$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS23650.roa File: AS23650.roa (raw, json) Hash identifier: a6e3iKp3WkOKYd/8+EXMYxWrZB8Ge5Bj1sNbOYWzTeU= Subject key identifier: 3D:66:FC:F8:97:69:59:E9:67:9B:A4:45:34:79:C4:C5:2D:A3:AE:F3 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2C694F21ADE6DB2DB0037AFF9FFAB272360DBEB2 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS23650.roa Signing time: Wed 12 Aug 2026 15:35:43 +0000 ROA not before: Wed 12 Aug 2026 15:30:43 +0000 ROA not after: Wed 11 Aug 2027 15:35:43 +0000 asID: 23650 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.184.0/21 maxlen: 21 43.248.196.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.205.252.0/22 maxlen: 22 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:69:4f:21:ad:e6:db:2d:b0:03:7a:ff:9f:fa:b2:72:36:0d:be:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Aug 12 15:30:43 2026 GMT Not After : Aug 11 15:35:43 2027 GMT Subject: CN=3D66FCF8976959E9679BA4453479C4C52DA3AEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:db:9d:83:1f:93:01:e4:5d:0b:67:31:a2: 85:42:5e:77:94:ec:5d:de:73:57:c7:b4:5e:68:f6: 2a:f0:db:97:07:66:cb:a9:bf:f0:21:a1:72:85:10: c2:eb:55:61:9d:14:e1:d7:ca:76:df:55:79:b9:23: 05:df:ea:5a:78:cf:7f:38:33:2a:7a:d9:48:d8:18: c2:86:40:d6:c5:8e:aa:39:db:f6:fc:57:98:04:e3: 31:1d:ba:3d:d1:bd:f5:35:d7:54:74:a6:ee:4f:5d: 08:50:92:d4:13:41:d2:5e:95:4d:8c:6a:c3:e7:37: 2d:e3:24:5d:2c:33:e2:a7:de:d7:48:37:2b:29:4c: 7b:6c:65:84:8d:e1:04:ae:04:02:9a:3d:a8:e0:17: 8e:98:6a:75:3f:de:e1:c3:fc:8c:5f:d2:a6:0a:4e: 3f:1b:31:04:74:e9:29:21:fa:d0:37:0d:2b:d6:a1: ec:c2:00:c4:41:8c:91:14:3d:d2:a9:a2:5c:0f:52: f3:67:0a:3a:a2:59:81:5e:f4:2b:f9:12:1e:b4:58: f7:cc:54:37:75:79:1a:0d:f7:47:4f:67:04:ba:81: 70:e3:5e:ec:bf:ba:5e:72:a8:32:c0:0c:38:2d:28: c4:1a:32:2d:c2:70:76:36:a7:73:00:1a:4d:37:11: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:FC:F8:97:69:59:E9:67:9B:A4:45:34:79:C4:C5:2D:A3:AE:F3 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS23650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0/21 43.248.196.0/22 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:05:91:bd:7d:d5:94:fa:c7:49:47:36:f0:25:c1:36:ac:62: b2:34:eb:8b:5e:6e:09:25:e1:23:f9:2c:a6:fa:60:1d:e0:51: 39:37:54:0c:4c:67:3d:cc:79:60:af:fd:9f:23:23:09:6a:2e: c9:4c:2f:4c:3e:c6:40:fd:24:62:fd:85:6e:36:d4:ef:5d:a6: 9a:83:c6:5a:4b:c3:0c:66:06:0d:d5:4f:5c:11:d6:36:8e:84: 1e:f1:e9:f5:ee:8b:a7:2b:d7:7d:9a:99:34:95:33:55:79:54: d4:36:9f:e2:63:27:d6:d5:5d:05:7e:f7:a2:fc:f1:39:d7:eb: 19:63:18:fc:d3:00:28:f8:60:b5:77:d8:76:c9:8a:bb:fe:cf: 6b:61:e2:c6:99:7a:1f:dc:20:97:17:12:9d:bb:1a:f1:d7:46: e0:73:e2:94:f2:85:7b:37:ad:5e:49:fd:ee:9a:11:7a:0f:3b: 54:f1:3c:40:3e:f3:0e:a1:0f:50:ea:11:a9:a0:b6:47:ac:41: 39:52:f6:42:0c:15:5b:c3:02:cf:98:a8:72:bd:d0:df:16:f7: 64:34:a8:95:b9:20:71:09:9b:55:5a:b8:30:2b:2e:a0:3c:20: a4:dd:84:b9:eb:97:c7:bd:c9:2a:d2:55:80:6f:36:1a:38:b7: 11:db:2a:e3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIULGlPIa3m2y2wA3r/n/qycjYNvrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA4MTIxNTMwNDNaFw0yNzA4MTExNTM1NDNaMDMxMTAvBgNV BAMTKDNENjZGQ0Y4OTc2OTU5RTk2NzlCQTQ0NTM0NzlDNEM1MkRBM0FFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYtudgx+TAeRdC2cxooVCXneU 7F3ec1fHtF5o9irw25cHZsupv/AhoXKFEMLrVWGdFOHXynbfVXm5IwXf6lp4z384 Myp62UjYGMKGQNbFjqo52/b8V5gE4zEduj3RvfU111R0pu5PXQhQktQTQdJelU2M asPnNy3jJF0sM+Kn3tdINyspTHtsZYSN4QSuBAKaPajgF46YanU/3uHD/Ixf0qYK Tj8bMQR06Skh+tA3DSvWoezCAMRBjJEUPdKpolwPUvNnCjqiWYFe9Cv5Eh60WPfM VDd1eRoN90dPZwS6gXDjXuy/ul5yqDLADDgtKMQaMi3CcHY2p3MAGk03EdDJAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUPWb8+JdpWelnm6RFNHnExS2jrvMwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzIzNjUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIA ATA8AwQCK/AAAwQCK/EwAwQDK/i4AwQCK/jEAwQCZyUsAwQCZygMAwQCZy2gAwQC Z838AwQCZ+/0AwQCb98MMA0GCSqGSIb3DQEBCwUAA4IBAQAOBZG9fdWU+sdJRzbw JcE2rGKyNOuLXm4JJeEj+Sym+mAd4FE5N1QMTGc9zHlgr/2fIyMJai7JTC9MPsZA /SRi/YVuNtTvXaaag8ZaS8MMZgYN1U9cEdY2joQe8en17ounK9d9mpk0lTNVeVTU Np/iYyfW1V0Ffvei/PE51+sZYxj80wAo+GC1d9h2yYq7/s9rYeLGmXof3CCXFxKd uxrx10bgc+KU8oV7N61eSf3umhF6DztU8TxAPvMOoQ9Q6hGpoLZHrEE5UvZCDBVb wwLPmKhyvdDfFvdkNKiVuSBxCZtVWrgwKy6gPCCk3YS565fHvckq0lWAbzYaOLcR 2yrj -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:29 2026 by rpki-client