Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: OgSyXVFNBcmho3yj43EBtrHvMxO5DWj4SzUfyPyFLeY=
Subject key identifier: 74:53:20:F9:F1:38:DC:99:C1:E1:D8:2A:CB:96:7A:A0:FB:37:2E:72
Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Certificate serial: 606EBD39146E5BF663433D801C6C1282E412F2C1
Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS23724.roa
Signing time: Mon 18 May 2026 06:30:42 +0000
ROA not before: Mon 18 May 2026 06:25:42 +0000
ROA not after: Mon 17 May 2027 06:30:42 +0000
asID: 23724
IP address blocks: 101.254.0.0/20 maxlen: 20
101.254.32.0/19 maxlen: 19
101.254.64.0/19 maxlen: 19
101.254.96.0/24 maxlen: 24
101.254.97.0/24 maxlen: 24
101.254.98.0/24 maxlen: 24
101.254.100.0/22 maxlen: 22
101.254.104.0/21 maxlen: 21
101.254.112.0/20 maxlen: 20
101.254.128.0/22 maxlen: 22
101.254.132.0/22 maxlen: 22
101.254.136.0/22 maxlen: 22
101.254.140.0/22 maxlen: 22
101.254.144.0/22 maxlen: 22
101.254.148.0/22 maxlen: 22
101.254.152.0/22 maxlen: 22
101.254.156.0/22 maxlen: 22
101.254.160.0/22 maxlen: 22
101.254.164.0/22 maxlen: 22
101.254.168.0/22 maxlen: 22
101.254.172.0/22 maxlen: 22
101.254.176.0/22 maxlen: 22
101.254.180.0/22 maxlen: 22
101.254.184.0/22 maxlen: 22
101.254.188.0/22 maxlen: 22
101.254.192.0/22 maxlen: 22
101.254.196.0/22 maxlen: 22
101.254.200.0/22 maxlen: 22
101.254.204.0/22 maxlen: 22
101.254.208.0/22 maxlen: 22
101.254.212.0/22 maxlen: 22
101.254.216.0/22 maxlen: 22
101.254.220.0/22 maxlen: 22
101.254.224.0/22 maxlen: 22
101.254.228.0/22 maxlen: 22
101.254.232.0/22 maxlen: 22
101.254.236.0/22 maxlen: 22
101.254.240.0/22 maxlen: 22
101.254.244.0/22 maxlen: 22
101.254.248.0/22 maxlen: 22
101.254.252.0/22 maxlen: 22
119.90.32.0/19 maxlen: 19
119.90.32.0/21 maxlen: 21
119.90.40.0/22 maxlen: 22
119.90.48.0/21 maxlen: 21
119.90.56.0/21 maxlen: 21
211.147.208.0/20 maxlen: 20
211.147.208.0/21 maxlen: 21
211.147.216.0/21 maxlen: 21
211.157.96.0/19 maxlen: 19
218.244.160.0/20 maxlen: 20
218.244.176.0/20 maxlen: 20
218.246.32.0/22 maxlen: 22
221.122.0.0/19 maxlen: 19
221.122.32.0/20 maxlen: 20
221.122.48.0/20 maxlen: 20
221.122.64.0/20 maxlen: 20
221.122.80.0/20 maxlen: 20
221.122.96.0/20 maxlen: 20
221.122.112.0/20 maxlen: 20
221.122.128.0/20 maxlen: 20
221.122.144.0/20 maxlen: 20
221.122.160.0/20 maxlen: 20
221.122.176.0/20 maxlen: 20
221.122.192.0/20 maxlen: 20
221.122.208.0/20 maxlen: 20
221.122.224.0/19 maxlen: 19
221.122.224.0/20 maxlen: 20
221.122.240.0/20 maxlen: 20
221.123.128.0/18 maxlen: 18
221.123.192.0/18 maxlen: 18
2400:b700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl
rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 19:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6e:bd:39:14:6e:5b:f6:63:43:3d:80:1c:6c:12:82:e4:12:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Validity
Not Before: May 18 06:25:42 2026 GMT
Not After : May 17 06:30:42 2027 GMT
Subject: CN=745320F9F138DC99C1E1D82ACB967AA0FB372E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:63:0a:c6:23:02:fc:7e:40:94:a6:bf:cc:
a6:5b:23:5e:ba:e9:85:0f:a4:50:c8:22:7a:b6:85:
72:f4:62:f0:e0:ff:98:71:e1:97:07:c8:11:df:96:
65:60:e8:10:03:8f:83:cc:c5:7e:eb:b4:65:a8:6a:
a7:dc:3b:1a:ba:65:0d:10:a2:69:8e:d6:56:c2:a2:
13:1c:29:c3:e4:13:e1:aa:08:bf:c4:89:3c:a6:a2:
40:5b:15:65:9b:f6:85:90:91:69:28:81:19:af:f3:
69:df:64:20:12:80:3a:81:3a:e4:1f:64:af:9d:43:
49:9d:92:dc:ed:a9:3d:2d:75:5f:ef:10:e0:75:21:
71:22:56:e4:b8:13:a5:0a:ec:f3:1f:49:bf:c1:0b:
b0:62:df:7b:56:ac:ce:fb:b2:e5:2b:0e:36:2c:f6:
31:c8:9e:2c:50:e6:0d:c6:7c:bf:06:c5:fb:62:aa:
a9:fb:7c:81:4a:fd:d7:a5:3c:21:59:ca:19:b6:ea:
07:55:b8:7b:72:9f:65:57:8c:7d:e0:c8:4c:9c:35:
bf:1a:2c:30:c4:1b:ae:db:04:a5:3a:14:a2:1b:4e:
66:9d:26:90:1e:f2:09:08:ae:54:b6:04:19:a2:10:
3f:37:e3:6f:d8:b5:d6:95:48:33:fd:ff:97:5d:73:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:20:F9:F1:38:DC:99:C1:E1:D8:2A:CB:96:7A:A0:FB:37:2E:72
X509v3 Authority Key Identifier:
keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.254.0.0/20
101.254.32.0-101.254.98.255
101.254.100.0-101.254.255.255
119.90.32.0/19
211.147.208.0/20
211.157.96.0/19
218.244.160.0/19
218.246.32.0/22
221.122.0.0/16
221.123.128.0/17
IPv6:
2400:b700::/48
Signature Algorithm: sha256WithRSAEncryption
34:fe:64:a3:5e:c8:36:e4:e8:19:bb:ff:f1:ed:85:d7:c8:2d:
8f:e2:60:b1:73:e8:16:9b:98:96:5c:84:08:b4:ba:50:2b:a8:
2e:fe:16:d8:31:4b:dd:ea:ad:db:7b:d7:03:8f:04:a2:e4:f1:
b6:40:cc:39:3e:7a:59:98:81:f2:52:4c:f9:b9:39:f0:e6:65:
1c:da:e6:93:b7:6b:b7:2e:2c:d2:b6:ef:4f:07:f4:4a:8e:0b:
dd:e3:d4:e2:b0:9d:b7:a1:10:a3:59:8f:86:03:1a:29:d4:77:
fb:e8:9e:27:ad:6d:40:12:80:da:89:70:a5:83:cd:5f:06:28:
93:75:32:47:34:55:2c:60:09:c3:89:0a:9c:fd:cb:23:f1:7d:
2a:7d:83:d8:f6:33:3e:a6:2c:88:b8:ee:38:fa:5a:49:61:0b:
30:aa:bb:0b:f2:d0:a1:31:83:8c:72:32:7a:ea:3d:85:6a:b7:
84:cb:20:c6:17:68:4e:03:80:b1:37:ae:d3:0c:28:8d:ee:e0:
7d:32:8c:92:c4:b5:73:5e:64:00:93:12:04:82:ee:92:dc:ec:
bd:5c:7b:2c:b5:fd:f5:6d:45:4d:6c:4e:8b:9b:1a:87:a8:43:
e6:9a:39:f8:77:64:17:07:1c:58:15:38:40:b9:8a:34:dc:80:
aa:0a:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:07:15 2026 by rpki-client