This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa
File: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (raw, json)
Hash identifier: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=
Subject key identifier: E8:96:D1:C8:15:E6:3F:86:0F:64:F2:85:60:33:80:72:0C:CE:B1:67
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 44493578FC97C06E99E1926B1AF805CA8D015324
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa
Signing time: Tue 20 Jan 2026 02:26:07 +0000
ROA not before: Tue 20 Jan 2026 02:21:07 +0000
ROA not after: Tue 19 Jan 2027 02:26:07 +0000
asID: 132203
IP address blocks: 119.28.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 05:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:49:35:78:fc:97:c0:6e:99:e1:92:6b:1a:f8:05:ca:8d:01:53:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Jan 20 02:21:07 2026 GMT
Not After : Jan 19 02:26:07 2027 GMT
Subject: CN=E896D1C815E63F860F64F285603380720CCEB167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:2b:e7:ee:1c:6a:40:d8:ab:15:21:27:ac:
67:0b:9e:59:92:5e:dd:fa:83:76:98:54:e1:e7:f2:
ea:48:25:df:b1:79:b6:58:2e:64:25:80:f3:ea:61:
88:4a:d6:af:10:f6:e0:51:d6:c7:bc:b7:2d:66:b5:
23:0d:79:f4:a5:8f:da:5e:81:d7:ff:98:42:2e:ce:
ba:b9:e8:96:ee:d4:68:b3:d6:69:df:04:51:ed:a7:
a9:97:eb:e6:a8:cd:fd:43:d9:0a:73:82:1f:bd:0e:
15:5e:7a:02:6b:a6:7f:a0:e8:65:f6:6b:f8:04:e2:
44:3c:41:49:71:5e:81:6c:14:0c:08:78:b4:59:e4:
d7:c2:90:36:ca:07:f8:b4:5a:a0:b8:6b:2a:a3:66:
71:88:59:3f:3f:30:33:e6:20:d9:db:73:e2:5f:bf:
f4:86:55:fd:64:6b:79:dc:bc:32:8e:4e:6e:08:39:
8f:37:81:c2:b5:e4:a2:9a:e9:04:fe:bb:b9:b5:bf:
c4:18:ee:b1:fd:ae:93:04:71:b5:6b:59:ab:21:d8:
83:09:92:5a:bd:a6:ba:bb:d2:e5:c2:d6:7b:eb:56:
c4:4c:45:cf:5f:22:d3:cc:11:9a:70:6c:ff:0f:8e:
06:6a:1c:3f:3f:ed:36:b5:15:61:b0:a2:5e:53:87:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:D1:C8:15:E6:3F:86:0F:64:F2:85:60:33:80:72:0C:CE:B1:67
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.28.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d5:f1:b7:04:08:47:f1:31:69:35:d6:9c:e6:9d:3a:de:fe:
e5:2f:16:e5:88:74:75:be:30:81:7a:16:02:94:c9:41:4b:c7:
e3:0a:0e:8d:5e:38:a8:ec:96:9d:c7:84:1f:7c:cc:76:09:d7:
e4:e5:57:8a:2a:1e:0d:1c:74:2b:e7:9d:9e:ae:4b:42:f7:8d:
10:2c:1e:f7:6b:d1:b1:67:bc:0a:c9:d9:d6:f8:4c:1e:56:1e:
85:ad:98:74:fa:1e:91:31:e9:cc:18:90:cf:b4:04:ea:4e:62:
4b:b8:ef:09:04:d4:6b:7d:2c:92:ff:5f:c4:43:29:17:35:83:
e2:04:11:b2:89:53:c0:66:d9:5b:ba:34:b0:11:71:c2:1a:52:
3e:71:1d:05:38:a2:98:d3:5e:ec:76:e2:7b:3f:36:1f:12:1c:
78:60:e5:f7:38:a5:a3:6b:e5:5e:3f:7e:32:fd:2c:8b:a0:68:
a0:3d:f1:8e:60:5a:7c:5a:52:d3:21:08:93:c4:9e:ff:9b:cb:
7d:2c:45:66:29:59:a6:00:0c:a6:1a:7d:4b:58:07:26:6d:4e:
56:d3:9a:1e:f8:f4:55:53:71:25:d5:6a:f0:50:b6:4b:bb:f2:
61:d4:07:38:90:1c:57:9b:23:9d:aa:3b:9e:49:6f:e9:78:30:
f4:5b:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:54:13 2026 by rpki-client