Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS17964.roa
File: AS17964.roa (raw, json)
Hash identifier: 0o66y8CAop9qB0opnrDd38kz8N3ZG7uIIdycGdC6aCE=
Subject key identifier: 4B:A3:68:3A:46:B7:13:50:2A:BD:24:DC:E7:92:F7:A9:71:F0:2D:8F
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 05A6CD730B4542E41F68B2FA5DEB41690E1DA47B
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS17964.roa
Signing time: Wed 10 Jun 2026 01:46:48 +0000
ROA not before: Wed 10 Jun 2026 01:41:48 +0000
ROA not after: Wed 09 Jun 2027 01:46:48 +0000
asID: 17964
IP address blocks: 60.195.252.0/22 maxlen: 22
115.182.0.0/21 maxlen: 21
115.182.0.0/22 maxlen: 22
115.182.4.0/22 maxlen: 22
115.182.8.0/21 maxlen: 21
115.182.16.0/21 maxlen: 21
115.182.17.0/24 maxlen: 24
115.182.19.0/24 maxlen: 24
115.182.20.0/24 maxlen: 24
115.182.22.0/23 maxlen: 23
115.182.24.0/21 maxlen: 21
115.182.26.0/23 maxlen: 23
115.182.28.0/24 maxlen: 24
115.182.32.0/22 maxlen: 22
115.182.40.0/21 maxlen: 21
115.182.43.0/24 maxlen: 24
115.182.44.0/24 maxlen: 24
115.182.46.0/23 maxlen: 23
115.182.48.0/21 maxlen: 21
115.182.56.0/21 maxlen: 21
115.182.64.0/21 maxlen: 21
115.182.72.0/21 maxlen: 21
115.182.80.0/21 maxlen: 21
115.182.83.0/24 maxlen: 24
115.182.88.0/22 maxlen: 22
115.182.89.0/24 maxlen: 24
115.182.92.0/22 maxlen: 22
115.182.92.0/23 maxlen: 23
115.182.94.0/24 maxlen: 24
115.182.96.0/21 maxlen: 21
115.182.96.0/22 maxlen: 22
115.182.104.0/21 maxlen: 21
115.182.112.0/21 maxlen: 21
115.182.120.0/21 maxlen: 21
115.182.122.0/24 maxlen: 24
115.182.124.0/24 maxlen: 24
115.182.128.0/20 maxlen: 20
115.182.144.0/20 maxlen: 20
115.182.160.0/20 maxlen: 20
115.182.192.0/22 maxlen: 22
115.182.200.0/21 maxlen: 21
115.182.208.0/21 maxlen: 21
115.182.216.0/22 maxlen: 22
115.182.220.0/22 maxlen: 22
115.182.224.0/20 maxlen: 20
118.144.64.0/21 maxlen: 21
118.144.67.0/24 maxlen: 24
118.144.69.0/24 maxlen: 24
118.144.70.0/24 maxlen: 24
118.144.71.0/24 maxlen: 24
118.144.72.0/22 maxlen: 22
118.144.72.0/24 maxlen: 24
118.144.75.0/24 maxlen: 24
118.144.77.0/24 maxlen: 24
118.144.78.0/24 maxlen: 24
118.144.80.0/20 maxlen: 20
118.144.94.0/24 maxlen: 24
118.144.95.0/24 maxlen: 24
118.145.0.0/20 maxlen: 20
118.145.12.0/24 maxlen: 24
118.145.14.0/24 maxlen: 24
118.145.16.0/20 maxlen: 20
118.145.18.0/24 maxlen: 24
118.145.28.0/24 maxlen: 24
118.145.30.0/24 maxlen: 24
118.145.31.0/24 maxlen: 24
118.244.192.0/22 maxlen: 22
118.244.196.0/24 maxlen: 24
118.244.202.0/24 maxlen: 24
118.244.203.0/24 maxlen: 24
118.244.205.0/24 maxlen: 24
118.244.206.0/24 maxlen: 24
118.244.207.0/24 maxlen: 24
118.244.208.0/20 maxlen: 20
118.244.208.0/24 maxlen: 24
118.244.209.0/24 maxlen: 24
118.244.210.0/24 maxlen: 24
118.244.211.0/24 maxlen: 24
118.244.216.0/24 maxlen: 24
118.244.217.0/24 maxlen: 24
118.244.218.0/24 maxlen: 24
118.244.219.0/24 maxlen: 24
118.244.220.0/24 maxlen: 24
118.244.221.0/24 maxlen: 24
118.244.222.0/24 maxlen: 24
118.244.223.0/24 maxlen: 24
118.244.224.0/21 maxlen: 21
118.244.224.0/24 maxlen: 24
118.244.225.0/24 maxlen: 24
118.244.226.0/24 maxlen: 24
118.244.228.0/24 maxlen: 24
118.244.230.0/24 maxlen: 24
118.244.231.0/24 maxlen: 24
118.244.232.0/21 maxlen: 21
118.244.232.0/24 maxlen: 24
118.244.233.0/24 maxlen: 24
118.244.234.0/24 maxlen: 24
118.244.239.0/24 maxlen: 24
123.196.112.0/21 maxlen: 21
123.196.120.0/21 maxlen: 21
124.202.128.0/20 maxlen: 20
124.202.129.0/24 maxlen: 24
124.202.144.0/20 maxlen: 20
211.147.4.0/22 maxlen: 22
211.154.160.0/21 maxlen: 21
211.154.160.0/22 maxlen: 22
211.154.160.0/24 maxlen: 24
211.154.168.0/21 maxlen: 21
218.241.152.0/22 maxlen: 22
218.241.156.0/22 maxlen: 22
219.234.80.0/21 maxlen: 21
219.234.88.0/21 maxlen: 21
219.238.232.0/22 maxlen: 22
219.238.236.0/22 maxlen: 22
219.239.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a6:cd:73:0b:45:42:e4:1f:68:b2:fa:5d:eb:41:69:0e:1d:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Jun 10 01:41:48 2026 GMT
Not After : Jun 9 01:46:48 2027 GMT
Subject: CN=4BA3683A46B713502ABD24DCE792F7A971F02D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:47:a3:b1:3e:3d:d0:d5:0d:39:04:20:ad:
f7:ff:42:fb:e6:aa:67:1d:1f:4b:b5:5b:3e:a6:29:
9a:ff:f6:13:e2:a4:4c:e8:0a:e7:0e:28:87:d0:35:
f1:3b:e6:3a:49:de:fe:74:88:0e:59:3e:30:cd:3e:
08:85:51:97:e8:d2:7b:f5:75:ce:30:68:94:eb:93:
e1:09:e1:6b:f5:91:c6:c2:13:e6:7c:00:d8:8b:85:
ca:5c:5a:e5:f6:c6:52:d4:08:c6:31:e7:d4:50:bf:
6c:21:54:ae:ca:21:22:49:b4:70:1c:41:ad:00:94:
be:1f:4e:5f:06:7c:c9:c9:75:74:ce:28:90:b5:36:
25:01:5c:9d:5a:8e:dc:1a:c9:d5:ec:40:09:f5:19:
60:f2:55:83:cd:2c:2a:bb:40:f2:1d:9a:19:da:f3:
d8:40:b2:ec:00:c9:74:15:77:36:c5:62:b0:3c:5c:
3b:df:7e:cd:2a:89:f6:a3:8a:db:87:d7:90:90:0e:
c3:fd:20:6c:98:5d:74:88:6f:1c:14:32:7e:5d:ef:
c6:87:41:b4:fe:3a:02:6f:e3:29:96:fe:5f:3e:b7:
27:20:5e:61:a8:6c:70:1a:8d:fe:e2:42:61:4e:6b:
4e:bd:c2:9a:0c:70:70:c5:b3:ef:ab:0e:69:51:d3:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:68:3A:46:B7:13:50:2A:BD:24:DC:E7:92:F7:A9:71:F0:2D:8F
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS17964.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.195.252.0/22
115.182.0.0-115.182.35.255
115.182.40.0-115.182.175.255
115.182.192.0/22
115.182.200.0-115.182.239.255
118.144.64.0-118.144.75.255
118.144.77.0-118.144.78.255
118.144.80.0/20
118.145.0.0/19
118.244.192.0-118.244.196.255
118.244.202.0/23
118.244.205.0-118.244.239.255
123.196.112.0/20
124.202.128.0/19
211.147.4.0/22
211.154.160.0/20
218.241.152.0/21
219.234.80.0/20
219.238.232.0/21
219.239.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:1c:be:85:0f:b9:bf:78:cc:b4:87:12:c9:1a:15:1d:1f:7f:
95:5d:bd:11:1f:7c:75:51:fd:4d:ca:38:3a:31:64:4d:8f:bb:
37:28:02:86:33:5c:e0:be:eb:ed:61:ee:f6:e1:93:50:50:0a:
a9:65:46:5c:55:fd:c5:57:ad:f3:d8:aa:fa:f3:ee:0c:c5:e1:
e2:24:f8:b4:e8:20:5e:62:3d:de:3b:b3:c8:dd:14:f0:81:6b:
2d:3b:39:31:a5:47:ac:d5:99:9c:b5:84:fb:15:d5:e1:9b:1c:
1c:ba:57:9d:10:43:35:c3:f5:ba:eb:1c:57:d9:d7:21:a1:8c:
c0:fc:2f:39:17:a4:7f:f9:d6:65:cb:8d:3e:16:62:a0:54:9e:
6d:4d:21:07:46:5c:9b:a2:7c:7f:28:bf:54:73:3f:c0:e7:1a:
68:45:05:99:01:e4:de:78:39:0f:5f:5e:44:d8:51:9c:58:9f:
76:59:c4:6d:44:00:3f:0d:76:b5:1a:9c:64:9e:77:2f:4f:80:
e5:5e:d4:fb:64:78:a0:fb:5d:9a:0a:6f:3c:02:38:ac:5f:de:
0e:38:21:ed:0b:da:0f:16:dc:52:b5:ad:f1:8a:2c:9b:60:06:
23:7a:ce:b2:f8:c1:82:51:ab:bc:99:3e:78:35:d6:67:6a:66:
5b:e6:f2:18
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUBabNcwtFQuQfaLL6XetBaQ4dpHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky
MjJFOEY5RjAeFw0yNjA2MTAwMTQxNDhaFw0yNzA2MDkwMTQ2NDhaMDMxMTAvBgNV
BAMTKDRCQTM2ODNBNDZCNzEzNTAyQUJEMjREQ0U3OTJGN0E5NzFGMDJEOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW1kejsT490NUNOQQgrff/Qvvm
qmcdH0u1Wz6mKZr/9hPipEzoCucOKIfQNfE75jpJ3v50iA5ZPjDNPgiFUZfo0nv1
dc4waJTrk+EJ4Wv1kcbCE+Z8ANiLhcpcWuX2xlLUCMYx59RQv2whVK7KISJJtHAc
Qa0AlL4fTl8GfMnJdXTOKJC1NiUBXJ1ajtwaydXsQAn1GWDyVYPNLCq7QPIdmhna
89hAsuwAyXQVdzbFYrA8XDvffs0qifajituH15CQDsP9IGyYXXSIbxwUMn5d78aH
QbT+OgJv4ymW/l8+tycgXmGobHAajf7iQmFOa069wpoMcHDFs++rDmlR03yvAgMB
AAGjggKRMIICjTAdBgNVHQ4EFgQUS6NoOka3E1AqvSTc55L3qXHwLY8wHwYDVR0j
BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz
QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM1NDU3MzEvMC9BUzE3OTY0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCB
tgQCAAEwga8DBAI8w/wwCwMDAXO2AwQCc7YgMAwDBANztigDBARztqADBAJztsAw
DAMEA3O2yAMEBHO24DAMAwQGdpBAAwQCdpBIMAwDBAB2kE0DBAB2kE4DBAR2kFAD
BAV2kQAwDAMEBnb0wAMEAHb0xAMEAXb0yjAMAwQAdvTNAwQEdvTgAwQEe8RwAwQF
fMqAAwQC05MEAwQE05qgAwQD2vGYAwQE2+pQAwQD2+7oAwQC2+9cMA0GCSqGSIb3
DQEBCwUAA4IBAQC1HL6FD7m/eMy0hxLJGhUdH3+VXb0RH3x1Uf1Nyjg6MWRNj7s3
KAKGM1zgvuvtYe724ZNQUAqpZUZcVf3FV63z2Kr68+4MxeHiJPi06CBeYj3eO7PI
3RTwgWstOzkxpUes1ZmctYT7FdXhmxwculedEEM1w/W66xxX2dchoYzA/C85F6R/
+dZly40+FmKgVJ5tTSEHRlybonx/KL9Ucz/A5xpoRQWZAeTeeDkPX15E2FGcWJ92
WcRtRAA/DXa1GpxknncvT4DlXtT7ZHig+12aCm88AjisX94OOCHtC9oPFtxSta3x
iiybYAYjes6y+MGCUau8mT54NdZnamZb5vIY
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:04:02 2026 by rpki-client