$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17621.roa File: AS17621.roa (raw, json) Hash identifier: J0mSoqtS5pOIbu4ECly7S2Y2L/DvZDMn3XgXHbXtQhE= Subject key identifier: E8:B1:05:CA:DE:C7:90:AE:32:F5:3D:01:B8:DC:35:BE:4C:3D:F5:77 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 27F4C97BC22716B716CB0B5568260CB3AF3E8C2C Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17621.roa Signing time: Mon 18 May 2026 03:32:42 +0000 ROA not before: Mon 18 May 2026 03:27:42 +0000 ROA not after: Mon 17 May 2027 03:32:42 +0000 asID: 17621 IP address blocks: 120.132.128.0/17 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.133.240.0/20 maxlen: 32 182.175.240.0/23 maxlen: 32 182.175.242.0/23 maxlen: 32 211.148.17.0/24 maxlen: 32 211.148.18.0/23 maxlen: 32 211.148.20.0/22 maxlen: 32 211.148.24.0/23 maxlen: 32 211.148.27.0/24 maxlen: 32 211.148.28.0/22 maxlen: 32 2403:a200:a1ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f4:c9:7b:c2:27:16:b7:16:cb:0b:55:68:26:0c:b3:af:3e:8c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:27:42 2026 GMT Not After : May 17 03:32:42 2027 GMT Subject: CN=E8B105CADEC790AE32F53D01B8DC35BE4C3DF577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:16:45:25:f9:46:43:0a:47:79:b9:e5:21: ab:3c:7a:01:05:d7:7b:d7:e6:c4:5c:44:75:49:89: 1a:05:9e:3b:b0:70:c3:30:26:d4:56:ef:43:46:24: 1d:53:cd:bf:4a:c1:41:c0:78:cd:65:30:8d:d8:94: dd:f0:ab:6a:96:ff:06:9a:d6:a8:4e:2f:b2:ff:e7: c1:5a:2f:85:f6:14:85:ee:c3:0c:62:53:ab:43:54: 00:43:24:59:61:56:e7:de:7b:01:cd:ba:b2:62:31: df:6c:f0:e6:ca:e3:4a:fc:8c:71:fb:0e:04:5e:95: d4:85:61:6c:e8:bb:d1:ab:65:fa:48:0e:a5:be:05: 2a:d0:7d:9e:b2:60:42:53:48:cf:3d:43:07:a7:ba: 8f:36:89:7e:f2:e0:84:18:9e:12:2b:16:5c:53:71: fd:9f:61:8d:e6:d7:60:aa:86:6a:d9:b4:ad:2c:5e: ac:50:6b:68:f1:0d:19:a7:1d:ce:34:48:c1:41:bb: 3b:69:09:6d:0b:55:14:25:f1:21:18:4f:bf:bb:e3: 96:5a:9a:e3:66:f6:90:eb:5e:08:04:a1:a7:ca:63: 93:99:fc:90:80:07:f0:1e:91:d0:89:c4:3c:a3:c9: 6f:d4:64:ae:4b:5f:0e:43:20:eb:b5:fc:4f:65:0e: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B1:05:CA:DE:C7:90:AE:32:F5:3D:01:B8:DC:35:BE:4C:3D:F5:77 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.128.0/17 120.133.192.0/18 182.175.240.0/22 211.148.17.0-211.148.25.255 211.148.27.0-211.148.31.255 IPv6: 2403:a200:a1ff::/48 Signature Algorithm: sha256WithRSAEncryption cc:46:1e:f0:f2:85:dc:99:0d:0a:37:53:5a:11:e2:c7:eb:e3: 9e:8a:1e:5a:5f:2e:86:a5:ac:05:eb:66:1c:f2:25:0c:e5:51: b5:b6:02:a2:35:9a:55:f8:c8:ab:3c:d8:11:7a:9a:be:22:67: 37:88:79:1e:4b:61:92:21:d8:b4:de:78:08:98:b3:6f:60:0c: 80:d7:05:95:ea:5b:94:cf:7e:91:a5:eb:fb:56:4f:61:98:a1: 1c:fa:2c:8b:76:c2:56:f8:0d:4b:72:ba:10:e1:fd:ae:a9:59: d0:47:11:f1:11:85:cc:eb:fc:1f:d6:1e:c1:45:e6:b2:dc:c2: a1:4e:67:86:8d:0a:09:85:df:83:26:8f:ef:2d:13:f8:62:2f: e1:5a:b1:96:cb:41:bd:cc:42:63:67:17:20:9d:23:aa:bd:be: 94:03:62:17:9a:57:95:5c:19:ed:d8:09:3c:62:d8:af:79:55: 61:03:70:36:23:9e:ea:b8:4a:5f:b0:8c:40:be:71:0f:87:8e: bd:31:ba:96:87:16:7b:76:2c:4d:6e:b7:b6:9e:c5:f8:a7:44: d5:e8:62:1e:68:13:3c:8c:c0:41:ce:0b:d1:76:94:5a:9f:e6: ce:f4:61:8b:bb:bb:ce:24:56:4e:06:a6:05:7b:fd:9f:63:c1: 72:8c:ff:29 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUJ/TJe8InFrcWywtVaCYMs68+jCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzI3NDJaFw0yNzA1MTcwMzMyNDJaMDMxMTAvBgNV BAMTKEU4QjEwNUNBREVDNzkwQUUzMkY1M0QwMUI4REMzNUJFNEMzREY1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7hZFJflGQwpHebnlIas8egEF 13vX5sRcRHVJiRoFnjuwcMMwJtRW70NGJB1Tzb9KwUHAeM1lMI3YlN3wq2qW/waa 1qhOL7L/58FaL4X2FIXuwwxiU6tDVABDJFlhVufeewHNurJiMd9s8ObK40r8jHH7 DgReldSFYWzou9GrZfpIDqW+BSrQfZ6yYEJTSM89Qwenuo82iX7y4IQYnhIrFlxT cf2fYY3m12CqhmrZtK0sXqxQa2jxDRmnHc40SMFBuztpCW0LVRQl8SEYT7+745Za muNm9pDrXggEoafKY5OZ/JCAB/AekdCJxDyjyW/UZK5LXw5DIOu1/E9lDno1AgMB AAGjggIcMIICGDAdBgNVHQ4EFgQU6LEFyt7HkK4y9T0BuNw1vkw99XcwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzE3NjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIA ATAuAwQHeISAAwQGeIXAAwQCtq/wMAwDBADTlBEDBAHTlBgwDAMEANOUGwMEBdOU ADAPBAIAAjAJAwcAJAOiAKH/MA0GCSqGSIb3DQEBCwUAA4IBAQDMRh7w8oXcmQ0K N1NaEeLH6+Oeih5aXy6GpawF62Yc8iUM5VG1tgKiNZpV+MirPNgRepq+Imc3iHke S2GSIdi03ngImLNvYAyA1wWV6luUz36Rpev7Vk9hmKEc+iyLdsJW+A1LcroQ4f2u qVnQRxHxEYXM6/wf1h7BReay3MKhTmeGjQoJhd+DJo/vLRP4Yi/hWrGWy0G9zEJj ZxcgnSOqvb6UA2IXmleVXBnt2Ak8YtiveVVhA3A2I57quEpfsIxAvnEPh469MbqW hxZ7dixNbre2nsX4p0TV6GIeaBM8jMBBzgvRdpRan+bO9GGLu7vOJFZOBqYFe/2f Y8FyjP8p -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:45 2026 by rpki-client