Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17622.roa
File: AS17622.roa (raw, json)
Hash identifier: LqBUIvzi65+1/O4FTw1ICN87DYCS8XRFtqIAicnVMBQ=
Subject key identifier: E3:55:09:08:82:F2:B2:7E:4B:22:7C:9E:9B:C3:C9:0F:E8:89:67:8B
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 7D92EA7F279604A8F567C35C97465684D5F88E12
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17622.roa
Signing time: Thu 06 Aug 2026 08:59:44 +0000
ROA not before: Thu 06 Aug 2026 08:54:44 +0000
ROA not after: Thu 05 Aug 2027 08:59:44 +0000
asID: 17622
IP address blocks: 157.61.0.0/23 maxlen: 23
157.61.42.0/23 maxlen: 23
157.122.32.0/19 maxlen: 19
157.122.48.0/20 maxlen: 20
157.122.48.0/21 maxlen: 21
157.122.56.0/21 maxlen: 21
157.122.62.0/24 maxlen: 24
157.122.64.0/20 maxlen: 20
157.122.64.0/21 maxlen: 21
157.122.64.0/23 maxlen: 23
157.122.64.0/24 maxlen: 24
157.122.70.0/24 maxlen: 24
157.122.72.0/21 maxlen: 21
157.122.88.0/21 maxlen: 21
157.122.136.0/21 maxlen: 21
157.122.136.0/22 maxlen: 22
157.122.140.0/22 maxlen: 22
157.148.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 08:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:92:ea:7f:27:96:04:a8:f5:67:c3:5c:97:46:56:84:d5:f8:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Aug 6 08:54:44 2026 GMT
Not After : Aug 5 08:59:44 2027 GMT
Subject: CN=E355090882F2B27E4B227C9E9BC3C90FE889678B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:7e:ca:54:9a:3b:e4:6c:89:bb:95:a8:15:
b4:27:8b:37:eb:c8:b4:35:7c:5b:00:9e:f4:31:44:
57:02:d4:f5:a1:22:3a:75:04:ed:7b:77:51:f7:40:
3d:7e:86:33:cb:76:a5:ae:13:c6:8c:bc:1d:f0:50:
41:f9:3e:e0:68:72:0b:39:54:8f:aa:17:17:3c:f6:
e1:e7:66:8c:38:5c:ca:a8:e2:1b:47:71:78:af:8a:
af:d2:b4:2d:05:ed:41:b9:0c:b9:88:68:4c:18:3b:
84:f7:10:b3:63:95:60:63:c0:cc:5f:97:6d:c1:83:
ac:d1:c5:25:7e:3f:43:57:05:20:96:9f:aa:56:22:
57:29:09:da:e2:6b:e0:84:d1:05:96:bd:c9:0c:22:
6f:f0:cc:9e:58:4f:c7:9b:3a:38:cd:f9:99:4f:27:
6c:73:73:f1:c1:24:f6:56:e6:a8:11:fc:a4:da:52:
d5:9a:40:28:40:80:fc:fc:ad:5d:4e:02:ba:ef:10:
1c:21:56:9a:05:10:79:58:2b:4f:a0:48:65:0e:62:
c4:9c:b7:b8:19:89:fb:e6:22:fb:d6:f4:af:f1:22:
49:de:54:39:ab:65:9d:7f:0d:a8:f2:57:08:a3:5f:
f5:3f:0b:d5:15:b6:20:74:83:8c:b5:38:bc:a6:c4:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:09:08:82:F2:B2:7E:4B:22:7C:9E:9B:C3:C9:0F:E8:89:67:8B
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.61.0.0/23
157.61.42.0/23
157.122.32.0-157.122.79.255
157.122.88.0/21
157.122.136.0/21
157.148.160.0/21
Signature Algorithm: sha256WithRSAEncryption
91:cb:1c:ee:5c:27:7f:6d:e1:cf:21:c9:b5:28:f9:f8:76:17:
61:a4:65:d9:41:69:67:2f:85:1e:1d:0a:02:bc:cb:99:5a:d5:
7b:f4:d6:51:90:d9:e2:87:fc:50:c0:88:42:f8:ba:6a:77:b2:
bc:a2:25:02:7a:ee:4a:93:c5:ad:ee:27:c5:fe:9d:9d:56:26:
69:68:ef:c1:fc:21:b3:4d:dc:fa:81:ac:70:83:0a:5e:78:34:
f8:8f:d8:e7:c9:46:ea:49:c1:a2:97:0f:71:fd:b9:d3:84:5c:
df:cb:64:6d:d0:ce:e7:d0:29:92:86:c1:e3:6b:e0:2b:24:b1:
bb:32:15:1c:1d:86:19:48:61:0f:e0:af:29:14:45:7e:2f:73:
c7:ba:93:71:45:a9:15:23:56:90:73:3e:77:8a:d9:20:df:56:
7f:43:1d:a5:9e:fa:57:36:37:04:94:df:b1:05:dc:9e:10:7f:
26:d0:37:07:ba:0c:f6:6e:56:f8:97:96:61:5c:6e:4e:3d:fc:
25:84:2f:5b:1e:82:bd:4c:17:2c:d4:e8:66:6e:49:9a:56:40:
c4:74:4d:e6:e4:59:ec:35:d1:64:c8:7f:22:1d:0c:bb:46:a8:
c2:c0:e4:a4:eb:86:bf:cc:3c:66:74:45:18:5e:e6:62:a2:22:
8d:6e:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:26:34 2026 by rpki-client