$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17622.roa File: AS17622.roa (raw, json) Hash identifier: PlKFHLxhO02lNPofzh4875427lXAWURw4U69Gq37PDM= Subject key identifier: E7:A7:61:5C:7E:29:D5:19:BF:29:C5:73:E0:17:E3:BE:54:E5:92:68 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 026C7EE65FCA87E105804653D5A4F8E9F840CA90 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17622.roa Signing time: Mon 18 May 2026 03:31:33 +0000 ROA not before: Mon 18 May 2026 03:26:33 +0000 ROA not after: Mon 17 May 2027 03:31:33 +0000 asID: 17622 IP address blocks: 120.132.128.0/17 maxlen: 32 2403:a200:a3ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6c:7e:e6:5f:ca:87:e1:05:80:46:53:d5:a4:f8:e9:f8:40:ca:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:26:33 2026 GMT Not After : May 17 03:31:33 2027 GMT Subject: CN=E7A7615C7E29D519BF29C573E017E3BE54E59268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:fe:8a:1c:de:ec:fe:47:42:ac:c7:3b:49: c2:04:8c:d2:4e:29:b1:c4:9b:03:8c:e3:75:23:be: d0:79:c4:ff:7a:5b:ba:81:ae:90:16:bc:bf:87:a6: 8c:0b:34:d5:b5:2d:80:78:3c:7b:76:19:57:de:46: c6:fb:7a:14:c6:8c:1e:9a:04:92:21:37:ec:cd:09: 57:3d:35:bf:50:65:4a:5d:f0:8f:4d:64:05:49:c6: 6d:2a:90:e7:5f:71:ef:61:d1:2c:61:1d:2e:9a:65: d6:50:08:30:97:c0:be:63:0b:e0:78:05:57:33:1c: 61:78:ff:8f:b0:aa:62:c1:e3:0b:bf:42:6b:0c:3c: 18:9a:fd:3a:b9:3f:0b:e6:5d:03:54:64:ae:61:86: 27:0d:ea:22:fe:a7:5a:07:a6:47:c8:63:80:c6:bb: 4b:0c:79:e7:32:7b:8c:01:31:d2:af:f0:39:64:13: 14:b3:eb:da:77:c4:83:91:6a:30:aa:22:72:88:b9: 7c:c4:27:83:e0:b7:a6:97:ce:df:e4:b9:6d:67:a9: 5a:33:17:ba:b4:43:ce:e2:57:f4:8a:58:47:3d:22: 7a:88:c1:44:e1:55:b5:8b:2f:85:8a:01:d9:d7:02: a6:d9:a0:12:e3:fd:ed:97:2d:b3:8c:ad:84:ad:1b: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A7:61:5C:7E:29:D5:19:BF:29:C5:73:E0:17:E3:BE:54:E5:92:68 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.128.0/17 IPv6: 2403:a200:a3ff::/48 Signature Algorithm: sha256WithRSAEncryption 90:6b:ae:bc:a7:7c:85:3a:02:40:50:25:ac:b6:bb:8e:9d:8d: 22:7a:ef:f0:30:be:38:31:40:ee:dd:45:ae:96:e0:48:30:30: 2f:6c:5f:2a:18:1b:31:c2:ae:b2:b8:cb:eb:9b:f5:25:a2:78: 67:14:db:66:19:40:86:6d:3d:50:c9:9c:ba:78:f8:d8:26:31: 70:23:cd:da:31:a0:f9:33:47:d6:d3:dc:28:63:50:32:aa:cd: d0:c4:72:04:cf:7c:8f:8c:1d:c3:f0:94:15:45:ed:cf:8d:02: 4f:85:6f:c4:8b:bb:89:9d:96:8b:7f:92:58:3d:49:2c:20:fc: 11:56:7c:2c:49:f4:77:a4:ce:37:e3:e2:57:0f:a0:55:db:59: 90:81:04:3a:f9:f1:71:44:75:38:1a:07:59:fb:0f:df:83:e4: 31:30:9a:24:cd:18:f2:ee:c8:e1:2c:ac:eb:68:02:aa:a7:25: cf:8e:50:64:c4:67:42:a5:e1:72:78:92:01:65:30:72:3b:06: b8:0a:f8:d6:0f:20:94:68:ac:1f:f0:8c:51:eb:d6:b4:6f:5d: ee:c7:45:52:3d:ca:d4:21:66:f7:df:e2:ac:f3:9e:04:ae:c3: 66:f9:83:0c:90:0f:46:27:1a:f2:df:32:33:7e:99:25:2f:c2: 00:49:a8:b4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUAmx+5l/Kh+EFgEZT1aT46fhAypAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzI2MzNaFw0yNzA1MTcwMzMxMzNaMDMxMTAvBgNV BAMTKEU3QTc2MTVDN0UyOUQ1MTlCRjI5QzU3M0UwMTdFM0JFNTRFNTkyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQP6KHN7s/kdCrMc7ScIEjNJO KbHEmwOM43UjvtB5xP96W7qBrpAWvL+HpowLNNW1LYB4PHt2GVfeRsb7ehTGjB6a BJIhN+zNCVc9Nb9QZUpd8I9NZAVJxm0qkOdfce9h0SxhHS6aZdZQCDCXwL5jC+B4 BVczHGF4/4+wqmLB4wu/QmsMPBia/Tq5PwvmXQNUZK5hhicN6iL+p1oHpkfIY4DG u0sMeecye4wBMdKv8DlkExSz69p3xIORajCqInKIuXzEJ4Pgt6aXzt/kuW1nqVoz F7q0Q87iV/SKWEc9InqIwUThVbWLL4WKAdnXAqbZoBLj/e2XLbOMrYStG30/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU56dhXH4p1Rm/KcVz4BfjvlTlkmgwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzE3NjIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQHeISAMA8EAgACMAkDBwAkA6IAo/8wDQYJKoZIhvcNAQELBQADggEBAJBr rrynfIU6AkBQJay2u46djSJ67/AwvjgxQO7dRa6W4EgwMC9sXyoYGzHCrrK4y+ub 9SWieGcU22YZQIZtPVDJnLp4+NgmMXAjzdoxoPkzR9bT3ChjUDKqzdDEcgTPfI+M HcPwlBVF7c+NAk+Fb8SLu4mdlot/klg9SSwg/BFWfCxJ9Hekzjfj4lcPoFXbWZCB BDr58XFEdTgaB1n7D9+D5DEwmiTNGPLuyOEsrOtoAqqnJc+OUGTEZ0Kl4XJ4kgFl MHI7BrgK+NYPIJRorB/wjFHr1rRvXe7HRVI9ytQhZvff4qzzngSuw2b5gwyQD0Yn GvLfMjN+mSUvwgBJqLQ= -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:46 2026 by rpki-client