$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa File: AS17622.roa (raw, json) Hash identifier: EfK9ecNArLe4fu25Ldqtl7QdQM+e8TnzfJmUT8AKmzw= Subject key identifier: 24:7D:D2:9A:F2:1E:9D:47:DA:03:24:D1:E2:60:8D:9C:FB:D8:37:D0 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 572B2BA37BFE7A42185E1E79ADFE37CC4DF17D91 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa Signing time: Wed 03 Jun 2026 14:42:56 +0000 ROA not before: Wed 03 Jun 2026 14:37:56 +0000 ROA not after: Wed 02 Jun 2027 14:42:56 +0000 asID: 17622 IP address blocks: 211.95.193.0/24 maxlen: 24 211.95.204.0/24 maxlen: 24 211.95.206.0/24 maxlen: 24 211.96.23.0/24 maxlen: 24 220.199.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2b:2b:a3:7b:fe:7a:42:18:5e:1e:79:ad:fe:37:cc:4d:f1:7d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 3 14:37:56 2026 GMT Not After : Jun 2 14:42:56 2027 GMT Subject: CN=247DD29AF21E9D47DA0324D1E2608D9CFBD837D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:f3:c1:14:17:9d:2b:1e:26:13:0b:f0:2f: 17:3e:63:b7:1e:46:5c:69:73:87:a2:81:b5:f2:8a: 2a:9c:5a:ec:af:22:bd:d5:00:7f:d2:b6:65:97:0b: 4a:c6:49:d7:f6:ca:1a:8c:f8:9b:c4:73:eb:64:d4: 5d:39:8b:2f:1e:d5:ae:de:7f:a6:2f:34:c2:fb:7f: 3a:4a:fd:b0:2e:eb:15:18:a9:b4:a1:c2:cb:60:25: 1c:a3:8a:4a:91:4e:9c:04:e2:7f:3e:d1:a9:09:97: 79:24:ce:51:44:cc:23:5f:52:3e:87:6c:6c:53:df: 27:f7:f4:a1:19:18:21:5e:73:d6:37:ea:19:fc:9f: 93:6d:74:bc:40:77:36:72:00:fc:31:fd:ca:cb:6e: 39:91:b5:3d:32:92:bd:c9:73:9f:fb:92:1a:14:8e: 6c:ab:eb:82:00:ea:ea:6f:32:75:31:76:59:23:cd: e7:b6:61:87:e0:4b:ff:42:fe:0f:23:7d:1c:ca:cf: 5f:79:6c:cf:28:2b:4d:2b:0c:87:48:bf:e6:84:c6: f4:a6:d7:c0:9e:55:03:92:21:16:01:3b:a9:02:1d: 8f:d6:05:f6:7b:3f:49:ef:af:c2:35:45:bd:10:d2: 92:50:ea:71:22:1f:30:c0:05:ec:68:5b:68:03:43: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:D2:9A:F2:1E:9D:47:DA:03:24:D1:E2:60:8D:9C:FB:D8:37:D0 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.95.193.0/24 211.95.204.0/24 211.95.206.0/24 211.96.23.0/24 220.199.6.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:10:69:ed:30:61:34:5f:3e:aa:ed:02:52:16:f0:12:17:eb: 40:cd:0c:cb:6a:bc:69:f8:7c:cb:d3:90:d6:55:2e:6d:5a:40: bb:0c:0c:34:66:09:b2:b9:8d:fd:50:19:3b:84:77:16:e2:ae: e2:35:21:06:1f:33:83:d6:34:ac:eb:47:6d:46:ac:f4:cf:16: c1:c2:c0:59:01:fe:f8:88:b3:f7:09:97:ae:37:fe:35:5a:60: 81:ae:2f:58:e4:2a:a2:ae:ca:50:95:94:5e:63:49:e2:e3:6e: 27:70:43:34:a0:35:97:0f:07:a5:0e:88:47:10:73:a5:bd:e4: 31:69:76:e1:68:98:8e:59:db:77:f0:8a:96:9d:13:6d:50:22: 93:ab:fe:bb:08:b5:04:8a:bf:26:6f:f6:6e:72:2f:0d:a2:d3: f3:99:24:fc:af:49:5d:21:38:7d:5f:8f:b2:10:53:1a:52:da: ae:c3:78:ea:c2:fe:f4:7c:c3:28:e2:5c:5d:8e:02:6e:9e:f2: 71:3d:f3:be:5d:6a:55:11:37:c9:f7:78:ae:59:4b:e9:c6:42: 03:87:01:55:bd:7d:cd:2f:fc:ca:1f:95:f0:73:f5:b3:84:65: 14:2f:25:f7:d7:d5:af:46:52:52:e6:67:ed:df:f6:40:85:37: 91:d6:3f:a5 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUVysro3v+ekIYXh55rf43zE3xfZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MDMxNDM3NTZaFw0yNzA2MDIxNDQyNTZaMDMxMTAvBgNV BAMTKDI0N0REMjlBRjIxRTlENDdEQTAzMjREMUUyNjA4RDlDRkJEODM3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5/PBFBedKx4mEwvwLxc+Y7ce Rlxpc4eigbXyiiqcWuyvIr3VAH/StmWXC0rGSdf2yhqM+JvEc+tk1F05iy8e1a7e f6YvNML7fzpK/bAu6xUYqbShwstgJRyjikqRTpwE4n8+0akJl3kkzlFEzCNfUj6H bGxT3yf39KEZGCFec9Y36hn8n5NtdLxAdzZyAPwx/crLbjmRtT0ykr3Jc5/7khoU jmyr64IA6upvMnUxdlkjzee2YYfgS/9C/g8jfRzKz195bM8oK00rDIdIv+aExvSm 18CeVQOSIRYBO6kCHY/WBfZ7P0nvr8I1Rb0Q0pJQ6nEiHzDABexoW2gDQ2NnAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUJH3SmvIenUfaAyTR4mCNnPvYN9AwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE3NjIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIA ATAeAwQA01/BAwQA01/MAwQA01/OAwQA02AXAwQA3McGMA0GCSqGSIb3DQEBCwUA A4IBAQBdEGntMGE0Xz6q7QJSFvASF+tAzQzLarxp+HzL05DWVS5tWkC7DAw0Zgmy uY39UBk7hHcW4q7iNSEGHzOD1jSs60dtRqz0zxbBwsBZAf74iLP3CZeuN/41WmCB ri9Y5CqirspQlZReY0ni424ncEM0oDWXDwelDohHEHOlveQxaXbhaJiOWdt38IqW nRNtUCKTq/67CLUEir8mb/Zuci8NotPzmST8r0ldITh9X4+yEFMaUtquw3jqwv70 fMMo4lxdjgJunvJxPfO+XWpVETfJ93iuWUvpxkIDhwFVvX3NL/zKH5Xwc/WzhGUU LyX319WvRlJS5mft3/ZAhTeR1j+l -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:44 2026 by rpki-client