$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: rQG0L3U9tMwNofaMnW3Xu0RjhTwBDcEyS9DHW3lp+fE= Subject key identifier: AB:A3:D7:68:A8:43:95:4E:F6:53:0E:2A:20:77:DF:89:8A:3A:D7:09 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 7BDE38359A47EA006FADAD78D45D66A16212189A Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS23724.roa Signing time: Wed 01 Jul 2026 13:08:38 +0000 ROA not before: Wed 01 Jul 2026 13:03:38 +0000 ROA not after: Wed 30 Jun 2027 13:08:38 +0000 asID: 23724 IP address blocks: 180.184.24.0/21 maxlen: 24 180.184.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:de:38:35:9a:47:ea:00:6f:ad:ad:78:d4:5d:66:a1:62:12:18:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jul 1 13:03:38 2026 GMT Not After : Jun 30 13:08:38 2027 GMT Subject: CN=ABA3D768A843954EF6530E2A2077DF898A3AD709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:a8:e2:8d:bb:ac:8c:c3:14:6a:67:20:6c: 80:70:55:0f:a8:26:a9:f7:c3:10:ff:ae:91:95:6d: 57:d8:b7:c8:fe:d5:b1:85:a7:86:df:b7:a4:27:f5: ba:f3:3e:13:61:6f:be:93:f7:17:5d:8c:44:ad:05: 68:84:fe:a4:f6:80:9c:10:4d:fc:ff:ca:d7:d6:33: 40:5a:fe:04:09:7b:23:f3:d6:1f:2a:49:5b:43:08: f9:32:bb:06:ef:59:95:c7:38:38:56:33:09:ea:b8: 6e:f5:bf:36:58:ec:9b:28:cd:d3:22:a4:11:c5:89: 99:b2:7c:97:e9:87:86:fc:30:25:5f:25:4d:d8:f8: aa:1e:86:e4:f7:f2:47:33:dc:52:df:3b:62:00:99: 88:6c:91:24:e8:d3:eb:cb:40:ec:27:1a:d9:b8:92: aa:ca:fb:64:20:6f:e2:55:99:aa:ef:d4:40:f5:9b: 06:6e:34:bd:ca:b5:53:8f:70:a5:43:f2:2d:0e:7a: b5:67:59:0a:e2:04:f0:57:8e:37:43:16:e1:8d:d1: 89:af:dc:20:1a:de:7a:3e:9f:fb:6f:10:af:3a:38: 61:c1:0b:58:c7:b3:ad:b7:63:6b:cc:da:ad:6b:2c: de:9c:c6:b4:3c:3f:17:a0:72:a0:9b:ff:14:8a:7b: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:D7:68:A8:43:95:4E:F6:53:0E:2A:20:77:DF:89:8A:3A:D7:09 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.184.24.0/21 180.184.56.0/21 Signature Algorithm: sha256WithRSAEncryption 62:36:4d:72:6d:d9:24:a2:49:ad:b4:c6:de:ed:23:f0:bb:42: f0:04:02:98:35:11:b6:2e:33:c4:83:0f:a7:b2:b8:b8:3e:a1: a6:bb:97:a7:7b:a7:2a:2b:07:36:76:41:22:4e:08:28:0d:72: 00:ec:be:48:c7:57:45:2e:6a:ed:a8:de:2e:08:aa:db:2d:cf: 04:91:37:08:88:19:36:61:30:1f:37:fe:f7:09:89:63:32:7a: 99:64:30:71:32:6e:17:76:92:3e:bf:8b:40:b8:69:83:2b:c2: aa:0a:ce:d0:97:6e:c7:88:83:ca:be:4a:5b:28:ff:c6:3b:6f: 8b:d0:47:c0:85:64:22:6b:74:78:61:dd:d6:01:83:7f:2c:ab: 3d:e4:5c:23:80:db:f1:d7:ca:99:cc:32:51:fb:ac:18:f6:61: 54:6e:ea:f0:a5:99:1e:70:23:6a:2b:73:a9:e8:26:e8:41:74: 89:95:b2:7a:47:d9:59:ee:11:3a:7e:3d:71:cb:b4:a8:c4:31: 36:53:bd:eb:77:8f:1f:c3:81:d0:fd:35:38:2b:bc:e7:24:cb: 49:91:1b:e2:0e:1c:11:23:ea:58:7b:e5:1e:6a:2a:e8:73:d9: 98:33:73:86:39:20:7c:61:bc:da:0b:e0:92:4d:fe:ca:fe:02: 69:0a:fd:32 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUe944NZpH6gBvra141F1moWISGJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjA3MDExMzAzMzhaFw0yNzA2MzAxMzA4MzhaMDMxMTAvBgNV BAMTKEFCQTNENzY4QTg0Mzk1NEVGNjUzMEUyQTIwNzdERjg5OEEzQUQ3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveKjijbusjMMUamcgbIBwVQ+o Jqn3wxD/rpGVbVfYt8j+1bGFp4bft6Qn9brzPhNhb76T9xddjEStBWiE/qT2gJwQ Tfz/ytfWM0Ba/gQJeyPz1h8qSVtDCPkyuwbvWZXHODhWMwnquG71vzZY7JsozdMi pBHFiZmyfJfph4b8MCVfJU3Y+KoehuT38kcz3FLfO2IAmYhskSTo0+vLQOwnGtm4 kqrK+2Qgb+JVmarv1ED1mwZuNL3KtVOPcKVD8i0OerVnWQriBPBXjjdDFuGN0Ymv 3CAa3no+n/tvEK86OGHBC1jHs623Y2vM2q1rLN6cxrQ8PxegcqCb/xSKe3/nAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUq6PXaKhDlU72Uw4qIHffiYo61wkwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQDtLgYAwQDtLg4MA0GCSqGSIb3DQEBCwUAA4IBAQBiNk1ybdkkokmttMbe 7SPwu0LwBAKYNRG2LjPEgw+nsri4PqGmu5ene6cqKwc2dkEiTggoDXIA7L5Ix1dF LmrtqN4uCKrbLc8EkTcIiBk2YTAfN/73CYljMnqZZDBxMm4XdpI+v4tAuGmDK8Kq Cs7Ql27HiIPKvkpbKP/GO2+L0EfAhWQia3R4Yd3WAYN/LKs95FwjgNvx18qZzDJR +6wY9mFUburwpZkecCNqK3Op6CboQXSJlbJ6R9lZ7hE6fj1xy7SoxDE2U73rd48f w4HQ/TU4K7znJMtJkRviDhwRI+pYe+Ueairoc9mYM3OGOSB8YbzaC+CSTf7K/gJp Cv0y -----END CERTIFICATE-----Generated at Tue Jul 14 23:35:39 2026 by rpki-client