki-client