$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS17622.roa File: AS17622.roa (raw, json) Hash identifier: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk= Subject key identifier: 8B:4A:E4:D0:B2:DD:77:C9:E8:D4:B0:B6:1F:32:4E:89:0E:61:DA:30 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 088100250B7C088BEB6F3B67E62CB5556D922009 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS17622.roa Signing time: Wed 13 May 2026 09:27:08 +0000 ROA not before: Wed 13 May 2026 09:22:08 +0000 ROA not after: Wed 12 May 2027 09:27:08 +0000 asID: 17622 IP address blocks: 103.201.192.0/24 maxlen: 24 103.201.193.0/24 maxlen: 24 103.201.196.0/24 maxlen: 24 103.201.200.0/24 maxlen: 24 113.21.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:81:00:25:0b:7c:08:8b:eb:6f:3b:67:e6:2c:b5:55:6d:92:20:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: May 13 09:22:08 2026 GMT Not After : May 12 09:27:08 2027 GMT Subject: CN=8B4AE4D0B2DD77C9E8D4B0B61F324E890E61DA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:90:e6:b2:a8:10:1b:5b:ed:9b:b5:75:a0: ed:b3:30:45:ee:fa:7c:a3:9d:3c:fd:cd:58:bb:c9: f3:be:40:89:25:cc:09:af:9e:dc:2b:21:a3:39:e8: eb:47:31:0a:f0:cd:76:95:ba:39:68:e5:4f:a6:2a: 62:b0:97:01:45:d6:8a:c1:41:4e:bf:bf:43:f9:ab: cf:c2:96:56:b2:05:9f:f3:43:5d:ef:3e:cb:64:56: 16:00:79:d6:98:c2:61:7d:ba:cf:0e:0b:e0:a9:64: 55:62:0a:68:16:2d:29:c5:75:13:8b:2b:af:ce:5d: 35:1a:99:16:e2:07:05:77:40:64:62:30:87:52:e6: 64:6a:e3:8a:55:21:8c:0f:97:f5:9b:e2:37:26:2f: 21:3e:71:75:12:bd:87:4a:30:03:ab:1b:2b:53:b8: c7:76:7b:8f:33:5c:2d:90:f8:00:3e:0e:bb:2e:09: ad:74:05:4d:13:fa:f9:70:ae:b6:99:53:be:e8:72: 92:2c:42:b9:9a:a7:78:77:9d:e7:1f:86:61:79:d9: 8a:2f:46:a7:95:2d:20:23:31:15:e5:ec:56:ef:78: 83:aa:4e:c1:69:58:9d:a6:e3:c1:a1:a8:b1:0a:47: b4:db:5f:94:eb:37:03:a3:e1:6c:d8:97:4a:67:4c: 06:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4A:E4:D0:B2:DD:77:C9:E8:D4:B0:B6:1F:32:4E:89:0E:61:DA:30 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS17622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.201.192.0/23 103.201.196.0/24 103.201.200.0/24 113.21.232.0/22 Signature Algorithm: sha256WithRSAEncryption 15:6b:3e:03:eb:6d:9a:7b:91:21:3c:08:da:32:51:a4:ef:76: 90:78:bd:69:5a:d3:1e:21:41:f5:d3:e4:8b:4b:22:ae:80:44: f5:4c:4b:f9:40:2b:6b:74:16:ae:26:c2:6b:c7:a3:c5:43:f1: d4:9e:09:8e:e3:fe:75:92:02:26:cf:d5:a4:21:c4:aa:13:54: 77:87:bf:e6:a9:e9:f2:60:ca:48:a4:86:33:02:ee:89:87:d7: 8b:9d:5c:7a:f3:45:d2:22:4b:7a:27:04:7f:54:fe:bd:2f:9c: 96:35:4c:11:6b:84:38:ad:81:3d:06:8a:8e:e4:2a:5e:9b:d1: dd:ca:a5:fb:b2:ec:74:b0:20:46:85:59:67:f3:57:90:59:e9: 1e:1e:c4:d9:4f:a8:87:c3:62:cc:e4:7e:32:d4:31:d6:d5:3b: f6:74:23:ef:dd:c9:55:c0:c0:78:73:57:06:02:e0:c5:4b:4b: 9b:85:da:31:8f:18:36:09:bf:2d:93:c5:75:3a:a8:92:6d:ca: af:79:c8:74:1f:7b:6f:16:b6:0c:e7:d9:ee:f3:10:0a:3d:85: fd:24:d6:1d:0d:93:56:f9:e4:6d:ab:ee:85:90:91:8f:d8:25: d4:82:4d:5a:27:58:76:0b:b3:be:60:b9:7b:15:46:50:c2:cb: 96:02:ca:01 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUCIEAJQt8CIvrbztn5iy1VW2SIAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA1MTMwOTIyMDhaFw0yNzA1MTIwOTI3MDhaMDMxMTAvBgNV BAMTKDhCNEFFNEQwQjJERDc3QzlFOEQ0QjBCNjFGMzI0RTg5MEU2MURBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbZDmsqgQG1vtm7V1oO2zMEXu +nyjnTz9zVi7yfO+QIklzAmvntwrIaM56OtHMQrwzXaVujlo5U+mKmKwlwFF1orB QU6/v0P5q8/CllayBZ/zQ13vPstkVhYAedaYwmF9us8OC+CpZFViCmgWLSnFdROL K6/OXTUamRbiBwV3QGRiMIdS5mRq44pVIYwPl/Wb4jcmLyE+cXUSvYdKMAOrGytT uMd2e48zXC2Q+AA+DrsuCa10BU0T+vlwrraZU77ocpIsQrmap3h3necfhmF52Yov RqeVLSAjMRXl7FbveIOqTsFpWJ2m48GhqLEKR7TbX5TrNwOj4WzYl0pnTAZDAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUi0rk0LLdd8no1LC2HzJOiQ5h2jAwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC9BUzE3NjIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIA ATAYAwQBZ8nAAwQAZ8nEAwQAZ8nIAwQCcRXoMA0GCSqGSIb3DQEBCwUAA4IBAQAV az4D622ae5EhPAjaMlGk73aQeL1pWtMeIUH10+SLSyKugET1TEv5QCtrdBauJsJr x6PFQ/HUngmO4/51kgImz9WkIcSqE1R3h7/mqenyYMpIpIYzAu6Jh9eLnVx680XS Ikt6JwR/VP69L5yWNUwRa4Q4rYE9BoqO5Cpem9HdyqX7sux0sCBGhVln81eQWeke HsTZT6iHw2LM5H4y1DHW1Tv2dCPv3clVwMB4c1cGAuDFS0ubhdoxjxg2Cb8tk8V1 OqiSbcqvech0H3tvFrYM59nu8xAKPYX9JNYdDZNW+eRtq+6FkJGP2CXUgk1aJ1h2 C7O+YLl7FUZQwsuWAsoB -----END CERTIFICATE-----Generated at Wed May 13 14:14:01 2026 by rpki-client