
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS24547.roa
File: AS24547.roa (raw, json)
Hash identifier: BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=
Subject key identifier: 2D:7B:95:E2:AA:40:F0:CC:4B:60:14:F7:23:2B:50:62:2A:50:EA:F7
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 64D4C96E3FD443A786C55DA296E23648ED998635
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS24547.roa
Signing time: Mon 29 Jun 2026 15:05:25 +0000
ROA not before: Mon 29 Jun 2026 15:00:25 +0000
ROA not after: Mon 28 Jun 2027 15:05:25 +0000
asID: 24547
IP address blocks: 103.63.160.0/22 maxlen: 22
103.63.164.0/22 maxlen: 22
2405:1480:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d4:c9:6e:3f:d4:43:a7:86:c5:5d:a2:96:e2:36:48:ed:99:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 29 15:00:25 2026 GMT
Not After : Jun 28 15:05:25 2027 GMT
Subject: CN=2D7B95E2AA40F0CC4B6014F7232B50622A50EAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:65:52:fb:2e:6a:1b:00:8f:99:57:38:fc:
bf:94:95:dc:8b:97:f8:f7:7c:eb:6e:57:b0:f7:25:
e2:70:8e:41:88:63:bd:00:97:b9:60:0c:5c:3c:62:
09:af:1b:02:7a:de:00:38:09:2a:1f:0d:a6:31:28:
eb:04:89:8a:cb:b5:27:58:86:35:e9:f7:e1:c0:00:
8f:3d:60:66:65:db:0f:c2:70:81:5c:6e:39:57:47:
06:08:7a:79:da:2f:73:86:54:b3:34:95:f7:ba:ff:
7a:df:34:7d:f0:b2:06:5f:39:68:d1:6c:cc:68:54:
0f:07:f9:8e:44:13:20:45:66:70:ff:2d:b9:59:ac:
f6:20:dd:58:be:bf:e9:9b:e1:9d:f7:72:9c:58:bb:
bb:d9:d7:38:47:d7:b1:b6:32:bc:6c:47:06:e6:9a:
6b:98:c2:84:18:f3:2c:e1:9a:9c:16:25:cd:c3:43:
a9:9a:1b:13:ef:0b:d5:d1:b2:75:5e:1a:7c:f5:82:
d7:3e:48:d8:9c:71:82:e1:9d:47:00:45:bd:f1:43:
9d:bc:53:43:47:0c:9c:c5:d9:8f:b4:f8:f8:5b:5b:
c9:c4:a4:3e:96:2f:2b:46:a7:65:05:e8:a0:8f:b1:
6d:d2:fa:d7:5c:bb:70:bc:d0:a0:50:88:4d:ca:92:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:95:E2:AA:40:F0:CC:4B:60:14:F7:23:2B:50:62:2A:50:EA:F7
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS24547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.160.0/21
IPv6:
2405:1480:3000::/48
Signature Algorithm: sha256WithRSAEncryption
52:48:7d:e4:77:cc:d0:cc:b6:1e:6b:5e:fd:77:a0:02:51:cd:
67:06:22:2d:b7:11:32:87:6c:05:ec:05:e0:e4:17:3a:6b:b1:
e7:84:97:d9:ef:27:f8:e3:c1:13:00:dd:40:fd:b3:2b:81:04:
26:c7:d2:dd:15:c7:2e:3f:5c:bd:8b:ea:34:c6:68:2e:6a:0e:
5c:32:3f:55:c2:ca:24:07:0b:d4:2d:02:3a:21:06:97:7e:2d:
8b:62:a7:94:02:98:81:1a:b5:73:1e:6b:96:1c:5a:25:7f:1b:
82:19:ca:fe:cf:05:78:9a:47:2d:4e:24:b8:9f:13:51:e2:af:
1a:f1:01:f9:a3:d0:aa:f8:67:78:65:69:97:d9:98:ae:86:ff:
03:13:46:e2:38:cb:0c:39:13:3f:87:c2:f9:50:38:98:4e:4f:
20:c4:b1:85:59:1a:8b:72:96:07:12:d4:54:ec:c7:a9:b7:da:
f2:e4:16:fd:df:43:9e:29:ab:01:b5:01:37:06:99:39:a7:37:
d7:dd:20:2d:86:11:65:ad:71:71:42:6e:9a:27:59:b0:ca:7b:
b0:3c:33:c7:18:23:b4:f5:aa:3f:8d:f3:fa:68:86:58:d4:eb:
9f:b2:33:0d:29:1e:4d:7c:cd:cd:c0:86:77:f4:11:90:07:a5:
fe:08:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 22:58:10 2026 by rpki-client