This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e3132382e302f31372d3234203d3e20313337373138.roa
File: 3131382e3134352e3132382e302f31372d3234203d3e20313337373138.roa (raw, json)
Hash identifier: CQjRjapxPkl/NeFuDP2vky/YbrjXemBbDuH6iL76vFY=
Subject key identifier: 96:A0:07:E6:6E:E2:34:47:B3:DD:91:CC:D0:8F:24:69:A1:1C:13:F2
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 0A80637C8D9ADBE6D8F1FD6234600F75753BCC75
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e3132382e302f31372d3234203d3e20313337373138.roa
Signing time: Tue 20 Jan 2026 02:09:42 +0000
ROA not before: Tue 20 Jan 2026 02:04:42 +0000
ROA not after: Tue 19 Jan 2027 02:09:42 +0000
asID: 137718
IP address blocks: 118.145.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 09:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:80:63:7c:8d:9a:db:e6:d8:f1:fd:62:34:60:0f:75:75:3b:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:42 2026 GMT
Not After : Jan 19 02:09:42 2027 GMT
Subject: CN=96A007E66EE23447B3DD91CCD08F2469A11C13F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:9c:ba:5a:c0:ff:89:ee:13:e3:a5:6c:5f:
71:d6:ef:8c:56:a4:ed:8e:c8:33:b3:e0:05:23:da:
51:67:26:6d:72:40:22:df:60:fe:ac:95:ef:d4:71:
9a:4f:ee:b5:5a:4e:af:76:23:2c:ba:e7:1c:58:eb:
0d:9e:88:9e:d6:d6:86:f9:09:35:8d:5d:07:ea:85:
3c:10:8e:a9:bf:8f:f1:5e:5f:b9:00:68:44:5d:79:
fe:80:b2:05:a1:b9:76:32:e3:2f:bd:fb:d8:99:24:
35:4a:5a:2d:85:0c:49:a1:18:99:2b:1f:a6:59:1b:
8e:94:fc:9b:d6:ed:98:94:ff:3f:c3:b8:15:a6:c5:
40:54:81:6c:87:40:0c:5c:50:4f:68:ac:9c:04:75:
6c:4a:a4:0a:2c:71:b2:d9:e2:00:0f:f9:4f:c7:b9:
29:cd:5e:6a:8d:33:13:0b:1b:bb:dd:97:b7:00:75:
aa:ba:af:e6:d1:b7:6e:6e:9d:02:db:d5:08:e1:4c:
29:4b:f4:bf:35:58:c1:66:f0:76:c9:0e:47:6a:fd:
b0:ac:6a:c2:37:df:78:de:5d:73:33:4a:ee:df:4c:
11:3b:8a:54:c8:34:41:26:2b:25:6b:fb:a5:0f:bf:
8f:c3:07:6f:90:30:64:fe:ac:cb:06:e9:05:3c:5a:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:07:E6:6E:E2:34:47:B3:DD:91:CC:D0:8F:24:69:A1:1C:13:F2
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e3132382e302f31372d3234203d3e20313337373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.145.128.0/17
Signature Algorithm: sha256WithRSAEncryption
36:b9:cd:90:5c:e0:13:5c:12:f5:4f:f2:d3:06:02:ba:43:8f:
e3:b2:8a:05:7c:62:64:e1:9e:a6:38:10:d3:8f:95:1a:ed:35:
31:af:95:ce:e6:f3:3a:52:37:41:8a:c2:00:55:cc:4e:7a:bf:
d3:c1:08:42:bf:a0:1f:c6:7b:cb:dd:3d:b7:43:f5:d7:82:b4:
bd:48:0c:1b:4e:bc:e3:68:4d:54:98:8f:0f:24:d2:05:e6:16:
da:f6:6c:a0:e0:73:1b:ef:93:d2:6d:7d:1e:19:b1:82:8b:dd:
97:fc:a0:59:d3:d8:65:98:ff:34:85:69:0e:a4:2b:35:38:80:
a3:06:46:a4:ed:60:98:6a:40:5e:87:79:f1:31:4b:89:b3:6e:
37:76:e3:e4:1b:cb:4a:da:17:ff:00:00:ce:42:f0:06:e1:cb:
74:91:9d:d6:ce:00:8b:bf:1d:6c:a9:74:e0:43:85:f5:65:23:
b3:51:eb:23:ae:55:71:b5:10:bd:e1:0d:ad:5d:05:2a:18:bc:
ec:f6:e4:93:0e:3a:b7:7e:9e:d4:d5:16:cc:6d:6f:74:08:59:
8b:2c:ca:69:a6:fe:be:51:3f:07:bb:b0:da:3e:98:fb:25:ad:
54:bf:62:66:f6:63:aa:f5:dd:81:f5:0f:50:32:d4:c8:a5:ab:
cf:77:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:26:09 2026 by rpki-client