Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: mr9DPEwCk3e8IiI4eg2n6kh94ZZ3FQJbQB2CqCgBjIY=
Subject key identifier: 6D:E5:76:00:92:D9:EB:A2:E2:AC:8E:34:77:C7:D4:D3:B6:62:05:55
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 6F185AEB441E0B557314850D39D6474B295996D2
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS23724.roa
Signing time: Mon 25 May 2026 06:59:46 +0000
ROA not before: Mon 25 May 2026 06:54:46 +0000
ROA not after: Mon 24 May 2027 06:59:46 +0000
asID: 23724
IP address blocks: 103.244.80.0/22 maxlen: 22
114.118.0.0/21 maxlen: 21
114.118.8.0/21 maxlen: 21
114.118.16.0/21 maxlen: 21
114.118.24.0/21 maxlen: 21
114.118.64.0/21 maxlen: 21
114.118.72.0/21 maxlen: 21
114.118.80.0/21 maxlen: 21
114.118.88.0/21 maxlen: 21
114.118.96.0/21 maxlen: 21
114.118.104.0/21 maxlen: 21
114.118.112.0/21 maxlen: 21
114.118.120.0/21 maxlen: 21
117.48.0.0/22 maxlen: 22
117.48.4.0/22 maxlen: 22
117.48.8.0/22 maxlen: 22
117.48.12.0/22 maxlen: 22
117.48.16.0/22 maxlen: 22
117.48.20.0/22 maxlen: 22
117.48.24.0/22 maxlen: 22
117.48.28.0/22 maxlen: 22
117.48.32.0/22 maxlen: 22
117.48.36.0/22 maxlen: 22
117.48.40.0/22 maxlen: 22
117.48.44.0/22 maxlen: 22
117.48.48.0/22 maxlen: 22
117.48.52.0/22 maxlen: 22
117.48.56.0/22 maxlen: 22
117.48.60.0/22 maxlen: 22
117.48.64.0/22 maxlen: 22
117.48.68.0/22 maxlen: 22
117.48.72.0/22 maxlen: 22
117.48.76.0/22 maxlen: 22
117.48.80.0/22 maxlen: 22
117.48.84.0/22 maxlen: 22
117.48.88.0/22 maxlen: 22
117.48.100.0/22 maxlen: 22
117.48.104.0/22 maxlen: 22
117.48.108.0/22 maxlen: 22
117.48.112.0/22 maxlen: 22
117.48.116.0/22 maxlen: 22
117.48.120.0/22 maxlen: 22
117.48.124.0/22 maxlen: 22
120.132.32.0/22 maxlen: 22
120.132.36.0/22 maxlen: 22
120.132.40.0/22 maxlen: 22
120.132.44.0/22 maxlen: 22
120.132.48.0/22 maxlen: 22
120.132.52.0/22 maxlen: 22
120.132.56.0/22 maxlen: 22
120.132.60.0/22 maxlen: 22
120.132.64.0/22 maxlen: 22
120.132.68.0/22 maxlen: 22
120.132.72.0/22 maxlen: 22
120.132.76.0/22 maxlen: 22
120.132.80.0/22 maxlen: 22
120.132.84.0/22 maxlen: 22
120.132.88.0/22 maxlen: 22
123.59.0.0/19 maxlen: 19
123.59.32.0/19 maxlen: 19
123.59.64.0/19 maxlen: 19
123.59.96.0/19 maxlen: 19
123.59.128.0/19 maxlen: 19
123.59.160.0/19 maxlen: 19
123.59.192.0/19 maxlen: 19
123.59.224.0/19 maxlen: 19
180.150.176.0/22 maxlen: 22
180.150.180.0/22 maxlen: 22
180.150.184.0/22 maxlen: 22
180.150.188.0/22 maxlen: 22
203.100.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:18:5a:eb:44:1e:0b:55:73:14:85:0d:39:d6:47:4b:29:59:96:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: May 25 06:54:46 2026 GMT
Not After : May 24 06:59:46 2027 GMT
Subject: CN=6DE5760092D9EBA2E2AC8E3477C7D4D3B6620555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:5a:b9:d1:b2:e5:af:25:aa:96:f8:e6:d5:
7e:db:dc:26:08:3f:99:1f:d1:d9:c9:1d:4c:89:48:
51:cd:f7:4f:95:3d:1f:d4:bb:e0:e5:83:82:8a:b5:
64:4d:ea:0c:f4:8d:92:24:3a:3a:8f:5a:a3:f3:bd:
a9:62:b9:7a:ff:c9:ef:76:e3:28:c4:fc:21:fe:e9:
ff:58:de:34:80:1f:c2:d7:67:89:ca:64:72:4d:d2:
5c:88:72:16:6f:87:7c:7d:b8:e0:3a:0b:1f:b1:08:
06:c2:73:22:17:63:74:2b:31:97:e9:66:64:74:17:
ba:e0:35:40:6c:71:fb:52:95:93:6b:f6:59:59:af:
0c:b0:6e:5b:cc:af:9d:ee:9f:6e:3b:5b:bf:97:28:
a3:c4:e6:43:52:d0:cc:7e:d5:f1:0c:ff:72:d4:3d:
d5:8d:68:b2:06:b9:54:ef:78:92:fb:a8:af:87:d4:
e5:e9:bf:68:da:4c:9b:d9:50:3a:38:bc:3d:0e:9b:
34:d1:6e:ca:63:8d:46:ac:43:07:50:f4:00:f8:12:
0f:1f:34:b7:0c:9e:ad:72:79:d4:ce:1b:63:aa:86:
3c:04:d5:ad:a8:06:51:06:86:94:78:b2:cf:cc:85:
fc:d2:f0:ad:61:70:44:ee:0f:2d:64:4e:68:93:20:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:76:00:92:D9:EB:A2:E2:AC:8E:34:77:C7:D4:D3:B6:62:05:55
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.80.0/22
114.118.0.0/19
114.118.64.0/18
117.48.0.0-117.48.91.255
117.48.100.0-117.48.127.255
120.132.32.0-120.132.91.255
123.59.0.0/16
180.150.176.0/20
203.100.92.0/22
Signature Algorithm: sha256WithRSAEncryption
12:23:39:46:c5:a9:1b:a9:3c:b1:82:3d:88:3d:aa:f0:a5:12:
45:32:8e:86:ef:89:46:6e:3a:3b:e6:4f:fa:90:ce:3a:78:ca:
e5:ea:55:b7:73:4e:a5:86:a2:55:f4:37:b7:49:2d:78:cb:ae:
ef:7e:88:42:35:94:4a:d7:79:1d:2c:a8:5c:ab:cb:b4:13:ed:
20:69:bc:b5:43:ee:08:67:f0:67:09:c1:1a:c2:0f:a9:dc:66:
19:16:f9:c4:9d:41:3b:92:5d:1a:35:38:74:f9:3c:4a:0d:1b:
43:e2:fa:93:3c:3e:20:74:e0:ed:cb:9f:02:17:c8:c4:bd:3b:
59:d2:81:ea:61:3c:b2:66:2f:1b:87:65:3b:e9:bc:7a:97:89:
1b:6a:56:4a:1f:d0:f4:ba:f9:65:db:58:e0:8e:49:90:36:ce:
0e:87:b4:3d:4e:36:6d:7b:72:2e:b0:3d:63:5f:3b:72:62:d7:
4c:82:12:58:2f:06:5d:18:a2:da:77:36:51:f1:6a:05:ad:99:
8d:d5:82:22:31:4c:f0:c8:e5:e3:98:4b:15:f0:27:5c:a5:0f:
03:79:ff:1e:21:7e:6d:70:22:91:82:88:f1:89:e4:ac:f3:5b:
8a:94:dd:cf:e0:a3:14:3c:ae:24:76:fd:86:29:d0:84:71:29:
2c:f8:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:29 2026 by rpki-client