$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa File: AS17816.roa (raw, json) Hash identifier: tN3zd8fp1oUerrwzNp3Y5o1t6y/22a39ctPNqAVSk+g= Subject key identifier: 71:D5:87:DE:83:2B:30:F3:00:56:E8:0D:0B:FD:1D:C0:07:E9:31:64 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 348DB735561749D98AE41CACACF3B25D166179A1 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa Signing time: Sun 31 May 2026 00:19:12 +0000 ROA not before: Sun 31 May 2026 00:14:12 +0000 ROA not after: Sun 30 May 2027 00:19:12 +0000 asID: 17816 IP address blocks: 58.254.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8d:b7:35:56:17:49:d9:8a:e4:1c:ac:ac:f3:b2:5d:16:61:79:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 31 00:14:12 2026 GMT Not After : May 30 00:19:12 2027 GMT Subject: CN=71D587DE832B30F30056E80D0BFD1DC007E93164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:66:f3:b6:40:28:5f:11:e0:a9:62:70:f5: 8b:41:25:58:77:24:66:8c:46:4d:07:03:b9:e1:db: fd:62:11:c1:1d:39:30:8c:c8:1f:d8:0f:ea:53:9d: fb:b6:a3:01:27:47:de:6b:cb:76:01:43:c0:c5:72: d3:ec:08:8e:8e:50:d2:e1:d8:db:46:aa:36:9a:7a: 1c:61:b5:26:fd:d4:8d:72:9d:bc:bf:0a:2e:4d:e7: 58:ee:d3:c6:15:01:5c:91:ef:4b:65:27:e9:47:05: 4f:ff:c5:22:0d:fd:90:aa:18:0f:6b:81:43:c9:72: 59:fb:e2:e5:43:84:ea:4e:8d:6b:ce:06:23:cb:b7: 10:dc:3c:04:3d:52:d5:81:c8:07:7e:93:3b:20:ef: 59:ea:5d:b9:ab:33:a2:63:a1:61:bb:0c:f9:55:73: 38:a6:c1:6b:62:e1:a5:71:fb:83:09:48:41:56:c8: 75:1a:e6:78:f0:9b:dc:c7:12:57:e8:db:6f:34:dd: 96:dc:e2:79:17:8e:8e:06:0e:41:8e:75:41:da:8c: 52:f9:b0:2d:49:f0:64:71:6d:46:79:0d:88:d6:8c: 94:84:b5:17:e5:7b:4c:fc:18:7a:d9:42:80:e6:87: 27:43:9b:b6:41:22:fa:58:91:84:0e:5f:11:a8:df: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:87:DE:83:2B:30:F3:00:56:E8:0D:0B:FD:1D:C0:07:E9:31:64 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.254.255.0/24 Signature Algorithm: sha256WithRSAEncryption 06:3d:0d:90:f1:2e:f7:64:ef:7d:31:fe:0f:12:3d:c2:d4:57: 42:5c:55:3a:07:7c:19:48:72:b6:ee:f2:ea:2c:c6:c8:13:66: 8e:18:64:a4:2e:ac:8d:66:ea:88:3e:5c:e9:6b:86:d2:0a:b9: d8:c6:e9:76:5e:91:55:ff:97:82:bc:dd:58:12:e6:4f:f3:8a: d0:02:b5:bd:ae:e5:45:bc:e6:a7:96:79:cc:27:8c:55:d2:be: ee:c4:73:10:60:c4:55:98:80:fe:ec:e7:2a:22:2e:9a:b7:67: 1d:ce:9e:10:bb:e8:5d:78:e8:d5:02:df:de:30:87:0c:13:95: 3e:9f:da:d8:c7:65:7d:bd:f5:78:a4:31:bc:28:77:05:81:22: 60:19:2a:66:34:68:98:af:fc:ca:7a:49:7f:cf:cf:1c:f7:cd: b9:2b:68:3a:84:5f:4e:89:8b:14:5c:5d:b2:cd:c1:4c:f8:c2: a5:09:b0:a6:b4:1a:64:8c:64:bc:1d:3c:80:1c:08:be:f8:76: ee:24:8a:6d:ae:c1:87:21:0e:59:d9:51:27:7d:5d:8a:41:9e: 13:90:0a:31:8e:c3:d5:bc:fc:96:63:4a:72:1b:2e:3f:62:7a: 0b:c7:d9:36:8f:5d:af:82:56:93:89:35:f3:09:77:89:45:7b: 7e:2b:ff:7c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUNI23NVYXSdmK5BysrPOyXRZheaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUzMTAwMTQxMloX DTI3MDUzMDAwMTkxMlowMzExMC8GA1UEAxMoNzFENTg3REU4MzJCMzBGMzAwNTZF ODBEMEJGRDFEQzAwN0U5MzE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0TZvO2QChfEeCpYnD1i0ElWHckZoxGTQcDueHb/WIRwR05MIzIH9gP6lOd +7ajASdH3mvLdgFDwMVy0+wIjo5Q0uHY20aqNpp6HGG1Jv3UjXKdvL8KLk3nWO7T xhUBXJHvS2Un6UcFT//FIg39kKoYD2uBQ8lyWfvi5UOE6k6Na84GI8u3ENw8BD1S 1YHIB36TOyDvWepduaszomOhYbsM+VVzOKbBa2LhpXH7gwlIQVbIdRrmePCb3McS V+jbbzTdltzieReOjgYOQY51QdqMUvmwLUnwZHFtRnkNiNaMlIS1F+V7TPwYetlC gOaHJ0ObtkEi+liRhA5fEajfen0CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBRx1Yfe gysw8wBW6A0L/R3AB+kxZDAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTMTc4MTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6/v8wDQYJKoZIhvcNAQELBQAD ggEBAAY9DZDxLvdk730x/g8SPcLUV0JcVToHfBlIcrbu8uosxsgTZo4YZKQurI1m 6og+XOlrhtIKudjG6XZekVX/l4K83VgS5k/zitACtb2u5UW85qeWecwnjFXSvu7E cxBgxFWYgP7s5yoiLpq3Zx3OnhC76F146NUC394whwwTlT6f2tjHZX299XikMbwo dwWBImAZKmY0aJiv/Mp6SX/Pzxz3zbkraDqEX06JixRcXbLNwUz4wqUJsKa0GmSM ZLwdPIAcCL74du4kim2uwYchDlnZUSd9XYpBnhOQCjGOw9W8/JZjSnIbLj9iegvH 2TaPXa+CVpOJNfMJd4lFe34r/3w= -----END CERTIFICATE-----Generated at Sat Jun 13 11:29:02 2026 by rpki-client