$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: EO6iII7DGgBoyeH9Svx16+2j0LkgKQKjDLFCwiSzsIA= Subject key identifier: 0C:FC:24:D2:67:C3:08:75:D3:79:5A:1E:3B:E9:68:D0:B9:8D:F1:E6 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 53AB80362005E38D3D44894530B7682086B7CC5F Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS23724.roa Signing time: Mon 18 May 2026 03:34:43 +0000 ROA not before: Mon 18 May 2026 03:29:43 +0000 ROA not after: Mon 17 May 2027 03:34:43 +0000 asID: 23724 IP address blocks: 42.158.0.0/16 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.133.128.0/18 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 2403:a200:a2ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ab:80:36:20:05:e3:8d:3d:44:89:45:30:b7:68:20:86:b7:cc:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:29:43 2026 GMT Not After : May 17 03:34:43 2027 GMT Subject: CN=0CFC24D267C30875D3795A1E3BE968D0B98DF1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:89:eb:25:56:7d:6b:42:dc:46:74:b9:f2: 4c:10:29:48:46:5a:13:71:5a:fc:ff:11:12:67:fe: 1d:fa:45:46:de:3f:70:ee:fe:51:c5:2a:2e:84:e1: 92:75:af:d2:59:4e:4f:eb:2c:80:32:df:7f:5e:74: 4c:5b:4a:e6:aa:6e:d8:f9:31:45:b3:9a:ce:61:77: 56:59:b8:c2:ad:ef:1c:0a:a4:8d:68:05:2b:7c:f9: 83:7c:99:8d:33:db:2e:95:b7:41:e2:3a:72:af:67: 66:32:cb:bb:53:ff:3b:f0:95:d9:e5:bb:52:c3:7c: 6c:5d:6e:a2:b7:62:0b:3b:0b:b5:52:9f:0f:97:36: ec:5e:5f:41:e5:55:0e:9b:2e:ab:e8:f3:91:cb:16: c4:c3:99:4f:14:14:ff:52:13:fb:d8:af:d8:01:25: 71:e9:f1:72:ed:d9:ba:7e:57:98:41:ae:19:81:5a: 28:a2:9f:78:7c:a2:d4:a0:b9:52:13:32:63:51:39: 82:45:ea:d2:c4:c9:3a:9b:82:a9:ca:1f:65:cd:91: f0:01:6b:d6:e8:eb:b6:81:c6:74:70:ff:eb:18:b0: 61:07:85:5c:91:09:39:14:c7:22:8b:3c:e7:9b:73: 77:60:8a:55:9b:66:9a:b0:e8:19:1f:1b:ed:dc:1e: 76:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FC:24:D2:67:C3:08:75:D3:79:5A:1E:3B:E9:68:D0:B9:8D:F1:E6 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.239.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption b3:c4:44:44:18:65:8f:44:bc:b5:90:ff:81:e7:87:6f:fd:c0: 2c:28:f1:9c:b6:84:fe:dc:f3:5a:ec:e7:66:eb:6f:e9:87:87: 72:ff:25:80:14:d2:12:5c:d7:a6:84:2e:d6:a0:bb:2f:36:4d: f6:b3:56:52:ed:2f:6f:7e:89:c1:df:dd:0c:8b:5f:8d:2a:e8: 92:ae:dc:d3:29:80:01:d3:1a:82:02:2b:78:86:68:6b:0d:0a: 78:7b:d4:5c:9e:c0:2c:36:9d:84:07:ef:fe:c3:22:bf:2c:de: 10:3b:27:65:c0:01:1a:e8:b7:59:01:e1:ba:3e:f1:e3:0e:2e: 6f:d9:2c:af:07:c6:16:64:2c:80:13:4f:74:b2:c0:a6:24:a3: cc:eb:08:22:bc:9b:68:af:e8:b2:7d:5e:ec:70:26:c5:03:a1: b3:c6:4b:8e:15:33:31:df:e9:d6:13:b6:46:33:3e:57:0a:88: 4f:cd:29:4d:17:2d:8c:54:6f:72:cd:50:82:68:71:6a:7a:06: 87:36:6c:43:60:30:83:01:ec:e9:c9:34:6b:14:9d:ce:0a:15: 9d:cb:1a:1a:17:88:b9:86:7d:00:e4:8b:4c:c2:2c:ca:d5:ed: 6e:ac:b2:d2:a6:ba:25:69:cf:b9:27:67:09:cf:35:78:71:75: 48:5a:18:35 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUU6uANiAF4409RIlFMLdoIIa3zF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzI5NDNaFw0yNzA1MTcwMzM0NDNaMDMxMTAvBgNV BAMTKDBDRkMyNEQyNjdDMzA4NzVEMzc5NUExRTNCRTk2OEQwQjk4REYxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QYnrJVZ9a0LcRnS58kwQKUhG WhNxWvz/ERJn/h36RUbeP3Du/lHFKi6E4ZJ1r9JZTk/rLIAy339edExbSuaqbtj5 MUWzms5hd1ZZuMKt7xwKpI1oBSt8+YN8mY0z2y6Vt0HiOnKvZ2Yyy7tT/zvwldnl u1LDfGxdbqK3Ygs7C7VSnw+XNuxeX0HlVQ6bLqvo85HLFsTDmU8UFP9SE/vYr9gB JXHp8XLt2bp+V5hBrhmBWiiin3h8otSguVITMmNROYJF6tLEyTqbgqnKH2XNkfAB a9bo67aBxnRw/+sYsGEHhVyRCTkUxyKLPOebc3dgilWbZpqw6BkfG+3cHnYXAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUDPwk0mfDCHXTeVoeO+lo0LmN8eYwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTB0 BAIAATBuAwMAKp4DBAc7lwADBAc7vwADBAJn96gwDAMEB3iEgAMEBHiF4AMDAXiG AwMBfPowCwMDAbauAwQEtq/gAwMBt1QDBAPLxAADBAXSTYAwDAMEBdNjoAMEBdNj wDALAwMA05cDBAXTmAADBAbTmEAwDQQCAAIwBwMFACQDogAwDQYJKoZIhvcNAQEL BQADggEBALPEREQYZY9EvLWQ/4Hnh2/9wCwo8Zy2hP7c81rs52brb+mHh3L/JYAU 0hJc16aELtaguy82TfazVlLtL29+icHf3QyLX40q6JKu3NMpgAHTGoICK3iGaGsN Cnh71FyewCw2nYQH7/7DIr8s3hA7J2XAARrot1kB4bo+8eMOLm/ZLK8HxhZkLIAT T3SywKYko8zrCCK8m2iv6LJ9XuxwJsUDobPGS44VMzHf6dYTtkYzPlcKiE/NKU0X LYxUb3LNUIJocWp6Boc2bENgMIMB7OnJNGsUnc4KFZ3LGhoXiLmGfQDki0zCLMrV 7W6sstKmuiVpz7knZwnPNXhxdUhaGDU= -----END CERTIFICATE-----Generated at Sat May 30 00:41:30 2026 by rpki-client