Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS23844.roa
File: AS23844.roa (raw, json)
Hash identifier: z23MKEgtHnwCdg5zfAmp2eEWllJsIkDNB6WkVNbU4dk=
Subject key identifier: A4:48:43:86:43:7F:A3:E1:F4:98:C8:88:E2:BC:A3:AE:20:95:1E:AD
Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C
Certificate serial: 7F4C422F331FED2642473A9E6633950449C6DF5C
Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS23844.roa
Signing time: Mon 21 Sep 2026 07:10:31 +0000
ROA not before: Mon 21 Sep 2026 07:05:31 +0000
ROA not after: Mon 20 Sep 2027 07:10:31 +0000
asID: 23844
IP address blocks: 118.102.16.0/24 maxlen: 24
118.102.22.0/23 maxlen: 23
118.102.22.0/24 maxlen: 24
118.102.23.0/24 maxlen: 24
118.102.24.0/22 maxlen: 22
118.102.28.0/24 maxlen: 24
119.253.0.0/20 maxlen: 20
119.253.0.0/21 maxlen: 21
119.253.8.0/21 maxlen: 21
119.253.48.0/21 maxlen: 21
119.253.48.0/22 maxlen: 22
119.253.52.0/22 maxlen: 22
119.253.80.0/20 maxlen: 20
119.253.80.0/21 maxlen: 21
119.253.80.0/22 maxlen: 22
119.253.84.0/23 maxlen: 23
119.253.88.0/21 maxlen: 21
119.253.91.0/24 maxlen: 24
119.253.249.0/24 maxlen: 24
119.253.252.0/24 maxlen: 24
119.254.0.0/16 maxlen: 16
119.254.0.0/17 maxlen: 17
119.254.16.0/20 maxlen: 20
119.254.32.0/21 maxlen: 21
119.254.37.0/24 maxlen: 24
119.254.40.0/21 maxlen: 21
119.254.56.0/21 maxlen: 21
119.254.64.0/19 maxlen: 19
119.254.112.0/20 maxlen: 20
119.254.112.0/21 maxlen: 21
119.254.120.0/21 maxlen: 21
119.254.128.0/17 maxlen: 17
119.254.128.0/20 maxlen: 20
119.254.136.0/21 maxlen: 21
119.254.144.0/20 maxlen: 20
119.254.144.0/21 maxlen: 21
119.254.152.0/21 maxlen: 21
119.254.160.0/19 maxlen: 19
119.254.192.0/19 maxlen: 19
119.254.216.0/21 maxlen: 21
119.254.229.0/24 maxlen: 24
119.254.236.0/22 maxlen: 22
119.254.236.0/24 maxlen: 24
119.254.240.0/21 maxlen: 21
119.254.255.0/24 maxlen: 24
119.255.63.0/24 maxlen: 24
119.255.128.0/17 maxlen: 17
119.255.136.0/21 maxlen: 21
124.42.8.0/22 maxlen: 22
124.42.12.0/22 maxlen: 22
124.42.34.0/23 maxlen: 23
124.42.36.0/22 maxlen: 22
124.42.49.0/24 maxlen: 24
124.42.86.0/23 maxlen: 23
203.187.191.0/24 maxlen: 24
218.97.255.0/24 maxlen: 24
220.231.0.0/20 maxlen: 20
220.231.16.0/20 maxlen: 20
220.231.32.0/24 maxlen: 24
220.231.48.0/20 maxlen: 20
220.231.63.0/24 maxlen: 24
240a:2000::/40 maxlen: 40
240a:2001:100::/40 maxlen: 40
240a:2001:1000::/36 maxlen: 36
240a:2001:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4c:42:2f:33:1f:ed:26:42:47:3a:9e:66:33:95:04:49:c6:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C
Validity
Not Before: Sep 21 07:05:31 2026 GMT
Not After : Sep 20 07:10:31 2027 GMT
Subject: CN=A4484386437FA3E1F498C888E2BCA3AE20951EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:02:4a:c8:cc:bc:c2:5d:a4:66:90:55:ae:
17:3e:47:81:5d:58:40:c0:79:ed:69:e0:44:68:fe:
1d:29:9b:01:de:df:5b:99:c4:19:05:09:fa:f6:9d:
93:fd:5d:94:5e:0c:84:0f:23:fd:4c:cd:da:d8:c5:
74:b9:98:cc:80:c3:df:5e:75:88:bc:90:2f:2a:f2:
8f:a4:f1:c5:a6:33:59:db:f5:e4:be:97:9c:38:61:
bd:bc:81:4d:07:31:cf:82:75:c2:23:f9:27:78:58:
f6:c1:fa:4b:8f:5a:e9:d3:55:a5:c8:5c:27:6c:82:
60:8f:d3:4d:90:06:4c:18:35:98:49:48:f0:c7:c9:
d5:48:39:88:82:ea:a4:66:22:2e:e7:bf:0d:2d:5b:
f6:eb:1f:56:a1:9f:52:71:fc:30:26:99:79:7e:7c:
1e:8a:dd:28:12:08:18:9f:04:50:e4:e4:fe:3f:0b:
7f:33:d2:67:7f:16:9d:a2:17:d5:17:a7:bb:c0:88:
87:37:66:a3:f5:b9:97:cb:25:f1:1f:cf:8f:65:10:
7e:ec:5d:45:6c:cd:a8:f4:e0:d8:82:0d:86:29:7f:
9f:6d:8b:69:ed:f2:04:ba:34:2e:db:ae:b4:1a:9a:
b2:d6:dd:f8:78:e0:87:ee:8a:18:b3:3e:49:93:21:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:43:86:43:7F:A3:E1:F4:98:C8:88:E2:BC:A3:AE:20:95:1E:AD
X509v3 Authority Key Identifier:
keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/AS23844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.102.16.0/24
118.102.22.0-118.102.28.255
119.253.0.0/20
119.253.48.0/21
119.253.80.0/20
119.253.249.0/24
119.253.252.0/24
119.254.0.0/16
119.255.63.0/24
119.255.128.0/17
124.42.8.0/21
124.42.34.0-124.42.39.255
124.42.49.0/24
124.42.86.0/23
203.187.191.0/24
218.97.255.0/24
220.231.0.0-220.231.32.255
220.231.48.0/20
IPv6:
240a:2000::/40
240a:2001:100::/40
240a:2001:1000::/36
Signature Algorithm: sha256WithRSAEncryption
70:5d:bb:a9:18:1b:f6:9d:27:ef:03:a4:6a:d0:69:02:6d:07:
39:8f:d4:6e:0f:16:97:6a:66:16:62:8d:7d:56:b7:c3:4f:27:
0d:51:a5:27:7a:9d:ed:f9:dc:9c:cb:54:c3:ba:e1:fd:de:47:
78:d7:dd:85:14:60:d0:49:03:cb:b2:68:4a:ca:32:6d:c1:27:
29:8f:89:01:fc:ea:c7:ed:aa:96:f6:fb:b5:c2:18:f3:40:ac:
2c:58:4a:24:1d:68:85:6c:2a:bc:d0:83:be:a0:1f:bb:96:50:
d4:85:9a:3f:b2:4b:34:dd:9d:74:27:25:16:c0:80:ef:c1:dd:
f2:11:74:bc:ea:a1:cb:3a:60:17:43:ce:84:ab:8f:3d:78:c1:
19:96:2f:bd:27:24:37:cc:c2:3c:ee:0e:ce:68:8b:08:c0:ad:
60:2b:8b:c0:3d:a4:ae:d0:27:bb:c3:1c:27:ab:85:3c:17:48:
6b:6e:27:a1:df:0e:8e:aa:60:9c:e7:b9:4e:93:36:4a:9f:6a:
09:54:66:bf:e6:08:77:f5:c0:82:31:76:74:e1:d0:b4:e7:1b:
0b:e1:c0:96:24:5f:5d:4f:25:68:ff:ed:ab:96:ce:0d:88:c9:
7d:f1:cd:a5:b7:2e:d4:75:db:93:01:fa:ab:12:7d:0e:cb:80:
b4:fe:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:58:12 2026 by rpki-client