Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17897.roa
File: AS17897.roa (raw, json)
Hash identifier: n+h86e8rF6FzljKKWg13JwKxSFV3EexpEReffjIPvXU=
Subject key identifier: 82:74:69:D1:66:36:B7:E1:54:24:7B:4D:80:92:2B:3A:E8:18:7A:A8
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0CBDECF9A6D8AD6C5D2E81E6526AA564C3998FB7
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17897.roa
Signing time: Fri 29 May 2026 16:43:18 +0000
ROA not before: Fri 29 May 2026 16:38:18 +0000
ROA not after: Fri 28 May 2027 16:43:18 +0000
asID: 17897
IP address blocks: 112.100.0.0/15 maxlen: 15
112.100.92.0/24 maxlen: 24
112.100.96.0/22 maxlen: 22
112.100.100.0/24 maxlen: 24
112.100.101.0/24 maxlen: 24
219.147.71.0/24 maxlen: 24
219.147.72.0/24 maxlen: 24
219.147.128.0/20 maxlen: 20
219.147.129.0/24 maxlen: 24
219.147.130.0/24 maxlen: 24
219.147.133.0/24 maxlen: 24
219.147.136.0/24 maxlen: 24
219.147.137.0/24 maxlen: 24
219.147.144.0/20 maxlen: 20
219.147.248.0/21 maxlen: 21
240e:1::/37 maxlen: 37
240e:41::/37 maxlen: 37
240e:41:4000::/37 maxlen: 37
240e:981:1109::/48 maxlen: 48
240e:981:110a::/48 maxlen: 48
240e:981:1500::/40 maxlen: 40
240e:981:1600::/40 maxlen: 40
240e:983:103::/48 maxlen: 48
240e:983:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bd:ec:f9:a6:d8:ad:6c:5d:2e:81:e6:52:6a:a5:64:c3:99:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 29 16:38:18 2026 GMT
Not After : May 28 16:43:18 2027 GMT
Subject: CN=827469D16636B7E154247B4D80922B3AE8187AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:3f:a8:a9:f9:5d:af:ef:12:67:35:b1:a8:
df:69:71:17:9c:c1:a1:c2:bd:dc:c8:0c:c4:a1:b7:
eb:2e:b4:c0:12:99:c6:1d:f8:34:e6:f0:d8:be:5a:
8e:f2:51:70:67:59:6c:98:96:fb:0f:26:ed:12:2a:
ba:b4:6a:88:17:4a:0f:e0:d6:5a:dd:1c:bd:b4:b2:
67:f1:30:6c:f5:ed:8a:27:3e:2c:b7:00:42:ca:ae:
c2:f9:39:f5:75:16:10:e6:d2:36:46:d8:5b:79:ac:
75:91:44:e4:ca:4a:cd:32:4e:f4:d7:16:8f:21:4b:
a5:bc:fb:be:15:b1:51:d3:76:db:1a:a4:ee:09:93:
25:d3:b1:c7:d9:0c:64:26:94:f4:0b:95:57:5d:52:
eb:ee:63:17:b1:af:de:c7:7c:1f:9f:d0:60:d0:10:
b7:d0:d3:40:74:8c:9d:55:94:83:5c:0a:cd:87:ff:
b6:5d:77:db:33:cf:57:6d:2e:3b:d9:5c:2e:dd:1e:
12:68:34:19:00:d8:b9:d8:a7:49:e0:e6:d6:7f:82:
6e:85:19:3d:32:56:45:2f:e7:fe:2d:04:c1:0a:23:
6b:ca:fd:b9:57:10:12:49:e3:b4:e7:5b:6f:03:98:
59:aa:ed:f3:29:80:a9:f1:b9:6c:5c:ef:17:80:af:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:69:D1:66:36:B7:E1:54:24:7B:4D:80:92:2B:3A:E8:18:7A:A8
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS17897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.100.0.0/15
219.147.71.0-219.147.72.255
219.147.128.0/19
219.147.248.0/21
IPv6:
240e:1::/37
240e:41::/37
240e:41:4000::/37
240e:981:1109::-240e:981:110a:ffff:ffff:ffff:ffff:ffff
240e:981:1500::-240e:981:16ff:ffff:ffff:ffff:ffff:ffff
240e:983:103::-240e:983:104:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:18:c8:fb:1d:22:6d:7b:08:ec:ed:70:2c:28:9c:28:0e:f6:
b2:a7:74:40:f8:6a:30:5c:5b:7c:21:3b:41:be:6f:59:b9:74:
89:d1:b6:b9:66:10:54:ff:98:b0:1f:18:94:b4:c8:8f:8e:0b:
37:d2:8b:c5:a4:10:e2:ac:dc:e8:95:31:36:bc:75:f7:d1:ea:
da:33:25:f1:c3:63:eb:7e:ee:78:bd:3c:5b:08:d9:a9:eb:43:
53:d0:de:00:c7:f0:b4:19:87:32:2a:ea:1e:60:f7:3b:89:46:
ae:28:9d:af:c9:a8:04:e1:a0:9d:38:0b:4d:cf:70:ac:3f:05:
08:81:b0:ff:03:4b:f8:8e:f0:c5:d8:22:2f:0c:7d:5c:26:ce:
c0:d0:7a:04:14:74:f7:8c:5a:b7:19:34:53:e4:d3:34:0c:b0:
e6:d9:05:23:43:f0:b3:0e:db:d9:e5:aa:ee:2c:cf:7d:d8:f9:
33:ac:9a:f3:71:21:48:e0:e5:4c:61:5f:74:55:6c:35:36:8f:
8b:c6:b4:1d:94:e7:ce:76:4a:f2:90:15:84:9a:db:fc:5a:3e:
f6:ac:c6:c5:0a:00:cf:0b:56:8c:cc:04:82:ca:0f:1b:2d:2b:
5b:31:36:72:09:cd:0f:ca:53:64:3f:71:f4:34:8a:7a:2a:7e:
73:3b:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:30:57 2026 by rpki-client