This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e20313432313332.roa
File: 3230322e34362e34312e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier: rXkjdcXB0+3P1oN07Ixvf8ItFTfHTo8BqQnn+xrNZhs=
Subject key identifier: CD:E5:C5:BD:61:84:42:1A:28:5F:FF:CC:44:FA:19:9E:A2:39:38:CD
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 6082EAA58AA4DFBA495A774C0A5E9B9DEDF8CDF9
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e20313432313332.roa
Signing time: Tue 20 Jan 2026 02:27:16 +0000
ROA not before: Tue 20 Jan 2026 02:22:16 +0000
ROA not after: Tue 19 Jan 2027 02:27:16 +0000
asID: 142132
IP address blocks: 202.46.41.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:82:ea:a5:8a:a4:df:ba:49:5a:77:4c:0a:5e:9b:9d:ed:f8:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:16 2026 GMT
Not After : Jan 19 02:27:16 2027 GMT
Subject: CN=CDE5C5BD6184421A285FFFCC44FA199EA23938CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:10:15:f2:1d:db:8b:34:3a:a5:8d:0b:09:
ec:35:62:f6:28:cd:09:39:d4:3c:d1:4b:93:56:79:
1f:21:64:22:c9:9e:5b:e8:de:cd:0d:91:ff:4b:e5:
a0:0c:26:f0:44:c8:29:1d:c7:77:3c:b3:01:aa:dc:
af:5c:47:8e:d8:c6:13:9e:f9:3d:20:48:29:42:9c:
1f:44:b5:69:ff:d6:ac:d9:8a:e9:39:43:9f:91:d0:
98:59:cb:5b:3d:4a:51:cc:d6:75:90:b3:06:55:b9:
f6:31:fa:66:94:fd:27:14:b2:53:ee:8b:d0:bd:0e:
25:72:df:6f:f5:b8:b9:7c:c0:08:1e:6c:f3:e2:3c:
ae:0c:6f:cc:c5:79:52:37:e6:48:9d:63:31:15:62:
7c:f1:27:f9:86:15:60:1d:0b:a7:2d:c9:68:e3:b0:
1e:46:ad:b9:92:86:b2:40:b6:fa:18:dc:be:6a:da:
a1:d8:a6:2f:0a:b9:e0:21:97:6c:6f:4b:8a:72:c2:
50:fe:36:0d:ca:89:e9:8b:06:05:17:64:df:49:54:
dc:39:15:08:0b:5b:0f:6b:ba:2f:e8:03:4d:19:c1:
f3:b9:37:11:78:7b:f4:a0:d3:24:27:a7:49:b2:f1:
67:01:12:61:76:d6:35:ff:3d:28:cf:c9:b8:44:1b:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:C5:BD:61:84:42:1A:28:5F:FF:CC:44:FA:19:9E:A2:39:38:CD
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e20313432313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ea:5c:f0:ec:8b:1d:4c:a3:44:40:5b:49:5c:cd:19:b6:3a:
e5:a8:a9:17:b3:c0:2e:bb:d2:1c:c1:4e:c4:c5:c6:3d:ef:b4:
43:50:e7:43:99:a8:12:2e:33:23:54:64:bc:ad:0a:34:8c:19:
52:37:e7:ed:4b:22:73:80:b8:9e:6a:d3:c7:8c:d2:bc:7c:96:
16:22:f2:9c:65:74:3f:92:4c:46:64:b4:9e:ed:82:eb:95:01:
f1:d1:82:0b:76:4b:b5:1e:5d:8c:3e:c7:02:3b:a2:5b:0e:ed:
9f:86:98:ea:50:da:24:d4:6c:13:e6:59:8d:04:71:b0:32:96:
af:79:a5:4c:7e:1f:3c:85:fe:e1:99:b3:40:47:95:f7:a0:d8:
58:d9:d0:5a:6f:71:8a:ef:0a:b1:17:bb:f2:af:c4:0b:3d:74:
d3:71:96:db:4b:07:5b:c3:80:c9:5b:a3:e6:50:08:43:ab:12:
e6:c6:b1:27:62:0e:66:50:eb:54:32:62:4e:89:6c:fb:d5:bf:
33:1d:23:ac:52:18:32:51:db:d1:5a:25:57:70:b7:a6:66:d0:
c8:15:2b:08:19:66:7c:e9:04:bd:62:3b:9f:f7:45:c7:73:d0:
77:f9:6a:0c:5c:79:c2:bf:da:a0:dd:75:d7:87:7b:90:d8:a5:
51:35:bf:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:46:46 2026 by rpki-client