Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: IrdbtuDAWDGF5dpt783SiI3KHbpaj7Bl0Q+PgOLTj6Y=
Subject key identifier: 59:D8:EB:78:5B:72:3F:F8:C4:58:30:52:C3:9E:FD:2F:E1:64:9A:D5
Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial: 0B1992B97DC1561CB5329869BD1A2C1DF78AD6C8
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS23724.roa
Signing time: Thu 11 Jun 2026 08:22:30 +0000
ROA not before: Thu 11 Jun 2026 08:17:30 +0000
ROA not after: Thu 10 Jun 2027 08:22:30 +0000
asID: 23724
IP address blocks: 118.26.192.0/24 maxlen: 24
118.26.194.0/24 maxlen: 24
118.26.195.0/24 maxlen: 24
118.26.208.0/20 maxlen: 20
118.26.240.0/20 maxlen: 20
118.26.242.0/24 maxlen: 24
118.186.0.0/19 maxlen: 19
118.186.32.0/24 maxlen: 24
118.186.34.0/24 maxlen: 24
118.186.35.0/24 maxlen: 24
118.186.36.0/24 maxlen: 24
118.186.37.0/24 maxlen: 24
118.186.38.0/24 maxlen: 24
118.186.39.0/24 maxlen: 24
118.186.56.0/21 maxlen: 21
118.186.63.0/24 maxlen: 24
118.186.64.0/21 maxlen: 21
118.186.80.0/21 maxlen: 21
118.186.208.0/21 maxlen: 21
118.186.240.0/22 maxlen: 22
118.186.244.0/22 maxlen: 22
118.187.0.0/19 maxlen: 19
118.187.64.0/20 maxlen: 20
118.191.192.0/24 maxlen: 24
118.191.193.0/24 maxlen: 24
118.193.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:19:92:b9:7d:c1:56:1c:b5:32:98:69:bd:1a:2c:1d:f7:8a:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Validity
Not Before: Jun 11 08:17:30 2026 GMT
Not After : Jun 10 08:22:30 2027 GMT
Subject: CN=59D8EB785B723FF8C4583052C39EFD2FE1649AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:c2:f6:44:7c:5e:e3:b8:41:f1:5c:f2:38:
19:bf:b9:39:b5:66:d4:c4:1e:a1:9b:78:69:c6:29:
e9:f5:e5:fd:bc:84:2a:e4:32:1e:18:ff:c3:ea:c6:
4f:c3:ec:0e:a2:bd:c7:43:7e:47:0d:6b:7e:f4:ac:
de:5b:48:ee:0d:7d:0a:3a:1b:e6:df:b4:2c:b4:d6:
c7:77:06:26:6f:9c:1f:38:33:16:8e:2b:11:a3:ae:
ac:ef:9d:bf:4d:0e:02:7c:49:82:06:f7:1a:74:71:
88:19:d6:5e:51:05:fc:0f:ff:9c:8e:5e:f1:d2:ae:
e6:87:b2:b5:6b:19:c1:18:2a:5a:d0:22:b3:5d:01:
18:91:cc:c7:55:df:8e:33:24:fb:7e:03:e7:57:1b:
a1:8d:4e:b7:6a:23:7d:3a:4e:21:fc:76:b7:86:28:
63:55:00:b1:ea:1f:86:c9:71:62:ef:0b:bb:22:b2:
05:9b:e5:e6:fb:ef:89:ff:59:cb:2c:92:b8:00:f9:
6d:6b:7a:69:2b:e9:a2:05:80:08:34:dd:b2:57:d6:
25:7c:7b:2d:ca:59:fd:b8:ca:f0:b0:47:b6:f8:57:
19:27:af:2a:5a:74:3e:bd:9d:b0:e8:50:69:34:84:
80:cb:cb:94:27:86:eb:49:63:c9:0f:38:7a:df:13:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D8:EB:78:5B:72:3F:F8:C4:58:30:52:C3:9E:FD:2F:E1:64:9A:D5
X509v3 Authority Key Identifier:
keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.26.192.0/24
118.26.194.0/23
118.26.208.0/20
118.26.240.0/20
118.186.0.0-118.186.32.255
118.186.34.0-118.186.39.255
118.186.56.0-118.186.71.255
118.186.80.0/21
118.186.208.0/21
118.186.240.0/21
118.187.0.0/19
118.187.64.0/20
118.191.192.0/23
118.193.96.0/19
Signature Algorithm: sha256WithRSAEncryption
be:9e:d4:59:82:bb:77:02:e2:ce:8e:90:24:bd:df:51:e7:9b:
02:50:7f:cc:92:2e:0e:fa:c0:3c:77:a8:92:ad:4c:63:a6:dc:
a4:cd:a1:4c:b7:16:07:6e:52:8e:94:f6:55:1e:25:82:25:a2:
74:47:c6:71:de:f3:3f:b0:70:02:6b:98:e2:1b:d1:d9:84:8c:
5c:27:a0:8d:35:bf:b7:a8:7a:9c:31:9e:4a:4a:75:eb:b4:a4:
45:9b:8e:ec:ab:a4:95:af:20:05:8f:7c:8b:df:e4:14:82:a7:
f6:2d:9e:b8:e2:f1:5e:45:e2:2e:93:5c:6e:15:72:f2:5b:42:
6f:06:64:ec:64:5a:65:dd:f0:be:cd:a8:00:bc:a1:ae:88:0f:
77:a6:73:15:3f:81:f3:41:eb:49:6f:1e:db:2e:82:46:8d:45:
b4:c4:6a:39:d0:60:2a:d4:8c:2a:f2:cd:94:39:5c:92:85:f3:
d9:d8:f6:dc:2d:3c:76:46:a1:8f:36:41:14:b6:32:2c:52:5d:
2b:ba:82:64:bc:51:07:f8:03:2b:f6:79:d5:32:0e:b7:50:02:
e0:20:c6:48:35:fb:f5:60:b4:d4:bb:8f:c4:b2:d4:1a:13:10:
92:7b:82:72:f9:a1:4d:db:11:ea:f9:8f:29:f7:8d:fb:d9:5d:
b7:c0:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:40 2026 by rpki-client