$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS17621.roa File: AS17621.roa (raw, json) Hash identifier: E5Tdsrm8kJGJR4RxhmnBglf6HvjjYr94EMgDxTm7aCw= Subject key identifier: 6D:1A:E4:1C:C0:79:D4:17:10:44:26:DE:FF:82:65:97:4B:BE:AB:31 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 4555DD775536FC768BA72D67D82A90A0548A965A Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS17621.roa Signing time: Mon 22 Jun 2026 15:43:51 +0000 ROA not before: Mon 22 Jun 2026 15:38:51 +0000 ROA not after: Mon 21 Jun 2027 15:43:51 +0000 asID: 17621 IP address blocks: 2405:1480:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:55:dd:77:55:36:fc:76:8b:a7:2d:67:d8:2a:90:a0:54:8a:96:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 22 15:38:51 2026 GMT Not After : Jun 21 15:43:51 2027 GMT Subject: CN=6D1AE41CC079D417104426DEFF8265974BBEAB31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:c7:6f:f5:8d:48:da:6b:0a:3c:bb:78:5a: 95:45:02:c5:bc:b5:68:12:be:64:28:c2:54:ea:61: 26:cf:6f:31:fc:a8:12:32:04:19:3e:81:2f:6d:01: c2:f8:f2:e8:22:bc:70:81:83:2b:7a:54:bb:b4:41: f8:c6:1e:f3:f5:cc:3d:64:b8:78:3c:d9:06:c2:12: 2c:bc:a7:de:3b:b7:1d:5b:a8:62:56:f9:37:bc:61: 8e:b4:34:7f:d5:60:69:39:10:e7:83:22:e1:75:ff: 81:05:46:3b:2e:c4:69:14:95:0a:8d:7c:3e:6f:19: 1a:84:4e:25:b3:8d:a8:3d:d6:30:dc:4f:19:40:37: 23:8f:88:af:64:49:c2:d3:82:f4:33:d3:01:a0:6f: e1:01:2e:34:f3:ff:2b:7a:c9:48:23:4f:2c:5e:54: a5:f6:ed:0b:d8:61:c4:d2:6d:4e:22:57:02:22:ab: 3f:30:1b:12:14:96:12:7e:ac:7b:57:c7:d8:e3:26: 0f:c1:7a:bd:fb:04:50:83:a8:56:4f:13:de:8b:ba: 52:8e:d7:11:73:28:43:e5:b6:92:be:a1:ee:a5:12: c7:04:56:63:f7:07:95:1e:0c:f6:7c:11:ad:06:fa: c8:e4:6b:c2:da:df:ce:e8:3d:5b:48:23:64:c2:f5: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:E4:1C:C0:79:D4:17:10:44:26:DE:FF:82:65:97:4B:BE:AB:31 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS17621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1480:1000::/48 Signature Algorithm: sha256WithRSAEncryption 6d:8b:81:83:2e:9f:27:0b:1b:c1:02:c2:d1:5c:0f:c7:79:5f: a4:9e:f6:86:73:d4:f8:ca:e5:9f:3b:15:18:d9:ba:84:fc:fc: 7f:88:eb:2b:a5:af:b2:43:64:bc:08:26:31:fb:d8:52:9c:8e: 0e:28:f6:74:5a:e9:16:b8:20:a6:c7:9b:1e:d6:1f:f7:74:84: 43:a3:2f:46:05:bb:80:71:2a:4b:32:30:d1:58:2d:60:21:04: e5:d5:cd:30:df:ad:64:ca:3d:f2:5d:64:ef:1c:df:dd:ef:f8: ff:b1:bb:89:ed:85:b8:2b:e0:2e:5b:e2:0f:89:55:be:30:8b: 30:6b:6c:5a:56:71:6d:79:a0:f8:83:c9:2c:aa:a4:8f:60:15: a6:e3:41:2c:8a:25:b0:2d:77:95:2b:86:f8:9a:74:31:28:bf: dd:1d:48:fd:2f:19:80:fd:08:5e:ae:5e:32:3c:b8:7d:c4:86: c2:10:20:62:56:53:fa:93:8a:25:08:62:f6:2e:90:6e:50:38: c2:ef:22:ba:2f:f9:59:ca:0b:0f:1b:24:46:6c:24:eb:46:c9: a5:69:23:e5:d4:34:b9:44:db:a4:60:08:68:33:e2:aa:fd:96: e6:b9:bd:43:37:81:7f:4b:3e:0f:78:f2:5c:2b:2c:8d:50:6b: a6:5f:ae:91 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURVXdd1U2/HaLpy1n2CqQoFSKllowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MjIxNTM4NTFaFw0yNzA2MjExNTQzNTFaMDMxMTAvBgNV BAMTKDZEMUFFNDFDQzA3OUQ0MTcxMDQ0MjZERUZGODI2NTk3NEJCRUFCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUosdv9Y1I2msKPLt4WpVFAsW8 tWgSvmQowlTqYSbPbzH8qBIyBBk+gS9tAcL48ugivHCBgyt6VLu0QfjGHvP1zD1k uHg82QbCEiy8p947tx1bqGJW+Te8YY60NH/VYGk5EOeDIuF1/4EFRjsuxGkUlQqN fD5vGRqETiWzjag91jDcTxlANyOPiK9kScLTgvQz0wGgb+EBLjTz/yt6yUgjTyxe VKX27QvYYcTSbU4iVwIiqz8wGxIUlhJ+rHtXx9jjJg/Ber37BFCDqFZPE96LulKO 1xFzKEPltpK+oe6lEscEVmP3B5UeDPZ8Ea0G+sjka8La387oPVtII2TC9WB3AgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUbRrkHMB51BcQRCbe/4Jll0u+qzEwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC9BUzE3NjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJAUUgBAAMA0GCSqGSIb3DQEBCwUAA4IBAQBti4GDLp8nCxvBAsLRXA/H eV+knvaGc9T4yuWfOxUY2bqE/Px/iOsrpa+yQ2S8CCYx+9hSnI4OKPZ0WukWuCCm x5se1h/3dIRDoy9GBbuAcSpLMjDRWC1gIQTl1c0w361kyj3yXWTvHN/d7/j/sbuJ 7YW4K+AuW+IPiVW+MIswa2xaVnFteaD4g8ksqqSPYBWm40EsiiWwLXeVK4b4mnQx KL/dHUj9LxmA/Qherl4yPLh9xIbCECBiVlP6k4olCGL2LpBuUDjC7yK6L/lZygsP GyRGbCTrRsmlaSPl1DS5RNukYAhoM+Kq/Zbmub1DN4F/Sz4PePJcKyyNUGumX66R -----END CERTIFICATE-----Generated at Fri Jul 24 05:30:23 2026 by rpki-client