$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS23650.roa File: AS23650.roa (raw, json) Hash identifier: D9jVg0LLO+giI4vySvty+x8Af/ENhgC630tuamgNdUA= Subject key identifier: BE:F6:73:A4:7D:79:A2:E6:91:C9:1A:F3:32:D3:1F:19:CD:BB:25:82 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 67C24A4C4A842A7860798AAFD2F1AA477F8DD478 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS23650.roa Signing time: Tue 14 Jul 2026 07:19:54 +0000 ROA not before: Tue 14 Jul 2026 07:14:54 +0000 ROA not after: Tue 13 Jul 2027 07:19:54 +0000 asID: 23650 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.48.0/24 maxlen: 24 43.241.49.0/24 maxlen: 24 43.241.50.0/24 maxlen: 24 43.241.51.0/24 maxlen: 24 43.248.184.0/21 maxlen: 24 43.248.196.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c2:4a:4c:4a:84:2a:78:60:79:8a:af:d2:f1:aa:47:7f:8d:d4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 14 07:14:54 2026 GMT Not After : Jul 13 07:19:54 2027 GMT Subject: CN=BEF673A47D79A2E691C91AF332D31F19CDBB2582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:81:c7:91:10:9f:c1:7e:2d:d9:92:cb:d8: 24:93:1c:5d:89:dd:79:74:9f:29:5b:cc:0d:de:b3: 87:31:93:7b:86:d4:5e:b8:ea:ea:0a:dc:1c:0c:43: 90:bd:92:5a:78:96:6e:43:06:74:12:6a:b0:32:fb: 9c:80:99:fd:ac:bc:ba:01:3d:80:8b:27:82:39:35: 39:13:8f:1b:db:b4:64:0e:1b:97:ba:a9:06:aa:78: 8a:89:31:36:ba:27:47:4d:8a:0e:91:65:26:65:80: d2:e6:ee:a0:0e:93:d9:f3:2e:2d:d4:94:01:23:d2: 7f:12:f7:0d:2e:06:99:4b:09:47:56:0e:87:ba:02: 85:9d:26:44:6a:b2:58:a7:71:43:5b:5a:f6:2f:72: 00:8e:aa:01:73:9b:1e:87:3a:e5:d2:d1:9a:53:83: 0b:75:35:f4:2e:ce:f9:47:ef:c1:b5:af:20:e2:d3: e1:fe:fa:80:03:83:e0:aa:c3:b5:04:5e:26:af:c8: 4d:73:c1:28:b3:50:d8:9b:b3:a8:af:76:cb:63:e1: 27:53:f3:b5:5b:d3:87:12:5f:95:73:66:bb:58:77: 8e:b0:1e:a7:9d:25:7e:83:2d:aa:dd:87:da:31:20: 34:a2:f2:89:99:7c:25:4e:f8:2b:fb:2d:41:e7:47: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F6:73:A4:7D:79:A2:E6:91:C9:1A:F3:32:D3:1F:19:CD:BB:25:82 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS23650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0/21 43.248.196.0/22 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:eb:bb:71:89:f1:ae:1c:83:c8:ac:c1:73:16:f3:95:f0:53: 88:33:02:f3:44:76:30:39:77:67:48:82:81:65:4c:52:e5:95: 2d:bf:80:11:47:66:e6:66:33:64:8b:25:d3:03:63:63:a2:74: 8e:3a:ee:95:ba:d3:3f:9d:b1:2b:c6:24:4f:f8:1e:b2:a3:72: 3d:db:81:e8:ad:4f:e1:ba:ad:a6:b3:e0:e7:26:77:12:88:2b: 24:4b:10:95:b9:50:82:8f:e1:e9:1e:59:53:15:a1:c1:b1:87: a8:0e:ca:1d:0c:88:c4:ac:78:4d:90:9f:8b:2a:95:7e:d0:5c: 81:89:3d:d4:4a:e6:24:2f:4b:bb:cf:f3:78:95:be:c8:e8:9d: 29:d8:e4:84:8d:29:4c:dd:76:e8:1f:9c:9d:7f:24:9b:7b:19: c5:ae:bf:b8:1b:8c:6f:11:85:94:04:f1:a0:89:84:47:26:af: a6:ac:80:ea:2e:4b:b8:02:ad:ac:38:20:a0:8e:6b:66:ab:06: 84:ed:fd:da:39:8d:6c:3a:fa:93:58:e1:bf:a2:43:56:e7:fd: 1e:86:8d:3e:b7:6e:46:8c:71:4b:df:e9:a9:88:5c:db:51:99: 49:1c:aa:e6:c7:a6:22:08:d2:6c:95:37:fc:4b:16:b2:5a:be: 7e:0a:09:a6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUZ8JKTEqEKnhgeYqv0vGqR3+N1HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MTQwNzE0NTRaFw0yNzA3MTMwNzE5NTRaMDMxMTAvBgNV BAMTKEJFRjY3M0E0N0Q3OUEyRTY5MUM5MUFGMzMyRDMxRjE5Q0RCQjI1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyoHHkRCfwX4t2ZLL2CSTHF2J 3Xl0nylbzA3es4cxk3uG1F646uoK3BwMQ5C9klp4lm5DBnQSarAy+5yAmf2svLoB PYCLJ4I5NTkTjxvbtGQOG5e6qQaqeIqJMTa6J0dNig6RZSZlgNLm7qAOk9nzLi3U lAEj0n8S9w0uBplLCUdWDoe6AoWdJkRqslincUNbWvYvcgCOqgFzmx6HOuXS0ZpT gwt1NfQuzvlH78G1ryDi0+H++oADg+Cqw7UEXiavyE1zwSizUNibs6ivdstj4SdT 87Vb04cSX5VzZrtYd46wHqedJX6DLardh9oxIDSi8omZfCVO+Cv7LUHnRys5AgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUvvZzpH15ouaRyRrzMtMfGc27JYIwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzIzNjUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIA ATA8AwQCK/AAAwQCK/EwAwQDK/i4AwQCK/jEAwQCZyUsAwQCZygMAwQCZy2gAwQC Z838AwQCZ+/0AwQCb98MMA0GCSqGSIb3DQEBCwUAA4IBAQCP67txifGuHIPIrMFz FvOV8FOIMwLzRHYwOXdnSIKBZUxS5ZUtv4ARR2bmZjNkiyXTA2NjonSOOu6VutM/ nbErxiRP+B6yo3I924HorU/huq2ms+DnJncSiCskSxCVuVCCj+HpHllTFaHBsYeo DsodDIjErHhNkJ+LKpV+0FyBiT3USuYkL0u7z/N4lb7I6J0p2OSEjSlM3XboH5yd fySbexnFrr+4G4xvEYWUBPGgiYRHJq+mrIDqLku4Aq2sOCCgjmtmqwaE7f3aOY1s OvqTWOG/okNW5/0eho0+t25GjHFL3+mpiFzbUZlJHKrmx6YiCNJslTf8SxayWr5+ Cgmm -----END CERTIFICATE-----Generated at Fri Jul 24 08:08:42 2026 by rpki-client