$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17621.roa File: AS17621.roa (raw, json) Hash identifier: wfLodr6aTTmW76SpdHD4FwYka5Izs6CtYx4KwIUOG8I= Subject key identifier: 23:BC:0F:E9:9F:85:2F:62:59:CC:76:54:2A:DA:F8:60:BD:04:76:1D Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 4C785CADEB7CAEC8CE92A1CBAE19FDDE3CE63B56 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17621.roa Signing time: Wed 17 Jun 2026 13:08:44 +0000 ROA not before: Wed 17 Jun 2026 13:03:44 +0000 ROA not after: Wed 16 Jun 2027 13:08:44 +0000 asID: 17621 IP address blocks: 120.132.128.0/17 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.133.240.0/20 maxlen: 32 182.175.224.0/20 maxlen: 32 182.175.240.0/23 maxlen: 32 182.175.242.0/23 maxlen: 32 211.148.17.0/24 maxlen: 32 211.148.18.0/23 maxlen: 32 211.148.20.0/22 maxlen: 32 211.148.24.0/23 maxlen: 32 211.148.27.0/24 maxlen: 32 211.148.28.0/22 maxlen: 32 2403:a200:a1ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:78:5c:ad:eb:7c:ae:c8:ce:92:a1:cb:ae:19:fd:de:3c:e6:3b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 17 13:03:44 2026 GMT Not After : Jun 16 13:08:44 2027 GMT Subject: CN=23BC0FE99F852F6259CC76542ADAF860BD04761D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:fe:c2:90:d3:a7:98:e3:3a:83:e6:16:83: 69:eb:9c:74:53:dd:59:43:a0:df:5c:1b:45:ee:03: a4:1d:21:b1:c9:51:3f:b5:c4:40:f2:fd:27:4e:16: 95:ec:90:da:50:d0:26:b4:33:3a:0b:58:f4:51:5d: 31:7c:40:f3:08:43:07:86:33:c3:a1:78:e8:a1:b3: de:4c:85:6f:db:8f:e7:c1:65:ef:17:1d:1e:df:6c: 9c:aa:c2:6d:d4:b3:e7:45:69:e8:e7:3e:ad:18:8f: d6:d1:e3:42:13:94:a4:05:e6:b3:db:e3:54:15:33: 18:fb:fa:3e:6e:63:08:e3:98:fd:e5:36:ea:85:ac: 3d:c4:59:4a:c0:79:1a:b3:52:66:66:03:b5:fe:33: 2c:fa:00:ca:d0:53:f8:1d:5a:f6:65:a4:49:58:6e: f2:b2:51:48:be:4d:a6:d1:78:dc:ea:ea:8e:f4:ea: ce:1b:e8:58:a0:d6:50:00:7f:52:61:9b:b6:a9:cb: d6:be:66:70:35:a6:5f:7f:a8:1b:fc:5d:86:e8:2f: 7e:31:cb:d1:37:e7:9e:c4:2c:5c:03:4b:fd:ba:c0: 3f:26:80:78:6b:25:a2:f6:8a:ca:b5:93:bf:23:7d: 0c:c1:b6:c1:32:55:a9:5b:e4:1b:67:5d:1d:4b:20: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:0F:E9:9F:85:2F:62:59:CC:76:54:2A:DA:F8:60:BD:04:76:1D X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS17621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.128.0/17 120.133.192.0/18 182.175.224.0-182.175.243.255 211.148.17.0-211.148.25.255 211.148.27.0-211.148.31.255 IPv6: 2403:a200:a1ff::/48 Signature Algorithm: sha256WithRSAEncryption 00:b9:30:bb:58:4c:3f:1f:62:be:ad:72:62:36:a3:43:6f:7e: 27:2f:da:df:e1:98:31:8b:9b:53:84:ab:a4:96:f9:6b:39:8c: 81:33:89:e2:09:f9:1d:8b:aa:ec:72:8e:52:93:89:97:c0:32: ae:13:fb:9b:58:1f:05:d0:b0:23:8f:e4:df:a5:88:4b:9a:cc: 11:3f:8c:38:db:3f:5b:ec:a4:c0:28:68:e0:9a:2d:cf:c1:31: 09:1a:1f:ea:0d:43:33:c2:9e:f9:67:e5:b1:9b:bd:7c:34:10: b4:00:c3:95:03:23:67:43:78:c1:ac:92:bf:fe:6f:38:ea:de: 5d:00:92:c8:bc:79:7e:fc:a4:b3:ab:be:49:57:04:44:54:20: 1f:f9:92:21:3b:c6:72:06:13:a8:1c:cb:d6:96:a5:25:01:db: d9:26:76:df:f5:b0:21:4a:10:e7:15:ee:c0:87:68:c2:83:1a: 35:84:cb:a6:e7:0c:20:89:25:fc:9e:7c:18:0b:e5:cb:43:d7: 86:8d:30:96:24:0a:15:de:79:76:62:d3:f0:86:bc:c0:4b:43: 09:9a:1e:e5:a2:80:26:18:d5:ad:45:16:cb:0c:0e:e3:93:ae: 43:3f:3b:f3:52:3e:50:46:f1:11:d0:fa:00:3b:cc:b4:bd:6e: 2f:5a:b2:2a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUTHhcret8rsjOkqHLrhn93jzmO1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MTcxMzAzNDRaFw0yNzA2MTYxMzA4NDRaMDMxMTAvBgNV BAMTKDIzQkMwRkU5OUY4NTJGNjI1OUNDNzY1NDJBREFGODYwQkQwNDc2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzP7CkNOnmOM6g+YWg2nrnHRT 3VlDoN9cG0XuA6QdIbHJUT+1xEDy/SdOFpXskNpQ0Ca0MzoLWPRRXTF8QPMIQweG M8OheOihs95MhW/bj+fBZe8XHR7fbJyqwm3Us+dFaejnPq0Yj9bR40ITlKQF5rPb 41QVMxj7+j5uYwjjmP3lNuqFrD3EWUrAeRqzUmZmA7X+Myz6AMrQU/gdWvZlpElY bvKyUUi+TabReNzq6o706s4b6Fig1lAAf1Jhm7apy9a+ZnA1pl9/qBv8XYboL34x y9E3557ELFwDS/26wD8mgHhrJaL2isq1k78jfQzBtsEyValb5BtnXR1LIADLAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUI7wP6Z+FL2JZzHZUKtr4YL0Edh0wHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzE3NjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIA ATA2AwQHeISAAwQGeIXAMAwDBAW2r+ADBAK2r/AwDAMEANOUEQMEAdOUGDAMAwQA 05QbAwQF05QAMA8EAgACMAkDBwAkA6IAof8wDQYJKoZIhvcNAQELBQADggEBAAC5 MLtYTD8fYr6tcmI2o0Nvficv2t/hmDGLm1OEq6SW+Ws5jIEzieIJ+R2LquxyjlKT iZfAMq4T+5tYHwXQsCOP5N+liEuazBE/jDjbP1vspMAoaOCaLc/BMQkaH+oNQzPC nvln5bGbvXw0ELQAw5UDI2dDeMGskr/+bzjq3l0Aksi8eX78pLOrvklXBERUIB/5 kiE7xnIGE6gcy9aWpSUB29kmdt/1sCFKEOcV7sCHaMKDGjWEy6bnDCCJJfyefBgL 5ctD14aNMJYkChXeeXZi0/CGvMBLQwmaHuWigCYY1a1FFssMDuOTrkM/O/NSPlBG 8RHQ+gA7zLS9bi9asio= -----END CERTIFICATE-----Generated at Fri Jul 24 14:51:44 2026 by rpki-client