Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17799.roa
File: AS17799.roa (raw, json)
Hash identifier: ruVPJkGDbukU+VvFdFAgyV+2MUOLwrEoTVYtdm38br0=
Subject key identifier: 65:E9:8D:23:8C:68:9E:9B:73:BE:70:F1:15:A4:0D:33:58:7F:A0:51
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 440C5CC73E4B65A988CBEDDBBF1972EF3D7BE5AE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17799.roa
Signing time: Thu 04 Jun 2026 16:15:07 +0000
ROA not before: Thu 04 Jun 2026 16:10:07 +0000
ROA not after: Thu 03 Jun 2027 16:15:07 +0000
asID: 17799
IP address blocks: 42.248.152.0/21 maxlen: 21
42.249.128.0/19 maxlen: 19
115.168.37.0/24 maxlen: 24
115.168.69.0/24 maxlen: 24
123.177.128.0/18 maxlen: 18
123.177.192.0/18 maxlen: 18
123.246.255.0/24 maxlen: 24
123.247.128.0/17 maxlen: 17
182.201.201.0/24 maxlen: 24
182.205.0.0/16 maxlen: 16
182.205.0.0/18 maxlen: 18
182.205.128.0/17 maxlen: 17
182.206.0.0/16 maxlen: 16
182.206.0.0/17 maxlen: 17
218.30.170.0/24 maxlen: 24
219.148.194.0/23 maxlen: 23
219.148.196.0/22 maxlen: 22
219.148.200.0/22 maxlen: 22
219.148.202.0/24 maxlen: 24
219.148.203.0/24 maxlen: 24
219.148.204.0/23 maxlen: 23
219.148.205.0/24 maxlen: 24
219.148.206.0/24 maxlen: 24
219.148.207.0/24 maxlen: 24
219.148.209.0/24 maxlen: 24
219.148.210.0/24 maxlen: 24
240e:1:f800::/37 maxlen: 37
240e:41:c000::/37 maxlen: 37
240e:86:8000::/36 maxlen: 36
240e:981:2600::/40 maxlen: 40
240e:983:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0c:5c:c7:3e:4b:65:a9:88:cb:ed:db:bf:19:72:ef:3d:7b:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:10:07 2026 GMT
Not After : Jun 3 16:15:07 2027 GMT
Subject: CN=65E98D238C689E9B73BE70F115A40D33587FA051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:3c:b5:09:c8:8e:66:14:fe:ee:6d:1b:c5:
d2:fb:0e:d2:91:3c:8b:5b:93:8b:e2:a0:2a:46:ad:
d1:c9:a3:07:75:05:c5:7b:f4:25:71:f8:3a:8b:50:
90:e9:81:d8:d3:48:01:49:d9:cb:32:ea:16:57:12:
e9:ba:da:5e:60:50:07:59:58:50:d5:74:ce:94:bf:
09:78:fd:25:0c:d4:b2:fd:43:b4:79:fe:e1:28:da:
31:51:3c:76:25:83:69:24:f6:5b:ae:a0:23:aa:cd:
e5:22:68:dd:2d:21:ae:aa:4c:72:1a:85:3c:49:dc:
7c:73:64:b6:8c:0d:2d:62:32:78:14:95:7d:1a:71:
df:6e:54:46:be:4c:8b:57:57:a4:dc:63:b1:c5:72:
6a:44:68:8e:1b:02:9e:b5:53:25:21:5e:7d:25:48:
19:ee:c1:0f:fd:18:e6:74:d4:d2:dc:42:e3:8f:a4:
82:ab:f7:5f:2a:be:8a:53:c4:5d:5a:27:32:3c:e6:
7f:ef:b3:7e:9f:f3:1a:6e:2f:b4:b5:b2:1f:dd:e7:
f3:0c:3a:76:cc:23:1a:60:81:2e:7b:1d:8c:d2:83:
53:39:49:07:79:14:17:33:aa:52:47:df:fe:39:02:
5f:8c:40:50:85:9f:92:e4:fe:aa:e0:c9:e5:7e:4f:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:8D:23:8C:68:9E:9B:73:BE:70:F1:15:A4:0D:33:58:7F:A0:51
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.248.152.0/21
42.249.128.0/19
115.168.37.0/24
115.168.69.0/24
123.177.128.0/17
123.246.255.0/24
123.247.128.0/17
182.201.201.0/24
182.205.0.0-182.206.255.255
218.30.170.0/24
219.148.194.0-219.148.207.255
219.148.209.0-219.148.210.255
IPv6:
240e:1:f800::/37
240e:41:c000::/37
240e:86:8000::/36
240e:981:2600::/40
240e:983:203::/48
Signature Algorithm: sha256WithRSAEncryption
81:0e:ba:15:8f:b5:75:6a:c6:6b:ec:25:14:e5:a8:03:a4:b3:
06:73:0b:3c:5c:ca:48:ad:1e:b2:f5:3a:5f:1f:3f:32:09:af:
22:0a:82:22:94:7b:05:8c:27:f0:93:03:4a:91:ae:52:e2:55:
fa:3c:11:e1:8e:2a:ce:db:d9:02:85:65:75:51:40:bf:9d:5a:
13:97:56:f5:24:1c:4a:ac:75:69:33:86:ba:a3:a1:01:b0:98:
5d:c7:6a:dd:b5:85:9c:2e:74:09:5c:39:e1:3e:3a:b5:b5:aa:
1b:53:fe:0e:d8:a6:e5:9e:1f:78:43:25:c8:51:8b:d8:61:67:
71:99:06:69:d4:55:82:22:78:a3:4e:57:bc:a1:79:2a:ea:9a:
6f:a8:23:fe:b8:21:1f:31:5d:db:fd:29:33:55:79:35:e6:72:
a6:f2:b3:d8:93:dc:56:31:88:31:2a:06:39:8e:2c:cd:e5:8f:
a4:e2:67:45:5a:ed:63:b1:88:dd:04:29:cb:ff:39:e8:58:28:
bd:90:8a:64:1d:ac:9c:3d:f4:e3:63:36:5e:7b:3e:38:5b:01:
f6:54:d0:58:64:fb:13:f9:d9:e5:3d:a8:9c:f6:ca:a2:4a:5a:
ab:3d:d4:8d:04:26:f7:99:a2:35:6f:bc:91:0b:69:3c:8d:d1:
ee:e7:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:21:58 2026 by rpki-client