This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa
File: 3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa (raw, json)
Hash identifier: bMdixgOplBdURY+Qu1EbPIFeV69TxZq/l4CfYtJ13zQ=
Subject key identifier: 98:5B:58:43:92:93:D2:99:EE:7E:3F:95:FC:16:AC:E9:7C:14:E2:60
Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Certificate serial: 309577AB6197798D13C1DC433BD22EFCE106A90F
Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa
Signing time: Tue 20 Jan 2026 02:22:40 +0000
ROA not before: Tue 20 Jan 2026 02:17:40 +0000
ROA not after: Tue 19 Jan 2027 02:22:40 +0000
asID: 132203
IP address blocks: 203.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:95:77:ab:61:97:79:8d:13:c1:dc:43:3b:d2:2e:fc:e1:06:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Validity
Not Before: Jan 20 02:17:40 2026 GMT
Not After : Jan 19 02:22:40 2027 GMT
Subject: CN=985B58439293D299EE7E3F95FC16ACE97C14E260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:77:32:4f:f1:bf:4e:62:3e:04:e7:c9:e5:
59:4f:45:ed:65:be:e1:dd:db:30:da:28:53:cb:cc:
e0:07:64:e0:59:07:a5:4e:db:77:0f:8a:22:15:7a:
c3:fd:e2:3c:ff:93:24:c0:73:67:28:4b:fe:6f:a8:
d2:53:a3:52:53:23:7f:ac:0d:f4:d5:50:15:fa:6e:
6a:db:46:03:3b:11:b7:5e:9d:13:e2:24:af:88:89:
b5:82:b4:28:3c:21:a9:87:fb:fb:77:92:27:83:62:
ee:1b:62:fa:de:d8:8a:14:8c:d3:d8:ee:f6:7f:9d:
79:d1:3f:a0:9b:81:16:46:76:f0:d9:72:d2:10:db:
9f:e2:34:2b:8f:86:0d:5a:1e:3b:b1:72:53:bd:e9:
74:49:28:17:0f:64:88:f4:69:87:ab:30:35:c7:14:
a7:f9:e6:54:6b:aa:f0:7b:15:bc:83:e4:d6:ba:e0:
49:db:9d:cb:5f:a5:8e:cf:f5:9a:bc:b1:49:a5:36:
f7:43:9f:39:cd:40:5e:cb:ce:87:2e:01:0b:12:ea:
87:a4:14:39:3e:57:75:c5:03:55:7f:2d:38:97:df:
40:21:ec:00:95:4f:04:0f:a4:04:74:52:ba:15:5d:
85:a2:28:bd:3c:55:36:ad:22:d4:1d:90:5d:cb:91:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:58:43:92:93:D2:99:EE:7E:3F:95:FC:16:AC:E9:7C:14:E2:60
X509v3 Authority Key Identifier:
keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.205.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4f:59:51:26:3a:6a:ac:dd:c8:5d:22:da:3f:fc:08:de:9b:
f8:5b:d2:b1:db:2f:95:e6:6e:75:01:86:4c:d2:bd:8a:ca:c9:
4e:11:19:e9:35:15:04:1e:22:51:e5:5d:a6:d2:3d:08:bf:1f:
25:95:f2:74:66:05:c3:35:37:5f:4b:d4:25:78:bd:40:57:2d:
83:9e:17:74:44:8b:32:77:77:9d:a3:36:b0:9e:60:6b:96:9b:
a3:44:3d:e1:99:0e:c8:bf:90:ba:1f:b0:e7:14:b0:90:56:54:
fa:82:4f:73:45:70:56:c2:4e:e3:c4:da:da:0d:2d:f2:5b:6d:
27:c8:3b:bf:76:f5:e0:ab:ed:e9:2f:49:a2:cd:4d:53:45:97:
27:f8:85:22:a4:0f:bf:4d:26:31:57:65:1b:60:36:01:cb:12:
b4:f5:1d:1d:08:e8:16:86:e2:d7:bc:89:bb:55:72:05:b9:bf:
17:00:b5:29:26:f0:f0:8b:03:52:3d:8d:a0:8b:e4:3d:01:af:
88:a3:fa:82:1e:64:88:35:fb:0d:44:77:f8:fe:f8:ba:2b:01:
1c:e3:4d:c0:14:1f:a0:91:16:8b:10:4a:d3:9e:85:55:6d:f1:
b5:e5:38:a7:0f:24:34:12:d4:2f:55:ac:9f:32:65:6e:2e:b3:
fe:a4:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:52:37 2026 by rpki-client