Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17897.roa
File: AS17897.roa (raw, json)
Hash identifier: YcVRA4AxIxDX75zGgXhQ990DEn3kOrcrP+AH6daUGJ8=
Subject key identifier: 7C:2B:71:75:E5:7C:82:EB:63:BB:DD:41:A8:E9:93:BD:60:03:A1:31
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 63C73FF4227A799A57345396EE9ABD8C37CCBA2A
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17897.roa
Signing time: Sun 28 Jun 2026 02:27:40 +0000
ROA not before: Sun 28 Jun 2026 02:22:40 +0000
ROA not after: Sun 27 Jun 2027 02:27:40 +0000
asID: 17897
IP address blocks: 112.100.0.0/15 maxlen: 15
112.100.92.0/24 maxlen: 24
112.100.96.0/22 maxlen: 22
112.100.100.0/24 maxlen: 24
112.100.101.0/24 maxlen: 24
219.147.71.0/24 maxlen: 24
219.147.72.0/24 maxlen: 24
219.147.128.0/20 maxlen: 20
219.147.129.0/24 maxlen: 24
219.147.130.0/24 maxlen: 24
219.147.133.0/24 maxlen: 24
219.147.136.0/24 maxlen: 24
219.147.137.0/24 maxlen: 24
219.147.144.0/20 maxlen: 20
219.147.248.0/21 maxlen: 21
240e:1::/37 maxlen: 37
240e:41::/37 maxlen: 37
240e:41:4000::/37 maxlen: 37
240e:981:1109::/48 maxlen: 48
240e:981:110a::/48 maxlen: 48
240e:981:1500::/40 maxlen: 40
240e:981:1600::/40 maxlen: 40
240e:983:103::/48 maxlen: 48
240e:983:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c7:3f:f4:22:7a:79:9a:57:34:53:96:ee:9a:bd:8c:37:cc:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 28 02:22:40 2026 GMT
Not After : Jun 27 02:27:40 2027 GMT
Subject: CN=7C2B7175E57C82EB63BBDD41A8E993BD6003A131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:4c:92:5c:23:c3:87:ff:27:64:84:64:23:
4c:89:e8:a6:ff:9f:5d:32:c4:14:07:6b:02:5e:74:
13:07:90:1f:49:37:40:0e:22:44:4e:4b:45:77:3b:
cf:27:5c:3c:55:78:3e:b2:3c:fc:5e:7e:94:5d:6e:
aa:66:49:bf:71:0b:0d:36:d2:ce:fd:0e:56:7b:8a:
41:f8:09:09:27:da:41:b0:eb:f7:6f:70:af:bb:68:
be:f7:b4:20:67:09:2c:e9:e9:98:9d:22:14:f7:24:
c0:29:6d:3d:02:60:fe:4a:cf:33:a3:62:96:77:45:
d9:80:fb:b3:27:c2:8e:2e:11:95:63:14:b1:4c:8a:
28:49:98:82:32:83:cb:1c:ac:2c:f2:5b:1f:dd:4a:
4a:15:3b:fb:7e:3d:a6:de:4c:32:66:c4:39:31:ff:
c8:54:d0:4e:b7:c9:6c:4c:74:05:61:fb:fe:4d:5e:
c8:69:53:e9:38:3c:3f:8c:59:0d:8f:6b:a9:e6:e5:
a1:49:c3:d3:2a:5c:da:3a:b2:41:9b:78:c0:de:3c:
fa:64:b3:fa:e8:58:20:1b:1a:b7:b5:ba:52:71:5b:
05:27:89:39:c3:f8:ea:6e:8c:03:96:ff:fe:15:a5:
4c:2c:43:14:03:6f:0c:f6:7b:19:8b:ea:7e:83:f1:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:71:75:E5:7C:82:EB:63:BB:DD:41:A8:E9:93:BD:60:03:A1:31
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.100.0.0/15
219.147.71.0-219.147.72.255
219.147.128.0/19
219.147.248.0/21
IPv6:
240e:1::/37
240e:41::/37
240e:41:4000::/37
240e:981:1109::-240e:981:110a:ffff:ffff:ffff:ffff:ffff
240e:981:1500::-240e:981:16ff:ffff:ffff:ffff:ffff:ffff
240e:983:103::-240e:983:104:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:b1:5b:c2:de:af:cb:bd:dd:8f:cd:e6:a3:10:46:39:bb:b1:
0a:71:96:26:63:fa:7b:c4:59:d6:87:cb:6e:96:37:64:ee:ad:
53:e3:ff:32:4f:57:5a:47:43:0d:a1:28:6e:7b:57:1f:a3:12:
1d:ef:4b:03:f6:fc:ea:2a:1a:30:71:d1:5b:fa:27:9e:59:12:
ab:f0:76:e3:99:2a:2a:5b:c4:ea:e4:e0:dd:99:c2:f3:11:9f:
6a:67:fe:d5:0b:08:70:b9:e5:a1:66:3a:c6:b3:40:e5:0a:ce:
75:54:59:f0:96:a3:ec:e9:69:df:4e:98:c4:e0:e6:6d:c5:9e:
a2:11:43:d9:fe:95:72:51:c5:da:63:fd:8b:01:f5:b4:c8:f4:
8a:75:08:f5:4b:73:d3:d7:01:17:2d:c8:dc:a2:8d:fc:77:5e:
94:2c:92:ab:ac:c8:21:41:7a:9f:29:c8:91:f0:0a:c4:61:f7:
9b:8b:e1:23:50:23:2c:52:f9:af:db:47:28:df:3e:4f:0a:be:
29:20:75:71:77:f9:bf:36:a3:21:2d:80:ca:a7:c3:92:cb:73:
9a:e8:86:87:f6:79:88:7f:50:31:cb:86:9c:5e:d2:e4:52:d6:
de:0c:ba:a3:49:af:20:f2:33:b4:ab:2c:75:c8:73:8c:3a:29:
62:c1:07:38
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUY8c/9CJ6eZpXNFOW7pq9jDfMuiowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYyODAyMjI0MFoX
DTI3MDYyNzAyMjc0MFowMzExMC8GA1UEAxMoN0MyQjcxNzVFNTdDODJFQjYzQkJE
RDQxQThFOTkzQkQ2MDAzQTEzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUeTJJcI8OH/ydkhGQjTInopv+fXTLEFAdrAl50EweQH0k3QA4iRE5LRXc7
zydcPFV4PrI8/F5+lF1uqmZJv3ELDTbSzv0OVnuKQfgJCSfaQbDr929wr7tovve0
IGcJLOnpmJ0iFPckwCltPQJg/krPM6NilndF2YD7syfCji4RlWMUsUyKKEmYgjKD
yxysLPJbH91KShU7+349pt5MMmbEOTH/yFTQTrfJbEx0BWH7/k1eyGlT6Tg8P4xZ
DY9rqebloUnD0ypc2jqyQZt4wN48+mSz+uhYIBsat7W6UnFbBSeJOcP46m6MA5b/
/hWlTCxDFANvDPZ7GYvqfoPxYv0CAwEAAaOCAlkwggJVMB0GA1UdDgQWBBR8K3F1
5XyC62O73UGo6ZO9YAOhMTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTc4OTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
gZQGCCsGAQUFBwEHAQH/BIGEMIGBMCUEAgABMB8DAwFwZDAMAwQA25NHAwQA25NI
AwQF25OAAwQD25P4MFgEAgACMFIDBgMkDgABAAMGAyQOAEEAAwYDJA4AQUAwEgMH
ACQOCYERCQMHACQOCYERCjAQAwYAJA4JgRUDBgAkDgmBFjASAwcAJA4JgwEDAwcA
JA4JgwEEMA0GCSqGSIb3DQEBCwUAA4IBAQA1sVvC3q/Lvd2PzeajEEY5u7EKcZYm
Y/p7xFnWh8tuljdk7q1T4/8yT1daR0MNoShue1cfoxId70sD9vzqKhowcdFb+iee
WRKr8HbjmSoqW8Tq5ODdmcLzEZ9qZ/7VCwhwueWhZjrGs0DlCs51VFnwlqPs6Wnf
TpjE4OZtxZ6iEUPZ/pVyUcXaY/2LAfW0yPSKdQj1S3PT1wEXLcjcoo38d16ULJKr
rMghQXqfKciR8ArEYfebi+EjUCMsUvmv20co3z5PCr4pIHVxd/m/NqMhLYDKp8OS
y3Oa6IaH9nmIf1Axy4acXtLkUtbeDLqjSa8g8jO0qyx1yHOMOiliwQc4
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:56:41 2026 by rpki-client