$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS17964.roa File: AS17964.roa (raw, json) Hash identifier: /jZrSmqmwjYlHBMo+dFM5tCUw5PPVNi7iDt3nUn46Ww= Subject key identifier: 8B:91:6D:28:DA:C4:B7:EF:B3:AF:2C:EF:BE:27:37:45:E0:A1:CF:5D Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 6055B92A14AD0815B7BD806890E81D744C4598A9 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS17964.roa Signing time: Mon 08 Jun 2026 09:03:47 +0000 ROA not before: Mon 08 Jun 2026 08:58:47 +0000 ROA not after: Mon 07 Jun 2027 09:03:47 +0000 asID: 17964 IP address blocks: 122.49.8.0/21 maxlen: 21 122.49.16.0/20 maxlen: 20 122.49.16.0/21 maxlen: 21 122.49.24.0/21 maxlen: 21 122.49.32.0/20 maxlen: 20 122.49.32.0/21 maxlen: 21 122.49.40.0/21 maxlen: 21 210.74.0.0/22 maxlen: 22 218.241.16.0/22 maxlen: 22 218.241.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:55:b9:2a:14:ad:08:15:b7:bd:80:68:90:e8:1d:74:4c:45:98:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 8 08:58:47 2026 GMT Not After : Jun 7 09:03:47 2027 GMT Subject: CN=8B916D28DAC4B7EFB3AF2CEFBE273745E0A1CF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:65:05:01:64:15:b8:e4:04:48:a5:1b:dc: 0f:29:6f:a1:4c:33:b7:fa:55:fb:1d:df:38:e8:23: fd:77:7c:96:03:da:c8:8e:b3:1d:1b:e4:ef:38:28: e7:75:aa:8e:85:74:2f:47:6b:88:09:59:8c:5e:63: 4f:43:bf:a8:dd:98:6f:ac:ec:3f:43:ec:45:84:3c: d8:f2:34:ec:e2:27:33:05:ed:a8:36:d6:f3:1f:63: f8:c7:6c:82:a7:3d:ab:78:cc:bd:33:c7:a8:a9:18: c3:d4:e8:43:0c:e9:89:08:86:b4:eb:5a:04:af:e2: 93:28:a7:f9:d8:e7:61:18:83:cd:63:8c:fc:50:56: 19:18:16:bf:f2:94:de:50:77:c9:11:fc:d2:22:3b: 90:6b:c2:e0:ec:a1:92:c3:a1:65:87:fb:d4:46:76: c9:09:61:f7:86:fa:10:83:68:1e:53:f9:76:b4:1b: a8:98:4a:0f:4c:65:19:55:eb:58:a7:c3:85:17:ed: bb:43:c6:c8:80:29:a0:44:1a:d0:d9:0c:09:f4:0b: 0e:a7:d1:e0:ea:78:d3:42:1e:60:22:9f:03:ec:20: 4f:b6:27:fb:fe:5a:4e:97:c2:ea:df:ae:84:dc:ab: 87:f6:9d:c7:44:2c:22:c7:5f:1a:81:f0:13:cb:6d: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:91:6D:28:DA:C4:B7:EF:B3:AF:2C:EF:BE:27:37:45:E0:A1:CF:5D X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS17964.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.49.8.0-122.49.47.255 210.74.0.0/22 218.241.16.0/22 218.241.24.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:f3:a6:eb:3f:3a:2b:42:32:c9:a8:b5:2b:08:d8:0b:ca:fc: 1e:af:20:1d:1e:10:28:e7:7f:b3:ef:a0:a6:ae:52:1d:f9:d6: 20:df:b0:f8:cc:76:4f:38:72:ae:c9:87:53:aa:ee:64:69:58: d1:97:e6:90:fa:43:3c:6c:a4:19:6f:9a:9e:6f:91:f2:4c:45: 68:a0:a1:96:bd:2e:0b:65:91:37:29:98:d2:cb:01:bc:cf:55: 98:ed:f0:f9:a8:c7:de:65:5c:fe:9f:af:35:ab:39:8e:e2:fb: c3:65:64:09:25:9d:f6:76:99:9f:2f:ae:7e:0e:15:76:67:e8: 95:48:65:df:81:61:66:d9:79:24:7a:d7:7e:c8:02:e3:36:60: 62:8e:3f:91:d2:bb:e3:58:fd:83:a0:4f:8c:ba:66:49:8d:a8: 47:37:19:cf:5e:45:06:6e:de:f1:58:89:43:73:73:50:ca:16: 67:3b:1c:f0:e9:d5:89:d9:3b:cb:0f:94:46:58:60:91:47:31: d9:df:93:a8:49:b4:fe:0c:b4:0f:f7:42:4e:e8:19:bc:ac:2b: d7:0d:3d:7d:8b:87:d5:dd:34:d8:9d:ad:46:47:ef:ea:b8:f4: 8a:de:21:47:fa:3f:09:49:fb:d8:dc:2b:c7:29:91:3a:63:04: 77:1b:6d:14 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUYFW5KhStCBW3vYBokOgddExFmKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MDgwODU4NDdaFw0yNzA2MDcwOTAzNDdaMDMxMTAvBgNV BAMTKDhCOTE2RDI4REFDNEI3RUZCM0FGMkNFRkJFMjczNzQ1RTBBMUNGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbGUFAWQVuOQESKUb3A8pb6FM M7f6Vfsd3zjoI/13fJYD2siOsx0b5O84KOd1qo6FdC9Ha4gJWYxeY09Dv6jdmG+s 7D9D7EWEPNjyNOziJzMF7ag21vMfY/jHbIKnPat4zL0zx6ipGMPU6EMM6YkIhrTr WgSv4pMop/nY52EYg81jjPxQVhkYFr/ylN5Qd8kR/NIiO5BrwuDsoZLDoWWH+9RG dskJYfeG+hCDaB5T+Xa0G6iYSg9MZRlV61inw4UX7btDxsiAKaBEGtDZDAn0Cw6n 0eDqeNNCHmAinwPsIE+2J/v+Wk6XwurfroTcq4f2ncdELCLHXxqB8BPLbYuLAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUi5FtKNrEt++zryzvvic3ReChz10wHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzE3OTY0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIA ATAgMAwDBAN6MQgDBAR6MSADBALSSgADBALa8RADBALa8RgwDQYJKoZIhvcNAQEL BQADggEBAB7zpus/OitCMsmotSsI2AvK/B6vIB0eECjnf7PvoKauUh351iDfsPjM dk84cq7Jh1Oq7mRpWNGX5pD6QzxspBlvmp5vkfJMRWigoZa9LgtlkTcpmNLLAbzP VZjt8Pmox95lXP6frzWrOY7i+8NlZAklnfZ2mZ8vrn4OFXZn6JVIZd+BYWbZeSR6 137IAuM2YGKOP5HSu+NY/YOgT4y6ZkmNqEc3Gc9eRQZu3vFYiUNzc1DKFmc7HPDp 1YnZO8sPlEZYYJFHMdnfk6hJtP4MtA/3Qk7oGbysK9cNPX2Lh9XdNNidrUZH7+q4 9IreIUf6PwlJ+9jcK8cpkTpjBHcbbRQ= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:40 2026 by rpki-client