This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e203234343133.roa
File: 3230322e34362e34312e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier: MH+z7S8m0+NJYb4yQesScSMdHuiUp9PP6SLiA1TOGgw=
Subject key identifier: 64:4B:A5:CC:1E:2D:06:70:C8:FF:ED:4E:43:CB:36:66:0C:0D:47:93
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 6182872A3CB37D2204C61A8139A82D24986F9AF6
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e203234343133.roa
Signing time: Tue 20 Jan 2026 02:27:13 +0000
ROA not before: Tue 20 Jan 2026 02:22:13 +0000
ROA not after: Tue 19 Jan 2027 02:27:13 +0000
asID: 24413
IP address blocks: 202.46.41.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:87:2a:3c:b3:7d:22:04:c6:1a:81:39:a8:2d:24:98:6f:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:13 2026 GMT
Not After : Jan 19 02:27:13 2027 GMT
Subject: CN=644BA5CC1E2D0670C8FFED4E43CB36660C0D4793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:04:7f:7c:7c:c2:10:2c:02:e1:2a:b0:b9:
ed:94:47:c1:9d:21:92:8d:0f:0b:60:87:1c:e1:2b:
13:58:71:60:f2:7e:bb:09:6a:7e:97:bd:f4:d0:81:
21:54:d7:72:5f:38:c7:e2:50:87:d6:dc:83:d3:47:
ca:13:41:71:79:eb:15:53:6f:24:60:c1:eb:32:20:
90:44:5d:9f:d4:8d:28:49:23:3e:15:9d:89:4c:f5:
8a:e3:b6:67:0d:b3:15:75:e5:f1:12:86:6a:89:e4:
ef:dc:b7:51:8f:3c:d4:ef:f2:8f:29:44:26:99:01:
1f:a7:92:a7:fc:dc:ea:2c:b2:83:a6:fa:c3:8f:29:
fe:a4:9a:d7:f4:8e:8d:c2:83:ab:da:00:b5:18:b9:
14:36:fc:41:e5:ce:60:b8:b0:6c:22:c7:38:2d:4f:
a5:da:8c:b5:2c:42:b3:e0:98:e9:5f:1f:86:c3:e8:
82:18:f7:da:ff:ed:9d:10:35:a7:18:bd:c5:ff:2e:
2f:c8:e3:42:7e:fe:37:04:6e:91:a0:93:d1:06:15:
3d:dc:95:56:9c:59:74:55:35:f1:73:78:83:fe:6a:
a3:c2:23:ff:0b:3f:e4:07:3a:3c:4e:44:38:ef:94:
9c:18:4f:41:2d:67:7d:b1:fe:1a:5f:3a:9c:de:6a:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:A5:CC:1E:2D:06:70:C8:FF:ED:4E:43:CB:36:66:0C:0D:47:93
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e203234343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.41.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5b:3d:76:03:a0:09:68:32:f9:3e:a1:fb:78:a2:51:95:eb:
c0:74:54:ea:2c:eb:b4:b0:76:e9:8f:37:0d:04:48:6f:d4:f8:
90:96:39:bb:8f:67:93:f0:82:32:d3:dc:90:73:14:e0:ba:fc:
c0:b5:06:2c:3f:63:af:28:f3:b7:7b:1f:49:29:a3:b9:13:9b:
f1:81:02:5e:9a:86:a3:8e:67:00:04:87:45:b4:bb:69:7e:db:
e0:69:de:5b:c7:ec:78:6e:02:46:8b:5c:c6:56:01:c6:df:89:
96:7b:52:d1:92:8d:f8:5a:53:91:39:cc:e5:47:fb:35:b6:af:
17:5f:77:8e:4d:d2:e3:8f:4c:36:15:5f:dc:cc:ce:86:87:34:
58:6b:a1:8d:b0:74:91:c1:85:39:b6:fc:01:2f:26:0c:76:a9:
42:9f:ee:6a:bc:6b:2e:bd:5a:34:31:14:f9:82:b7:62:33:32:
09:b4:d1:b6:71:cf:11:8b:a4:cb:38:00:4a:2d:1d:4d:1b:86:
bc:42:4e:1e:7b:3b:4a:a4:b7:58:3e:30:0f:36:3e:1a:c5:5b:
95:87:b4:31:d4:a3:b9:d9:f8:39:00:b0:bf:b6:5b:26:be:c5:
7a:f3:bc:9c:d4:48:53:c2:4a:ac:3c:4e:32:0a:ec:9b:e0:33:
03:61:70:3e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUYYKHKjyzfSIExhqBOagtJJhvmvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5
OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTNaFw0yNzAxMTkwMjI3MTNaMDMxMTAvBgNV
BAMTKDY0NEJBNUNDMUUyRDA2NzBDOEZGRUQ0RTQzQ0IzNjY2MEMwRDQ3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rgR/fHzCECwC4Sqwue2UR8Gd
IZKNDwtghxzhKxNYcWDyfrsJan6XvfTQgSFU13JfOMfiUIfW3IPTR8oTQXF56xVT
byRgwesyIJBEXZ/UjShJIz4VnYlM9YrjtmcNsxV15fEShmqJ5O/ct1GPPNTv8o8p
RCaZAR+nkqf83OossoOm+sOPKf6kmtf0jo3Cg6vaALUYuRQ2/EHlzmC4sGwixzgt
T6XajLUsQrPgmOlfH4bD6IIY99r/7Z0QNacYvcX/Li/I40J+/jcEbpGgk9EGFT3c
lVacWXRVNfFzeIP+aqPCI/8LP+QHOjxORDjvlJwYT0EtZ32x/hpfOpzeasdDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUZEulzB4tBnDI/+1OQ8s2ZgwNR5MwHwYDVR0j
BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE
NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NDU4MTE1LzAvMzIzMDMyMmUzNDM2
MmUzNDMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMouKTANBgkqhkiG9w0BAQsFAAOCAQEAv1s9dgOgCWgy+T6h+3iiUZXrwHRU
6izrtLB26Y83DQRIb9T4kJY5u49nk/CCMtPckHMU4Lr8wLUGLD9jryjzt3sfSSmj
uROb8YECXpqGo45nAASHRbS7aX7b4GneW8fseG4CRotcxlYBxt+JlntS0ZKN+FpT
kTnM5Uf7NbavF193jk3S449MNhVf3MzOhoc0WGuhjbB0kcGFObb8AS8mDHapQp/u
arxrLr1aNDEU+YK3YjMyCbTRtnHPEYukyzgASi0dTRuGvEJOHns7SqS3WD4wDzY+
GsVblYe0MdSjudn4OQCwv7ZbJr7FevO8nNRIU8JKrDxOMgrsm+AzA2FwPg==
-----END CERTIFICATE-----
Generated at Tue Jan 20 14:42:26 2026 by rpki-client