$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS23724.roa File: AS23724.roa (raw, json) Hash identifier: Z/jqcV4/GEMJTWReFqn09K+Q+DNuRbJPg6jrpaHK7WU= Subject key identifier: 99:3F:47:1C:6F:35:20:90:24:91:7A:5C:20:5F:1D:7B:EB:F6:F7:C8 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 18BF49C9A4086C4AADDA2AC3E0BD987D1CD68EB5 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS23724.roa Signing time: Mon 29 Jun 2026 15:02:35 +0000 ROA not before: Mon 29 Jun 2026 14:57:35 +0000 ROA not after: Mon 28 Jun 2027 15:02:35 +0000 asID: 23724 IP address blocks: 43.241.208.0/21 maxlen: 21 43.241.216.0/21 maxlen: 21 43.241.224.0/21 maxlen: 21 43.241.232.0/21 maxlen: 21 101.236.0.0/21 maxlen: 21 101.236.8.0/21 maxlen: 21 101.236.16.0/21 maxlen: 21 101.236.24.0/21 maxlen: 21 101.236.32.0/21 maxlen: 21 101.236.40.0/21 maxlen: 21 101.236.48.0/21 maxlen: 21 101.236.56.0/21 maxlen: 21 101.236.64.0/21 maxlen: 21 101.236.72.0/21 maxlen: 21 101.236.80.0/21 maxlen: 21 101.236.88.0/21 maxlen: 21 101.236.96.0/21 maxlen: 21 101.236.104.0/21 maxlen: 21 101.236.112.0/21 maxlen: 21 101.236.120.0/21 maxlen: 21 101.236.128.0/21 maxlen: 21 101.236.136.0/21 maxlen: 21 101.236.144.0/21 maxlen: 21 101.236.152.0/21 maxlen: 21 101.236.160.0/21 maxlen: 21 101.236.168.0/21 maxlen: 21 101.236.176.0/21 maxlen: 21 101.236.184.0/21 maxlen: 21 101.236.192.0/21 maxlen: 21 101.236.200.0/21 maxlen: 21 101.236.208.0/21 maxlen: 21 101.236.216.0/21 maxlen: 21 101.236.224.0/21 maxlen: 21 101.236.232.0/21 maxlen: 21 101.236.240.0/21 maxlen: 21 101.236.248.0/21 maxlen: 21 103.37.136.0/21 maxlen: 21 103.37.144.0/21 maxlen: 21 103.37.152.0/21 maxlen: 21 103.37.160.0/21 maxlen: 21 2405:1480:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bf:49:c9:a4:08:6c:4a:ad:da:2a:c3:e0:bd:98:7d:1c:d6:8e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 29 14:57:35 2026 GMT Not After : Jun 28 15:02:35 2027 GMT Subject: CN=993F471C6F35209024917A5C205F1D7BEBF6F7C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:21:e5:6e:2b:7b:af:a5:5b:b6:48:22:6a: c8:0d:10:4b:3b:d9:b3:a2:f4:ff:48:12:6b:d0:42: 1e:f4:99:92:50:0f:0c:dd:0f:5a:bd:99:ef:86:78: bc:aa:27:8a:a4:74:17:d2:c6:6e:91:73:e4:ae:32: 1a:09:66:ab:08:53:66:0e:d6:b5:a4:f8:d3:c5:e5: 34:6f:c3:c5:4f:68:0e:55:a9:b3:bc:be:5a:cd:53: 6c:26:ca:93:ba:f8:3f:0f:f8:0d:e6:a8:29:c8:51: 82:31:59:32:ee:98:0d:77:09:3c:29:22:f0:aa:86: bd:23:dd:53:e3:46:f3:b0:79:f8:46:32:6d:20:75: 1e:4b:51:7a:c2:c4:e8:68:8e:b2:31:31:a9:c8:b4: e5:0a:20:80:dc:f6:fc:21:05:2e:6a:05:ea:21:c9: e1:a8:f4:3a:37:fd:d1:d2:c5:bb:60:27:24:67:1d: 21:f6:d5:9c:f4:ed:f8:b5:ae:87:52:66:29:fa:d7: 0c:d6:07:02:a8:1b:39:4d:44:d4:d9:3a:55:68:2e: e0:d1:d9:e7:12:25:97:95:86:1b:a8:21:35:23:a8: 6e:d4:f9:82:c9:4a:ed:4e:20:7f:1b:c1:98:99:8d: 42:8f:a0:fb:fe:13:90:54:d3:22:cb:7f:4a:c5:46: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3F:47:1C:6F:35:20:90:24:91:7A:5C:20:5F:1D:7B:EB:F6:F7:C8 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS23724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.208.0-43.241.239.255 101.236.0.0/16 103.37.136.0-103.37.167.255 IPv6: 2405:1480:2000::/48 Signature Algorithm: sha256WithRSAEncryption 99:72:71:0e:4a:57:71:95:01:42:73:a1:39:71:cb:23:6a:c8: 3e:62:dc:de:21:08:f2:71:c0:6e:10:bf:d0:41:34:3d:a1:82: e6:a0:0e:37:cf:ff:af:db:14:0b:29:44:d4:e2:00:10:98:e4: 52:45:08:8f:ee:c3:a8:f1:e2:26:6b:c9:5b:b1:bc:48:79:b9: 75:e0:3b:eb:71:32:05:e0:ad:b0:39:1b:2e:cc:2a:fa:ff:ad: d7:2c:69:6f:34:35:fe:7d:2f:53:cb:4f:c3:46:5c:46:0f:b0: d1:a7:8d:59:b2:40:b1:85:ee:45:72:20:cf:7c:ba:c0:95:74: 31:8a:4c:91:22:93:f0:49:31:75:2d:f8:1f:aa:92:37:33:66: 05:0e:2a:83:5b:ce:f3:dd:1b:be:e1:cc:16:80:14:63:60:3a: cd:bd:29:92:92:43:eb:ec:84:67:af:3e:1c:9f:bd:cc:d9:65: 08:06:60:fe:c3:c6:84:7c:4c:62:74:87:d7:40:f7:b0:35:3b: 5d:fb:2f:8a:d7:0f:0b:31:d9:96:f1:ff:38:e0:c7:ac:77:be: 69:06:01:10:3a:a8:d3:bb:8a:93:b1:6d:b8:c9:15:e9:0e:48: c4:df:fe:a6:9e:e9:26:10:f6:27:f5:dd:d4:85:22:14:35:da: 56:50:1e:64 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUGL9JyaQIbEqt2irD4L2YfRzWjrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MjkxNDU3MzVaFw0yNzA2MjgxNTAyMzVaMDMxMTAvBgNV BAMTKDk5M0Y0NzFDNkYzNTIwOTAyNDkxN0E1QzIwNUYxRDdCRUJGNkY3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fyHlbit7r6VbtkgiasgNEEs7 2bOi9P9IEmvQQh70mZJQDwzdD1q9me+GeLyqJ4qkdBfSxm6Rc+SuMhoJZqsIU2YO 1rWk+NPF5TRvw8VPaA5VqbO8vlrNU2wmypO6+D8P+A3mqCnIUYIxWTLumA13CTwp IvCqhr0j3VPjRvOwefhGMm0gdR5LUXrCxOhojrIxManItOUKIIDc9vwhBS5qBeoh yeGo9Do3/dHSxbtgJyRnHSH21Zz07fi1rodSZin61wzWBwKoGzlNRNTZOlVoLuDR 2ecSJZeVhhuoITUjqG7U+YLJSu1OIH8bwZiZjUKPoPv+E5BU0yLLf0rFRv1HAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUmT9HHG81IJAkkXpcIF8de+v298gwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC9BUzIzNzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAnBAIA ATAhMAwDBAQr8dADBAQr8eADAwBl7DAMAwQDZyWIAwQDZyWgMA8EAgACMAkDBwAk BRSAIAAwDQYJKoZIhvcNAQELBQADggEBAJlycQ5KV3GVAUJzoTlxyyNqyD5i3N4h CPJxwG4Qv9BBND2hguagDjfP/6/bFAspRNTiABCY5FJFCI/uw6jx4iZryVuxvEh5 uXXgO+txMgXgrbA5Gy7MKvr/rdcsaW80Nf59L1PLT8NGXEYPsNGnjVmyQLGF7kVy IM98usCVdDGKTJEik/BJMXUt+B+qkjczZgUOKoNbzvPdG77hzBaAFGNgOs29KZKS Q+vshGevPhyfvczZZQgGYP7DxoR8TGJ0h9dA97A1O137L4rXDwsx2Zbx/zjgx6x3 vmkGARA6qNO7ipOxbbjJFekOSMTf/qae6SYQ9if13dSFIhQ12lZQHmQ= -----END CERTIFICATE-----Generated at Tue Jul 14 23:36:28 2026 by rpki-client