$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS17621.roa File: AS17621.roa (raw, json) Hash identifier: X5hynUmFKe2yevUmf6exkuQLOdMg14WL5pJJXOTNEZI= Subject key identifier: 3D:7A:62:86:2A:F5:3A:3C:B0:F6:90:3E:DC:31:62:B6:71:57:18:F0 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 6038189D7633819836AA2F5D4C1A922681762249 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS17621.roa Signing time: Mon 20 Apr 2026 05:08:23 +0000 ROA not before: Mon 20 Apr 2026 05:03:23 +0000 ROA not after: Mon 19 Apr 2027 05:08:23 +0000 asID: 17621 IP address blocks: 103.36.136.0/24 maxlen: 24 103.36.137.0/24 maxlen: 24 103.36.138.0/24 maxlen: 24 103.36.139.0/24 maxlen: 24 103.36.168.0/24 maxlen: 24 103.36.172.0/24 maxlen: 24 103.36.173.0/24 maxlen: 24 103.238.184.0/24 maxlen: 24 2403:a100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:38:18:9d:76:33:81:98:36:aa:2f:5d:4c:1a:92:26:81:76:22:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 20 05:03:23 2026 GMT Not After : Apr 19 05:08:23 2027 GMT Subject: CN=3D7A62862AF53A3CB0F6903EDC3162B6715718F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:2b:65:1b:82:b2:cd:82:3d:fb:ee:21:64: 66:3a:f4:78:03:46:4a:dc:21:4a:85:db:fe:bf:f6: e1:ae:a6:d8:79:fc:cb:12:7d:21:e4:67:71:9b:b0: 9d:75:53:16:9f:84:7a:a1:45:82:af:78:8a:3c:40: f8:6d:d9:6d:c4:d5:0b:57:bb:f9:ca:06:2a:ca:40: 02:fc:0e:64:5c:26:08:ec:df:71:a6:5d:fe:a3:2a: cd:02:90:42:39:2a:e2:2e:fb:b7:3c:c6:be:ef:1b: 8c:55:26:d0:fb:13:b5:c6:45:95:09:63:da:b9:d6: a3:2a:52:06:6b:4f:76:68:e1:e8:8e:25:01:0d:80: d4:59:5f:fd:f4:6f:60:88:34:ad:2b:9f:e3:a7:94: 1b:1c:04:52:bb:9e:a4:c6:97:f1:36:72:0b:47:b1: 2e:14:83:78:35:b9:50:4d:92:9c:9e:df:de:de:42: 48:d0:3f:e5:ee:3f:03:76:89:7a:f1:0b:54:49:48: a0:1a:99:cd:ba:1e:39:c8:61:7c:ff:bd:a4:4a:41: 5a:ed:0a:28:6b:91:6b:5f:b2:6a:0a:ab:f5:42:b1: be:c2:af:06:7b:6b:ab:94:51:95:b2:01:85:2b:fd: e7:2e:5d:92:49:cb:1c:ea:d9:e6:c6:25:1b:b0:3a: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7A:62:86:2A:F5:3A:3C:B0:F6:90:3E:DC:31:62:B6:71:57:18:F0 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS17621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.136.0/22 103.36.168.0/24 103.36.172.0/23 103.238.184.0/24 IPv6: 2403:a100::/48 Signature Algorithm: sha256WithRSAEncryption bf:e1:90:16:71:2d:dd:ad:a6:bc:7b:d4:07:5e:b6:d9:38:4e: f9:cf:55:5d:37:fb:e8:bd:1f:5a:2b:1e:5a:27:04:02:95:e2: 12:e6:bb:05:8e:8a:6a:25:2e:07:3b:7a:28:ad:32:34:e6:07: 41:c6:d5:e6:fe:ac:d1:ad:d9:63:87:ad:ec:73:3e:ca:b7:b1: 23:11:a3:15:99:81:5e:19:c8:59:87:0c:92:a2:56:ba:10:5b: 8c:d7:11:d7:53:f7:10:e1:8d:f4:bc:d8:d1:36:6e:89:87:d0: 65:6c:f5:cd:e1:f2:62:79:8c:2a:00:49:e8:7f:ef:67:c5:70: be:1c:e3:24:1f:ac:1b:d7:65:a8:4e:79:5a:e4:69:85:30:03: 77:e5:10:89:cb:fb:a4:e7:e1:4d:05:ea:ad:1a:6c:f1:8d:4c: 15:de:47:73:c1:e1:b5:ad:13:f1:cd:33:0d:e5:fe:e1:8c:01: 96:81:52:9a:46:f3:50:62:f0:c6:f5:8f:f2:92:40:a4:04:bb: db:5a:d4:e6:c0:2f:5d:af:ab:4c:af:9f:36:5c:63:af:82:c0: 9e:8a:e3:67:37:96:0b:e0:92:6a:68:8c:12:ff:db:29:b3:60: c4:42:6a:a4:41:49:96:c1:43:17:b6:5b:d2:d4:7c:af:bf:f8: e5:4a:87:5d -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUYDgYnXYzgZg2qi9dTBqSJoF2IkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MjAwNTAzMjNaFw0yNzA0MTkwNTA4MjNaMDMxMTAvBgNV BAMTKDNEN0E2Mjg2MkFGNTNBM0NCMEY2OTAzRURDMzE2MkI2NzE1NzE4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBCtlG4KyzYI9++4hZGY69HgD RkrcIUqF2/6/9uGupth5/MsSfSHkZ3GbsJ11UxafhHqhRYKveIo8QPht2W3E1QtX u/nKBirKQAL8DmRcJgjs33GmXf6jKs0CkEI5KuIu+7c8xr7vG4xVJtD7E7XGRZUJ Y9q51qMqUgZrT3Zo4eiOJQENgNRZX/30b2CINK0rn+OnlBscBFK7nqTGl/E2cgtH sS4Ug3g1uVBNkpye397eQkjQP+XuPwN2iXrxC1RJSKAamc26HjnIYXz/vaRKQVrt CihrkWtfsmoKq/VCsb7CrwZ7a6uUUZWyAYUr/ecuXZJJyxzq2ebGJRuwOgldAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUPXpihir1Ojyw9pA+3DFitnFXGPAwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9BUzE3NjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIA ATAYAwQCZySIAwQAZySoAwQBZySsAwQAZ+64MA8EAgACMAkDBwAkA6EAAAAwDQYJ KoZIhvcNAQELBQADggEBAL/hkBZxLd2tprx71Adettk4TvnPVV03++i9H1orHlon BAKV4hLmuwWOimolLgc7eiitMjTmB0HG1eb+rNGt2WOHrexzPsq3sSMRoxWZgV4Z yFmHDJKiVroQW4zXEddT9xDhjfS82NE2bomH0GVs9c3h8mJ5jCoASeh/72fFcL4c 4yQfrBvXZahOeVrkaYUwA3flEInL+6Tn4U0F6q0abPGNTBXeR3PB4bWtE/HNMw3l /uGMAZaBUppG81Bi8Mb1j/KSQKQEu9ta1ObAL12vq0yvnzZcY6+CwJ6K42c3lgvg kmpojBL/2ymzYMRCaqRBSZbBQxe2W9LUfK+/+OVKh10= -----END CERTIFICATE-----Generated at Mon Apr 20 14:59:14 2026 by rpki-client