This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e332e302f32342d3234203d3e203136353039.roa
File: 312e3131382e332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: +sGAlSoNhJAnufejm1rjSFdGhkbm95UUnsMG7/4cIj8=
Subject key identifier: 3C:B7:94:D9:3F:6E:A1:E6:3B:CB:6B:1B:16:DB:B1:D3:4F:EE:68:5D
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 5951850D93665B0E23EAEA04D1662521BC041CE7
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e332e302f32342d3234203d3e203136353039.roa
Signing time: Tue 27 Jan 2026 03:08:52 +0000
ROA not before: Tue 27 Jan 2026 03:03:52 +0000
ROA not after: Tue 26 Jan 2027 03:08:52 +0000
asID: 16509
IP address blocks: 1.118.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 16:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:51:85:0d:93:66:5b:0e:23:ea:ea:04:d1:66:25:21:bc:04:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Jan 27 03:03:52 2026 GMT
Not After : Jan 26 03:08:52 2027 GMT
Subject: CN=3CB794D93F6EA1E63BCB6B1B16DBB1D34FEE685D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:1c:23:62:d5:b7:bc:f5:a6:2c:2b:e3:32:
0a:43:fd:08:0d:5d:86:7a:22:6f:3d:92:64:df:cf:
3b:b7:a0:d1:f2:59:38:c8:73:62:be:b2:a9:e5:ec:
e8:f6:00:f7:0d:7c:b6:2f:bd:4f:15:f8:cd:f8:8f:
cd:20:3d:aa:16:6e:b6:c3:2f:2d:b2:86:8b:dd:b1:
99:68:f7:2a:8d:38:7e:c1:b3:e7:5d:d5:0f:7a:8c:
53:01:ce:8c:76:c4:40:9a:86:de:fd:ad:5f:6d:aa:
55:9d:d8:06:f7:dd:63:f5:ba:0b:e0:d3:08:17:6d:
5f:6b:39:94:6e:bf:e5:31:98:a1:02:55:b6:61:da:
b5:22:a8:af:f8:aa:66:6d:0b:4c:ea:74:3c:d4:a6:
b7:26:4d:e8:07:54:bb:9e:56:a2:63:89:5c:ed:dc:
fb:5b:82:04:6d:3c:9a:bf:dd:d2:cb:fb:aa:e5:af:
c2:b9:dc:d9:a4:f8:d4:20:00:6e:b9:a0:60:8b:12:
88:c7:00:a6:96:e4:41:3b:12:3d:be:fc:d6:de:8c:
43:f3:70:1f:55:71:e3:a9:71:92:35:ee:59:a7:c9:
c9:a6:8e:fd:de:28:87:66:50:35:f1:8e:c0:67:53:
84:85:eb:75:26:6b:5e:f5:45:f7:72:ca:da:af:42:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:94:D9:3F:6E:A1:E6:3B:CB:6B:1B:16:DB:B1:D3:4F:EE:68:5D
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e332e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.118.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5f:48:6a:0b:ef:52:f1:05:28:b9:86:78:c6:53:56:d7:f5:
45:d6:78:8e:02:17:01:1d:ad:4f:a1:bc:f0:71:b1:5e:f3:93:
04:45:82:10:64:43:3d:ce:b5:c0:06:a6:f8:19:00:97:9e:da:
63:7e:be:0c:ea:2f:fe:b6:bd:b6:5b:f1:04:da:80:ee:ca:ae:
88:cf:90:d3:66:b3:81:5b:13:ef:c2:2b:0b:89:9f:a7:65:fa:
76:8f:38:4a:62:4a:57:6a:88:7a:c3:80:87:0f:69:1a:3f:d3:
78:95:f6:6e:f3:c1:04:7e:cf:d9:e4:6c:80:de:67:19:e7:77:
a0:19:76:10:78:c0:5a:77:6e:a6:33:5c:9c:81:81:d3:c3:c5:
8b:5b:1c:4f:1a:ac:59:b2:13:c1:ba:f5:70:68:79:c1:fd:c6:
fa:94:67:2a:e7:8e:15:66:aa:b6:c4:5b:2e:24:48:b5:f8:46:
f3:bd:62:63:cc:2f:4d:df:52:35:33:82:6f:71:6f:6e:27:b4:
0c:9e:07:df:1a:8e:41:28:dc:a8:a5:ca:36:4e:03:ce:54:d8:
48:b9:e9:6b:f6:7a:ad:65:a2:0f:41:50:cb:4f:c2:38:21:f2:
bc:fd:9b:9e:d6:07:19:88:c6:df:ab:a7:55:5e:c1:b1:db:bb:
d1:f3:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:36:35 2026 by rpki-client