$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS24400.roa File: AS24400.roa (raw, json) Hash identifier: 6koc0r+8oNvvJQ2n6u3kgNbZRGNkhF9vXGd/vCdqpYw= Subject key identifier: E7:93:06:93:0F:74:E3:DA:5F:80:FF:EF:4F:04:25:97:D4:66:30:83 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 4A1C24CB6E2A6DF61501B7FA7789FCBAD6F63663 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS24400.roa Signing time: Mon 18 May 2026 03:32:42 +0000 ROA not before: Mon 18 May 2026 03:27:42 +0000 ROA not after: Mon 17 May 2027 03:32:42 +0000 asID: 24400 IP address blocks: 120.132.128.0/17 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.133.240.0/20 maxlen: 32 182.175.240.0/23 maxlen: 32 182.175.242.0/23 maxlen: 32 211.148.17.0/24 maxlen: 32 211.148.18.0/23 maxlen: 32 211.148.20.0/22 maxlen: 32 211.148.24.0/23 maxlen: 32 211.148.27.0/24 maxlen: 32 211.148.28.0/22 maxlen: 32 2403:a200:a1ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1c:24:cb:6e:2a:6d:f6:15:01:b7:fa:77:89:fc:ba:d6:f6:36:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:27:42 2026 GMT Not After : May 17 03:32:42 2027 GMT Subject: CN=E79306930F74E3DA5F80FFEF4F042597D4663083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:e3:1b:3b:10:6b:6e:57:8c:fe:70:a6:55: dd:c6:87:29:b0:38:2c:ce:08:4a:44:51:1e:f3:7e: 0a:44:97:45:a5:00:19:ba:1c:23:83:16:35:8e:6a: 0c:f2:21:7f:13:c0:28:64:00:ab:95:02:4d:d5:6d: 54:d0:ab:1b:b7:a7:6f:0e:d4:a3:ff:76:be:7e:2c: 30:cb:30:f2:24:9d:61:ab:68:a4:4c:5a:3f:5e:98: 99:84:49:60:9c:21:a7:7d:2e:6f:cd:63:a2:ab:41: a2:0a:a9:c4:c3:9c:58:67:61:ad:6d:fb:2e:3c:4a: 4f:f0:6d:84:f4:8a:2d:83:66:53:ac:53:4a:c8:71: ec:a0:4c:ec:f5:be:84:a5:0b:46:32:de:1b:5e:92: c6:aa:fc:4f:6b:51:01:49:76:5f:24:11:aa:4f:0d: f6:73:99:73:b8:b8:93:59:86:d2:16:ad:7d:fb:35: 1c:a4:67:fe:6e:4e:7a:dd:7a:1f:37:64:a8:3b:41: bf:fe:97:b3:b3:8b:bf:48:bf:37:e2:3d:47:16:16: dc:4a:e3:57:4d:f8:f1:38:21:73:57:33:6f:f6:e4: a6:67:d3:e3:89:d9:9e:da:da:9b:31:d2:26:b7:31: ea:55:72:ce:3e:29:49:e4:14:f9:31:db:99:7a:89: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:93:06:93:0F:74:E3:DA:5F:80:FF:EF:4F:04:25:97:D4:66:30:83 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS24400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.128.0/17 120.133.192.0/18 182.175.240.0/22 211.148.17.0-211.148.25.255 211.148.27.0-211.148.31.255 IPv6: 2403:a200:a1ff::/48 Signature Algorithm: sha256WithRSAEncryption 01:6e:47:2b:77:6a:23:b0:bc:04:b8:85:f2:cc:3e:f4:2d:a3: 5e:12:03:d2:7b:cd:65:db:dd:64:70:c7:54:66:91:8e:0d:22: 83:c5:53:43:03:99:81:d4:d2:a0:32:db:59:bc:b0:15:cf:f1: bc:13:6e:71:6b:ae:5c:f2:62:ec:49:86:2d:a9:ad:4b:ba:c8: c5:d0:1e:d6:a0:91:61:4c:d5:5d:bc:35:cb:6f:91:4b:19:b7: 84:81:58:83:51:ec:da:6a:7d:27:90:8c:e4:cf:2d:2c:a8:2b: 31:cf:d4:f4:4e:b2:e3:b8:52:f4:39:0a:18:39:34:94:44:b1: 69:48:f8:20:ed:bf:8c:84:09:ef:5a:08:b0:60:84:9d:6f:32: 73:4d:96:08:ce:94:23:23:58:38:e4:48:15:bd:4c:15:79:1a: 63:f1:e4:f9:a5:a4:69:cd:21:be:e8:7f:c2:0a:84:3e:d7:43: 3f:40:39:47:9f:33:cd:0a:07:0d:b5:0b:ab:70:c2:40:a2:d1: d3:eb:06:b5:50:f2:e2:86:0f:67:1a:3a:55:de:7b:0f:99:39: 50:0d:63:4e:a7:4d:af:d0:9a:2f:b6:b1:a9:af:9c:02:fd:d6: b6:6d:20:54:25:dd:bf:c3:08:04:1e:20:be:e7:f5:da:6c:f3: 4c:f3:ee:b2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUShwky24qbfYVAbf6d4n8utb2NmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzI3NDJaFw0yNzA1MTcwMzMyNDJaMDMxMTAvBgNV BAMTKEU3OTMwNjkzMEY3NEUzREE1RjgwRkZFRjRGMDQyNTk3RDQ2NjMwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZreMbOxBrbleM/nCmVd3Ghymw OCzOCEpEUR7zfgpEl0WlABm6HCODFjWOagzyIX8TwChkAKuVAk3VbVTQqxu3p28O 1KP/dr5+LDDLMPIknWGraKRMWj9emJmESWCcIad9Lm/NY6KrQaIKqcTDnFhnYa1t +y48Sk/wbYT0ii2DZlOsU0rIceygTOz1voSlC0Yy3hteksaq/E9rUQFJdl8kEapP DfZzmXO4uJNZhtIWrX37NRykZ/5uTnrdeh83ZKg7Qb/+l7Ozi79IvzfiPUcWFtxK 41dN+PE4IXNXM2/25KZn0+OJ2Z7a2psx0ia3MepVcs4+KUnkFPkx25l6iZZrAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQU55MGkw9049pfgP/vTwQll9RmMIMwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzI0NDAwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIA ATAuAwQHeISAAwQGeIXAAwQCtq/wMAwDBADTlBEDBAHTlBgwDAMEANOUGwMEBdOU ADAPBAIAAjAJAwcAJAOiAKH/MA0GCSqGSIb3DQEBCwUAA4IBAQABbkcrd2ojsLwE uIXyzD70LaNeEgPSe81l291kcMdUZpGODSKDxVNDA5mB1NKgMttZvLAVz/G8E25x a65c8mLsSYYtqa1LusjF0B7WoJFhTNVdvDXLb5FLGbeEgViDUezaan0nkIzkzy0s qCsxz9T0TrLjuFL0OQoYOTSURLFpSPgg7b+MhAnvWgiwYISdbzJzTZYIzpQjI1g4 5EgVvUwVeRpj8eT5paRpzSG+6H/CCoQ+10M/QDlHnzPNCgcNtQurcMJAotHT6wa1 UPLihg9nGjpV3nsPmTlQDWNOp02v0JovtrGpr5wC/da2bSBUJd2/wwgEHiC+5/Xa bPNM8+6y -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:51 2026 by rpki-client