Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
File: AS17816.roa (raw, json)
Hash identifier: Ffb4//kDka0Xnr57M5Ft4SuxSnj7EaFdHyljtyXZoX8=
Subject key identifier: 45:EE:5B:BE:E7:88:D5:8E:40:F8:61:C2:24:F2:CC:1E:DF:8F:FC:0E
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 42FAC735DFB2B6005A79D491BA59C87A7E552F7E
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
Signing time: Thu 09 Jul 2026 06:49:56 +0000
ROA not before: Thu 09 Jul 2026 06:44:56 +0000
ROA not after: Thu 08 Jul 2027 06:49:56 +0000
asID: 17816
IP address blocks: 27.39.80.0/24 maxlen: 24
27.40.0.0/24 maxlen: 24
27.40.1.0/24 maxlen: 24
27.40.2.0/23 maxlen: 23
27.40.2.0/24 maxlen: 24
27.40.3.0/24 maxlen: 24
27.40.6.0/24 maxlen: 24
27.40.7.0/24 maxlen: 24
27.40.14.0/24 maxlen: 24
27.40.62.0/23 maxlen: 23
27.40.63.0/24 maxlen: 24
58.254.200.0/22 maxlen: 22
58.254.200.0/23 maxlen: 23
58.254.202.0/23 maxlen: 23
58.254.204.0/22 maxlen: 22
58.254.204.0/24 maxlen: 24
58.254.205.0/24 maxlen: 24
58.254.206.0/24 maxlen: 24
58.254.207.0/24 maxlen: 24
58.254.208.0/22 maxlen: 22
58.254.208.0/23 maxlen: 23
58.254.210.0/23 maxlen: 23
58.254.210.0/24 maxlen: 24
58.254.211.0/24 maxlen: 24
58.254.212.0/22 maxlen: 22
58.254.212.0/24 maxlen: 24
58.254.213.0/24 maxlen: 24
58.254.214.0/24 maxlen: 24
58.254.215.0/24 maxlen: 24
58.254.220.0/22 maxlen: 22
58.254.220.0/24 maxlen: 24
58.254.221.0/24 maxlen: 24
58.254.222.0/24 maxlen: 24
58.254.223.0/24 maxlen: 24
58.254.224.0/22 maxlen: 22
58.254.224.0/24 maxlen: 24
58.254.225.0/24 maxlen: 24
58.254.226.0/24 maxlen: 24
58.254.227.0/24 maxlen: 24
58.254.228.0/22 maxlen: 22
58.254.228.0/23 maxlen: 23
58.254.230.0/23 maxlen: 23
58.254.232.0/23 maxlen: 23
58.254.232.0/24 maxlen: 24
58.254.233.0/24 maxlen: 24
58.254.240.0/23 maxlen: 23
58.254.244.0/23 maxlen: 23
58.254.244.0/24 maxlen: 24
58.254.245.0/24 maxlen: 24
58.254.246.0/23 maxlen: 23
58.254.246.0/24 maxlen: 24
58.254.247.0/24 maxlen: 24
58.254.250.0/23 maxlen: 23
58.254.250.0/24 maxlen: 24
58.254.251.0/24 maxlen: 24
58.254.252.0/23 maxlen: 23
58.254.254.0/23 maxlen: 23
58.254.255.0/24 maxlen: 24
103.251.32.0/22 maxlen: 22
120.80.9.0/24 maxlen: 24
120.80.11.0/24 maxlen: 24
120.80.16.0/24 maxlen: 24
120.80.17.0/24 maxlen: 24
120.82.6.0/24 maxlen: 24
120.82.9.0/24 maxlen: 24
120.82.192.0/23 maxlen: 23
120.83.1.0/24 maxlen: 24
120.83.3.0/24 maxlen: 24
120.83.5.0/24 maxlen: 24
120.83.7.0/24 maxlen: 24
221.4.8.0/22 maxlen: 22
221.4.10.0/24 maxlen: 24
221.4.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fa:c7:35:df:b2:b6:00:5a:79:d4:91:ba:59:c8:7a:7e:55:2f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Jul 9 06:44:56 2026 GMT
Not After : Jul 8 06:49:56 2027 GMT
Subject: CN=45EE5BBEE788D58E40F861C224F2CC1EDF8FFC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:31:64:83:fe:b6:62:a7:7f:33:d1:a7:b9:
0d:a3:dd:a0:32:14:98:c8:a4:cb:e6:78:35:f5:c2:
e6:ae:e8:4d:cc:2c:f9:a4:fd:69:e6:23:5e:aa:0c:
9c:02:df:5e:3c:5e:f4:23:10:d5:91:c4:a6:1a:53:
10:75:d7:c4:30:cd:89:3c:32:a0:6c:c7:56:b3:ab:
7e:dc:a4:3c:e6:90:03:ed:80:f6:de:76:15:a8:42:
17:ff:90:20:8f:57:f0:db:29:48:eb:d0:84:e7:bc:
95:30:73:a7:7f:ff:87:0e:c5:2a:1b:de:e9:55:60:
1f:4f:0b:a5:24:09:94:51:fe:7b:5e:0e:d8:df:c9:
c9:e5:a9:af:b0:46:d1:41:63:4e:7e:85:9f:e5:36:
d9:2f:b4:56:a2:eb:dc:a6:41:28:b4:a9:1f:d9:0c:
e3:f9:a8:f0:01:17:04:f5:f1:e8:cd:59:73:58:9b:
8f:f3:71:36:20:c3:d0:3a:4b:3c:da:5f:6c:2c:e8:
e5:83:6d:30:9e:e7:c4:98:bc:80:99:75:5d:0c:24:
d8:60:33:5d:15:4a:cf:fb:9f:9c:e4:c0:ac:c2:bc:
7a:3e:17:78:87:cb:5d:63:c8:23:92:6f:92:f2:d4:
fc:e3:c9:99:5e:29:3f:60:2d:e5:4e:34:14:04:0f:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:5B:BE:E7:88:D5:8E:40:F8:61:C2:24:F2:CC:1E:DF:8F:FC:0E
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.39.80.0/24
27.40.0.0/22
27.40.6.0/23
27.40.14.0/24
27.40.62.0/23
58.254.200.0-58.254.215.255
58.254.220.0-58.254.233.255
58.254.240.0/23
58.254.244.0/22
58.254.250.0-58.254.255.255
103.251.32.0/22
120.80.9.0/24
120.80.11.0/24
120.80.16.0/23
120.82.6.0/24
120.82.9.0/24
120.82.192.0/23
120.83.1.0/24
120.83.3.0/24
120.83.5.0/24
120.83.7.0/24
221.4.8.0/22
Signature Algorithm: sha256WithRSAEncryption
99:94:e1:d1:32:c6:27:26:df:fa:82:00:03:73:3f:52:74:94:
43:4e:3e:74:e7:f8:5f:56:4b:8e:3a:04:c7:5e:84:84:a3:39:
0a:3b:fe:63:d0:60:7c:9c:e9:30:9f:cb:13:6f:cb:3e:63:94:
45:f9:b4:5b:dc:ef:6f:5c:91:0b:8c:25:95:b9:aa:df:0b:5d:
06:d2:86:ad:39:d2:02:30:51:4e:87:d5:06:9c:7f:a9:4f:2b:
79:2b:ab:45:88:21:b5:db:ea:2f:7c:a5:c3:d9:ee:dd:55:13:
f3:77:af:a6:89:22:a2:00:66:3a:2e:55:4a:ff:ef:a5:4a:4b:
2f:86:6c:b7:0a:0e:b3:9e:8e:38:6d:2e:19:4a:c8:53:22:34:
a8:54:a0:ba:40:d5:b9:e2:5d:1b:c4:2f:93:36:61:e8:16:13:
93:cf:39:fa:5f:45:11:d6:1a:a6:ae:4d:33:09:ce:60:68:45:
dd:e0:f6:25:9f:ab:0a:13:1b:22:95:bc:b6:8b:63:a5:e0:bf:
0f:14:2b:6f:b3:ef:63:8c:9a:75:4a:04:25:50:fd:9f:d4:a2:
ac:bb:1c:54:ea:69:5b:1e:75:f8:bf:10:fa:57:ab:56:c7:7b:
bc:1f:de:3d:3c:41:47:2f:ff:7f:d8:17:10:5e:1b:a6:a7:01:
ce:71:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:27 2026 by rpki-client