Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS23724.roa
File: AS23724.roa (raw, json)
Hash identifier: 94+lhcnOPv/NagJzLLgJuxzucoDhXRnaox75QFBxdnQ=
Subject key identifier: 38:63:5C:FB:52:3B:91:B0:CC:6C:8F:70:69:88:DC:77:A7:BE:8B:5C
Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Certificate serial: 568DDCA8F8FB13A8DD1B5ADCB615032A6E21FE5E
Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS23724.roa
Signing time: Mon 11 May 2026 04:30:13 +0000
ROA not before: Mon 11 May 2026 04:25:13 +0000
ROA not after: Mon 10 May 2027 04:30:13 +0000
asID: 23724
IP address blocks: 110.43.64.0/20 maxlen: 20
110.43.80.0/20 maxlen: 20
110.43.96.0/21 maxlen: 21
110.43.104.0/21 maxlen: 21
110.43.160.0/21 maxlen: 21
110.43.168.0/21 maxlen: 21
110.43.176.0/21 maxlen: 21
110.43.192.0/19 maxlen: 19
120.92.0.0/23 maxlen: 23
120.92.2.0/23 maxlen: 23
120.92.4.0/23 maxlen: 23
120.92.6.0/23 maxlen: 23
120.92.8.0/23 maxlen: 23
120.92.10.0/23 maxlen: 23
120.92.12.0/23 maxlen: 23
120.92.14.0/23 maxlen: 23
120.92.16.0/21 maxlen: 21
120.92.24.0/21 maxlen: 21
120.92.32.0/21 maxlen: 21
120.92.40.0/21 maxlen: 21
120.92.48.0/21 maxlen: 21
120.92.56.0/21 maxlen: 21
120.92.64.0/21 maxlen: 21
120.92.72.0/21 maxlen: 21
120.92.80.0/21 maxlen: 21
120.92.88.0/21 maxlen: 21
120.92.96.0/21 maxlen: 21
120.92.104.0/21 maxlen: 21
120.92.112.0/21 maxlen: 21
120.92.120.0/21 maxlen: 21
120.92.192.0/19 maxlen: 19
120.92.192.0/23 maxlen: 23
120.92.194.0/23 maxlen: 23
120.92.200.0/21 maxlen: 21
120.92.208.0/20 maxlen: 20
120.131.0.0/23 maxlen: 23
120.131.2.0/23 maxlen: 23
120.131.4.0/23 maxlen: 23
120.131.6.0/23 maxlen: 23
120.131.8.0/23 maxlen: 23
120.131.10.0/23 maxlen: 23
120.131.12.0/23 maxlen: 23
120.131.14.0/23 maxlen: 23
2401:1d40::/48 maxlen: 48
2401:1d40:f8::/48 maxlen: 48
2401:1d40:f9::/48 maxlen: 48
2401:1d40:fa::/48 maxlen: 48
2401:1d40:fb::/48 maxlen: 48
2401:1d40:fc::/48 maxlen: 48
2401:1d40:fd::/48 maxlen: 48
2401:1d40:fe::/48 maxlen: 48
2401:1d40:ff::/48 maxlen: 48
2401:1d40:100::/48 maxlen: 48
2401:1d40:f21::/48 maxlen: 48
2401:1d40:f22::/48 maxlen: 48
2401:1d40:f23::/48 maxlen: 48
2401:1d40:f24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8d:dc:a8:f8:fb:13:a8:dd:1b:5a:dc:b6:15:03:2a:6e:21:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Validity
Not Before: May 11 04:25:13 2026 GMT
Not After : May 10 04:30:13 2027 GMT
Subject: CN=38635CFB523B91B0CC6C8F706988DC77A7BE8B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:cc:ee:aa:da:d5:a0:55:03:55:6d:da:29:
a6:d9:3c:08:0b:ad:11:71:83:55:f7:a4:f2:8c:6d:
3d:36:a8:63:c3:98:41:90:99:e7:25:c1:cf:91:f7:
e3:dd:e8:9e:97:c3:5e:8b:d3:93:05:76:c3:54:b5:
52:6e:79:76:f4:88:15:74:51:06:f5:7a:ff:c7:05:
bf:a1:be:43:09:25:d1:75:0f:f3:7b:ee:fe:ca:82:
7a:14:26:0f:83:1c:70:d0:29:22:ef:a0:90:02:77:
5b:a9:ee:35:dc:0b:8a:f6:85:de:dc:d5:2a:91:f7:
c4:a3:ba:ab:18:5d:51:83:29:16:46:e4:97:07:6d:
fe:98:cf:2f:4e:93:96:38:e9:73:b1:95:f3:89:de:
82:90:45:8b:8c:40:9e:00:ea:db:c0:38:21:58:a9:
90:81:e1:53:96:e2:c7:2e:72:48:c6:27:82:ad:8f:
d6:b2:eb:3b:da:a2:d8:1c:92:c4:f8:c9:a1:09:d4:
71:fe:ae:23:23:d8:eb:9a:f4:ef:95:8b:57:93:be:
5b:3b:3d:07:8f:48:dc:18:25:ae:69:b9:de:08:71:
cc:18:9f:c6:a8:a6:13:7c:1b:11:2c:eb:a2:46:f1:
7b:66:52:0e:ac:fe:63:97:f5:6e:b1:b4:63:af:a2:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:5C:FB:52:3B:91:B0:CC:6C:8F:70:69:88:DC:77:A7:BE:8B:5C
X509v3 Authority Key Identifier:
keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS23724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.43.64.0-110.43.111.255
110.43.160.0-110.43.183.255
110.43.192.0/19
120.92.0.0/17
120.92.192.0/19
120.131.0.0/20
IPv6:
2401:1d40::/48
2401:1d40:f8::-2401:1d40:100:ffff:ffff:ffff:ffff:ffff
2401:1d40:f21::-2401:1d40:f24:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:63:e0:81:1e:a2:6e:8c:25:d5:50:ca:ba:9d:71:47:d9:cc:
b5:fb:38:3d:00:19:d4:c8:5f:2b:bc:98:f6:56:c2:06:1a:06:
8c:94:c6:e1:ec:32:c5:94:b3:a6:f1:29:dc:6f:64:57:53:bf:
b6:8b:3a:48:68:a8:7e:34:c0:39:75:d1:5c:12:70:d3:5e:d7:
87:17:42:33:30:04:5c:e5:8c:e6:b1:13:2a:c1:70:09:e9:45:
9c:7f:bb:07:c1:14:73:e2:8e:e5:24:53:36:48:ed:cc:c5:1b:
3d:e3:c0:09:a4:b3:45:6b:48:ef:ce:d1:6e:47:43:05:8a:e6:
47:1b:7d:b2:f0:e0:65:09:ca:c0:0d:9b:59:58:c4:7a:90:0b:
da:13:db:36:a0:a5:40:8e:da:94:a6:05:95:69:0a:5f:bb:05:
ad:2b:b4:dc:6c:76:4a:16:d1:f8:61:f7:be:ab:71:ff:f2:4c:
66:9c:36:bb:46:2a:f0:25:6f:b0:c1:92:7f:5a:20:57:a8:85:
e8:f9:23:b5:2b:d4:f1:fb:37:df:67:2c:a6:9d:5b:04:0f:9f:
03:bd:b8:9e:d8:a5:ed:82:f2:9e:93:a1:24:b1:da:42:8d:8f:
0a:d9:07:7c:00:ae:99:fa:96:98:dc:d1:6a:d9:bf:20:2d:de:
9d:87:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:07 2026 by rpki-client