Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
File: AS17621.roa (raw, json)
Hash identifier: nigGl1ZWAK68Hn1+1KJUhGoGrt0TdRUFEwhwOHn5ArI=
Subject key identifier: F7:8E:6B:47:87:BE:33:FD:8F:DF:DB:CC:15:C9:E9:AC:2B:66:5B:B0
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 1B59F4603CCC843457C97E8EBCA539D4A374CEFA
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
Signing time: Tue 22 Sep 2026 01:34:41 +0000
ROA not before: Tue 22 Sep 2026 01:29:41 +0000
ROA not after: Tue 21 Sep 2027 01:34:41 +0000
asID: 17621
IP address blocks: 139.226.0.0/16 maxlen: 16
139.226.32.0/19 maxlen: 19
139.226.96.0/19 maxlen: 19
139.227.0.0/16 maxlen: 16
139.227.3.0/24 maxlen: 24
139.227.166.0/24 maxlen: 24
139.227.224.0/19 maxlen: 19
139.227.224.0/24 maxlen: 24
139.227.225.0/24 maxlen: 24
139.227.251.0/24 maxlen: 24
139.227.254.0/24 maxlen: 24
140.206.0.0/16 maxlen: 16
140.206.32.0/19 maxlen: 19
140.206.54.0/24 maxlen: 24
140.206.96.0/19 maxlen: 19
140.206.128.0/19 maxlen: 19
140.206.205.0/24 maxlen: 24
140.206.206.0/24 maxlen: 24
140.206.207.0/24 maxlen: 24
140.206.210.0/24 maxlen: 24
140.207.0.0/16 maxlen: 16
140.207.62.0/24 maxlen: 24
140.207.63.0/24 maxlen: 24
140.207.98.0/24 maxlen: 24
140.207.132.0/24 maxlen: 24
140.207.133.0/24 maxlen: 24
140.207.136.0/23 maxlen: 23
140.207.161.0/24 maxlen: 24
140.207.190.0/24 maxlen: 24
140.207.192.0/24 maxlen: 24
140.207.193.0/24 maxlen: 24
140.207.194.0/24 maxlen: 24
140.207.195.0/24 maxlen: 24
140.207.197.0/24 maxlen: 24
140.207.198.0/24 maxlen: 24
140.207.199.0/24 maxlen: 24
140.207.200.0/24 maxlen: 24
140.207.201.0/24 maxlen: 24
140.207.202.0/24 maxlen: 24
140.207.203.0/24 maxlen: 24
140.207.204.0/24 maxlen: 24
140.207.205.0/24 maxlen: 24
140.207.206.0/24 maxlen: 24
140.207.207.0/24 maxlen: 24
140.207.232.0/24 maxlen: 24
140.207.234.0/24 maxlen: 24
140.207.236.0/24 maxlen: 24
140.207.242.0/24 maxlen: 24
140.207.243.0/24 maxlen: 24
140.207.247.0/24 maxlen: 24
140.207.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 00:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:59:f4:60:3c:cc:84:34:57:c9:7e:8e:bc:a5:39:d4:a3:74:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Sep 22 01:29:41 2026 GMT
Not After : Sep 21 01:34:41 2027 GMT
Subject: CN=F78E6B4787BE33FD8FDFDBCC15C9E9AC2B665BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:78:31:71:89:f7:d5:8a:55:de:bb:d5:e6:
04:b4:15:cb:cf:42:20:7e:0a:db:ce:c6:98:92:df:
d7:44:ff:16:ff:ed:b1:b2:40:7e:79:bb:fe:40:8e:
4f:3f:41:0f:c3:89:9a:0d:6e:c7:ac:93:fb:a1:68:
df:f6:6a:51:25:77:b4:6a:c8:2c:eb:28:a7:b9:04:
02:8c:01:6c:28:a2:68:9b:59:7f:bf:ad:95:f0:aa:
53:df:db:a3:cf:3d:3a:8f:99:5c:7a:b8:a2:ed:49:
2f:a3:a0:4d:27:79:0e:be:2c:de:e8:4c:6a:be:1b:
6e:6a:40:3c:0e:35:0a:3f:5d:de:dc:66:a6:1c:08:
1e:30:2d:f6:69:02:c8:a4:21:5a:87:b1:c4:58:10:
68:96:a3:56:6d:e6:6e:54:ab:33:80:a9:42:e7:5d:
a3:d2:eb:b1:6d:dc:c7:df:c3:d4:bf:8c:f8:6b:e3:
6d:25:17:8a:50:ba:86:89:b8:ff:a8:10:3a:a4:ff:
e5:19:03:7e:d4:66:08:f9:11:46:72:48:91:ba:34:
32:5c:ea:c2:32:3f:d1:c8:77:ab:a9:52:cc:40:36:
63:ed:8c:6a:3f:b0:d2:05:3c:67:14:df:65:1f:f4:
14:84:1e:76:bf:8b:95:46:c8:23:cc:2e:54:a2:da:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:6B:47:87:BE:33:FD:8F:DF:DB:CC:15:C9:E9:AC:2B:66:5B:B0
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.226.0.0/15
140.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a0:e7:d8:6f:59:9e:87:48:ed:be:0c:fc:31:dd:16:4b:dc:7c:
e3:02:2a:ac:84:2d:a5:8d:fa:94:aa:e7:54:0b:7a:7e:4b:a9:
1b:6b:41:3a:e5:f0:f2:31:7f:64:49:7c:83:de:9f:72:18:e9:
b5:33:dd:19:24:e6:f3:f1:24:18:fb:85:b8:28:8b:ae:82:18:
9b:e4:5a:36:52:fb:70:c7:7e:fb:ae:7d:a2:98:9f:fc:35:d3:
52:68:ee:5a:f2:b6:8d:d1:7d:d4:13:a1:b4:c0:5d:2b:cb:15:
99:a4:82:a6:c2:b2:57:56:ee:f1:df:40:2e:51:2a:6a:73:34:
e0:8a:90:f0:cb:cc:22:56:d5:ed:89:15:1d:21:01:c4:0d:20:
4a:db:cf:d0:ab:26:02:78:4d:7f:3e:16:cc:7e:ec:fe:84:4e:
85:a3:83:53:cc:db:6c:ef:39:be:a3:07:16:e2:49:e2:c4:0f:
af:a3:86:45:f3:df:ab:fa:c2:47:44:87:1a:87:65:5b:10:89:
fd:b9:b5:b3:1e:43:40:f2:97:d3:7b:e1:8f:b6:68:6b:b6:6b:
91:6f:78:0d:42:d9:1a:85:2d:34:0b:32:74:38:ae:74:9b:fd:
5c:15:ef:1f:47:60:14:3a:cd:54:a6:7d:41:04:8c:03:18:d5:
d9:20:b6:85
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUG1n0YDzMhDRXyX6OvKU51KN0zvowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz
MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDkyMjAxMjk0MVoX
DTI3MDkyMTAxMzQ0MVowMzExMC8GA1UEAxMoRjc4RTZCNDc4N0JFMzNGRDhGREZE
QkNDMTVDOUU5QUMyQjY2NUJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRUeDFxiffVilXeu9XmBLQVy89CIH4K287GmJLf10T/Fv/tsbJAfnm7/kCO
Tz9BD8OJmg1ux6yT+6Fo3/ZqUSV3tGrILOsop7kEAowBbCiiaJtZf7+tlfCqU9/b
o889Oo+ZXHq4ou1JL6OgTSd5Dr4s3uhMar4bbmpAPA41Cj9d3txmphwIHjAt9mkC
yKQhWoexxFgQaJajVm3mblSrM4CpQuddo9LrsW3cx9/D1L+M+GvjbSUXilC6hom4
/6gQOqT/5RkDftRmCPkRRnJIkbo0MlzqwjI/0ch3q6lSzEA2Y+2Maj+w0gU8ZxTf
ZR/0FIQedr+LlUbII8wuVKLaV38CAwEAAaOCAecwggHjMB0GA1UdDgQWBBT3jmtH
h74z/Y/f28wVyemsK2ZbsDAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm
RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC
NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz
eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8wL0FTMTc2MjEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoDAwGL4gMDAYzOMA0GCSqGSIb3DQEB
CwUAA4IBAQCg59hvWZ6HSO2+DPwx3RZL3HzjAiqshC2ljfqUqudUC3p+S6kba0E6
5fDyMX9kSXyD3p9yGOm1M90ZJObz8SQY+4W4KIuughib5Fo2Uvtwx377rn2imJ/8
NdNSaO5a8raN0X3UE6G0wF0ryxWZpIKmwrJXVu7x30AuUSpqczTgipDwy8wiVtXt
iRUdIQHEDSBK28/QqyYCeE1/PhbMfuz+hE6Fo4NTzNts7zm+owcW4knixA+vo4ZF
89+r+sJHRIcah2VbEIn9ubWzHkNA8pfTe+GPtmhrtmuRb3gNQtkahS00CzJ0OK50
m/1cFe8fR2AUOs1Upn1BBIwDGNXZILaF
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:43:57 2026 by rpki-client