This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33342e302f32342d3332203d3e203234343133.roa
File: 3230322e34362e33342e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier: X1wcejs/sV7S2giTMwf07NZQ1bbBtj2NlFJ4vkuZeio=
Subject key identifier: 65:8D:A9:E7:F7:8E:D3:3F:C8:F2:40:6F:B9:AC:66:46:D2:35:CF:16
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 0FA6B2A75A9D047756D800E72461C309BC8A0898
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33342e302f32342d3332203d3e203234343133.roa
Signing time: Tue 20 Jan 2026 02:27:14 +0000
ROA not before: Tue 20 Jan 2026 02:22:14 +0000
ROA not after: Tue 19 Jan 2027 02:27:14 +0000
asID: 24413
IP address blocks: 202.46.34.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a6:b2:a7:5a:9d:04:77:56:d8:00:e7:24:61:c3:09:bc:8a:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:14 2026 GMT
Not After : Jan 19 02:27:14 2027 GMT
Subject: CN=658DA9E7F78ED33FC8F2406FB9AC6646D235CF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:49:35:01:f0:99:31:8c:2f:5b:ac:05:cc:
ab:65:17:e5:e7:6f:9e:9a:3f:98:5b:cd:24:f0:1f:
7a:5f:b9:f4:a7:74:bb:7e:fe:48:90:8e:81:d0:14:
2c:94:70:8b:92:11:ab:5e:a8:8c:ca:c6:f7:d7:3f:
06:ad:91:9f:18:70:d3:01:b7:8c:39:5e:22:25:6f:
fa:e5:93:27:27:02:00:99:d6:e2:c6:d8:3d:e6:67:
ab:f2:8b:da:69:c7:7a:f8:03:f5:e2:02:be:83:15:
69:0b:25:6d:b1:12:85:8e:f5:36:5c:be:4f:a7:39:
1c:60:cc:f4:a8:a9:a4:00:66:c8:59:20:fb:ef:5e:
57:54:d6:a6:21:9e:c3:f5:cc:f5:71:d3:03:f8:a4:
9a:65:d6:05:7f:f0:4e:96:bf:44:d0:61:b7:c8:a6:
df:7f:8d:0e:3a:14:4d:36:b8:b1:56:04:d2:14:f9:
cd:08:2d:b4:a6:21:7b:ad:55:03:6d:7c:a2:b6:41:
f2:52:6e:15:58:13:31:ed:0a:8a:14:52:a0:8f:82:
ae:af:1c:c3:16:76:f8:e0:a1:3d:ef:25:c3:21:99:
b4:43:2d:a4:64:52:7b:1c:1a:5c:40:86:35:f2:20:
3a:3e:e1:2b:4c:24:bd:45:a0:5b:8f:bd:fc:44:b5:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8D:A9:E7:F7:8E:D3:3F:C8:F2:40:6F:B9:AC:66:46:D2:35:CF:16
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33342e302f32342d3332203d3e203234343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:fd:47:8c:f3:19:18:a5:6e:5c:8e:f5:fa:f8:2d:cc:50:a8:
41:19:b8:34:6c:12:57:17:6c:79:45:f1:b6:9f:6c:94:a5:b6:
dc:d0:bf:0f:e0:62:0b:2e:3c:1b:35:64:93:a7:d6:44:9a:79:
ca:79:48:65:36:09:19:7f:6b:06:a2:39:d7:ba:82:4d:e3:7f:
b4:37:64:5f:60:03:df:2a:39:c2:ad:ad:85:c6:f2:22:fc:b5:
df:5a:d1:c7:e2:05:d5:72:f0:be:bf:d6:06:e2:82:2a:4c:07:
18:58:54:4b:f8:fc:5f:dc:28:c5:1c:8f:f2:87:df:a2:28:c4:
f6:38:b3:f9:2a:be:c5:d1:75:ef:fc:1c:47:ec:e2:71:9b:6a:
fe:8a:17:ab:e6:aa:6f:de:b0:18:2c:75:fb:17:6e:71:cf:45:
a6:c6:42:b7:ee:a3:28:28:22:f9:28:9e:f2:94:4d:fa:5e:9f:
2a:f7:01:bd:6d:39:c9:6a:d1:dd:1e:ce:29:0b:6f:30:49:eb:
bf:94:03:5f:b6:b9:c7:2d:77:de:57:2f:3a:9d:8a:fa:65:81:
0a:98:90:24:11:dd:88:e1:3f:d1:22:77:0f:08:92:3a:8e:24:
b7:76:bb:4c:01:ef:67:77:09:10:80:d4:c5:fe:5c:6c:85:9b:
11:53:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:42:09 2026 by rpki-client