$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0= Subject key identifier: 22:AB:33:75:99:AC:39:7A:0A:BB:62:56:39:89:28:0D:0E:0C:63:D7 Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 5EE696AF9F8F2BA603AD4392FAE3703985E12855 Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS23724.roa Signing time: Tue 16 Jun 2026 15:37:44 +0000 ROA not before: Tue 16 Jun 2026 15:32:44 +0000 ROA not after: Tue 15 Jun 2027 15:37:44 +0000 asID: 23724 IP address blocks: 49.4.32.0/20 maxlen: 20 114.115.128.0/18 maxlen: 18 114.115.192.0/19 maxlen: 19 114.115.224.0/19 maxlen: 19 114.116.0.0/19 maxlen: 19 114.116.32.0/19 maxlen: 19 114.116.64.0/19 maxlen: 19 114.116.96.0/19 maxlen: 19 114.116.128.0/19 maxlen: 19 114.116.160.0/19 maxlen: 19 114.116.192.0/19 maxlen: 19 116.63.0.0/19 maxlen: 19 116.196.218.0/23 maxlen: 23 116.196.220.0/22 maxlen: 22 122.9.0.0/19 maxlen: 19 122.9.32.0/20 maxlen: 20 2409:27fa::/48 maxlen: 48 2409:27fa:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e6:96:af:9f:8f:2b:a6:03:ad:43:92:fa:e3:70:39:85:e1:28:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jun 16 15:32:44 2026 GMT Not After : Jun 15 15:37:44 2027 GMT Subject: CN=22AB337599AC397A0ABB62563989280D0E0C63D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:f8:35:92:d3:f7:46:d3:19:1d:d7:ef:4f: 9c:41:cf:11:42:73:be:72:4b:82:ed:53:37:70:4b: 71:37:6c:9f:fa:0d:1e:9a:18:a3:f6:24:35:13:f0: ab:3c:0b:9f:71:68:7a:21:d0:87:a4:8f:d6:b2:33: 72:eb:c3:dd:c7:72:0c:e3:27:b3:7c:80:30:fb:d5: aa:6c:d5:aa:f4:df:f1:ca:d7:d2:03:0a:f4:38:e4: e9:6c:6b:e2:d4:78:57:ac:50:ad:09:aa:b5:91:a1: 3d:d6:c3:a4:fe:a4:8f:8b:17:52:3d:bd:42:2b:15: 2d:01:4d:b7:ca:99:a8:e1:92:b7:ac:8f:e2:0a:89: f0:56:7d:55:38:f2:98:08:72:36:e9:68:0d:c0:ba: c4:10:68:5f:48:08:77:72:4c:2c:35:76:06:0f:11: e3:04:3d:1b:ca:3d:29:a8:cb:e4:7b:c5:28:cd:d2: 76:ea:32:8b:48:9f:c2:16:d3:ee:e7:76:eb:d0:86: dd:3b:ec:9d:38:37:8c:74:11:82:ab:a0:28:b3:c4: 8e:95:6a:a1:cd:f5:8f:bc:ff:fa:ed:39:b7:cf:3c: 6b:6f:db:e5:10:9a:89:ab:99:0e:5f:22:29:45:67: d7:71:3c:e5:9f:1e:38:67:62:fa:d3:cd:4d:cb:bb: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AB:33:75:99:AC:39:7A:0A:BB:62:56:39:89:28:0D:0E:0C:63:D7 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.4.32.0/20 114.115.128.0-114.116.223.255 116.63.0.0/19 116.196.218.0-116.196.223.255 122.9.0.0-122.9.47.255 IPv6: 2409:27fa::/48 2409:27fa:f000::/48 Signature Algorithm: sha256WithRSAEncryption 89:3b:21:e3:d2:63:ba:9f:5a:19:5c:d4:c0:f7:4f:c5:bd:71: 40:f1:c3:f1:97:92:22:bd:c4:ea:8c:31:9c:b8:a1:04:51:c3: 4f:83:99:4f:eb:3b:2b:76:79:f7:f5:14:6f:b4:32:5f:90:5c: 74:4e:bc:a4:b9:95:d9:f0:fd:af:64:e3:0b:7e:71:cf:4b:5c: 2f:b2:16:b8:c2:7b:c1:3e:10:86:c5:e0:7f:70:7a:e7:f3:5b: f5:06:f4:6a:13:0e:4f:26:96:83:15:1d:fa:9f:f6:a9:16:c6: 91:2d:14:6c:eb:76:6d:f3:90:4f:a8:97:46:e5:28:0f:ec:d8: 2f:dd:f2:17:50:9c:b2:10:03:38:47:e2:92:d9:99:7a:a6:76: 95:98:18:d7:71:ff:b1:c6:f5:db:06:24:c8:0e:ad:f3:c8:b0: 35:83:e3:99:6c:98:c4:26:ac:e3:ba:de:16:59:11:0c:c3:ff: c4:c6:34:5d:20:6c:59:37:53:e7:a6:41:3a:90:04:a8:a2:be: aa:3f:28:47:f8:f2:5b:83:e3:60:0e:fe:88:3c:68:19:f8:ae: 2e:a2:1d:31:50:64:75:97:e4:32:21:95:46:7a:ad:3e:58:bf: 25:98:97:fd:2d:d6:6a:e8:84:af:82:46:87:73:22:6e:29:fc: 21:0c:ef:0e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUXuaWr5+PK6YDrUOS+uNwOYXhKFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA2MTYxNTMyNDRaFw0yNzA2MTUxNTM3NDRaMDMxMTAvBgNV BAMTKDIyQUIzMzc1OTlBQzM5N0EwQUJCNjI1NjM5ODkyODBEMEUwQzYzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDPg1ktP3RtMZHdfvT5xBzxFC c75yS4LtUzdwS3E3bJ/6DR6aGKP2JDUT8Ks8C59xaHoh0Iekj9ayM3Lrw93Hcgzj J7N8gDD71aps1ar03/HK19IDCvQ45Olsa+LUeFesUK0JqrWRoT3Ww6T+pI+LF1I9 vUIrFS0BTbfKmajhkresj+IKifBWfVU48pgIcjbpaA3AusQQaF9ICHdyTCw1dgYP EeMEPRvKPSmoy+R7xSjN0nbqMotIn8IW0+7nduvQht077J04N4x0EYKroCizxI6V aqHN9Y+8//rtObfPPGtv2+UQmomrmQ5fIilFZ9dxPOWfHjhnYvrTzU3LuwKFAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUIqszdZmsOXoKu2JWOYkoDQ4MY9cwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzA7BAIA ATA1AwQEMQQgMAwDBAdyc4ADBAVydMADBAV0PwAwDAMEAXTE2gMEBXTEwDALAwMA egkDBAR6CSAwGAQCAAIwEgMHACQJJ/oAAAMHACQJJ/rwADANBgkqhkiG9w0BAQsF AAOCAQEAiTsh49Jjup9aGVzUwPdPxb1xQPHD8ZeSIr3E6owxnLihBFHDT4OZT+s7 K3Z59/UUb7QyX5BcdE68pLmV2fD9r2TjC35xz0tcL7IWuMJ7wT4QhsXgf3B65/Nb 9Qb0ahMOTyaWgxUd+p/2qRbGkS0UbOt2bfOQT6iXRuUoD+zYL93yF1CcshADOEfi ktmZeqZ2lZgY13H/scb12wYkyA6t88iwNYPjmWyYxCas47reFlkRDMP/xMY0XSBs WTdT56ZBOpAEqKK+qj8oR/jyW4PjYA7+iDxoGfiuLqIdMVBkdZfkMiGVRnqtPli/ JZiX/S3WauiEr4JGh3Mibin8IQzvDg== -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:48 2026 by rpki-client