
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24404.roa
File: AS24404.roa (raw, json)
Hash identifier: LTvmMcy15z0lHHMl2wFaWuyhnh5iXV6CfE90p0TUMvE=
Subject key identifier: 2F:B4:AC:51:86:7C:51:73:0E:36:A3:A2:02:35:E1:DB:B0:4F:BB:C7
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 4C539F7F142652A3E7F36BF7F5225FE10C7233A4
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24404.roa
Signing time: Wed 10 Jun 2026 07:16:04 +0000
ROA not before: Wed 10 Jun 2026 07:11:04 +0000
ROA not after: Wed 09 Jun 2027 07:16:04 +0000
asID: 24404
IP address blocks: 114.113.144.0/20 maxlen: 24
116.90.80.0/20 maxlen: 24
121.52.208.0/20 maxlen: 24
218.245.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:53:9f:7f:14:26:52:a3:e7:f3:6b:f7:f5:22:5f:e1:0c:72:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 10 07:11:04 2026 GMT
Not After : Jun 9 07:16:04 2027 GMT
Subject: CN=2FB4AC51867C51730E36A3A20235E1DBB04FBBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:6e:ef:2e:ce:0f:47:41:52:8f:e1:04:77:
0e:54:b2:fe:c4:db:ce:d9:77:0e:01:42:53:e3:d5:
53:51:65:6b:fa:c1:d6:d9:ec:5a:ff:12:f9:df:07:
8b:a6:3c:4f:1b:4f:48:10:09:d5:ba:65:bf:20:8c:
9e:c7:7c:46:42:1d:08:5c:b1:6c:f9:3c:a9:7b:97:
38:00:54:06:be:f7:97:3b:ec:f4:1d:a6:d9:ce:a8:
cb:6d:59:18:15:75:f6:59:e7:6d:4a:90:a3:04:ed:
93:ce:d5:60:9d:22:2f:0d:e3:71:13:35:b1:7b:aa:
e0:c1:9c:77:3e:4f:b6:5d:45:34:7d:96:3e:21:38:
88:4e:14:e1:4c:e7:a0:fa:c7:61:b0:37:ee:79:0a:
b0:57:d6:4d:82:11:6b:b1:bf:4f:75:0d:88:e5:27:
dd:18:65:ed:59:e8:b0:7b:7e:87:5a:6b:3e:7d:05:
bd:ef:65:e0:95:81:f3:ae:eb:ba:36:b1:d1:39:56:
a7:71:d9:44:7d:8c:08:8d:46:c1:3a:c4:2f:e2:bd:
12:b0:86:47:f7:f1:94:d7:0a:b1:e2:8a:a4:be:3c:
d0:30:5f:99:86:d2:8c:be:c6:3c:c0:05:84:67:12:
43:bf:50:91:19:26:63:d8:f4:b9:a2:96:63:ff:d4:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B4:AC:51:86:7C:51:73:0E:36:A3:A2:02:35:E1:DB:B0:4F:BB:C7
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.144.0/20
116.90.80.0/20
121.52.208.0/20
218.245.0.0/19
Signature Algorithm: sha256WithRSAEncryption
16:11:99:e7:19:23:3f:52:fc:8f:53:5e:ba:15:23:ec:17:93:
20:4f:ec:10:ca:11:f1:ef:9e:59:8f:32:0c:bd:6a:cc:39:a8:
cd:9c:c8:58:5a:02:8b:6c:71:bf:0e:d6:cd:f0:67:11:23:7d:
c8:52:9d:20:cb:0c:a3:6a:2a:84:cb:40:aa:78:a7:cc:73:1e:
6a:58:44:6b:b6:c8:72:14:cc:2e:f3:10:90:c9:60:8a:82:fb:
8d:31:66:74:fa:f3:14:99:5f:53:0b:3f:f0:8c:90:f8:e3:a7:
5b:09:ed:89:64:8b:90:b6:6c:14:11:d8:7d:b9:d9:92:5b:64:
0a:3b:bd:d1:34:07:6a:e6:fc:7a:a2:08:30:df:df:5e:20:f2:
a6:78:21:df:36:3c:11:35:63:18:7b:fc:4c:e9:08:0b:83:b2:
5c:ce:09:7b:c3:de:f9:d9:36:e8:59:64:71:67:73:8d:71:35:
79:aa:55:5c:c5:47:78:54:ce:ca:1c:0b:20:8b:7c:46:93:62:
60:3a:60:42:7d:2f:7d:e8:97:be:3f:a9:11:01:fd:e5:ac:0b:
07:99:a1:b7:2d:27:68:8b:7c:42:8d:2b:c0:0d:58:00:a0:18:
76:a5:84:90:b7:33:4c:f4:a4:ef:10:9d:e8:28:20:98:82:3d:
f1:67:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:23 2026 by rpki-client