Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
File: AS17816.roa (raw, json)
Hash identifier: b8DqW2lRnlvNZRHsZcAe9txNInxbfWdRaGS0g0bJHkc=
Subject key identifier: 1A:BD:A2:C9:1D:EB:AB:F6:1C:2C:37:A5:01:49:75:25:98:FC:05:42
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 5B247B2F7A138EAAA13E6F8D6FDB10450398B6C0
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
Signing time: Thu 06 Aug 2026 08:59:45 +0000
ROA not before: Thu 06 Aug 2026 08:54:45 +0000
ROA not after: Thu 05 Aug 2027 08:59:45 +0000
asID: 17816
IP address blocks: 27.39.80.0/24 maxlen: 24
27.40.0.0/24 maxlen: 24
27.40.1.0/24 maxlen: 24
27.40.2.0/23 maxlen: 23
27.40.2.0/24 maxlen: 24
27.40.3.0/24 maxlen: 24
27.40.6.0/24 maxlen: 24
27.40.7.0/24 maxlen: 24
27.40.14.0/24 maxlen: 24
27.40.62.0/23 maxlen: 23
27.40.63.0/24 maxlen: 24
58.254.200.0/22 maxlen: 22
58.254.200.0/23 maxlen: 23
58.254.202.0/23 maxlen: 23
58.254.204.0/22 maxlen: 22
58.254.204.0/24 maxlen: 24
58.254.205.0/24 maxlen: 24
58.254.206.0/24 maxlen: 24
58.254.207.0/24 maxlen: 24
58.254.208.0/22 maxlen: 22
58.254.208.0/23 maxlen: 23
58.254.210.0/23 maxlen: 23
58.254.210.0/24 maxlen: 24
58.254.211.0/24 maxlen: 24
58.254.212.0/22 maxlen: 22
58.254.212.0/24 maxlen: 24
58.254.213.0/24 maxlen: 24
58.254.214.0/24 maxlen: 24
58.254.215.0/24 maxlen: 24
58.254.220.0/22 maxlen: 22
58.254.220.0/24 maxlen: 24
58.254.221.0/24 maxlen: 24
58.254.222.0/24 maxlen: 24
58.254.223.0/24 maxlen: 24
58.254.224.0/22 maxlen: 22
58.254.224.0/24 maxlen: 24
58.254.225.0/24 maxlen: 24
58.254.226.0/24 maxlen: 24
58.254.227.0/24 maxlen: 24
58.254.228.0/22 maxlen: 22
58.254.228.0/23 maxlen: 23
58.254.230.0/23 maxlen: 23
58.254.232.0/23 maxlen: 23
58.254.232.0/24 maxlen: 24
58.254.233.0/24 maxlen: 24
58.254.240.0/23 maxlen: 23
58.254.244.0/23 maxlen: 23
58.254.244.0/24 maxlen: 24
58.254.245.0/24 maxlen: 24
58.254.246.0/23 maxlen: 23
58.254.246.0/24 maxlen: 24
58.254.247.0/24 maxlen: 24
58.254.250.0/23 maxlen: 23
58.254.250.0/24 maxlen: 24
58.254.251.0/24 maxlen: 24
58.254.252.0/23 maxlen: 23
58.254.254.0/23 maxlen: 23
58.254.255.0/24 maxlen: 24
103.251.32.0/22 maxlen: 22
120.80.9.0/24 maxlen: 24
120.80.11.0/24 maxlen: 24
120.80.16.0/24 maxlen: 24
120.80.17.0/24 maxlen: 24
120.82.6.0/24 maxlen: 24
120.82.9.0/24 maxlen: 24
120.82.192.0/23 maxlen: 23
120.83.1.0/24 maxlen: 24
120.83.3.0/24 maxlen: 24
120.83.5.0/24 maxlen: 24
120.83.7.0/24 maxlen: 24
218.104.160.0/19 maxlen: 19
218.104.192.0/21 maxlen: 21
218.106.128.0/21 maxlen: 21
220.249.192.0/19 maxlen: 19
221.4.8.0/22 maxlen: 22
221.4.10.0/24 maxlen: 24
221.4.11.0/24 maxlen: 24
221.4.112.0/22 maxlen: 22
221.4.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 11:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:24:7b:2f:7a:13:8e:aa:a1:3e:6f:8d:6f:db:10:45:03:98:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Aug 6 08:54:45 2026 GMT
Not After : Aug 5 08:59:45 2027 GMT
Subject: CN=1ABDA2C91DEBABF61C2C37A50149752598FC0542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:5f:32:6c:4f:df:f4:0d:08:6e:b3:93:6a:
68:fe:9a:8b:0b:28:bb:b6:5b:fa:4d:e1:13:fd:fd:
ed:97:ef:c6:39:96:b4:dd:9f:82:c5:c3:17:82:25:
da:c3:fd:f3:c6:97:a6:1d:09:a5:91:29:88:8f:ba:
6f:bb:e3:47:03:bd:0b:6c:bf:a0:1a:07:e3:d9:3a:
61:b1:91:ef:15:a9:cd:94:13:a8:6c:31:d6:15:a3:
4a:df:4f:ee:d3:8b:8c:6b:64:f3:d5:14:f8:c9:1f:
60:e5:8d:bd:20:50:f0:c7:08:98:7e:11:16:85:9b:
b7:66:5d:77:63:97:5e:fb:cb:44:c7:eb:6c:52:4b:
2b:19:b9:16:a8:68:db:3a:7a:92:9b:2b:9b:c0:50:
60:56:99:32:45:de:a7:ef:6b:bc:ff:9a:0b:70:33:
82:9d:2d:6b:7f:1a:0a:dc:0f:ee:66:e8:b4:c6:75:
0c:a7:d6:85:0c:bf:a8:bd:e7:aa:38:21:00:3c:26:
17:90:bc:cb:f5:85:3b:a8:3a:84:97:5b:04:44:7b:
e4:fa:7f:d8:b3:9b:59:a2:31:50:27:7d:5e:da:8f:
8e:05:2e:09:63:d0:eb:b9:1b:0e:52:64:6f:d3:b2:
04:38:34:e9:07:cf:d6:ec:b8:38:9a:ed:11:86:d3:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:A2:C9:1D:EB:AB:F6:1C:2C:37:A5:01:49:75:25:98:FC:05:42
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.39.80.0/24
27.40.0.0/22
27.40.6.0/23
27.40.14.0/24
27.40.62.0/23
58.254.200.0-58.254.215.255
58.254.220.0-58.254.233.255
58.254.240.0/23
58.254.244.0/22
58.254.250.0-58.254.255.255
103.251.32.0/22
120.80.9.0/24
120.80.11.0/24
120.80.16.0/23
120.82.6.0/24
120.82.9.0/24
120.82.192.0/23
120.83.1.0/24
120.83.3.0/24
120.83.5.0/24
120.83.7.0/24
218.104.160.0-218.104.199.255
218.106.128.0/21
220.249.192.0/19
221.4.8.0/22
221.4.112.0/22
221.4.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:8f:66:ed:0f:65:eb:85:91:ef:0b:87:40:c7:28:4f:ce:90:
0b:a2:3f:19:02:95:02:74:b9:8f:b9:b0:db:c8:50:cd:47:0a:
4b:8a:20:28:ba:8a:1a:97:79:a4:c5:4c:7f:44:f3:5d:93:96:
6b:e6:3f:1a:11:9b:73:de:ac:82:94:81:54:6f:07:ff:b4:67:
64:ba:26:74:df:f1:64:a8:ed:3b:e0:46:e4:e9:4e:9e:91:cb:
c5:86:4c:11:d6:f6:84:91:ef:f8:2d:7f:a2:c9:f0:06:2b:bb:
cc:22:42:79:76:35:60:60:40:f5:4b:ed:af:9b:ac:1b:ea:59:
54:48:fe:72:95:71:3b:5b:57:70:b2:c9:73:6f:01:3c:ae:13:
5d:9d:f5:29:2e:85:10:07:35:56:5a:e9:08:fe:e9:66:7f:a8:
23:13:f3:9a:1a:37:90:b6:d0:a1:53:cd:51:1e:27:cc:53:81:
e4:d3:aa:22:7f:e9:04:78:92:ec:44:3d:ff:59:a1:c3:7d:bd:
31:cd:ff:c3:4d:48:09:5e:3a:f4:11:1c:31:68:aa:0c:7e:98:
bc:4e:e9:d1:14:cb:eb:53:ee:e2:ec:b3:5b:82:8f:e0:50:6f:
42:fd:1a:c7:b7:40:22:9d:c1:f9:93:ff:c5:68:29:ae:07:c8:
d3:c7:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:09:24 2026 by rpki-client