$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS24404.roa File: AS24404.roa (raw, json) Hash identifier: J/j1qTrdTPt47uEic6gOhIj0s4s5I0ztbwpwoAYYnms= Subject key identifier: 29:C0:8E:BB:F7:02:B3:E9:89:7D:C1:82:9D:F7:C0:13:9C:4B:8F:F6 Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 0CA80808B1DB9A80A95CD4BEB01EFA994E10F067 Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS24404.roa Signing time: Wed 10 Jun 2026 07:21:04 +0000 ROA not before: Wed 10 Jun 2026 07:16:04 +0000 ROA not after: Wed 09 Jun 2027 07:21:04 +0000 asID: 24404 IP address blocks: 118.26.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a8:08:08:b1:db:9a:80:a9:5c:d4:be:b0:1e:fa:99:4e:10:f0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 10 07:16:04 2026 GMT Not After : Jun 9 07:21:04 2027 GMT Subject: CN=29C08EBBF702B3E9897DC1829DF7C0139C4B8FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:43:c9:65:f0:e2:71:9c:74:b2:6e:48:fc: f8:e0:9c:c9:23:18:d6:51:14:d3:da:5b:7e:d6:bc: 85:fe:69:6c:6f:7c:d4:30:dd:76:b1:5a:09:69:59: 78:8b:94:0c:c7:6e:15:99:a3:7c:c9:3d:f4:8d:55: 9f:72:fd:63:11:f0:85:7c:a6:48:8f:32:d3:f3:35: b9:ca:26:98:77:eb:62:15:31:35:0b:4b:85:f5:41: d9:79:7d:00:07:79:5f:09:e9:24:13:d5:69:43:6e: bb:6f:81:c1:a4:19:1d:a7:e6:f5:a8:39:f8:c3:7f: 98:6f:35:61:97:38:fd:7d:e0:db:1e:5f:11:49:a7: bc:7b:83:36:c5:d3:9f:dc:7f:25:e6:ca:a2:fe:90: 67:9b:ae:1d:af:67:c6:a1:9e:5c:ad:ec:85:47:66: 02:a0:98:d5:52:cb:2f:56:0e:c3:b2:67:d3:be:54: 2a:57:0b:0d:5e:ab:90:ae:61:6d:06:f3:90:fe:d6: 29:9b:7e:e5:f3:28:f2:c7:55:ee:b1:8c:1c:90:07: 90:d1:85:8a:76:14:4b:ea:08:5d:3d:fc:f4:3c:07: f9:1c:9a:f9:fd:e4:1d:90:86:f3:92:2c:38:d7:5a: e3:66:89:f2:9e:e9:e5:b2:1b:40:55:32:b5:57:7f: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C0:8E:BB:F7:02:B3:E9:89:7D:C1:82:9D:F7:C0:13:9C:4B:8F:F6 X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS24404.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.26.160.0/20 Signature Algorithm: sha256WithRSAEncryption 61:79:65:d9:84:ce:d0:c2:28:4f:fa:98:b2:c4:22:bf:f5:d8: 46:7b:a7:67:a2:f7:8c:ed:93:7b:a9:01:88:30:1b:43:87:06: e2:4e:c2:52:84:7a:f8:77:c7:cf:ef:df:23:72:36:46:44:39: 99:db:ec:2b:88:a5:60:95:bc:77:9f:d1:c4:f5:ad:14:e1:b9: dc:09:2b:f1:f0:e0:1d:eb:9f:d2:5d:42:26:3e:9b:aa:79:80: 44:d7:c8:8e:da:00:17:2a:5a:67:13:71:ca:a0:b5:f0:f9:99: 08:57:6d:50:f8:c3:33:33:eb:82:b4:6e:51:b3:25:56:57:4e: 92:8b:44:50:57:96:51:b5:02:47:29:70:43:89:bb:fc:a6:3e: 8c:7c:cf:c1:79:ed:d7:27:40:de:7e:b1:d7:78:5d:b3:13:ea: 87:47:3b:45:09:ce:e4:49:cd:d3:81:1a:e9:fd:15:db:29:f3: 71:10:75:35:80:91:75:17:a2:56:d3:80:0f:19:cd:e5:7c:44: e0:f1:fc:b9:6c:c4:56:d6:cc:97:b2:be:56:e3:2f:a0:e1:5e: 23:9d:5b:62:f8:f8:1e:8e:b8:d1:cc:66:62:a3:79:48:e5:6d: 19:65:6f:66:ac:a9:d1:57:c8:21:3a:d5:07:23:95:06:32:be: 7c:8f:6c:74 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUDKgICLHbmoCpXNS+sB76mU4Q8GcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYxMDA3MTYwNFoX DTI3MDYwOTA3MjEwNFowMzExMC8GA1UEAxMoMjlDMDhFQkJGNzAyQjNFOTg5N0RD MTgyOURGN0MwMTM5QzRCOEZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPkQ8ll8OJxnHSybkj8+OCcySMY1lEU09pbfta8hf5pbG981DDddrFaCWlZ eIuUDMduFZmjfMk99I1Vn3L9YxHwhXymSI8y0/M1ucommHfrYhUxNQtLhfVB2Xl9 AAd5XwnpJBPVaUNuu2+BwaQZHafm9ag5+MN/mG81YZc4/X3g2x5fEUmnvHuDNsXT n9x/JebKov6QZ5uuHa9nxqGeXK3shUdmAqCY1VLLL1YOw7Jn075UKlcLDV6rkK5h bQbzkP7WKZt+5fMo8sdV7rGMHJAHkNGFinYUS+oIXT389DwH+Rya+f3kHZCG85Is ONda42aJ8p7p5bIbQFUytVd//GECAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQpwI67 9wKz6Yl9wYKd98ATnEuP9jAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTMjQ0MDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR2GqAwDQYJKoZIhvcNAQELBQAD ggEBAGF5ZdmEztDCKE/6mLLEIr/12EZ7p2ei94ztk3upAYgwG0OHBuJOwlKEevh3 x8/v3yNyNkZEOZnb7CuIpWCVvHef0cT1rRThudwJK/Hw4B3rn9JdQiY+m6p5gETX yI7aABcqWmcTccqgtfD5mQhXbVD4wzMz64K0blGzJVZXTpKLRFBXllG1AkcpcEOJ u/ymPox8z8F57dcnQN5+sdd4XbMT6odHO0UJzuRJzdOBGun9Fdsp83EQdTWAkXUX olbTgA8ZzeV8RODx/LlsxFbWzJeyvlbjL6DhXiOdW2L4+B6OuNHMZmKjeUjlbRll b2asqdFXyCE61QcjlQYyvnyPbHQ= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:40 2026 by rpki-client