$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17816.roa File: AS17816.roa (raw, json) Hash identifier: yNyqiknaERwlFC5jEbmXaob8DK8roJof5Sh3uHuqBdg= Subject key identifier: 15:BF:1B:6D:E8:AE:31:D9:C9:B5:B2:B7:51:7D:8D:3D:81:67:18:81 Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 292BA904AA04474515B40EA0B0C91BDD0900541D Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17816.roa Signing time: Thu 09 Jul 2026 06:49:56 +0000 ROA not before: Thu 09 Jul 2026 06:44:56 +0000 ROA not after: Thu 08 Jul 2027 06:49:56 +0000 asID: 17816 IP address blocks: 157.122.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 03:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2b:a9:04:aa:04:47:45:15:b4:0e:a0:b0:c9:1b:dd:09:00:54:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: Jul 9 06:44:56 2026 GMT Not After : Jul 8 06:49:56 2027 GMT Subject: CN=15BF1B6DE8AE31D9C9B5B2B7517D8D3D81671881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:ae:fe:c4:89:58:0c:04:e3:5e:72:c7:e0: ad:24:f1:a8:b1:23:1f:40:86:6d:1f:b1:d7:d6:7c: 46:5b:54:21:fc:32:aa:ad:15:7a:68:32:d0:cb:dc: d6:c8:39:72:6a:b5:56:66:92:08:66:cb:4c:9e:b2: 67:4e:28:e6:99:c3:10:8e:fa:75:8a:4c:45:f1:f5: 0f:f3:23:42:6f:0d:65:58:ff:55:a6:0a:4c:5d:4b: 81:96:a2:7c:24:c4:2a:51:24:69:bf:4c:7f:95:ff: b3:9e:53:50:51:94:0a:21:37:21:10:60:50:d0:81: cc:c7:de:b2:29:67:b8:41:b2:17:9b:7c:de:38:db: 25:60:b4:ab:4a:26:1c:89:18:5b:56:7f:3c:a8:43: ee:93:5c:5f:50:85:ff:e7:62:ba:da:d9:1a:aa:e6: 3d:19:36:27:29:f2:02:83:a6:91:80:f0:a7:d6:fd: 51:8b:45:1a:a4:0f:08:01:e4:7d:4c:02:ee:7b:1b: f4:81:bc:05:f9:45:c0:ef:4e:af:aa:e3:09:b2:64: e7:06:1c:4d:81:b2:b1:c0:ca:52:17:33:62:ca:c9: 99:a5:74:77:bc:c1:47:01:61:ed:ad:56:26:d2:c6: 30:8d:31:74:ea:17:a1:bf:bf:9f:62:f4:74:d8:d5: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BF:1B:6D:E8:AE:31:D9:C9:B5:B2:B7:51:7D:8D:3D:81:67:18:81 X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.122.152.0/22 Signature Algorithm: sha256WithRSAEncryption 50:dd:54:ad:ee:be:1a:90:e0:b3:36:74:8c:90:1c:2c:8b:c8: d0:46:34:8f:6d:41:6c:b6:89:71:b9:c4:18:b6:dd:1d:28:01: f6:ff:87:51:9a:b8:06:ee:1d:1f:ff:cb:89:a0:65:6c:b5:ba: b9:d4:93:29:f6:48:d7:d7:a6:c7:c6:40:e6:d5:23:0d:f9:c7: 65:f6:a2:8d:f4:be:e1:f5:39:6d:d5:4d:39:a5:44:a8:c3:c4: 33:80:cd:19:50:40:17:0b:94:76:74:c3:53:84:0c:24:cf:19: 88:94:1b:73:13:1e:3f:4f:3d:b3:e9:40:e0:2b:a1:b4:1e:7b: cf:97:b1:e7:03:6a:17:b8:1a:00:b9:6c:71:08:fc:c2:1e:fe: 7b:1f:f2:45:f5:b0:b1:38:42:44:41:6b:3f:28:07:7c:8a:1d: 19:f4:94:6b:8c:54:08:d1:b5:30:55:4f:57:00:19:86:ee:02: 97:95:8d:67:42:c1:bb:3c:db:a1:33:e9:3a:27:2e:35:1b:23: 6b:95:4f:53:9d:f8:2c:2d:30:d7:62:4d:e9:56:19:36:b1:23: aa:c9:f5:d3:94:46:c9:3a:59:96:eb:5b:c0:6c:f3:30:2a:a3: 96:13:aa:47:66:53:44:a7:e8:a6:7b:a2:03:c0:34:49:2f:ea: 8d:eb:d1:81 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUKSupBKoER0UVtA6gsMkb3QkAVB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDcwOTA2NDQ1NloX DTI3MDcwODA2NDk1NlowMzExMC8GA1UEAxMoMTVCRjFCNkRFOEFFMzFEOUM5QjVC MkI3NTE3RDhEM0Q4MTY3MTg4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFyrv7EiVgMBONecsfgrSTxqLEjH0CGbR+x19Z8RltUIfwyqq0Vemgy0Mvc 1sg5cmq1VmaSCGbLTJ6yZ04o5pnDEI76dYpMRfH1D/MjQm8NZVj/VaYKTF1LgZai fCTEKlEkab9Mf5X/s55TUFGUCiE3IRBgUNCBzMfesilnuEGyF5t83jjbJWC0q0om HIkYW1Z/PKhD7pNcX1CF/+diutrZGqrmPRk2JynyAoOmkYDwp9b9UYtFGqQPCAHk fUwC7nsb9IG8BflFwO9Or6rjCbJk5wYcTYGyscDKUhczYsrJmaV0d7zBRwFh7a1W JtLGMI0xdOoXob+/n2L0dNjVXnkCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQVvxtt 6K4x2cm1srdRfY09gWcYgTAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8wL0FTMTc4MTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKdepgwDQYJKoZIhvcNAQELBQAD ggEBAFDdVK3uvhqQ4LM2dIyQHCyLyNBGNI9tQWy2iXG5xBi23R0oAfb/h1GauAbu HR//y4mgZWy1urnUkyn2SNfXpsfGQObVIw35x2X2oo30vuH1OW3VTTmlRKjDxDOA zRlQQBcLlHZ0w1OEDCTPGYiUG3MTHj9PPbPpQOArobQee8+XsecDahe4GgC5bHEI /MIe/nsf8kX1sLE4QkRBaz8oB3yKHRn0lGuMVAjRtTBVT1cAGYbuApeVjWdCwbs8 26Ez6TonLjUbI2uVT1Od+CwtMNdiTelWGTaxI6rJ9dOURsk6WZbrW8Bs8zAqo5YT qkdmU0Sn6KZ7ogPANEkv6o3r0YE= -----END CERTIFICATE-----Generated at Sat Jul 18 04:29:14 2026 by rpki-client