This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34322e302f32342d3332203d3e203234343133.roa
File: 3230322e34362e34322e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier: 4EQmDWjYeryVlLZ+FGDED/sYw/u/XlP5aMkFy+tMpf8=
Subject key identifier: 80:C4:98:D0:B9:E0:9D:C4:9A:EF:0F:C7:26:5D:79:C7:3E:85:B1:12
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 4D5B7562FD85CB44180C11438AE357C2AACBB42B
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34322e302f32342d3332203d3e203234343133.roa
Signing time: Tue 20 Jan 2026 02:27:15 +0000
ROA not before: Tue 20 Jan 2026 02:22:15 +0000
ROA not after: Tue 19 Jan 2027 02:27:15 +0000
asID: 24413
IP address blocks: 202.46.42.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5b:75:62:fd:85:cb:44:18:0c:11:43:8a:e3:57:c2:aa:cb:b4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: Jan 20 02:22:15 2026 GMT
Not After : Jan 19 02:27:15 2027 GMT
Subject: CN=80C498D0B9E09DC49AEF0FC7265D79C73E85B112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:4b:5a:56:53:43:99:ae:2e:4e:6a:f1:8f:
fd:71:2f:f1:44:25:55:94:04:26:c6:43:de:8e:3f:
a0:bf:41:1d:65:42:54:1a:ad:7d:48:79:36:0c:6b:
6e:0b:df:94:af:1a:4a:18:b9:76:a6:d1:04:66:74:
32:5a:10:3b:5d:2b:f1:be:6a:53:b8:77:4d:a1:29:
ce:d0:a1:f1:0b:2c:5e:a1:ad:4b:79:cd:6b:06:68:
18:9c:18:7d:2b:7f:7a:4c:75:57:e2:e7:0d:8d:0d:
44:d3:cb:a4:89:2e:eb:f6:57:8f:a4:7e:2d:33:96:
fd:77:f9:a8:7e:3c:e1:74:a5:c9:fe:34:ff:09:24:
0c:8a:90:ac:cb:b3:73:be:c0:b8:8b:f0:f8:41:82:
00:86:44:27:7c:da:f2:cb:ba:a9:4c:e9:71:11:5e:
a0:3f:48:e9:59:85:0f:01:6e:14:45:a3:f2:5f:45:
f4:2b:18:d0:19:99:d5:cd:6d:1b:c4:f6:92:7d:3a:
c4:41:f2:8b:75:d9:5c:e1:87:9f:76:cc:0e:c8:15:
d7:ba:dd:db:a5:f6:b1:32:d2:55:41:17:6c:98:62:
d1:29:ee:2d:f0:cd:6a:27:f3:10:18:7a:0a:73:18:
c1:5e:29:cd:21:b5:24:8d:7b:f0:93:4b:04:bd:93:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:98:D0:B9:E0:9D:C4:9A:EF:0F:C7:26:5D:79:C7:3E:85:B1:12
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34322e302f32342d3332203d3e203234343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
94:65:ee:e4:85:1b:68:8c:2a:6d:d2:82:e3:2a:01:4d:4b:aa:
7d:a2:ba:14:75:c1:92:0d:0f:0a:67:fb:4e:19:1d:86:0b:fe:
0b:80:f5:92:3f:55:34:43:c2:f1:79:89:b0:a8:42:cd:1e:04:
cc:e0:02:06:ac:d2:41:60:08:cb:0b:c3:f6:8a:37:9f:c2:b6:
71:d5:ce:9d:cc:19:8d:93:e0:51:01:26:fb:32:b3:56:e0:f0:
07:ad:b9:08:96:73:75:fa:c8:f9:65:93:bf:10:7b:8d:46:8f:
1b:8a:96:43:fd:82:64:a1:ce:29:b2:0e:ab:b3:95:56:bb:e8:
f5:d4:a8:d3:0e:43:de:3e:f8:fa:b8:e4:3f:08:53:d3:20:8a:
d5:db:1d:90:d4:8d:b5:b7:8b:13:f3:c8:50:14:ce:c5:76:42:
91:d6:96:b8:67:fb:31:9f:2c:d6:7b:6d:45:06:a3:21:11:ba:
84:42:1b:49:f8:e6:53:00:60:81:7e:3c:04:be:79:34:f0:1c:
7c:c0:a3:c4:fa:f6:0f:1b:19:35:c7:3e:73:f7:57:75:65:a2:
b0:24:c5:1b:3c:d6:ef:66:a9:65:32:23:3e:e9:29:f5:0e:ab:
cc:e3:a0:e8:c6:39:10:7f:d4:bd:90:26:e3:14:78:6d:9d:17:
7d:12:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:42:26 2026 by rpki-client