$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17621.roa File: AS17621.roa (raw, json) Hash identifier: o2TQhxFBmNRz2cC3fbMds5ZUARL93ZTG9QZTsznGFeg= Subject key identifier: F9:7F:13:81:47:1B:FF:E8:E9:EC:BF:71:14:52:36:98:8C:25:66:0E Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 76577A35DC74FCBC933EFCFF8D1EFCC03A10B2F7 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17621.roa Signing time: Fri 07 Aug 2026 06:07:55 +0000 ROA not before: Fri 07 Aug 2026 06:02:55 +0000 ROA not after: Fri 06 Aug 2027 06:07:55 +0000 asID: 17621 IP address blocks: 116.128.128.0/18 maxlen: 18 116.128.200.0/21 maxlen: 21 116.128.208.0/20 maxlen: 20 211.95.0.0/17 maxlen: 17 211.95.33.0/24 maxlen: 24 211.95.34.0/24 maxlen: 24 211.95.35.0/24 maxlen: 24 211.95.36.0/24 maxlen: 24 211.95.37.0/24 maxlen: 24 211.95.38.0/24 maxlen: 24 211.95.48.0/21 maxlen: 21 211.95.48.0/24 maxlen: 24 211.95.49.0/24 maxlen: 24 211.95.51.0/24 maxlen: 24 211.95.52.0/24 maxlen: 24 211.95.53.0/24 maxlen: 24 211.95.60.0/23 maxlen: 23 211.95.70.0/24 maxlen: 24 211.95.71.0/24 maxlen: 24 211.95.72.0/21 maxlen: 21 211.95.72.0/24 maxlen: 24 211.95.77.0/24 maxlen: 24 220.196.0.0/17 maxlen: 17 220.196.2.0/23 maxlen: 23 220.196.22.0/24 maxlen: 24 220.196.48.0/24 maxlen: 24 220.196.51.0/24 maxlen: 24 220.196.58.0/23 maxlen: 23 220.196.128.0/17 maxlen: 17 220.196.224.0/21 maxlen: 21 220.196.232.0/22 maxlen: 22 220.196.235.0/24 maxlen: 24 220.196.236.0/24 maxlen: 24 220.196.237.0/24 maxlen: 24 220.196.238.0/24 maxlen: 24 220.196.239.0/24 maxlen: 24 220.203.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:57:7a:35:dc:74:fc:bc:93:3e:fc:ff:8d:1e:fc:c0:3a:10:b2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Aug 7 06:02:55 2026 GMT Not After : Aug 6 06:07:55 2027 GMT Subject: CN=F97F1381471BFFE8E9ECBF71145236988C25660E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:4b:63:6b:d0:70:4b:2f:76:9b:0c:9f:6d: 89:b2:f6:1a:ee:ff:76:bf:eb:a1:29:b3:a0:19:da: f3:ef:97:eb:15:bb:c6:3a:65:01:29:16:12:d5:13: 74:a3:c5:9e:84:b3:54:f7:f0:b3:9f:91:19:e4:b2: 7b:48:76:be:b3:40:6d:08:dc:fd:39:5f:01:b2:fc: 04:7e:8a:ca:83:ad:d0:27:7b:80:79:bf:8e:c4:cc: 44:6e:0b:b7:c1:72:f4:65:c7:b1:eb:ae:56:a2:3b: d4:60:4a:ef:99:56:0e:e4:04:6b:62:7a:1a:11:ca: 76:35:be:e7:ab:08:8a:27:02:0d:13:df:98:f3:77: 6e:92:82:41:e2:43:62:f0:00:fa:94:1b:79:b8:34: e8:3d:c3:1c:a8:dc:8b:8b:9b:07:58:4d:36:9d:49: fe:05:19:ee:a0:f5:4b:38:76:f5:02:5c:dc:29:fd: a3:77:c6:fd:3e:b4:6b:f6:45:48:71:76:4b:bf:ba: 67:ca:90:8b:22:71:87:6c:00:69:7c:e1:7a:a9:93: fe:8a:04:ca:f1:70:0c:f9:d8:0e:49:7d:3c:37:1b: 1f:78:fb:ee:39:7f:0a:b8:2e:4a:13:03:ec:7b:04: 00:2f:ae:e7:aa:a9:04:af:c8:08:bf:ad:36:f0:18: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:13:81:47:1B:FF:E8:E9:EC:BF:71:14:52:36:98:8C:25:66:0E X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.128.128.0/18 116.128.200.0-116.128.223.255 211.95.0.0/17 220.196.0.0/16 220.203.224.0/19 Signature Algorithm: sha256WithRSAEncryption 83:c9:06:f9:09:79:79:ec:12:6c:69:da:e0:9d:c0:19:75:ae: 68:a9:92:73:36:46:ab:73:38:a9:75:ce:c4:07:e5:4b:b1:51: cc:e8:07:6a:af:a5:8e:3f:dd:c4:0d:d5:6f:f9:1b:e1:3f:6c: e1:29:58:30:03:18:77:af:23:0e:70:41:68:6c:bf:7e:dc:7e: bc:3d:a8:dd:6a:9c:ba:54:03:4a:31:c9:d8:26:3d:15:13:7e: 38:85:fe:9e:b2:f7:a1:a6:dd:f3:bf:64:f0:fe:1a:b9:56:25: de:e3:f8:29:35:af:af:c1:71:83:94:6c:28:a9:18:de:86:7f: 02:b6:23:59:c6:f2:c5:f3:35:f1:d6:54:d5:fa:72:3f:e0:18: c2:13:1d:8e:e8:61:16:6b:87:c3:60:82:da:e1:67:45:da:26: 0c:8c:45:58:8b:51:68:6c:36:b0:0c:5b:56:36:c4:f8:5b:e0: 2e:22:ea:7c:21:23:a9:45:df:da:7c:bb:09:6d:af:10:07:80: 82:e6:39:3a:4c:b0:d1:37:3b:c3:34:42:52:8f:e7:0a:65:ae: f4:07:db:3f:32:85:43:23:ef:61:67:06:47:f5:30:5f:f8:1b: 1d:2c:96:88:b2:57:78:82:3c:1c:52:26:3b:79:6c:f3:65:22: 45:22:81:3d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUdld6Ndx0/LyTPvz/jR78wDoQsvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA4MDcwNjAyNTVaFw0yNzA4MDYwNjA3NTVaMDMxMTAvBgNV BAMTKEY5N0YxMzgxNDcxQkZGRThFOUVDQkY3MTE0NTIzNjk4OEMyNTY2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKr0tja9BwSy92mwyfbYmy9hru /3a/66Eps6AZ2vPvl+sVu8Y6ZQEpFhLVE3SjxZ6Es1T38LOfkRnksntIdr6zQG0I 3P05XwGy/AR+isqDrdAne4B5v47EzERuC7fBcvRlx7HrrlaiO9RgSu+ZVg7kBGti ehoRynY1vuerCIonAg0T35jzd26SgkHiQ2LwAPqUG3m4NOg9wxyo3IuLmwdYTTad Sf4FGe6g9Us4dvUCXNwp/aN3xv0+tGv2RUhxdku/umfKkIsicYdsAGl84Xqpk/6K BMrxcAz52A5JfTw3Gx94++45fwq4LkoTA+x7BAAvrueqqQSvyAi/rTbwGIvpAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQU+X8TgUcb/+jp7L9xFFI2mIwlZg4wHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE3NjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIA ATAlAwQGdICAMAwDBAN0gMgDBAV0gMADBAfTXwADAwDcxAMEBdzL4DANBgkqhkiG 9w0BAQsFAAOCAQEAg8kG+Ql5eewSbGna4J3AGXWuaKmSczZGq3M4qXXOxAflS7FR zOgHaq+ljj/dxA3Vb/kb4T9s4SlYMAMYd68jDnBBaGy/ftx+vD2o3WqculQDSjHJ 2CY9FRN+OIX+nrL3oabd879k8P4auVYl3uP4KTWvr8Fxg5RsKKkY3oZ/ArYjWcby xfM18dZU1fpyP+AYwhMdjuhhFmuHw2CC2uFnRdomDIxFWItRaGw2sAxbVjbE+Fvg LiLqfCEjqUXf2ny7CW2vEAeAguY5Okyw0Tc7wzRCUo/nCmWu9AfbPzKFQyPvYWcG R/UwX/gbHSyWiLJXeII8HFImO3ls82UiRSKBPQ== -----END CERTIFICATE-----Generated at Thu Sep 10 13:10:09 2026 by rpki-client