This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa
File: 3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa (raw, json)
Hash identifier: Nclm7ktkTy+McaXaSR6ks6HcCvvsvvhBJnKPOTQah54=
Subject key identifier: 89:59:43:0B:B6:EA:BA:E0:AB:FE:85:CB:8F:16:53:F4:6F:A5:46:AE
Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Certificate serial: 1113046BCAFE02C07FEFAFC1B252AC3020DB19A6
Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa
Signing time: Tue 20 Jan 2026 02:22:39 +0000
ROA not before: Tue 20 Jan 2026 02:17:39 +0000
ROA not after: Tue 19 Jan 2027 02:22:39 +0000
asID: 132203
IP address blocks: 203.205.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:13:04:6b:ca:fe:02:c0:7f:ef:af:c1:b2:52:ac:30:20:db:19:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Validity
Not Before: Jan 20 02:17:39 2026 GMT
Not After : Jan 19 02:22:39 2027 GMT
Subject: CN=8959430BB6EABAE0ABFE85CB8F1653F46FA546AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:3f:af:6c:eb:cd:df:0d:f1:ce:79:b4:69:
8a:61:cd:7e:84:e7:d7:38:f5:1d:67:ba:d7:30:f0:
f5:c5:c7:a4:0d:3c:aa:1a:f3:07:35:78:71:65:fd:
06:63:15:2f:53:5e:6a:05:b1:f0:af:94:3e:38:0c:
52:5c:15:65:70:17:3c:a5:1c:08:f0:3b:00:03:fe:
53:c5:4a:83:09:29:79:bb:d4:07:f3:ee:1a:c6:e0:
f2:25:19:5a:31:e3:4d:09:02:66:aa:9f:df:f2:7e:
7d:58:f5:9e:45:f4:31:53:95:ec:27:b4:b3:fc:75:
23:c6:d8:71:59:09:17:14:23:a8:bd:46:04:51:c7:
4f:11:85:0b:2c:99:fa:ab:5b:0f:d4:79:33:d0:36:
da:40:f4:86:c6:51:b0:e8:d6:d7:f5:bd:43:e0:19:
8d:3b:40:60:d8:a2:5b:09:55:ff:3d:be:dd:a4:bc:
4a:db:e1:e6:5f:be:85:a5:09:c6:be:08:db:b6:00:
12:97:2f:2b:de:29:ca:1b:f3:7f:40:fb:9e:3e:3e:
31:f7:87:94:66:cd:96:3a:d4:b2:58:f5:ba:42:2c:
1a:c5:29:8e:bd:59:11:ab:90:f9:34:0a:ae:7a:1e:
a3:5b:37:7e:60:ad:6b:85:6f:ee:d5:ae:12:75:d2:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:43:0B:B6:EA:BA:E0:AB:FE:85:CB:8F:16:53:F4:6F:A5:46:AE
X509v3 Authority Key Identifier:
keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.205.137.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:52:ad:f9:ba:0c:ea:86:38:e7:b1:d9:12:dd:6a:71:db:
32:30:a8:ad:9a:07:4d:d4:ef:c4:f2:1d:52:e0:76:e2:6c:ce:
40:ca:c2:24:f3:06:46:04:6f:5e:43:0d:10:52:66:c6:38:18:
86:fa:25:fe:b0:4b:44:39:10:2b:f2:61:83:23:d8:60:07:25:
c1:01:3e:95:51:75:53:32:d0:55:85:00:b6:c7:5d:62:b8:f3:
2d:76:df:63:44:fe:cc:17:ba:1c:5b:d3:a9:43:e1:46:be:09:
ef:65:f6:0f:5d:d9:10:b1:c4:2a:12:07:6e:26:00:c6:5e:67:
5a:02:0e:03:4d:11:11:a9:1a:7a:57:b6:4f:72:44:8c:51:fd:
33:54:8f:f2:42:21:34:51:84:c3:5d:d6:b6:87:00:a7:ed:f2:
4f:8b:fb:39:f3:86:e9:e4:67:a4:fb:94:7e:70:4e:72:9d:24:
54:cd:bd:d8:72:d1:a3:67:92:3c:8c:1b:a0:72:93:01:6b:b6:
4a:b5:9d:ff:1a:7c:36:b2:fd:22:59:94:00:0b:99:a2:05:4b:
df:72:02:d0:03:c1:b2:3d:f2:eb:d4:cb:22:3e:59:96:f2:64:
ff:bf:7f:8a:f9:0c:7e:07:22:36:73:b2:5c:e1:97:29:9c:30:
d5:a4:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:51:26 2026 by rpki-client