Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
File: AS17621.roa (raw, json)
Hash identifier: xvMNGXmLo0ioWwZsGM47impRiLd59UTi0djxis0JgPI=
Subject key identifier: 79:CD:D0:5F:FE:9E:3C:6C:3F:BB:05:50:B6:2A:BD:FF:B7:AD:2F:26
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 0695534E831EAB278ADD6C7A60D98F59F8E83C1A
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
Signing time: Fri 30 Oct 2026 08:41:11 +0000
ROA not before: Fri 30 Oct 2026 08:36:11 +0000
ROA not after: Fri 29 Oct 2027 08:41:11 +0000
asID: 17621
IP address blocks: 139.226.0.0/16 maxlen: 16
139.226.32.0/19 maxlen: 19
139.226.96.0/19 maxlen: 19
139.227.0.0/16 maxlen: 16
139.227.3.0/24 maxlen: 24
139.227.12.0/24 maxlen: 24
139.227.166.0/24 maxlen: 24
139.227.224.0/19 maxlen: 19
139.227.224.0/24 maxlen: 24
139.227.225.0/24 maxlen: 24
139.227.251.0/24 maxlen: 24
139.227.254.0/24 maxlen: 24
140.206.0.0/16 maxlen: 16
140.206.32.0/19 maxlen: 19
140.206.54.0/24 maxlen: 24
140.206.96.0/19 maxlen: 19
140.206.128.0/19 maxlen: 19
140.206.205.0/24 maxlen: 24
140.206.206.0/24 maxlen: 24
140.206.207.0/24 maxlen: 24
140.206.210.0/24 maxlen: 24
140.207.0.0/16 maxlen: 16
140.207.62.0/24 maxlen: 24
140.207.63.0/24 maxlen: 24
140.207.98.0/24 maxlen: 24
140.207.132.0/24 maxlen: 24
140.207.133.0/24 maxlen: 24
140.207.136.0/23 maxlen: 23
140.207.161.0/24 maxlen: 24
140.207.190.0/24 maxlen: 24
140.207.192.0/24 maxlen: 24
140.207.193.0/24 maxlen: 24
140.207.194.0/24 maxlen: 24
140.207.195.0/24 maxlen: 24
140.207.198.0/24 maxlen: 24
140.207.200.0/24 maxlen: 24
140.207.201.0/24 maxlen: 24
140.207.202.0/24 maxlen: 24
140.207.203.0/24 maxlen: 24
140.207.204.0/24 maxlen: 24
140.207.205.0/24 maxlen: 24
140.207.206.0/24 maxlen: 24
140.207.207.0/24 maxlen: 24
140.207.232.0/24 maxlen: 24
140.207.234.0/24 maxlen: 24
140.207.236.0/24 maxlen: 24
140.207.242.0/24 maxlen: 24
140.207.243.0/24 maxlen: 24
140.207.247.0/24 maxlen: 24
140.207.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:95:53:4e:83:1e:ab:27:8a:dd:6c:7a:60:d9:8f:59:f8:e8:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Oct 30 08:36:11 2026 GMT
Not After : Oct 29 08:41:11 2027 GMT
Subject: CN=79CDD05FFE9E3C6C3FBB0550B62ABDFFB7AD2F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:76:a4:a3:a3:13:41:e0:86:c9:d3:be:c4:
be:1e:65:9c:ff:b6:fe:ca:58:a3:cf:19:f8:05:52:
25:d7:6d:91:ea:29:6c:91:a2:e7:14:5b:0e:bc:83:
37:c5:de:b0:12:57:b8:4a:bb:01:cd:f6:3e:51:81:
d6:f0:66:1d:23:68:a9:cb:34:20:7a:52:cc:6d:d8:
a0:df:5c:d2:3b:07:29:b8:78:89:86:1a:32:dc:59:
0a:1a:b3:c0:1f:c0:88:67:63:e7:b9:a2:7d:66:c9:
90:f4:af:14:db:22:ec:0e:d8:1f:e3:b6:32:ff:68:
22:29:1c:97:67:51:5e:6a:c7:05:28:55:3a:26:e6:
44:b5:91:31:ed:ad:8a:c2:ea:3a:cd:87:6c:c8:8f:
ae:61:24:09:13:1e:6b:48:b1:3d:24:95:50:55:70:
92:3d:23:c6:33:b2:35:94:59:ae:0c:7b:81:5a:bd:
2a:67:d4:6a:d9:d6:a2:1e:42:bc:93:ca:e5:2f:a9:
c0:8d:18:21:88:a5:29:0f:c3:12:ee:df:b2:d0:53:
b5:3d:24:e4:1c:0b:52:28:17:88:40:07:87:f3:24:
81:51:73:dd:b2:4f:f9:2f:c5:25:a8:1d:a7:4c:c5:
ac:51:9a:71:13:69:0d:73:72:64:7c:fd:87:10:1c:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:D0:5F:FE:9E:3C:6C:3F:BB:05:50:B6:2A:BD:FF:B7:AD:2F:26
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17621.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.226.0.0/15
140.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
65:3d:e3:e7:3c:a5:4e:89:e7:0f:56:ef:7c:21:a2:d8:70:ea:
6f:e3:bb:52:27:ab:ed:70:61:b0:77:d3:e1:73:86:83:c7:b3:
f9:27:9d:d2:c7:db:19:b5:eb:ac:b2:fb:b0:18:a4:f5:79:59:
aa:46:ed:d5:d4:a7:25:29:ca:45:0c:53:7c:fe:68:35:81:96:
fc:33:d1:54:c7:ed:7a:cd:50:ac:c7:cf:f0:52:d0:3d:d6:38:
ad:51:af:61:6c:72:b6:9a:cd:b8:10:e5:79:37:6a:40:e2:c3:
ae:3a:1c:c9:42:74:22:79:6a:35:d4:be:02:94:21:83:86:bc:
d6:ad:d6:37:a2:35:c7:cc:7c:37:90:43:5e:b6:5f:86:60:e9:
56:ef:76:a9:32:b0:61:ac:89:2e:b8:78:45:76:46:ab:d1:2a:
0c:42:2e:80:74:47:09:8b:48:44:fc:f6:eb:af:7c:f3:d2:58:
87:7d:d0:a8:90:ff:6f:02:f7:5f:ce:9f:49:bf:e4:cc:06:38:
57:e8:74:22:d4:d7:80:ae:22:c9:db:15:68:80:c8:54:45:23:
0f:3e:ed:3a:7a:b2:9c:41:5f:1c:37:8a:25:0e:2a:5d:cf:07:
c8:34:15:52:46:8c:74:8f:41:92:94:e8:ac:49:35:98:39:1b:
2f:e9:6b:fe
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUBpVTToMeqyeK3Wx6YNmPWfjoPBowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz
MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MTAzMDA4MzYxMVoX
DTI3MTAyOTA4NDExMVowMzExMC8GA1UEAxMoNzlDREQwNUZGRTlFM0M2QzNGQkIw
NTUwQjYyQUJERkZCN0FEMkYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8zdqSjoxNB4IbJ077Evh5lnP+2/spYo88Z+AVSJddtkeopbJGi5xRbDryD
N8XesBJXuEq7Ac32PlGB1vBmHSNoqcs0IHpSzG3YoN9c0jsHKbh4iYYaMtxZChqz
wB/AiGdj57mifWbJkPSvFNsi7A7YH+O2Mv9oIikcl2dRXmrHBShVOibmRLWRMe2t
isLqOs2HbMiPrmEkCRMea0ixPSSVUFVwkj0jxjOyNZRZrgx7gVq9KmfUatnWoh5C
vJPK5S+pwI0YIYilKQ/DEu7fstBTtT0k5BwLUigXiEAHh/MkgVFz3bJP+S/FJagd
p0zFrFGacRNpDXNyZHz9hxAc3pUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBR5zdBf
/p48bD+7BVC2Kr3/t60vJjAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm
RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC
NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz
eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8wL0FTMTc2MjEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoDAwGL4gMDAYzOMA0GCSqGSIb3DQEB
CwUAA4IBAQBlPePnPKVOiecPVu98IaLYcOpv47tSJ6vtcGGwd9Phc4aDx7P5J53S
x9sZteussvuwGKT1eVmqRu3V1KclKcpFDFN8/mg1gZb8M9FUx+16zVCsx8/wUtA9
1jitUa9hbHK2ms24EOV5N2pA4sOuOhzJQnQieWo11L4ClCGDhrzWrdY3ojXHzHw3
kENetl+GYOlW73apMrBhrIkuuHhFdkar0SoMQi6AdEcJi0hE/Pbrr3zz0liHfdCo
kP9vAvdfzp9Jv+TMBjhX6HQi1NeAriLJ2xVogMhURSMPPu06erKcQV8cN4olDipd
zwfINBVSRox0j0GSlOisSTWYORsv6Wv+
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:05:15 2026 by rpki-client