$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa File: AS17622.roa (raw, json) Hash identifier: 05xru/3t4/mY6Rq3gfBggWm7mmeWUAJkJ4u95bY1Y/w= Subject key identifier: C2:4B:84:06:CA:92:D8:57:8E:4A:A6:01:E6:88:E9:43:97:27:D3:AA Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 648F2E7F22DA59FEFC71754BE45C90081E42F3DB Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa Signing time: Fri 07 Aug 2026 07:39:38 +0000 ROA not before: Fri 07 Aug 2026 07:34:38 +0000 ROA not after: Fri 06 Aug 2027 07:39:38 +0000 asID: 17622 IP address blocks: 61.242.32.0/19 maxlen: 19 61.242.32.0/20 maxlen: 20 61.242.48.0/20 maxlen: 20 61.242.56.0/21 maxlen: 21 61.242.96.0/19 maxlen: 19 61.242.96.0/20 maxlen: 20 61.242.112.0/20 maxlen: 20 211.95.193.0/24 maxlen: 24 211.95.204.0/24 maxlen: 24 211.95.206.0/24 maxlen: 24 211.96.23.0/24 maxlen: 24 211.96.24.0/21 maxlen: 21 211.97.0.0/19 maxlen: 19 211.97.0.0/20 maxlen: 20 211.97.8.0/23 maxlen: 23 211.97.10.0/23 maxlen: 23 211.97.16.0/20 maxlen: 20 220.198.192.0/18 maxlen: 18 220.198.192.0/19 maxlen: 19 220.198.204.0/23 maxlen: 23 220.198.206.0/23 maxlen: 23 220.198.208.0/23 maxlen: 23 220.198.216.0/23 maxlen: 23 220.198.218.0/23 maxlen: 23 220.198.220.0/23 maxlen: 23 220.198.222.0/23 maxlen: 23 220.198.224.0/19 maxlen: 19 220.198.240.0/23 maxlen: 23 220.198.246.0/23 maxlen: 23 220.198.248.0/23 maxlen: 23 220.199.6.0/24 maxlen: 24 220.203.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8f:2e:7f:22:da:59:fe:fc:71:75:4b:e4:5c:90:08:1e:42:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Aug 7 07:34:38 2026 GMT Not After : Aug 6 07:39:38 2027 GMT Subject: CN=C24B8406CA92D8578E4AA601E688E9439727D3AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:c2:43:bf:71:98:20:a1:d1:5e:6d:9a:5c: 22:fe:fc:3c:76:fd:a3:ce:05:07:57:c9:92:12:31: 92:ba:75:89:ad:6e:0b:11:c1:03:84:6a:29:20:7f: d0:f9:57:ce:78:85:20:f2:d8:b1:3f:1f:61:db:70: 5f:6a:2b:ca:4c:03:68:9e:0f:43:c1:d2:2f:ca:d9: f1:56:2e:5c:00:8c:01:76:b3:ed:96:5a:bb:3f:88: 9d:67:52:8e:88:09:fb:2a:86:d7:7b:65:dc:3c:1d: 3f:45:5e:02:7f:16:c9:c9:ec:75:e6:cc:86:62:19: 06:6f:3d:a9:fb:eb:53:da:a2:20:81:1b:0f:a2:1c: bc:dc:6a:ea:c9:e0:b4:1b:9a:0f:99:cb:ec:26:4d: 2d:d6:68:c0:76:e3:87:d6:56:b0:df:ae:08:11:2c: 38:54:e0:c2:0c:7b:fb:3c:58:7b:7d:19:95:f3:e9: 68:63:55:0b:27:c5:ac:81:db:ed:27:62:4f:14:10: 6a:ec:49:a4:5b:45:47:88:ee:7a:90:d8:39:1c:b1: 73:35:1b:e8:65:56:a1:45:d9:bd:a9:07:2c:e4:49: 57:e6:ec:85:5a:81:e4:fd:1e:da:11:1c:5b:dc:11: fb:d6:b0:06:e3:1d:3b:be:d5:ec:0c:c9:1b:c6:63: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4B:84:06:CA:92:D8:57:8E:4A:A6:01:E6:88:E9:43:97:27:D3:AA X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.242.32.0/19 61.242.96.0/19 211.95.193.0/24 211.95.204.0/24 211.95.206.0/24 211.96.23.0-211.96.31.255 211.97.0.0/19 220.198.192.0/18 220.199.6.0/24 220.203.216.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:34:66:3c:2c:f3:f4:75:26:ea:9e:ef:91:14:56:9c:e7:00: 1e:c7:97:2e:22:bb:16:42:68:71:fd:2c:7b:5d:7a:a5:e6:17: df:ab:9f:8a:29:c3:fb:5a:74:0e:4a:63:29:82:6e:f2:98:59: d2:45:c3:3a:a3:a8:e2:80:cf:b9:18:70:d0:2d:d0:24:2b:13: 67:2c:75:0a:2e:de:bd:e5:91:e1:c0:a4:5f:6d:51:2c:93:9c: b3:b0:96:a6:a2:32:4a:d1:5c:f3:4a:1d:8c:2a:bc:ed:79:96: ee:3d:42:09:f2:34:b4:b6:05:b7:93:67:7e:09:c9:6d:d5:f0: 42:81:66:86:6b:13:fa:f6:f8:16:98:91:39:18:77:4f:96:f8: 5e:d3:b2:ea:05:b5:99:b0:c0:dd:74:15:5b:fc:e9:6b:57:fb: e1:fe:9c:b0:55:a0:b3:b7:29:13:6f:a2:dd:8d:ba:38:35:b9: 44:50:ec:16:a4:e7:85:65:8f:72:6e:d8:4e:73:37:eb:da:74: 9c:e1:76:20:7a:45:72:41:25:a6:44:9f:ca:03:af:51:fe:d3: 54:14:ac:73:44:af:ba:30:3b:b4:d0:ed:92:f0:2d:48:1e:84: f7:cb:fe:d1:2a:0c:95:94:8e:ca:8e:f9:11:92:e5:04:19:58: 87:df:10:6c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUZI8ufyLaWf78cXVL5FyQCB5C89swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA4MDcwNzM0MzhaFw0yNzA4MDYwNzM5MzhaMDMxMTAvBgNV BAMTKEMyNEI4NDA2Q0E5MkQ4NTc4RTRBQTYwMUU2ODhFOTQzOTcyN0QzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhcJDv3GYIKHRXm2aXCL+/Dx2 /aPOBQdXyZISMZK6dYmtbgsRwQOEaikgf9D5V854hSDy2LE/H2HbcF9qK8pMA2ie D0PB0i/K2fFWLlwAjAF2s+2WWrs/iJ1nUo6ICfsqhtd7Zdw8HT9FXgJ/FsnJ7HXm zIZiGQZvPan761PaoiCBGw+iHLzcaurJ4LQbmg+Zy+wmTS3WaMB244fWVrDfrggR LDhU4MIMe/s8WHt9GZXz6WhjVQsnxayB2+0nYk8UEGrsSaRbRUeI7nqQ2DkcsXM1 G+hlVqFF2b2pByzkSVfm7IVageT9HtoRHFvcEfvWsAbjHTu+1ewMyRvGY6mZAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUwkuEBsqS2FeOSqYB5ojpQ5cn06owHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE3NjIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIA ATBEAwQFPfIgAwQFPfJgAwQA01/BAwQA01/MAwQA01/OMAwDBADTYBcDBAXTYAAD BAXTYQADBAbcxsADBADcxwYDBAHcy9gwDQYJKoZIhvcNAQELBQADggEBAH40Zjws 8/R1Juqe75EUVpznAB7Hly4iuxZCaHH9LHtdeqXmF9+rn4opw/tadA5KYymCbvKY WdJFwzqjqOKAz7kYcNAt0CQrE2csdQou3r3lkeHApF9tUSyTnLOwlqaiMkrRXPNK HYwqvO15lu49QgnyNLS2BbeTZ34JyW3V8EKBZoZrE/r2+BaYkTkYd0+W+F7TsuoF tZmwwN10FVv86WtX++H+nLBVoLO3KRNvot2Nujg1uURQ7Bak54Vlj3Ju2E5zN+va dJzhdiB6RXJBJaZEn8oDr1H+01QUrHNEr7owO7TQ7ZLwLUgehPfL/tEqDJWUjsqO +RGS5QQZWIffEGw= -----END CERTIFICATE-----Generated at Thu Sep 10 14:48:12 2026 by rpki-client