Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
File: AS17621.roa (raw, json)
Hash identifier: r9ikkDfmsklmAt3T+Waeq+pVM7e+7XxxSqSzo4auyr8=
Subject key identifier: DF:FA:4B:96:35:F4:A2:CA:C3:CE:4C:3E:44:62:67:8C:47:4B:28:44
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 77E1CD1665FCD0F18795C2FF2F5A1AC0409EBDA1
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
Signing time: Fri 07 Aug 2026 06:05:40 +0000
ROA not before: Fri 07 Aug 2026 06:00:40 +0000
ROA not after: Fri 06 Aug 2027 06:05:40 +0000
asID: 17621
IP address blocks: 139.226.0.0/16 maxlen: 16
139.226.32.0/19 maxlen: 19
139.226.96.0/19 maxlen: 19
139.227.0.0/16 maxlen: 16
139.227.166.0/24 maxlen: 24
139.227.224.0/19 maxlen: 19
139.227.224.0/24 maxlen: 24
139.227.225.0/24 maxlen: 24
140.206.0.0/16 maxlen: 16
140.206.32.0/19 maxlen: 19
140.206.54.0/24 maxlen: 24
140.206.96.0/19 maxlen: 19
140.206.128.0/19 maxlen: 19
140.206.205.0/24 maxlen: 24
140.206.206.0/24 maxlen: 24
140.206.207.0/24 maxlen: 24
140.206.210.0/24 maxlen: 24
140.207.0.0/16 maxlen: 16
140.207.62.0/24 maxlen: 24
140.207.63.0/24 maxlen: 24
140.207.98.0/24 maxlen: 24
140.207.132.0/24 maxlen: 24
140.207.133.0/24 maxlen: 24
140.207.136.0/23 maxlen: 23
140.207.161.0/24 maxlen: 24
140.207.190.0/24 maxlen: 24
140.207.192.0/24 maxlen: 24
140.207.193.0/24 maxlen: 24
140.207.194.0/24 maxlen: 24
140.207.195.0/24 maxlen: 24
140.207.197.0/24 maxlen: 24
140.207.198.0/24 maxlen: 24
140.207.199.0/24 maxlen: 24
140.207.200.0/24 maxlen: 24
140.207.201.0/24 maxlen: 24
140.207.202.0/24 maxlen: 24
140.207.203.0/24 maxlen: 24
140.207.204.0/24 maxlen: 24
140.207.205.0/24 maxlen: 24
140.207.206.0/24 maxlen: 24
140.207.207.0/24 maxlen: 24
140.207.232.0/24 maxlen: 24
140.207.234.0/24 maxlen: 24
140.207.236.0/24 maxlen: 24
140.207.242.0/24 maxlen: 24
140.207.243.0/24 maxlen: 24
140.207.247.0/24 maxlen: 24
140.207.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 08:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e1:cd:16:65:fc:d0:f1:87:95:c2:ff:2f:5a:1a:c0:40:9e:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Aug 7 06:00:40 2026 GMT
Not After : Aug 6 06:05:40 2027 GMT
Subject: CN=DFFA4B9635F4A2CAC3CE4C3E4462678C474B2844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:00:18:62:8e:60:88:b9:df:3a:8d:e8:aa:
5f:0d:c0:48:4d:43:57:e7:aa:a7:52:8d:e6:25:08:
77:1b:c9:76:02:ec:ad:8e:55:02:1e:90:fc:07:d5:
94:d6:77:1a:3e:f5:ba:20:97:74:a4:83:a7:1c:ad:
77:1b:e1:d6:d8:6c:25:7f:48:e7:67:69:20:0d:0b:
82:21:4c:df:85:ac:7a:52:ac:c9:f5:a0:82:52:3b:
c3:bf:c2:ca:bc:f4:c9:93:c4:14:5c:b3:df:9b:b6:
48:77:f3:0a:fa:e4:94:85:93:80:d3:55:f2:0b:de:
ee:fe:fb:9a:13:7c:24:ef:8b:63:59:8c:ce:2e:f9:
59:e8:ec:9f:a2:63:34:7c:ec:7a:80:30:e8:d6:cb:
5a:b9:d8:20:f9:e5:f2:56:31:80:db:0d:ca:6f:7c:
23:54:f4:6b:ae:83:d3:5d:5a:91:3d:aa:09:13:cb:
0f:27:fd:82:34:39:99:3a:1f:18:86:6f:1e:d0:3b:
e6:68:dd:a9:39:d9:62:33:66:af:65:80:8e:53:ef:
ce:f5:d2:5f:5b:0c:a8:ba:e4:c5:07:3c:df:1f:71:
c6:a9:fe:b7:c9:d0:d0:19:5f:3e:69:ca:7b:bf:87:
35:ee:92:ab:d9:aa:15:eb:b9:b5:97:37:31:0c:d3:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:4B:96:35:F4:A2:CA:C3:CE:4C:3E:44:62:67:8C:47:4B:28:44
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.226.0.0/15
140.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4e:b9:d2:f7:f2:ad:67:b3:1e:a2:59:ce:ba:d4:5a:82:18:0b:
58:6e:01:f2:8c:41:4c:ce:3d:67:07:40:96:f6:f7:5a:ca:14:
f0:75:e7:41:88:2e:36:47:47:d0:93:1c:c1:62:e9:11:07:d7:
ca:a9:12:df:94:a0:f4:98:b4:46:bb:2b:c3:40:db:35:e8:22:
9a:22:d0:cd:10:d7:44:9f:7b:c9:b1:66:e7:da:b9:86:2e:36:
1e:5f:83:ee:a0:98:7a:5d:42:6d:87:0d:d0:6f:8b:79:a5:fe:
e7:a3:19:b6:df:98:3b:e4:72:de:d9:76:0d:20:1f:ec:fe:6e:
31:e5:fd:40:54:bd:0b:e4:33:07:63:80:83:b2:c9:a6:6b:2a:
ad:4a:64:a3:53:6f:f2:c1:ae:06:8d:8c:61:92:92:59:ca:db:
4c:fd:e4:6e:c9:fa:15:c7:5d:6a:d7:ce:8f:bd:59:df:81:f7:
b2:53:30:4c:03:51:0e:f9:ed:de:b2:da:64:54:01:fc:39:0d:
8d:d9:7f:b8:72:35:b4:8f:da:8e:2c:e7:73:11:5d:98:8d:a0:
40:f1:43:28:38:24:34:8a:8a:b0:76:52:7d:e1:05:b2:95:cf:
6d:73:89:0d:ce:51:12:04:ae:e4:ff:ae:7b:74:ff:67:86:97:
87:e9:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:09 2026 by rpki-client