$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17816.roa File: AS17816.roa (raw, json) Hash identifier: r3nW2d2gjZnHj4Ls4S4OjmI9LiE0IbXz4p8XGg3/a94= Subject key identifier: 6D:3B:95:F8:C2:6D:73:6C:77:C3:20:C4:36:D5:17:1B:65:EE:33:11 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 0D1B5DA4E7552915D9F01FEB362869656EA3B5BA Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17816.roa Signing time: Mon 24 Aug 2026 03:35:36 +0000 ROA not before: Mon 24 Aug 2026 03:30:36 +0000 ROA not after: Mon 23 Aug 2027 03:35:36 +0000 asID: 17816 IP address blocks: 61.242.0.0/17 maxlen: 17 211.95.192.0/18 maxlen: 18 211.96.0.0/16 maxlen: 16 211.96.105.0/24 maxlen: 24 211.97.0.0/18 maxlen: 18 220.198.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1b:5d:a4:e7:55:29:15:d9:f0:1f:eb:36:28:69:65:6e:a3:b5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Aug 24 03:30:36 2026 GMT Not After : Aug 23 03:35:36 2027 GMT Subject: CN=6D3B95F8C26D736C77C320C436D5171B65EE3311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:5a:2c:e8:ed:ce:b3:74:85:cf:67:69:08: 97:ea:bc:3b:c7:fd:bd:d4:74:07:81:14:30:8e:c4: eb:20:49:46:84:9d:08:2c:d3:00:99:f6:62:39:fc: c0:9f:8f:54:a8:2d:b6:2c:c4:d4:f8:a3:f0:99:16: 8f:ed:ec:4f:bb:30:63:9a:59:18:9f:16:a4:49:db: a8:f9:31:51:ac:df:93:32:39:72:d8:6a:0b:50:71: dd:18:ab:d5:e5:14:51:83:83:6c:00:15:4d:5d:83: a8:67:36:53:b6:aa:d3:46:ae:83:75:d7:8d:c7:6c: ba:9a:2f:df:94:d2:88:34:fa:30:a5:0c:0b:7a:20: 66:ff:09:53:d0:20:66:99:0a:be:81:e6:ec:13:6d: f2:1c:c0:ba:d6:51:a1:9a:a3:e5:f3:e4:ba:e0:d3: 14:32:8b:46:46:20:d4:32:bf:7b:45:86:fd:10:72: b1:33:db:04:4e:7e:8a:dd:d2:1b:5b:1c:fa:b7:59: 07:2c:55:5c:14:5b:d2:b1:6f:1c:39:02:8e:af:02: 97:4b:01:92:d1:53:e6:8f:b7:64:1f:1c:d0:29:9b: 2c:d3:58:48:5f:3d:d9:ac:e9:3a:ee:a7:b2:35:0e: aa:31:15:ed:d8:e6:af:6b:3a:bc:30:1b:8e:7c:3a: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3B:95:F8:C2:6D:73:6C:77:C3:20:C4:36:D5:17:1B:65:EE:33:11 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.242.0.0/17 211.95.192.0-211.97.63.255 220.198.0.0/15 Signature Algorithm: sha256WithRSAEncryption 29:34:38:79:d4:a4:9c:84:83:e8:b1:a7:c3:ac:94:fd:bd:b1: ce:5b:10:6f:92:fe:cf:91:e5:92:2d:39:59:be:18:b4:02:c3: 86:c1:61:7f:06:93:0b:aa:23:23:15:44:3b:da:11:ed:f9:75: c0:07:69:58:23:08:be:f0:95:82:0a:d5:ad:2d:1c:87:92:ca: 17:c3:59:18:d6:5f:6b:ee:83:2e:82:b2:15:bb:1a:1b:b5:0e: 64:c2:d6:9d:e4:fc:57:97:19:57:35:e3:3d:7f:b7:90:3c:e6: ca:b3:8c:17:66:a1:51:77:36:d6:6b:00:99:53:fa:e7:36:be: 6a:e0:da:a7:d0:40:e2:44:f4:72:da:15:26:64:b9:78:ee:5c: a8:cc:aa:c0:8e:6b:c3:cc:b8:ce:b8:b9:4f:7b:b5:d4:0b:d2: ba:d2:13:85:a9:58:e4:36:15:71:9c:2f:c9:61:62:a4:36:ab: ad:a5:e1:38:09:1f:8a:f7:c0:14:97:6d:a2:9f:ea:fd:34:c8: 46:57:50:be:69:ee:8f:46:92:39:34:75:35:2f:c2:2d:73:4d: 86:8c:6e:ff:ad:1d:f3:41:23:b7:28:52:ff:0d:b9:11:21:86: b6:47:83:fb:f4:89:6f:92:0b:ce:b9:ef:1d:f2:be:52:f5:f6: fb:44:cb:ac -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUDRtdpOdVKRXZ8B/rNihpZW6jtbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA4MjQwMzMwMzZaFw0yNzA4MjMwMzM1MzZaMDMxMTAvBgNV BAMTKDZEM0I5NUY4QzI2RDczNkM3N0MzMjBDNDM2RDUxNzFCNjVFRTMzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUVos6O3Os3SFz2dpCJfqvDvH /b3UdAeBFDCOxOsgSUaEnQgs0wCZ9mI5/MCfj1SoLbYsxNT4o/CZFo/t7E+7MGOa WRifFqRJ26j5MVGs35MyOXLYagtQcd0Yq9XlFFGDg2wAFU1dg6hnNlO2qtNGroN1 143HbLqaL9+U0og0+jClDAt6IGb/CVPQIGaZCr6B5uwTbfIcwLrWUaGao+Xz5Lrg 0xQyi0ZGINQyv3tFhv0QcrEz2wROford0htbHPq3WQcsVVwUW9Kxbxw5Ao6vApdL AZLRU+aPt2QfHNApmyzTWEhfPdms6Trup7I1DqoxFe3Y5q9rOrwwG458Op2FAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUbTuV+MJtc2x3wyDENtUXG2XuMxEwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE3ODE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIA ATAZAwQHPfIAMAwDBAbTX8ADBAbTYQADAwHcxjANBgkqhkiG9w0BAQsFAAOCAQEA KTQ4edSknISD6LGnw6yU/b2xzlsQb5L+z5Hlki05Wb4YtALDhsFhfwaTC6ojIxVE O9oR7fl1wAdpWCMIvvCVggrVrS0ch5LKF8NZGNZfa+6DLoKyFbsaG7UOZMLWneT8 V5cZVzXjPX+3kDzmyrOMF2ahUXc21msAmVP65za+auDap9BA4kT0ctoVJmS5eO5c qMyqwI5rw8y4zri5T3u11AvSutIThalY5DYVcZwvyWFipDarraXhOAkfivfAFJdt op/q/TTIRldQvmnuj0aSOTR1NS/CLXNNhoxu/60d80EjtyhS/w25ESGGtkeD+/SJ b5ILzrnvHfK+UvX2+0TLrA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:35:27 2026 by rpki-client