Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17623.roa
File: AS17623.roa (raw, json)
Hash identifier: ok0SVNffWIUl+8bljlGbmUGi8UJwBf/riL8wEf8lmtc=
Subject key identifier: 0F:8F:EC:B7:D4:D3:36:47:92:0F:E1:C0:52:51:98:B1:5B:79:F6:3F
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 54E9E7406D37DEB110750FF197A5D6DF7D2BBC04
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17623.roa
Signing time: Thu 09 Jul 2026 07:12:53 +0000
ROA not before: Thu 09 Jul 2026 07:07:53 +0000
ROA not after: Thu 08 Jul 2027 07:12:53 +0000
asID: 17623
IP address blocks: 157.61.12.0/23 maxlen: 23
157.61.44.0/23 maxlen: 23
157.122.0.0/20 maxlen: 20
157.122.0.0/24 maxlen: 24
157.122.1.0/24 maxlen: 24
157.122.2.0/24 maxlen: 24
157.122.3.0/24 maxlen: 24
157.122.4.0/24 maxlen: 24
157.122.5.0/24 maxlen: 24
157.122.6.0/24 maxlen: 24
157.122.7.0/24 maxlen: 24
157.122.8.0/24 maxlen: 24
157.122.9.0/24 maxlen: 24
157.122.10.0/24 maxlen: 24
157.122.11.0/24 maxlen: 24
157.122.12.0/24 maxlen: 24
157.122.13.0/24 maxlen: 24
157.122.14.0/24 maxlen: 24
157.122.16.0/20 maxlen: 20
157.122.32.0/20 maxlen: 20
157.122.80.0/21 maxlen: 21
157.122.80.0/24 maxlen: 24
157.122.81.0/24 maxlen: 24
157.122.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e9:e7:40:6d:37:de:b1:10:75:0f:f1:97:a5:d6:df:7d:2b:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jul 9 07:07:53 2026 GMT
Not After : Jul 8 07:12:53 2027 GMT
Subject: CN=0F8FECB7D4D33647920FE1C0525198B15B79F63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:43:c3:ae:f7:2e:ca:a4:d1:6a:9d:7f:b7:
a6:ac:1d:93:17:3d:72:d5:7a:a1:e3:8d:8e:85:b1:
f8:f4:af:a3:a2:f9:2f:68:c0:f7:f2:20:61:e0:84:
33:7c:19:68:50:6a:4c:82:74:3d:a5:2e:14:e4:8a:
50:5a:62:d7:ca:f2:ab:96:75:93:c0:5c:ea:d9:0b:
20:6a:0b:cb:73:92:c0:ad:ba:37:d8:56:b5:78:13:
69:6a:dc:3b:ec:99:f0:7a:5c:be:20:bf:7e:06:a2:
fa:95:94:10:4d:06:35:3c:48:7f:6f:bc:bc:73:1e:
e4:41:07:f6:b7:79:2d:ba:4f:64:0c:98:05:02:ce:
6f:4d:dd:3b:95:d9:b5:63:db:a3:b2:8c:59:86:34:
04:7d:f4:e3:62:ae:1a:ab:e7:2f:ed:ed:94:c3:c2:
da:16:0d:ea:2e:64:e6:d4:0f:44:f8:fa:05:98:be:
e3:87:b0:7d:29:d2:b6:4e:06:64:a3:e0:9b:6a:c4:
8d:21:d9:a5:02:19:49:c8:44:1c:36:aa:4c:81:ae:
d9:25:68:95:d3:78:d1:d7:2f:e2:10:f8:93:e3:cf:
0b:90:46:d3:c7:c1:8e:4e:13:dc:c0:d5:40:8f:11:
3e:c9:f3:85:cf:fd:3f:b0:ae:6e:74:8d:aa:62:e7:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:EC:B7:D4:D3:36:47:92:0F:E1:C0:52:51:98:B1:5B:79:F6:3F
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.61.12.0/23
157.61.44.0/23
157.122.0.0-157.122.47.255
157.122.80.0/21
Signature Algorithm: sha256WithRSAEncryption
79:1c:eb:dd:6b:4f:ab:52:34:62:61:a5:e8:a5:5c:de:65:cc:
2a:13:4c:c3:b1:c4:5d:ca:5a:97:45:00:9e:90:8d:f2:8c:27:
82:06:bb:60:6c:99:6d:2f:52:67:37:3f:79:1f:43:b4:05:24:
42:11:92:fb:73:a3:f5:39:a7:11:5b:25:fe:5f:b2:1d:73:b5:
79:dc:44:fb:20:4b:b8:9c:94:64:57:3b:8a:2c:e6:8e:08:e1:
60:f2:4c:26:0d:54:90:35:b7:a2:8d:45:5b:e7:1f:6b:a5:88:
b1:07:01:90:17:23:28:cf:0f:3d:50:ae:d9:7a:cd:12:d4:a3:
6b:84:fc:5b:9b:b9:95:0b:16:d8:00:13:e3:74:a0:9e:86:44:
21:b7:b5:52:76:ab:4d:42:fa:37:4f:7e:84:9d:a6:3b:cc:5d:
fd:a8:ad:f7:d1:a6:4a:b4:25:6d:bd:d4:0d:c8:6b:30:d4:24:
8f:2c:66:a6:da:b8:51:0b:7b:8a:71:cf:a6:ec:63:db:b2:22:
fc:7e:b6:4e:dd:bb:c1:b7:17:71:04:63:3d:f0:83:ae:23:b8:
f9:5e:ff:32:12:6e:10:eb:35:49:78:61:98:09:de:76:e7:f4:
16:91:72:82:25:8f:d8:cc:6c:e3:6b:19:5f:14:23:05:8a:6b:
a6:db:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 22:58:10 2026 by rpki-client