$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17816.roa File: AS17816.roa (raw, json) Hash identifier: RsDNLOmfkgVHh9MdDSB3ZlNqksclimN8vCearasAb5Q= Subject key identifier: D9:EE:7D:CA:01:E6:D1:68:74:EC:87:F8:D6:38:DA:12:09:3D:2D:7B Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 6FB0699675C8960656721E8A5220CCEAB2B80B05 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17816.roa Signing time: Wed 08 Jul 2026 03:18:22 +0000 ROA not before: Wed 08 Jul 2026 03:13:22 +0000 ROA not after: Wed 07 Jul 2027 03:18:22 +0000 asID: 17816 IP address blocks: 211.96.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b0:69:96:75:c8:96:06:56:72:1e:8a:52:20:cc:ea:b2:b8:0b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jul 8 03:13:22 2026 GMT Not After : Jul 7 03:18:22 2027 GMT Subject: CN=D9EE7DCA01E6D16874EC87F8D638DA12093D2D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:d7:00:5d:42:b9:e5:72:22:e4:63:68:73: ca:0e:33:c2:ac:8e:27:97:80:39:97:9c:ce:db:85: 08:23:1e:3d:7b:04:f6:f5:cd:a9:19:e6:21:e4:95: 93:f8:b6:64:f9:5b:64:6f:78:2f:3a:85:93:fe:8f: f6:23:df:fd:f0:9e:06:9f:e8:d3:be:fd:09:42:b5: 7b:90:cd:c6:74:05:d1:d0:cf:f8:25:39:53:29:e9: c4:63:ef:f8:75:33:a9:cf:b8:c4:b5:9c:28:7b:15: b4:50:1f:c5:1a:cc:64:cc:16:a0:05:02:a4:d5:09: 0f:9f:7e:8d:f0:79:7f:8f:0b:25:d4:dd:3f:9a:db: 0e:3f:52:be:1d:c4:81:00:87:06:10:4a:6a:04:e8: 85:95:5f:12:73:f3:cf:c6:86:f1:fa:f4:b1:7e:b8: bf:ff:7a:1b:91:46:ff:7b:75:30:e0:5b:3f:8b:74: bd:2f:f0:d7:2c:64:b1:8d:e9:2b:7f:92:84:c6:15: c2:57:2d:e6:56:c1:70:c6:0f:62:34:a0:ae:7a:56: 29:c2:e0:36:91:75:4b:52:76:a8:5e:e6:fa:82:8e: 98:5c:d4:f6:b2:6f:bc:68:22:36:83:63:a4:af:a4: bf:2f:a4:f7:40:0c:6b:bf:f4:0b:24:2c:84:f0:c9: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:7D:CA:01:E6:D1:68:74:EC:87:F8:D6:38:DA:12:09:3D:2D:7B X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.96.105.0/24 Signature Algorithm: sha256WithRSAEncryption 76:ba:40:18:2f:89:85:1e:07:11:dd:9b:3f:5f:1c:ea:5d:23: 38:f2:f7:16:fd:0e:67:3e:2d:c8:7f:90:2a:8c:db:17:7c:31: c7:91:ad:70:69:42:f0:83:95:17:54:2e:6d:69:65:17:af:07: 04:31:e2:bd:30:a4:bb:c6:41:aa:7e:8f:a3:ee:7a:2e:9a:26: 56:59:95:4f:03:d3:73:ad:aa:4d:a3:f1:be:fd:46:6d:b0:50: 58:27:6b:50:f5:40:3e:62:51:ba:6d:39:1a:1b:d1:75:a5:6f: 1b:3d:e8:9f:70:a2:00:9e:0a:81:ab:ab:2c:e9:7f:c4:04:7d: 02:13:57:9c:82:13:33:cf:d1:02:11:f4:52:0c:dc:d5:4c:67: d4:29:41:53:33:02:35:b5:cc:ff:22:f0:ce:d2:fb:e1:82:c7: 5f:4f:35:05:48:35:1a:3d:54:2f:99:5f:21:2b:b9:13:02:b4: 25:49:9c:49:92:7b:a7:33:93:de:31:ea:ce:ea:ee:7d:97:50: f3:ad:51:69:a0:69:d5:c1:c2:5a:a1:eb:a2:0d:e5:a1:15:43: a0:c6:32:e0:b7:a4:dd:a6:ed:16:6b:dd:08:4a:7d:1d:4e:16: c5:92:b4:a5:ce:13:05:4c:9c:6c:3f:5c:9c:7d:b7:41:a5:75: aa:9c:ba:d7 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUb7BplnXIlgZWch6KUiDM6rK4CwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA3MDgwMzEzMjJaFw0yNzA3MDcwMzE4MjJaMDMxMTAvBgNV BAMTKEQ5RUU3RENBMDFFNkQxNjg3NEVDODdGOEQ2MzhEQTEyMDkzRDJEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4tcAXUK55XIi5GNoc8oOM8Ks jieXgDmXnM7bhQgjHj17BPb1zakZ5iHklZP4tmT5W2RveC86hZP+j/Yj3/3wngaf 6NO+/QlCtXuQzcZ0BdHQz/glOVMp6cRj7/h1M6nPuMS1nCh7FbRQH8UazGTMFqAF AqTVCQ+ffo3weX+PCyXU3T+a2w4/Ur4dxIEAhwYQSmoE6IWVXxJz88/GhvH69LF+ uL//ehuRRv97dTDgWz+LdL0v8NcsZLGN6St/koTGFcJXLeZWwXDGD2I0oK56VinC 4DaRdUtSdqhe5vqCjphc1Payb7xoIjaDY6SvpL8vpPdADGu/9AskLITwyTPpAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU2e59ygHm0Wh07If41jjaEgk9LXswHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE3ODE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQA02BpMA0GCSqGSIb3DQEBCwUAA4IBAQB2ukAYL4mFHgcR3Zs/XxzqXSM4 8vcW/Q5nPi3If5AqjNsXfDHHka1waULwg5UXVC5taWUXrwcEMeK9MKS7xkGqfo+j 7noumiZWWZVPA9NzrapNo/G+/UZtsFBYJ2tQ9UA+YlG6bTkaG9F1pW8bPeifcKIA ngqBq6ss6X/EBH0CE1ecghMzz9ECEfRSDNzVTGfUKUFTMwI1tcz/IvDO0vvhgsdf TzUFSDUaPVQvmV8hK7kTArQlSZxJknunM5PeMerO6u59l1DzrVFpoGnVwcJaoeui DeWhFUOgxjLgt6Tdpu0Wa90ISn0dThbFkrSlzhMFTJxsP1ycfbdBpXWqnLrX -----END CERTIFICATE-----Generated at Tue Jul 14 21:53:59 2026 by rpki-client