Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/AS17429.roa
File: AS17429.roa (raw, json)
Hash identifier: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=
Subject key identifier: 3D:64:DB:EB:FC:0B:50:DC:F4:1D:A0:BB:51:0F:EA:2A:56:CB:3E:A5
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 3197E2A56A54F1093E40E40EAEAB2880C6C583AB
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/AS17429.roa
Signing time: Wed 03 Jun 2026 01:36:48 +0000
ROA not before: Wed 03 Jun 2026 01:31:48 +0000
ROA not after: Wed 02 Jun 2027 01:36:48 +0000
asID: 17429
IP address blocks: 1.88.0.0/16 maxlen: 24
1.88.0.0/17 maxlen: 24
1.88.0.0/18 maxlen: 24
1.88.32.0/19 maxlen: 24
1.88.64.0/18 maxlen: 24
1.88.128.0/17 maxlen: 24
1.88.128.0/18 maxlen: 24
1.88.192.0/18 maxlen: 24
1.89.0.0/16 maxlen: 24
1.89.0.0/17 maxlen: 24
1.89.0.0/18 maxlen: 24
1.89.64.0/18 maxlen: 24
1.89.128.0/17 maxlen: 24
1.89.128.0/18 maxlen: 24
1.89.192.0/18 maxlen: 24
1.90.0.0/16 maxlen: 24
1.90.0.0/17 maxlen: 24
1.90.0.0/18 maxlen: 24
1.90.64.0/18 maxlen: 24
1.90.128.0/17 maxlen: 24
1.90.128.0/18 maxlen: 24
1.90.192.0/18 maxlen: 24
1.91.0.0/16 maxlen: 24
1.91.0.0/17 maxlen: 24
1.91.0.0/18 maxlen: 24
1.91.64.0/18 maxlen: 24
1.91.128.0/17 maxlen: 24
1.91.128.0/18 maxlen: 24
1.91.192.0/18 maxlen: 24
43.247.236.0/22 maxlen: 24
58.30.0.0/16 maxlen: 24
58.30.0.0/18 maxlen: 24
58.30.0.0/19 maxlen: 24
58.30.0.0/20 maxlen: 24
58.30.0.0/24 maxlen: 24
58.30.13.0/24 maxlen: 24
58.30.16.0/20 maxlen: 24
58.30.32.0/19 maxlen: 24
58.30.32.0/20 maxlen: 24
58.30.48.0/20 maxlen: 24
58.30.64.0/18 maxlen: 24
58.30.64.0/19 maxlen: 24
58.30.96.0/19 maxlen: 24
58.30.128.0/18 maxlen: 24
58.30.128.0/19 maxlen: 24
58.30.192.0/18 maxlen: 24
58.30.192.0/19 maxlen: 24
58.30.204.0/23 maxlen: 24
58.30.206.0/24 maxlen: 24
58.30.224.0/19 maxlen: 24
58.31.0.0/16 maxlen: 24
58.31.0.0/17 maxlen: 24
58.31.0.0/18 maxlen: 24
58.31.64.0/18 maxlen: 24
58.31.128.0/17 maxlen: 24
58.31.128.0/18 maxlen: 24
58.31.192.0/18 maxlen: 24
101.240.0.0/16 maxlen: 24
101.240.0.0/17 maxlen: 24
101.240.0.0/18 maxlen: 24
101.240.64.0/18 maxlen: 24
101.240.128.0/17 maxlen: 24
101.240.128.0/18 maxlen: 24
101.240.192.0/18 maxlen: 24
101.241.0.0/16 maxlen: 24
101.241.0.0/17 maxlen: 24
101.241.0.0/18 maxlen: 24
101.241.64.0/18 maxlen: 24
101.241.128.0/17 maxlen: 24
101.241.128.0/18 maxlen: 24
101.241.192.0/18 maxlen: 24
101.242.0.0/16 maxlen: 24
101.242.0.0/17 maxlen: 24
101.242.0.0/18 maxlen: 24
101.242.0.0/19 maxlen: 24
101.242.32.0/19 maxlen: 24
101.242.64.0/18 maxlen: 24
101.242.128.0/17 maxlen: 24
101.242.128.0/18 maxlen: 24
101.242.192.0/18 maxlen: 24
101.243.0.0/16 maxlen: 24
101.243.0.0/17 maxlen: 24
101.243.0.0/18 maxlen: 24
101.243.64.0/18 maxlen: 24
101.243.128.0/17 maxlen: 24
101.243.128.0/18 maxlen: 24
101.243.192.0/18 maxlen: 24
103.238.48.0/22 maxlen: 24
180.77.0.0/16 maxlen: 24
180.77.0.0/17 maxlen: 24
180.77.0.0/18 maxlen: 24
180.77.64.0/18 maxlen: 24
180.77.128.0/17 maxlen: 24
180.77.128.0/18 maxlen: 24
180.77.192.0/18 maxlen: 24
180.78.0.0/16 maxlen: 24
180.78.0.0/17 maxlen: 24
180.78.0.0/18 maxlen: 24
180.78.64.0/18 maxlen: 24
180.78.128.0/17 maxlen: 24
180.78.128.0/18 maxlen: 24
180.78.192.0/18 maxlen: 24
180.79.0.0/16 maxlen: 24
180.79.0.0/17 maxlen: 24
180.79.0.0/18 maxlen: 24
180.79.64.0/18 maxlen: 24
180.79.128.0/17 maxlen: 24
180.79.128.0/18 maxlen: 24
180.79.192.0/18 maxlen: 24
211.99.128.0/19 maxlen: 24
211.99.128.0/20 maxlen: 24
211.99.128.0/21 maxlen: 24
211.99.136.0/21 maxlen: 24
211.99.144.0/20 maxlen: 24
218.246.96.0/19 maxlen: 24
218.246.96.0/20 maxlen: 24
218.246.108.0/24 maxlen: 24
218.246.112.0/20 maxlen: 24
219.236.0.0/16 maxlen: 24
219.236.0.0/17 maxlen: 24
219.236.0.0/18 maxlen: 24
219.236.64.0/18 maxlen: 24
219.236.128.0/17 maxlen: 24
219.236.128.0/18 maxlen: 24
219.236.192.0/18 maxlen: 24
219.237.0.0/16 maxlen: 23
219.237.0.0/18 maxlen: 23
219.237.0.0/19 maxlen: 24
219.237.15.0/24 maxlen: 24
219.237.32.0/19 maxlen: 24
219.237.64.0/18 maxlen: 24
219.237.72.0/24 maxlen: 24
219.237.76.0/23 maxlen: 24
219.237.79.0/24 maxlen: 24
219.237.96.0/19 maxlen: 24
219.237.128.0/18 maxlen: 24
219.237.128.0/19 maxlen: 24
219.237.160.0/19 maxlen: 24
219.237.184.0/22 maxlen: 24
219.237.192.0/18 maxlen: 24
219.237.192.0/19 maxlen: 24
219.237.224.0/19 maxlen: 24
2403:4300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:97:e2:a5:6a:54:f1:09:3e:40:e4:0e:ae:ab:28:80:c6:c5:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Jun 3 01:31:48 2026 GMT
Not After : Jun 2 01:36:48 2027 GMT
Subject: CN=3D64DBEBFC0B50DCF41DA0BB510FEA2A56CB3EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:e3:d8:80:b8:96:2a:87:ea:39:7e:ff:4d:
3d:92:8e:dc:b7:a2:20:c6:e3:46:89:35:1a:95:ec:
d8:18:31:43:3a:18:25:3f:34:65:74:75:4c:b9:c4:
2c:2a:e3:3c:e7:a9:0b:48:db:fa:50:b6:71:6d:74:
5f:c2:94:66:71:48:81:dd:66:22:56:9b:eb:45:55:
d1:90:ee:38:9f:0f:00:08:43:67:81:3c:b5:bb:b2:
c8:5a:45:b3:08:b6:8e:67:15:15:9d:9e:29:04:f1:
3b:d6:85:06:ff:a7:e7:f2:2d:71:88:24:ed:ce:a4:
36:db:e6:ae:c8:8a:01:38:a0:17:e7:4a:df:4c:47:
eb:f3:49:e2:65:ce:c6:d0:7d:c1:43:78:7f:29:ce:
08:7c:a4:d6:01:38:47:c4:f2:f3:9a:0c:ae:ec:59:
e0:e2:e2:27:16:c8:e3:89:c7:96:cb:60:d6:90:aa:
eb:44:c8:09:b2:ab:c6:92:20:2b:5f:d8:3b:52:fb:
b6:2d:33:46:06:09:3e:5e:a3:80:a7:18:38:82:b5:
34:c7:77:46:65:c4:ed:2d:45:d7:c0:12:38:50:2d:
a6:9c:8d:96:08:dc:de:cc:cb:4e:7b:71:91:95:9c:
2d:5b:93:d8:d4:e0:81:9d:c4:60:48:37:5e:a3:4e:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:DB:EB:FC:0B:50:DC:F4:1D:A0:BB:51:0F:EA:2A:56:CB:3E:A5
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/AS17429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.88.0.0/14
43.247.236.0/22
58.30.0.0/15
101.240.0.0/14
103.238.48.0/22
180.77.0.0-180.79.255.255
211.99.128.0/19
218.246.96.0/19
219.236.0.0/15
IPv6:
2403:4300::/32
Signature Algorithm: sha256WithRSAEncryption
69:00:14:82:6f:d3:30:bc:33:9d:46:f0:58:4c:90:9c:12:83:
dc:43:20:8d:60:54:55:5e:8f:25:7d:7c:75:af:b4:7c:87:af:
d8:f3:50:83:68:24:e8:6d:12:7a:94:c4:a5:08:8e:c9:e3:b0:
52:80:07:8f:95:4a:30:a8:a5:09:38:b1:24:7a:ab:c0:fe:e0:
5f:1a:3c:15:7c:a3:15:57:f4:43:99:84:d6:25:03:3b:3c:36:
9f:2c:17:5a:cb:5d:59:80:d5:76:ab:3d:b5:c7:47:54:6b:7f:
75:e4:e9:67:b0:b2:99:a2:dc:97:3f:58:31:55:22:12:52:8d:
52:53:16:80:64:26:6f:d7:84:36:b7:94:b2:32:ee:84:2c:b2:
91:37:d1:b7:f8:cc:68:b3:ad:d7:cf:c2:75:6e:c7:f7:f3:34:
ee:b2:f3:16:11:03:b4:62:7f:74:79:9b:58:02:4a:e4:db:1d:
9e:44:2b:d0:31:90:80:30:76:50:67:91:eb:12:80:16:c5:a7:
66:ae:38:f8:36:ca:b3:d9:5a:a4:a0:73:e7:8a:7d:0c:3f:ce:
41:77:39:db:d8:68:6d:cd:59:2e:f4:6e:69:ad:d9:0d:39:0b:
16:03:f0:db:0e:e4:91:a7:56:bd:27:05:35:e6:67:dd:ba:96:
b9:f8:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:12 2026 by rpki-client