This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3137352e3137382e302e302f31362d3234203d3e203435303930.roa
File: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (raw, json)
Hash identifier: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=
Subject key identifier: CC:98:98:96:A5:E5:92:17:49:2F:09:E1:BD:8A:92:36:6F:AE:E9:7F
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 0FD813A5B01C2601FC6E44F24FE7CA96FFDE1B9A
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3137352e3137382e302e302f31362d3234203d3e203435303930.roa
Signing time: Tue 20 Jan 2026 02:26:07 +0000
ROA not before: Tue 20 Jan 2026 02:21:07 +0000
ROA not after: Tue 19 Jan 2027 02:26:07 +0000
asID: 45090
IP address blocks: 175.178.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 05:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d8:13:a5:b0:1c:26:01:fc:6e:44:f2:4f:e7:ca:96:ff:de:1b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Jan 20 02:21:07 2026 GMT
Not After : Jan 19 02:26:07 2027 GMT
Subject: CN=CC989896A5E59217492F09E1BD8A92366FAEE97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:04:d2:2a:94:dd:04:cd:d2:cc:4a:56:c0:
c8:d4:c7:d3:b2:54:fa:02:bc:22:22:c4:eb:b1:5a:
c2:a9:d3:78:fa:f7:9d:3f:b7:cd:96:49:51:7d:a2:
05:01:d9:d6:83:85:70:26:d5:44:23:fc:17:2e:c2:
e6:ee:38:7b:24:ad:d9:74:13:41:77:a0:53:55:14:
2e:77:92:e8:ea:10:f5:7b:67:f0:1d:7d:59:7d:84:
ad:92:70:58:7a:df:8d:5a:36:9d:6f:c0:6e:af:b0:
da:f5:ea:49:1f:31:3b:13:ae:38:fd:91:af:5e:08:
5d:04:f3:da:8b:be:9d:85:03:64:41:34:e4:c2:bc:
34:07:f9:26:b7:66:0b:35:be:69:6a:0d:7e:9f:d3:
17:a2:d1:43:f3:e3:48:ec:69:bf:04:7d:5f:ac:49:
e2:ec:d8:53:8b:31:49:7d:52:9e:3e:d8:11:7e:f9:
b7:fa:e0:9f:6c:70:09:f8:4b:f8:7c:c2:2b:8f:e2:
dd:ec:c2:01:6c:ac:6b:72:a9:f3:06:0d:73:37:c6:
3d:27:43:a4:b5:f7:7c:d7:c6:a6:16:9b:d7:61:b5:
6a:4c:1d:58:77:5a:25:81:1f:8c:ae:32:8c:4e:67:
62:3b:3d:d2:63:0f:9f:bf:84:2d:c7:69:e4:e1:1a:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:98:98:96:A5:E5:92:17:49:2F:09:E1:BD:8A:92:36:6F:AE:E9:7F
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3137352e3137382e302e302f31362d3234203d3e203435303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:de:ee:09:8a:99:84:fb:1b:39:98:a3:c1:22:51:0c:91:53:
d7:b9:a0:9d:d3:92:b3:b4:bc:5b:eb:1e:20:2a:c9:af:51:cd:
e4:ba:30:d8:cc:41:35:0f:bf:3e:25:53:2b:66:7e:6b:9f:67:
60:34:61:46:e8:42:8a:f9:af:f9:e1:9f:80:a5:43:0e:0b:5f:
2d:5c:71:9b:ec:23:74:ce:07:a9:83:df:02:f2:a5:df:0a:b4:
4b:90:a8:4a:87:6f:3f:13:97:d7:a0:f4:f5:94:3f:52:f8:9b:
56:79:73:44:c4:7b:42:b6:d1:aa:49:81:15:ec:bc:92:dc:45:
9c:f5:08:39:d6:69:6e:d4:0e:70:b5:7b:d0:59:e3:66:ee:15:
b9:54:90:96:67:2f:9f:c8:94:ca:4a:53:70:95:a4:d8:12:6e:
6f:a4:13:25:2f:e8:f2:c3:03:af:2a:8e:7f:de:a1:e3:67:31:
b5:00:fc:52:8b:1f:c7:df:79:7e:f7:f0:07:16:58:ac:09:4d:
92:1d:e3:b1:98:09:e1:d1:d0:91:68:21:6a:d7:8c:c8:ee:61:
14:a5:89:60:1d:a6:11:35:22:73:a0:e0:45:02:fa:b9:0e:49:
fa:7e:17:0e:74:e4:fb:81:db:39:a2:94:9b:e4:76:99:5e:14:
66:95:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:43:14 2026 by rpki-client