$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: FMMtT9syIhfTkxUsfe+CVB9j1W0JxaQLuGASRzXKP0U= Subject key identifier: 2E:F5:BF:DD:E2:68:9E:EF:DE:19:BE:4F:83:8E:26:7E:E8:31:8C:3C Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 6B9318AC92E619774F901324F8561B3FFC932811 Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS23724.roa Signing time: Thu 13 Aug 2026 02:35:51 +0000 ROA not before: Thu 13 Aug 2026 02:30:51 +0000 ROA not after: Thu 12 Aug 2027 02:35:51 +0000 asID: 23724 IP address blocks: 54.222.46.0/23 maxlen: 23 54.222.48.0/24 maxlen: 24 54.222.49.0/24 maxlen: 24 54.222.50.0/24 maxlen: 24 54.222.51.0/24 maxlen: 24 54.222.52.0/22 maxlen: 22 54.222.52.0/24 maxlen: 24 54.222.53.0/24 maxlen: 24 54.222.54.0/24 maxlen: 24 54.222.55.0/24 maxlen: 24 54.222.65.0/24 maxlen: 24 54.222.89.0/24 maxlen: 24 54.222.96.0/24 maxlen: 24 54.222.97.0/24 maxlen: 24 54.222.100.0/22 maxlen: 22 54.222.100.0/24 maxlen: 24 54.222.101.0/24 maxlen: 24 54.222.102.0/24 maxlen: 24 54.222.103.0/24 maxlen: 24 54.222.104.0/22 maxlen: 22 54.222.104.0/24 maxlen: 24 54.222.105.0/24 maxlen: 24 54.222.106.0/24 maxlen: 24 54.222.108.0/22 maxlen: 22 54.222.108.0/24 maxlen: 24 54.222.109.0/24 maxlen: 24 54.222.110.0/24 maxlen: 24 54.222.112.0/23 maxlen: 23 54.222.112.0/24 maxlen: 24 54.222.113.0/24 maxlen: 24 54.222.114.0/23 maxlen: 23 54.222.114.0/24 maxlen: 24 54.222.115.0/24 maxlen: 24 54.222.116.0/23 maxlen: 23 54.222.116.0/24 maxlen: 24 54.222.117.0/24 maxlen: 24 140.179.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:93:18:ac:92:e6:19:77:4f:90:13:24:f8:56:1b:3f:fc:93:28:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: Aug 13 02:30:51 2026 GMT Not After : Aug 12 02:35:51 2027 GMT Subject: CN=2EF5BFDDE2689EEFDE19BE4F838E267EE8318C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:0a:80:d2:64:41:47:09:1f:6f:ce:84:d4: 9b:b8:32:ac:27:47:f6:b8:c1:c6:2d:00:9e:3f:c1: 9a:0f:91:1f:fb:b5:b5:52:03:20:38:90:d8:d8:0b: a7:b1:3f:b8:6a:66:b7:e5:d7:bd:52:20:0f:7e:b9: f7:b7:f7:e9:91:02:09:9f:1f:a2:32:95:b3:b8:78: 82:6a:e7:4f:94:c8:f5:bc:cb:99:5d:3e:be:81:8b: 75:03:a9:78:5d:26:2c:11:de:d3:1e:3c:61:68:18: a9:dc:15:c2:5c:40:93:ec:e8:d5:81:e1:5c:98:dd: 4f:ea:f7:1e:3c:48:5c:7d:6e:65:94:84:42:6d:07: 3d:43:59:f9:8c:d7:bb:3e:ee:00:fa:b9:49:1c:e2: 06:09:ce:47:fb:3e:df:8b:af:af:57:62:76:40:03: ea:10:f8:d9:47:2a:ad:7d:c7:0e:4f:6a:16:9f:cc: 0b:95:4c:bd:e4:ab:75:96:80:0d:9c:39:07:78:c0: 89:27:8e:d1:7d:1f:bd:b9:cc:56:3a:14:59:fd:0a: b4:fa:bb:b1:80:df:a8:b3:23:c4:67:58:d1:37:3a: 53:8d:68:75:35:0b:fe:90:d4:f1:b2:56:04:19:f1: 53:0f:eb:9d:e0:ff:67:94:33:47:d3:0e:8a:c6:20: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:BF:DD:E2:68:9E:EF:DE:19:BE:4F:83:8E:26:7E:E8:31:8C:3C X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.222.46.0-54.222.55.255 54.222.65.0/24 54.222.89.0/24 54.222.96.0/23 54.222.100.0-54.222.117.255 140.179.224.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:38:0c:b2:d4:8d:00:39:17:73:43:d1:26:23:61:08:4f:ee: 5b:9f:ae:20:c0:dc:06:ca:07:0a:00:5c:33:36:7a:17:9f:b0: 20:0c:c7:ca:5e:da:42:a9:be:d6:5b:11:9f:48:1b:16:07:ac: ec:19:ae:5f:3e:e8:af:73:c5:b8:f3:e8:9f:8e:03:5a:93:fb: bc:8c:de:b2:71:91:76:95:6a:f3:53:2c:b6:1a:b6:dd:9f:fb: a4:22:cb:e1:bb:58:0c:78:20:a3:49:a9:4e:bc:da:0d:a2:54: c4:38:5c:17:45:43:93:9a:81:e1:66:35:9d:a6:dc:13:ed:c1: 9e:e7:a6:f1:3c:3b:bd:f1:c6:57:91:03:fd:8a:35:78:39:47: 05:55:4b:67:5b:c2:92:56:e1:82:7a:69:75:64:d4:75:cb:33: 7e:ce:ca:45:77:c6:88:68:0a:c3:0b:cc:35:88:64:4d:8c:38: 76:0a:d6:57:77:7f:10:63:11:fe:3b:f3:d9:62:fd:8f:98:aa: ff:bc:4d:ab:92:c2:eb:28:83:42:5d:a0:79:0d:c2:20:9a:3d: 70:b0:6a:5b:6e:5b:98:b5:6f:a2:4b:05:b8:d4:d9:15:8f:73: c5:c9:e7:6b:ec:ee:96:13:1c:c1:60:1c:47:6d:a7:2b:ab:46: c4:97:7b:5b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUa5MYrJLmGXdPkBMk+FYbP/yTKBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA4MTMwMjMwNTFaFw0yNzA4MTIwMjM1NTFaMDMxMTAvBgNV BAMTKDJFRjVCRkRERTI2ODlFRUZERTE5QkU0RjgzOEUyNjdFRTgzMThDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iwqA0mRBRwkfb86E1Ju4Mqwn R/a4wcYtAJ4/wZoPkR/7tbVSAyA4kNjYC6exP7hqZrfl171SIA9+ufe39+mRAgmf H6IylbO4eIJq50+UyPW8y5ldPr6Bi3UDqXhdJiwR3tMePGFoGKncFcJcQJPs6NWB 4VyY3U/q9x48SFx9bmWUhEJtBz1DWfmM17s+7gD6uUkc4gYJzkf7Pt+Lr69XYnZA A+oQ+NlHKq19xw5PahafzAuVTL3kq3WWgA2cOQd4wIknjtF9H725zFY6FFn9CrT6 u7GA36izI8RnWNE3OlONaHU1C/6Q1PGyVgQZ8VMP653g/2eUM0fTDorGIKm/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQULvW/3eJonu/eGb5Pg44mfugxjDwwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIA ATA0MAwDBAE23i4DBAM23jADBAA23kEDBAA23lkDBAE23mAwDAMEAjbeZAMEATbe dAMEBYyz4DANBgkqhkiG9w0BAQsFAAOCAQEAajgMstSNADkXc0PRJiNhCE/uW5+u IMDcBsoHCgBcMzZ6F5+wIAzHyl7aQqm+1lsRn0gbFges7BmuXz7or3PFuPPon44D WpP7vIzesnGRdpVq81Msthq23Z/7pCLL4btYDHggo0mpTrzaDaJUxDhcF0VDk5qB 4WY1nabcE+3Bnuem8Tw7vfHGV5ED/Yo1eDlHBVVLZ1vCklbhgnppdWTUdcszfs7K RXfGiGgKwwvMNYhkTYw4dgrWV3d/EGMR/jvz2WL9j5iq/7xNq5LC6yiDQl2geQ3C IJo9cLBqW25bmLVvoksFuNTZFY9zxcnna+zulhMcwWAcR22nK6tGxJd7Ww== -----END CERTIFICATE-----Generated at Sat Aug 29 06:53:30 2026 by rpki-client