Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: VrxvW554iSf2GVuzUFyOMwezMHT2fRkfSfE9WYRUSpI=
Subject key identifier: BF:38:51:59:9E:B4:CA:A7:B7:90:C0:CB:61:02:11:0E:2C:B0:3B:88
Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Certificate serial: 4C9BCC8F92866655DC8AAFB436565AFCAA054FD2
Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS23724.roa
Signing time: Mon 17 Aug 2026 03:24:43 +0000
ROA not before: Mon 17 Aug 2026 03:19:43 +0000
ROA not after: Mon 16 Aug 2027 03:24:43 +0000
asID: 23724
IP address blocks: 101.254.0.0/20 maxlen: 20
101.254.32.0/19 maxlen: 19
101.254.64.0/19 maxlen: 19
101.254.96.0/24 maxlen: 24
101.254.97.0/24 maxlen: 24
101.254.98.0/24 maxlen: 24
101.254.100.0/22 maxlen: 22
101.254.104.0/21 maxlen: 21
101.254.112.0/20 maxlen: 20
101.254.128.0/22 maxlen: 22
101.254.132.0/22 maxlen: 22
101.254.136.0/22 maxlen: 22
101.254.140.0/22 maxlen: 22
101.254.144.0/22 maxlen: 22
101.254.148.0/22 maxlen: 22
101.254.152.0/22 maxlen: 22
101.254.156.0/22 maxlen: 22
101.254.160.0/22 maxlen: 22
101.254.164.0/22 maxlen: 22
101.254.168.0/22 maxlen: 22
101.254.172.0/22 maxlen: 22
101.254.176.0/22 maxlen: 22
101.254.180.0/22 maxlen: 22
101.254.184.0/22 maxlen: 22
101.254.188.0/22 maxlen: 22
101.254.192.0/22 maxlen: 22
101.254.196.0/22 maxlen: 22
101.254.200.0/22 maxlen: 22
101.254.204.0/22 maxlen: 22
101.254.208.0/22 maxlen: 22
101.254.212.0/22 maxlen: 22
101.254.216.0/22 maxlen: 22
101.254.220.0/22 maxlen: 22
101.254.224.0/22 maxlen: 22
101.254.228.0/22 maxlen: 22
101.254.232.0/22 maxlen: 22
101.254.236.0/22 maxlen: 22
101.254.240.0/22 maxlen: 22
101.254.244.0/22 maxlen: 22
101.254.248.0/22 maxlen: 22
101.254.252.0/22 maxlen: 22
211.147.208.0/20 maxlen: 20
211.147.208.0/21 maxlen: 21
211.147.216.0/21 maxlen: 21
211.157.96.0/19 maxlen: 19
218.244.160.0/20 maxlen: 20
218.244.176.0/20 maxlen: 20
218.246.32.0/22 maxlen: 22
221.122.0.0/19 maxlen: 19
221.122.32.0/20 maxlen: 20
221.122.48.0/20 maxlen: 20
221.122.64.0/20 maxlen: 20
221.122.80.0/20 maxlen: 20
221.122.96.0/20 maxlen: 20
221.122.112.0/20 maxlen: 20
221.122.128.0/20 maxlen: 20
221.122.144.0/20 maxlen: 20
221.122.160.0/20 maxlen: 20
221.122.176.0/20 maxlen: 20
221.122.192.0/20 maxlen: 20
221.122.208.0/20 maxlen: 20
221.122.224.0/19 maxlen: 19
221.122.224.0/20 maxlen: 20
221.122.240.0/20 maxlen: 20
221.123.128.0/18 maxlen: 18
221.123.192.0/18 maxlen: 18
2400:b700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl
rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 11:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9b:cc:8f:92:86:66:55:dc:8a:af:b4:36:56:5a:fc:aa:05:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Validity
Not Before: Aug 17 03:19:43 2026 GMT
Not After : Aug 16 03:24:43 2027 GMT
Subject: CN=BF3851599EB4CAA7B790C0CB6102110E2CB03B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:99:ab:93:c2:ce:f9:65:68:bc:9b:bb:04:
24:ab:3e:cd:fe:11:10:c8:4d:40:d9:ac:38:f7:42:
c8:7e:58:74:92:10:3e:c2:11:e2:ff:71:6d:2e:67:
ff:8c:8c:84:98:d8:ff:d2:70:f3:59:7f:6e:f8:89:
4e:40:b3:ef:84:e5:20:25:d2:5f:e5:95:45:cb:f1:
81:5d:52:8f:10:77:9a:57:22:c2:c1:18:00:11:c8:
e0:1b:32:53:21:8a:a5:6d:2a:38:42:31:2f:d2:f2:
7c:80:5c:92:89:ee:6e:33:cc:36:83:0b:61:67:cd:
0a:9a:a2:b4:69:c2:ae:41:c2:ea:5c:01:46:18:2a:
6f:74:e6:27:95:ba:ab:53:76:0e:30:1b:6c:8a:fc:
f4:72:00:f1:a6:5f:29:2c:e5:f3:f6:fc:3b:ab:7c:
42:2a:50:57:76:43:d3:83:80:fd:a2:da:17:b3:e8:
f3:4c:13:c0:e5:db:eb:23:7d:af:a6:ee:76:9a:96:
e1:87:f0:fa:db:65:0d:77:58:45:24:22:4c:8f:22:
e4:95:24:d4:f6:c2:09:fa:8d:f7:79:73:12:cc:9d:
d5:de:2c:88:ed:92:53:eb:2d:1d:33:36:4f:9c:30:
91:8d:97:5d:89:53:a9:0c:2d:b2:45:91:4e:ca:46:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:51:59:9E:B4:CA:A7:B7:90:C0:CB:61:02:11:0E:2C:B0:3B:88
X509v3 Authority Key Identifier:
keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.254.0.0/20
101.254.32.0-101.254.98.255
101.254.100.0-101.254.255.255
211.147.208.0/20
211.157.96.0/19
218.244.160.0/19
218.246.32.0/22
221.122.0.0/16
221.123.128.0/17
IPv6:
2400:b700::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e6:99:42:da:34:37:7b:f6:13:02:ff:76:10:29:49:10:a1:
e4:70:82:ed:71:51:e8:4b:51:3f:13:e2:45:7e:5b:65:28:04:
ff:0f:d2:9c:3b:8a:b7:2a:e4:24:8d:0a:cb:c4:16:f6:50:8e:
e5:37:d4:d9:77:96:20:d5:6d:87:43:9d:d7:02:d6:54:ff:16:
91:27:23:bd:d8:ac:f0:55:ad:c3:ff:b6:18:37:40:f3:09:bf:
a2:89:48:1a:f7:f7:28:31:8c:60:d2:2d:b2:c2:ef:58:d1:29:
01:6c:16:a9:fa:29:f2:c3:6d:84:4f:28:d8:da:30:c3:5d:2b:
63:24:49:a0:1e:7a:0f:0c:2c:d8:21:60:b5:d7:1c:64:bc:9e:
c5:2a:2d:61:1c:ab:2a:cc:87:fc:e6:18:dd:6f:41:b5:88:26:
a1:e3:10:b7:86:f0:22:4d:78:05:e0:b3:74:7a:e6:9a:98:e8:
73:7a:fc:b0:b9:fa:32:5f:07:1a:a5:54:e7:53:3a:b6:90:1d:
ac:59:6a:3f:32:a4:f5:d4:ea:8f:de:7c:7c:0e:f8:5c:18:e0:
60:4d:d9:7d:5e:8f:8e:58:9f:06:1b:14:2d:3d:03:09:3d:fa:
fe:26:7a:98:83:fc:38:85:b9:1f:6c:0d:71:0a:47:5f:2e:9e:
14:6d:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:03:38 2026 by rpki-client