$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa File: AS17622.roa (raw, json) Hash identifier: IRTv5o4GJ1aBPIJIgzqhS0zc5fefTRhHWie6X5l6q6U= Subject key identifier: 87:6B:85:08:B1:6F:37:58:EC:23:97:65:EA:6D:18:9C:B4:CC:70:8F Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 7EF3A7EF804B9F63D305FB7D6A7C590DDEA4C2CE Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa Signing time: Thu 09 Jul 2026 07:00:34 +0000 ROA not before: Thu 09 Jul 2026 06:55:34 +0000 ROA not after: Thu 08 Jul 2027 07:00:34 +0000 asID: 17622 IP address blocks: 61.242.32.0/20 maxlen: 20 61.242.48.0/20 maxlen: 20 61.242.56.0/21 maxlen: 21 61.242.96.0/20 maxlen: 20 61.242.112.0/20 maxlen: 20 211.95.193.0/24 maxlen: 24 211.95.204.0/24 maxlen: 24 211.95.206.0/24 maxlen: 24 211.96.23.0/24 maxlen: 24 211.96.24.0/21 maxlen: 21 211.97.0.0/20 maxlen: 20 211.97.8.0/23 maxlen: 23 211.97.10.0/23 maxlen: 23 211.97.16.0/20 maxlen: 20 220.198.204.0/23 maxlen: 23 220.198.206.0/23 maxlen: 23 220.198.208.0/23 maxlen: 23 220.198.216.0/23 maxlen: 23 220.198.218.0/23 maxlen: 23 220.198.220.0/23 maxlen: 23 220.198.222.0/23 maxlen: 23 220.198.240.0/23 maxlen: 23 220.198.246.0/23 maxlen: 23 220.198.248.0/23 maxlen: 23 220.199.6.0/24 maxlen: 24 220.203.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f3:a7:ef:80:4b:9f:63:d3:05:fb:7d:6a:7c:59:0d:de:a4:c2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jul 9 06:55:34 2026 GMT Not After : Jul 8 07:00:34 2027 GMT Subject: CN=876B8508B16F3758EC239765EA6D189CB4CC708F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:09:80:9e:22:45:5f:5c:86:6c:dd:7f:ea: ed:e8:5b:9b:f6:c4:47:82:09:e3:20:63:ba:3f:7b: a5:b6:25:e4:af:46:ee:43:56:aa:88:43:59:69:e3: 55:68:87:4c:40:64:76:66:e5:e7:72:92:3d:f8:1d: 65:50:87:2d:ae:6f:7e:69:b7:1b:da:2a:ca:46:3a: fc:af:cb:e2:08:13:62:08:09:78:eb:52:78:c1:5c: c1:7a:1a:62:f4:cc:7c:85:7b:74:ba:f6:d0:54:0d: b0:30:b0:34:80:42:f2:29:86:48:96:15:40:af:e1: 55:d0:32:47:ab:1c:a2:f3:3d:cc:d2:10:47:c6:1e: b4:bd:8e:75:0a:de:30:27:8a:74:1d:be:d1:54:80: 0a:c0:aa:2c:02:c6:08:ca:a1:87:cc:51:bd:8f:8a: bf:f9:60:5a:69:04:c2:68:a0:b3:18:cf:4d:d6:90: 4c:c2:a6:b2:6a:3b:17:b4:98:71:ad:ae:78:a8:2b: 6d:70:d4:a5:28:0c:6c:6d:b7:f1:4b:2a:d2:80:95: 2e:41:db:93:28:ef:3a:11:44:8f:4c:b6:fc:c3:c0: 0b:4f:8a:ba:67:4f:4c:c4:bb:1d:ac:df:16:59:b6: 2c:bf:77:6e:fe:d0:df:d3:36:9f:03:62:bb:17:59: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6B:85:08:B1:6F:37:58:EC:23:97:65:EA:6D:18:9C:B4:CC:70:8F X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS17622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.242.32.0/19 61.242.96.0/19 211.95.193.0/24 211.95.204.0/24 211.95.206.0/24 211.96.23.0-211.96.31.255 211.97.0.0/19 220.198.204.0-220.198.209.255 220.198.216.0/21 220.198.240.0/23 220.198.246.0-220.198.249.255 220.199.6.0/24 220.203.216.0/23 Signature Algorithm: sha256WithRSAEncryption 34:83:7e:56:64:d8:6e:62:ff:07:b9:df:ba:15:46:ee:da:bc: b0:27:b6:b9:1d:ae:68:5e:3d:df:b8:57:7f:e5:69:aa:c4:3c: b7:19:7f:94:4f:e8:d6:88:fc:05:bc:a3:3f:09:a7:31:99:fc: 2b:e8:e2:0b:ab:b8:e1:31:31:b7:1e:d8:01:8e:b5:7e:de:0b: 1e:0b:3a:f9:22:bb:a6:ce:0a:ac:00:9b:2d:24:0c:9a:e9:7e: 55:e2:ec:c6:09:d9:31:b6:b0:3e:6e:ad:a6:71:d7:0d:2b:c3: 5d:ff:93:f4:c5:3e:f6:cf:c9:52:01:80:1e:3b:c0:24:68:b2: b7:63:d9:74:96:93:09:21:54:f7:ec:ff:3b:cb:21:7b:86:93: 43:d1:9c:2f:62:1b:bd:b2:3f:c0:38:4e:b3:18:f9:ad:87:39: 92:92:e5:01:19:a6:79:ba:41:dd:c8:8c:87:15:f8:aa:5b:3f: 97:ac:6f:5a:2b:53:4a:33:c6:42:97:a6:7f:54:86:e7:18:d9: 67:ae:be:92:73:6d:fd:40:91:5b:4d:20:7d:54:74:f8:07:67: b4:bc:01:0e:e8:22:b8:22:50:28:82:0d:15:f9:c6:39:0e:c6: 29:ff:95:f9:47:d4:17:1f:a3:7a:2f:20:41:c4:67:4a:6d:73: 9e:cd:24:fe -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUfvOn74BLn2PTBft9anxZDd6kws4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA3MDkwNjU1MzRaFw0yNzA3MDgwNzAwMzRaMDMxMTAvBgNV BAMTKDg3NkI4NTA4QjE2RjM3NThFQzIzOTc2NUVBNkQxODlDQjRDQzcwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mQmAniJFX1yGbN1/6u3oW5v2 xEeCCeMgY7o/e6W2JeSvRu5DVqqIQ1lp41Voh0xAZHZm5edykj34HWVQhy2ub35p txvaKspGOvyvy+IIE2IICXjrUnjBXMF6GmL0zHyFe3S69tBUDbAwsDSAQvIphkiW FUCv4VXQMkerHKLzPczSEEfGHrS9jnUK3jAninQdvtFUgArAqiwCxgjKoYfMUb2P ir/5YFppBMJooLMYz03WkEzCprJqOxe0mHGtrnioK21w1KUoDGxtt/FLKtKAlS5B 25Mo7zoRRI9MtvzDwAtPirpnT0zEux2s3xZZtiy/d27+0N/TNp8DYrsXWazZAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUh2uFCLFvN1jsI5dl6m0YnLTMcI8wHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE3NjIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIA ATBmAwQFPfIgAwQFPfJgAwQA01/BAwQA01/MAwQA01/OMAwDBADTYBcDBAXTYAAD BAXTYQAwDAMEAtzGzAMEAdzG0AMEA9zG2AMEAdzG8DAMAwQB3Mb2AwQB3Mb4AwQA 3McGAwQB3MvYMA0GCSqGSIb3DQEBCwUAA4IBAQA0g35WZNhuYv8Hud+6FUbu2ryw J7a5Ha5oXj3fuFd/5WmqxDy3GX+UT+jWiPwFvKM/Cacxmfwr6OILq7jhMTG3HtgB jrV+3gseCzr5IrumzgqsAJstJAya6X5V4uzGCdkxtrA+bq2mcdcNK8Nd/5P0xT72 z8lSAYAeO8AkaLK3Y9l0lpMJIVT37P87yyF7hpND0ZwvYhu9sj/AOE6zGPmthzmS kuUBGaZ5ukHdyIyHFfiqWz+XrG9aK1NKM8ZCl6Z/VIbnGNlnrr6Sc239QJFbTSB9 VHT4B2e0vAEO6CK4IlAogg0V+cY5DsYp/5X5R9QXH6N6LyBBxGdKbXOezST+ -----END CERTIFICATE-----Generated at Fri Jul 24 17:48:05 2026 by rpki-client