$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: 5IOYLL3UAoyiRrSc1Skq811ooo0XrYVbdXquwGKCFFQ= Subject key identifier: 83:C0:13:2D:49:30:E9:61:A5:4E:53:5B:DD:45:08:3A:87:FE:4A:8F Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 1B16F5A179528DA3825252AA5CCD49E323E23D0D Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23724.roa Signing time: Thu 21 May 2026 16:08:30 +0000 ROA not before: Thu 21 May 2026 16:03:30 +0000 ROA not after: Thu 20 May 2027 16:08:30 +0000 asID: 23724 IP address blocks: 220.181.95.0/24 maxlen: 24 240e:907::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:16:f5:a1:79:52:8d:a3:82:52:52:aa:5c:cd:49:e3:23:e2:3d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 21 16:03:30 2026 GMT Not After : May 20 16:08:30 2027 GMT Subject: CN=83C0132D4930E961A54E535BDD45083A87FE4A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:29:e9:60:7e:e8:56:65:5a:98:29:5c:9f: 5c:b2:07:02:91:b0:cd:1e:98:73:ee:19:4e:ca:74: 89:01:74:d1:9a:56:a7:bd:3c:ba:41:1f:12:a9:a0: 73:50:5f:ab:cd:e7:17:80:bf:f0:71:d0:65:71:26: b5:fb:9f:d1:34:e2:07:3c:98:0b:90:a9:6a:fb:51: 1f:c6:9b:27:50:70:92:79:d6:b8:c0:15:74:1b:f5: 23:ef:f3:61:5e:85:38:65:04:67:d0:4f:d6:b1:99: b3:8b:43:3b:cf:7d:6a:cf:c3:3f:25:f0:20:7e:e5: f4:ea:33:32:ec:a8:5f:6f:0c:22:35:ab:63:f9:14: 8c:f7:42:eb:0f:bc:9a:e3:97:20:40:74:cb:03:96: bd:b0:4b:eb:6a:95:aa:70:ab:38:47:c3:87:c9:42: fa:50:8d:25:13:61:87:c6:ea:2d:fa:dd:ef:85:af: eb:7c:04:60:ce:30:d5:31:cf:34:5e:37:56:5a:ff: 63:a6:ea:43:95:ef:51:a4:61:3a:9e:db:a5:c3:8c: 2c:14:cd:37:c6:82:fb:21:ac:bd:1d:65:2c:33:e0: bb:19:68:f0:5f:a1:34:29:ac:10:41:6b:04:99:08: 92:75:1b:0d:76:a9:55:cd:1f:c1:e8:25:3b:b1:93: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C0:13:2D:49:30:E9:61:A5:4E:53:5B:DD:45:08:3A:87:FE:4A:8F X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.181.95.0/24 IPv6: 240e:907::/32 Signature Algorithm: sha256WithRSAEncryption 73:62:97:9a:c0:04:c2:69:96:7a:9c:6d:e9:aa:d0:27:05:e3: 01:ea:38:10:54:63:36:c5:99:8a:04:67:06:15:94:6d:32:04: 78:c0:42:1a:e2:bf:3f:36:37:81:b2:0e:75:fa:7c:7a:a6:cc: cc:a0:79:44:99:35:ec:e0:30:c7:1c:bf:b9:36:ab:de:e8:7a: f6:c4:e6:64:2e:b3:fb:ba:2d:13:7a:49:ea:2c:0a:34:3f:43: fd:cb:76:9c:94:60:8a:69:78:6f:dd:31:34:8a:10:58:f0:cd: 75:1a:15:9f:29:94:45:75:af:bc:d9:62:3c:8a:bc:83:86:b6: 09:1e:cb:e4:28:fc:b0:71:75:aa:b4:e1:a2:1b:da:89:e7:cf: 8b:39:5a:d7:2a:7a:96:f8:ac:f2:55:b8:fd:31:d6:72:22:08: ff:0a:79:cf:2e:aa:8f:9a:00:69:5d:5b:75:1f:4e:84:c9:df: 55:4c:1f:97:f6:55:63:45:8c:e3:ba:8e:9b:c2:60:26:92:6b: 15:ae:ea:d6:79:3d:ab:ec:8e:9f:cf:6a:f2:f9:17:89:7b:f6: 39:3b:32:e6:0d:de:e2:40:2a:24:a2:0d:c3:e8:ea:fd:b8:b4: 8a:dc:f1:bd:42:b1:65:fc:68:33:c3:57:6f:6b:6c:d1:60:41: 9a:99:a9:a0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUGxb1oXlSjaOCUlKqXM1J4yPiPQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE2MDMzMFoX DTI3MDUyMDE2MDgzMFowMzExMC8GA1UEAxMoODNDMDEzMkQ0OTMwRTk2MUE1NEU1 MzVCREQ0NTA4M0E4N0ZFNEE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2uKelgfuhWZVqYKVyfXLIHApGwzR6Yc+4ZTsp0iQF00ZpWp708ukEfEqmg c1Bfq83nF4C/8HHQZXEmtfuf0TTiBzyYC5CpavtRH8abJ1BwknnWuMAVdBv1I+/z YV6FOGUEZ9BP1rGZs4tDO899as/DPyXwIH7l9OozMuyoX28MIjWrY/kUjPdC6w+8 muOXIEB0ywOWvbBL62qVqnCrOEfDh8lC+lCNJRNhh8bqLfrd74Wv63wEYM4w1THP NF43Vlr/Y6bqQ5XvUaRhOp7bpcOMLBTNN8aC+yGsvR1lLDPguxlo8F+hNCmsEEFr BJkIknUbDXapVc0fweglO7GTp0sCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBSDwBMt STDpYaVOU1vdRQg6h/5KjzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMjM3MjQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw LgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADctV8wDQQCAAIwBwMFACQOCQcw DQYJKoZIhvcNAQELBQADggEBAHNil5rABMJplnqcbemq0CcF4wHqOBBUYzbFmYoE ZwYVlG0yBHjAQhrivz82N4GyDnX6fHqmzMygeUSZNezgMMccv7k2q97oevbE5mQu s/u6LRN6SeosCjQ/Q/3LdpyUYIppeG/dMTSKEFjwzXUaFZ8plEV1r7zZYjyKvIOG tgkey+Qo/LBxdaq04aIb2onnz4s5Wtcqepb4rPJVuP0x1nIiCP8Kec8uqo+aAGld W3UfToTJ31VMH5f2VWNFjOO6jpvCYCaSaxWu6tZ5Pavsjp/PavL5F4l79jk7MuYN 3uJAKiSiDcPo6v24tIrc8b1CsWX8aDPDV29rbNFgQZqZqaA= -----END CERTIFICATE-----Generated at Sat May 23 07:08:18 2026 by rpki-client