$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS17621.roa File: AS17621.roa (raw, json) Hash identifier: utLpHPKZ8BfirAvR9YdDOE/1HRyEhTf6sPLR5pv/8bw= Subject key identifier: 75:39:99:0E:E7:B5:5B:47:52:C7:0B:D3:42:83:2E:16:8B:BE:FB:94 Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 6A682D2A700B376FF980F600BD76E1A0B210142B Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS17621.roa Signing time: Wed 02 Sep 2026 01:37:22 +0000 ROA not before: Wed 02 Sep 2026 01:32:22 +0000 ROA not after: Wed 01 Sep 2027 01:37:22 +0000 asID: 17621 IP address blocks: 59.153.172.0/24 maxlen: 24 103.5.192.0/23 maxlen: 24 103.5.194.0/24 maxlen: 24 103.5.195.0/24 maxlen: 24 103.24.116.0/24 maxlen: 24 103.24.118.0/23 maxlen: 24 150.242.238.0/23 maxlen: 24 202.89.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:68:2d:2a:70:0b:37:6f:f9:80:f6:00:bd:76:e1:a0:b2:10:14:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Sep 2 01:32:22 2026 GMT Not After : Sep 1 01:37:22 2027 GMT Subject: CN=7539990EE7B55B4752C70BD342832E168BBEFB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:7b:e0:24:38:92:a2:2c:9c:78:e2:46:90: 04:c5:aa:ac:ec:02:8a:ad:37:2a:f2:50:9a:a3:55: ef:a4:b4:95:45:1f:3f:70:41:8c:d8:55:1b:57:24: ed:8c:e5:bc:90:da:5b:70:87:92:9d:0b:a8:f2:1e: 7e:6c:1b:1e:f8:9c:9c:78:f4:5a:dd:0c:a9:61:cc: 8e:8c:00:91:bd:0a:2d:d4:c2:52:f6:cb:ec:ee:40: 31:9f:68:30:2f:22:32:61:d7:28:e4:6c:99:2f:60: d1:40:42:24:e1:f8:6f:e6:a5:d2:a0:96:c0:66:84: 5a:4e:26:ba:69:e1:e3:d4:ec:3b:9b:07:2e:f1:95: a0:14:1b:ec:d8:22:d1:4b:a6:d8:32:20:18:89:22: e5:93:90:85:2e:bd:73:3c:6f:43:75:4d:5a:8d:3f: 37:88:e2:d7:67:22:f4:28:3f:68:4a:a9:12:ba:49: 2d:89:1e:40:d2:6c:a3:33:5f:fd:e7:24:fb:cc:6b: a5:46:96:c0:57:94:30:8e:f9:e6:1e:84:91:cf:8b: 1b:8d:a2:51:eb:0b:72:e4:9c:9f:66:99:3b:22:8e: f9:37:47:af:17:94:08:74:c7:fe:0e:a1:7f:1b:07: c6:7d:24:85:be:22:88:f7:9d:d7:bf:30:54:bc:65: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:39:99:0E:E7:B5:5B:47:52:C7:0B:D3:42:83:2E:16:8B:BE:FB:94 X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS17621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.172.0/24 103.5.192.0/22 103.24.116.0/24 103.24.118.0/23 150.242.238.0/23 202.89.96.0/24 Signature Algorithm: sha256WithRSAEncryption 27:da:e2:f4:92:fb:80:a7:3f:2f:cd:87:a7:a7:c6:85:1e:46: d6:8c:73:d2:82:20:e8:50:ad:a7:4e:be:5d:6c:7b:21:8f:6f: 2b:c7:3c:cf:74:9c:cd:dd:44:54:cd:31:2a:48:fd:93:8d:97: 2c:9e:57:26:b9:1c:fc:29:c6:89:7e:59:28:eb:bb:91:fd:73: f0:a3:62:c8:3b:3f:c5:fa:87:ca:e1:1b:7d:13:d6:fd:16:33: a4:2f:df:19:81:26:9e:1f:e6:20:14:a3:4c:04:31:29:91:c8: fd:99:2a:19:39:a5:60:42:d6:7b:81:f2:da:58:f4:f3:85:9e: e6:16:7c:f0:a8:5d:69:9c:31:76:d7:11:90:f9:29:e9:d6:d5: 2d:3c:f6:f7:3b:01:bc:60:31:d9:6f:ef:7c:d1:bc:0a:18:39: 42:a1:cb:14:36:6b:d0:7c:8d:bf:c7:58:7e:4e:94:48:c5:e7: 9c:db:db:89:ba:91:2b:f8:4d:e4:1e:47:f8:02:9a:7e:1e:0d: 59:ed:ae:02:f5:04:bd:6b:02:1c:d2:87:28:88:65:d7:19:95: 4f:d0:c7:14:e2:89:95:36:d1:4d:f7:9e:2f:93:22:d4:26:98: 7e:17:f7:ea:83:2b:b3:7e:5c:dc:66:90:49:d4:9c:d5:61:2f: 2e:51:a8:fd -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUamgtKnALN2/5gPYAvXbhoLIQFCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjA5MDIwMTMyMjJaFw0yNzA5MDEwMTM3MjJaMDMxMTAvBgNV BAMTKDc1Mzk5OTBFRTdCNTVCNDc1MkM3MEJEMzQyODMyRTE2OEJCRUZCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWXvgJDiSoiyceOJGkATFqqzs AoqtNyryUJqjVe+ktJVFHz9wQYzYVRtXJO2M5byQ2ltwh5KdC6jyHn5sGx74nJx4 9FrdDKlhzI6MAJG9Ci3UwlL2y+zuQDGfaDAvIjJh1yjkbJkvYNFAQiTh+G/mpdKg lsBmhFpOJrpp4ePU7DubBy7xlaAUG+zYItFLptgyIBiJIuWTkIUuvXM8b0N1TVqN PzeI4tdnIvQoP2hKqRK6SS2JHkDSbKMzX/3nJPvMa6VGlsBXlDCO+eYehJHPixuN olHrC3LknJ9mmTsijvk3R68XlAh0x/4OoX8bB8Z9JIW+Ioj3nde/MFS8ZT6PAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUdTmZDue1W0dSxwvTQoMuFou++5QwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzE3NjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA ATAkAwQAO5msAwQCZwXAAwQAZxh0AwQBZxh2AwQBlvLuAwQAyllgMA0GCSqGSIb3 DQEBCwUAA4IBAQAn2uL0kvuApz8vzYenp8aFHkbWjHPSgiDoUK2nTr5dbHshj28r xzzPdJzN3URUzTEqSP2TjZcsnlcmuRz8KcaJflko67uR/XPwo2LIOz/F+ofK4Rt9 E9b9FjOkL98ZgSaeH+YgFKNMBDEpkcj9mSoZOaVgQtZ7gfLaWPTzhZ7mFnzwqF1p nDF21xGQ+Snp1tUtPPb3OwG8YDHZb+980bwKGDlCocsUNmvQfI2/x1h+TpRIxeec 29uJupEr+E3kHkf4App+Hg1Z7a4C9QS9awIc0ocoiGXXGZVP0McU4omVNtFN954v kyLUJph+F/fqgyuzflzcZpBJ1JzVYS8uUaj9 -----END CERTIFICATE-----Generated at Sat Sep 5 07:14:10 2026 by rpki-client