Route Origin Authorization
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
File: AS17816.roa (raw, json)
Hash identifier: L8arvCil9tLAsnWzWlrkBgWuk1Fk0mPt+mTI9IM/FPQ=
Subject key identifier: D1:41:E4:61:BB:EE:7D:AF:B8:B5:30:9B:8C:C4:AA:01:7C:54:B5:51
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 671BC0A8398B223231206294AFDAAB0E89F0AA58
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
Signing time: Wed 23 Sep 2026 09:36:56 +0000
ROA not before: Wed 23 Sep 2026 09:31:56 +0000
ROA not after: Wed 22 Sep 2027 09:36:56 +0000
asID: 17816
IP address blocks: 27.36.0.0/14 maxlen: 14
27.39.80.0/24 maxlen: 24
27.40.0.0/13 maxlen: 13
27.40.0.0/24 maxlen: 24
27.40.1.0/24 maxlen: 24
27.40.2.0/23 maxlen: 23
27.40.2.0/24 maxlen: 24
27.40.3.0/24 maxlen: 24
27.40.6.0/24 maxlen: 24
27.40.7.0/24 maxlen: 24
27.40.14.0/24 maxlen: 24
27.40.62.0/23 maxlen: 23
27.40.63.0/24 maxlen: 24
58.248.0.0/13 maxlen: 13
58.254.200.0/22 maxlen: 22
58.254.200.0/23 maxlen: 23
58.254.202.0/23 maxlen: 23
58.254.204.0/22 maxlen: 22
58.254.204.0/24 maxlen: 24
58.254.205.0/24 maxlen: 24
58.254.206.0/24 maxlen: 24
58.254.207.0/24 maxlen: 24
58.254.208.0/22 maxlen: 22
58.254.208.0/23 maxlen: 23
58.254.210.0/23 maxlen: 23
58.254.210.0/24 maxlen: 24
58.254.211.0/24 maxlen: 24
58.254.212.0/22 maxlen: 22
58.254.212.0/24 maxlen: 24
58.254.213.0/24 maxlen: 24
58.254.214.0/24 maxlen: 24
58.254.215.0/24 maxlen: 24
58.254.220.0/22 maxlen: 22
58.254.220.0/24 maxlen: 24
58.254.221.0/24 maxlen: 24
58.254.222.0/24 maxlen: 24
58.254.223.0/24 maxlen: 24
58.254.224.0/22 maxlen: 22
58.254.224.0/24 maxlen: 24
58.254.225.0/24 maxlen: 24
58.254.226.0/24 maxlen: 24
58.254.227.0/24 maxlen: 24
58.254.228.0/22 maxlen: 22
58.254.228.0/23 maxlen: 23
58.254.230.0/23 maxlen: 23
58.254.232.0/23 maxlen: 23
58.254.232.0/24 maxlen: 24
58.254.233.0/24 maxlen: 24
58.254.240.0/23 maxlen: 23
58.254.244.0/23 maxlen: 23
58.254.244.0/24 maxlen: 24
58.254.245.0/24 maxlen: 24
58.254.246.0/23 maxlen: 23
58.254.246.0/24 maxlen: 24
58.254.247.0/24 maxlen: 24
58.254.250.0/23 maxlen: 23
58.254.250.0/24 maxlen: 24
58.254.251.0/24 maxlen: 24
58.254.252.0/23 maxlen: 23
58.254.254.0/23 maxlen: 23
58.254.255.0/24 maxlen: 24
103.251.32.0/22 maxlen: 22
112.88.0.0/13 maxlen: 13
112.96.0.0/15 maxlen: 15
120.80.0.0/13 maxlen: 13
120.80.9.0/24 maxlen: 24
120.80.11.0/24 maxlen: 24
120.80.16.0/24 maxlen: 24
120.80.17.0/24 maxlen: 24
120.82.6.0/24 maxlen: 24
120.82.9.0/24 maxlen: 24
120.82.192.0/23 maxlen: 23
120.83.1.0/24 maxlen: 24
120.83.3.0/24 maxlen: 24
120.83.5.0/24 maxlen: 24
120.83.7.0/24 maxlen: 24
122.13.0.0/16 maxlen: 16
163.0.0.0/16 maxlen: 16
163.142.0.0/16 maxlen: 16
163.177.0.0/16 maxlen: 16
163.179.0.0/16 maxlen: 16
163.204.0.0/16 maxlen: 16
218.104.160.0/19 maxlen: 19
218.104.192.0/21 maxlen: 21
218.106.128.0/21 maxlen: 21
220.249.192.0/19 maxlen: 19
221.4.0.0/16 maxlen: 16
221.4.8.0/22 maxlen: 22
221.4.10.0/24 maxlen: 24
221.4.11.0/24 maxlen: 24
221.4.102.0/24 maxlen: 24
221.4.104.0/24 maxlen: 24
221.4.106.0/24 maxlen: 24
221.4.112.0/22 maxlen: 22
221.4.156.0/24 maxlen: 24
221.4.173.0/24 maxlen: 24
221.4.175.0/24 maxlen: 24
221.4.222.0/23 maxlen: 23
221.5.0.0/17 maxlen: 17
2408:8001:3000::/36 maxlen: 36
2408:8256::/32 maxlen: 32
2408:8257::/32 maxlen: 32
2408:8258::/32 maxlen: 32
2408:8259::/32 maxlen: 32
2408:825a::/32 maxlen: 32
2408:825b::/32 maxlen: 32
2408:8356::/32 maxlen: 32
2408:8357::/32 maxlen: 32
2408:8358::/32 maxlen: 32
2408:8359::/32 maxlen: 32
2408:835a::/32 maxlen: 32
2408:835b::/32 maxlen: 32
2408:8456::/32 maxlen: 32
2408:8457::/32 maxlen: 32
2408:8458::/32 maxlen: 32
2408:8459::/32 maxlen: 32
2408:845a::/32 maxlen: 32
2408:845b::/32 maxlen: 32
2408:84f3::/32 maxlen: 32
2408:8656::/32 maxlen: 32
2408:8657::/32 maxlen: 32
2408:8658::/32 maxlen: 32
2408:8659::/32 maxlen: 32
2408:865a::/32 maxlen: 32
2408:865b::/32 maxlen: 32
2408:8756::/32 maxlen: 32
2408:8757::/32 maxlen: 32
2408:8758::/32 maxlen: 32
2408:8759::/32 maxlen: 32
2408:875a::/32 maxlen: 32
2408:875b::/32 maxlen: 32
2408:8856::/32 maxlen: 32
2408:8857::/32 maxlen: 32
2408:8858::/32 maxlen: 32
2408:8859::/32 maxlen: 32
2408:885a::/32 maxlen: 32
2408:885b::/32 maxlen: 32
2408:8956::/32 maxlen: 32
2408:8957::/32 maxlen: 32
2408:8958::/32 maxlen: 32
2408:8959::/32 maxlen: 32
2408:895a::/32 maxlen: 32
2408:895b::/32 maxlen: 32
2408:8a05:6000::/36 maxlen: 36
2408:8a05:6001::/48 maxlen: 48
2408:8a05:6540::/48 maxlen: 48
2408:8a05:7000::/36 maxlen: 36
2408:8a05:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 09:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1b:c0:a8:39:8b:22:32:31:20:62:94:af:da:ab:0e:89:f0:aa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Sep 23 09:31:56 2026 GMT
Not After : Sep 22 09:36:56 2027 GMT
Subject: CN=D141E461BBEE7DAFB8B5309B8CC4AA017C54B551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:87:eb:51:52:66:43:eb:9a:ac:13:60:b1:
eb:f0:38:5d:fb:f5:c4:08:67:7b:e7:b3:3c:25:3c:
1b:5f:68:b4:8f:f0:fe:85:f8:7b:5e:d9:cd:67:b7:
43:d8:5c:b3:9d:c8:b7:a8:00:7f:38:14:8c:5b:c8:
c1:a4:26:01:62:dd:be:63:8a:e3:08:b4:20:40:7a:
b9:ed:50:08:ec:0e:88:78:00:57:9b:30:8b:0c:29:
19:47:25:ce:f4:af:d9:2a:ab:48:30:5d:48:d8:96:
4a:66:32:bd:ee:be:60:cc:08:1a:30:53:be:8d:38:
4b:23:2a:c5:7e:cc:87:29:f9:20:08:c8:71:08:2d:
c0:4c:50:53:57:d3:5e:a1:7d:7a:8d:f3:2b:c1:ed:
f9:47:9d:88:e4:86:92:ea:1e:70:a5:d4:76:7b:a8:
35:70:cd:5f:6c:d0:b6:f1:0b:10:8c:1d:b6:ee:76:
f5:88:16:11:f4:6e:71:f4:17:e7:61:f4:4e:c9:ff:
6a:d4:07:12:b0:e0:87:f1:92:d7:29:e4:53:73:4b:
d0:7e:36:65:02:d7:bb:5a:b3:a9:e4:be:56:08:ad:
39:86:18:48:a8:d4:54:c3:50:74:bc:28:3d:03:b2:
17:4b:f8:69:f6:95:89:e3:a8:6e:3b:86:f6:e0:b7:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:E4:61:BB:EE:7D:AF:B8:B5:30:9B:8C:C4:AA:01:7C:54:B5:51
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS17816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.36.0.0-27.47.255.255
58.248.0.0/13
103.251.32.0/22
112.88.0.0-112.97.255.255
120.80.0.0/13
122.13.0.0/16
163.0.0.0/16
163.142.0.0/16
163.177.0.0/16
163.179.0.0/16
163.204.0.0/16
218.104.160.0-218.104.199.255
218.106.128.0/21
220.249.192.0/19
221.4.0.0-221.5.127.255
IPv6:
2408:8001:3000::/36
2408:8256::-2408:825b:ffff:ffff:ffff:ffff:ffff:ffff
2408:8356::-2408:835b:ffff:ffff:ffff:ffff:ffff:ffff
2408:8456::-2408:845b:ffff:ffff:ffff:ffff:ffff:ffff
2408:84f3::/32
2408:8656::-2408:865b:ffff:ffff:ffff:ffff:ffff:ffff
2408:8756::-2408:875b:ffff:ffff:ffff:ffff:ffff:ffff
2408:8856::-2408:885b:ffff:ffff:ffff:ffff:ffff:ffff
2408:8956::-2408:895b:ffff:ffff:ffff:ffff:ffff:ffff
2408:8a05:6000::-2408:8a05:8fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:d6:1b:6d:6d:1e:be:fa:38:59:ed:0b:56:b9:e2:b7:d0:11:
fe:70:b6:c1:50:aa:c8:2d:cc:d9:c1:f0:11:a4:65:41:c4:77:
1b:54:2e:c6:8a:bf:d9:c0:c3:27:88:f1:47:1e:78:c6:a0:6e:
4f:0d:86:5a:e5:1c:58:f9:2e:e1:cd:d8:d6:52:16:88:b4:8d:
df:aa:4d:ab:40:a9:78:8d:66:93:24:2a:da:b7:c2:7d:6e:e8:
62:31:72:75:4f:34:1b:8e:8b:ea:ab:c9:de:f6:7f:fc:bc:ab:
46:cf:02:9d:d8:46:24:57:53:ab:88:3d:7d:f9:26:63:f3:19:
ff:0a:77:48:45:16:88:dd:f1:74:9c:ec:71:1c:44:1c:76:b6:
b8:3a:fa:b6:7a:25:12:2c:b2:7d:a5:98:70:ef:17:09:19:a3:
a6:35:2d:6d:89:d6:87:83:e5:2d:28:9f:a8:4d:2f:6e:ff:ca:
ad:d7:e9:ac:73:23:24:d6:d6:dd:de:33:55:7b:5f:7a:84:8b:
6d:f6:cd:0e:64:50:3b:ef:01:1a:99:2f:e6:3f:4a:61:86:61:
4b:4f:9e:b7:3b:4e:ff:82:66:92:e8:bf:a1:21:60:8f:6c:51:
b1:cc:f6:ca:fd:44:98:32:80:39:9a:1f:05:8f:45:3a:52:ca:
39:b9:38:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZxvAqDmLIjIxIGKUr9qrDonwqlgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz
Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDkyMzA5MzE1NloX
DTI3MDkyMjA5MzY1NlowMzExMC8GA1UEAxMoRDE0MUU0NjFCQkVFN0RBRkI4QjUz
MDlCOENDNEFBMDE3QzU0QjU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOSch+tRUmZD65qsE2Cx6/A4Xfv1xAhne+ezPCU8G19otI/w/oX4e17ZzWe3
Q9hcs53It6gAfzgUjFvIwaQmAWLdvmOK4wi0IEB6ue1QCOwOiHgAV5swiwwpGUcl
zvSv2SqrSDBdSNiWSmYyve6+YMwIGjBTvo04SyMqxX7Mhyn5IAjIcQgtwExQU1fT
XqF9eo3zK8Ht+UediOSGkuoecKXUdnuoNXDNX2zQtvELEIwdtu529YgWEfRucfQX
52H0Tsn/atQHErDgh/GS1ynkU3NL0H42ZQLXu1qzqeS+VgitOYYYSKjUVMNQdLwo
PQOyF0v4afaVieOobjuG9uC3tmMCAwEAAaOCAuswggLnMB0GA1UdDgQWBBTRQeRh
u+59r7i1MJuMxKoBfFS1UTAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z
JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF
NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY
eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH
MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8xL0FTMTc4MTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
ggElBggrBgEFBQcBBwEB/wSCARQwggEQMHMEAgABMG0wCgMDAhskAwMEGyADAwM6
+AMEAmf7IDAKAwMDcFgDAwFwYAMDA3hQAwMAeg0DAwCjAAMDAKOOAwMAo7EDAwCj
swMDAKPMMAwDBAXaaKADBAPaaMADBAPaaoADBAXc+cAwCwMDAt0EAwQH3QUAMIGY
BAIAAjCBkQMGBCQIgAEwMA4DBQEkCIJWAwUCJAiCWDAOAwUBJAiDVgMFAiQIg1gw
DgMFASQIhFYDBQIkCIRYAwUAJAiE8zAOAwUBJAiGVgMFAiQIhlgwDgMFASQIh1YD
BQIkCIdYMA4DBQEkCIhWAwUCJAiIWDAOAwUBJAiJVgMFAiQIiVgwEAMGBSQIigVg
AwYEJAiKBYAwDQYJKoZIhvcNAQELBQADggEBAArWG21tHr76OFntC1a54rfQEf5w
tsFQqsgtzNnB8BGkZUHEdxtULsaKv9nAwyeI8UceeMagbk8NhlrlHFj5LuHN2NZS
Foi0jd+qTatAqXiNZpMkKtq3wn1u6GIxcnVPNBuOi+qryd72f/y8q0bPAp3YRiRX
U6uIPX35JmPzGf8Kd0hFFojd8XSc7HEcRBx2trg6+rZ6JRIssn2lmHDvFwkZo6Y1
LW2J1oeD5S0on6hNL27/yq3X6axzIyTW1t3eM1V7X3qEi232zQ5kUDvvARqZL+Y/
SmGGYUtPnrc7Tv+CZpLov6EhYI9sUbHM9sr9RJgygDmaHwWPRTpSyjm5OAs=
-----END CERTIFICATE-----
Generated at Thu Oct 1 00:58:10 2026 by rpki-client