Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17622.roa
File: AS17622.roa (raw, json)
Hash identifier: EfL5KGn0aIt3ppTgT81C1OBLBZrtDT+GQSrYotPpACs=
Subject key identifier: BC:91:C8:4E:4F:BA:1E:3D:BD:59:B0:E7:76:B0:CA:76:E5:3E:C7:4E
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 57F8259A643CA0C7905523F67B4081269DB365CE
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17622.roa
Signing time: Thu 09 Jul 2026 06:59:53 +0000
ROA not before: Thu 09 Jul 2026 06:54:53 +0000
ROA not after: Thu 08 Jul 2027 06:59:53 +0000
asID: 17622
IP address blocks: 157.61.0.0/23 maxlen: 23
157.61.42.0/23 maxlen: 23
157.122.48.0/20 maxlen: 20
157.122.48.0/21 maxlen: 21
157.122.56.0/21 maxlen: 21
157.122.62.0/24 maxlen: 24
157.122.64.0/20 maxlen: 20
157.122.64.0/21 maxlen: 21
157.122.64.0/23 maxlen: 23
157.122.64.0/24 maxlen: 24
157.122.70.0/24 maxlen: 24
157.122.72.0/21 maxlen: 21
157.122.88.0/21 maxlen: 21
157.122.136.0/21 maxlen: 21
157.122.136.0/22 maxlen: 22
157.122.140.0/22 maxlen: 22
157.148.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f8:25:9a:64:3c:a0:c7:90:55:23:f6:7b:40:81:26:9d:b3:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jul 9 06:54:53 2026 GMT
Not After : Jul 8 06:59:53 2027 GMT
Subject: CN=BC91C84E4FBA1E3DBD59B0E776B0CA76E53EC74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:20:1a:51:74:1e:d9:63:1b:8a:f4:fd:68:
1c:28:c9:06:5a:c7:3d:be:f1:21:4e:02:87:6f:fc:
4f:9b:00:23:a5:df:00:a5:70:40:c1:cc:bb:12:da:
95:93:32:35:3d:af:84:34:d4:07:c5:61:a9:26:a6:
e4:a1:7b:8c:dd:b0:28:d0:55:72:01:99:70:77:7d:
e4:12:0a:1e:21:91:3f:72:cb:45:83:fb:66:d7:c9:
28:ea:e7:6a:b6:f2:cc:b7:89:59:c0:c9:95:c5:99:
49:1d:ca:c3:73:0b:e6:79:33:2a:1b:72:75:62:9c:
6a:bc:e7:d8:b8:63:c1:38:90:d4:c5:86:cb:35:f3:
f5:da:f6:e9:8e:35:b0:55:f0:78:7a:49:50:d5:3c:
41:0a:12:b1:a6:fd:66:5c:fc:47:49:08:42:31:8a:
c0:0b:ce:e7:e1:b2:c8:12:25:68:6c:c7:c8:0d:c4:
42:16:ac:8e:f2:47:5a:61:79:3e:59:66:2c:dc:2f:
fb:9e:d5:1c:21:50:9b:3e:ea:b3:5d:2a:51:59:89:
d3:1f:cd:75:8b:2a:f7:d8:86:a1:f7:37:a9:98:ca:
33:25:9b:bc:0a:84:2d:c6:52:27:52:5f:a6:8d:18:
8d:a4:e7:c9:08:80:17:96:32:f7:bb:67:fd:bf:77:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:91:C8:4E:4F:BA:1E:3D:BD:59:B0:E7:76:B0:CA:76:E5:3E:C7:4E
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS17622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.61.0.0/23
157.61.42.0/23
157.122.48.0-157.122.79.255
157.122.88.0/21
157.122.136.0/21
157.148.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:1f:0c:3c:12:9a:79:5a:42:5e:9d:e5:0e:e8:1e:82:a0:d4:
08:5f:fd:20:75:b3:cb:dc:53:e7:b2:f0:b2:9a:17:8f:55:62:
e7:59:90:c2:2c:71:16:96:31:a7:f9:7e:1c:0d:a4:d5:2d:a7:
16:ed:74:1d:c5:c5:7e:e3:91:cb:a4:3a:9a:dc:cb:0d:03:54:
b4:b5:c6:7c:e2:44:09:8f:4c:20:cb:88:9a:50:cf:7d:09:4e:
36:01:0d:e0:6d:5a:9b:6d:f6:63:dd:71:4f:b6:6b:b1:ec:30:
54:19:6b:5b:4e:10:5f:08:85:c6:81:38:90:29:95:f4:3b:bf:
39:13:48:5f:75:5c:ce:b2:24:51:7c:a6:71:1e:56:02:80:cc:
6e:9b:22:b8:ef:91:50:04:6b:ac:47:ab:47:92:b0:a9:73:23:
3b:e3:fe:23:32:97:71:8a:4c:34:a8:bb:25:74:0f:d4:7e:9e:
e5:ed:d2:25:48:38:0f:41:6e:94:de:26:32:c5:84:ed:15:55:
83:48:96:8b:86:6a:22:ba:84:9d:f8:7e:1e:ed:70:69:25:66:
d5:0f:c5:af:fb:1b:5f:25:54:95:7c:1d:13:98:43:36:93:78:
8b:9a:ef:01:3b:83:ec:75:a4:2b:73:fa:76:b9:98:ce:ec:d3:
b0:88:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:42 2026 by rpki-client