This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132342e302f32322d3234203d3e203632333837.roa
File: 3130312e3233322e3132342e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: QkodyoCCZPG3Q10DafGPLaySktICi06fiSwUYD2AkmA=
Subject key identifier: 2B:47:21:E4:35:05:38:AE:0A:75:D0:2E:05:38:37:6F:5D:A5:B3:D3
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 0ED1FF7D287B11ABB73D74E29CE556879720B909
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132342e302f32322d3234203d3e203632333837.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 62387
IP address blocks: 101.232.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d1:ff:7d:28:7b:11:ab:b7:3d:74:e2:9c:e5:56:87:97:20:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=2B4721E4350538AE0A75D02E0538376F5DA5B3D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:b6:a9:41:f5:b6:f4:92:1f:53:d9:02:30:
95:01:5c:08:fe:b1:64:90:77:cd:07:c4:b1:9d:38:
f4:7d:33:9e:9c:a5:e2:83:c0:33:86:df:e3:6b:ed:
72:42:80:23:16:b4:88:c6:ed:09:33:03:d0:09:14:
8a:7b:9a:ac:d7:a5:7f:75:a0:68:33:5c:17:4c:fa:
e3:1c:ec:15:99:78:3b:24:27:00:8b:04:40:25:d6:
55:2c:7d:3a:3d:2c:00:d6:1b:54:01:93:04:8d:3c:
ea:57:dc:0f:3e:84:47:c6:79:d9:1a:20:44:b5:e0:
49:66:ea:79:71:36:b2:2b:d2:a3:28:b4:75:51:b5:
90:fd:3d:42:e0:79:e0:8b:02:e4:ed:0a:fe:dc:11:
5e:66:0c:87:cf:5d:2a:3e:99:79:a3:00:80:ba:4e:
39:1f:8b:0c:f8:dc:77:37:20:4b:56:b8:4d:6f:47:
38:dc:99:22:45:c1:e2:d1:6d:ec:85:99:14:43:10:
4c:73:9b:bc:5e:c2:44:16:5a:37:3d:a4:39:4c:c7:
d0:7e:22:fc:41:75:c0:88:4b:e4:b1:66:83:3a:7e:
0d:af:a8:5e:86:c8:02:a8:69:73:85:d1:00:8b:59:
c2:c3:bd:73:1f:fc:1b:88:db:93:46:f9:1d:80:2b:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:21:E4:35:05:38:AE:0A:75:D0:2E:05:38:37:6F:5D:A5:B3:D3
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132342e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
10:00:c1:74:ad:00:44:f2:57:a4:7d:30:01:a9:4e:96:f2:f6:
24:20:6a:e7:0c:69:b2:1f:5e:35:ce:d0:5f:da:09:63:d7:ed:
82:b1:83:7a:80:6d:12:4a:58:5b:b0:fd:4d:59:ac:0f:ef:4f:
2f:1e:4d:6e:6d:de:6d:b1:20:6a:c2:f8:46:97:6c:82:4e:43:
59:cf:e6:de:fe:da:b3:13:2b:76:27:f6:ae:55:ed:40:99:89:
df:5a:3d:b2:99:9e:68:bc:1f:25:d4:53:5d:a1:47:92:a2:d4:
ef:04:a3:c2:87:07:32:1c:ec:26:dc:5e:14:ba:bb:9b:cb:19:
b6:35:5c:46:56:27:94:c4:1e:ae:34:72:31:a4:fd:65:29:22:
34:21:5c:1e:27:8b:3b:8d:2e:87:cb:4e:d1:0d:01:54:63:79:
ee:1d:1e:3b:fe:8f:df:74:d7:05:70:c7:8f:21:ab:ca:43:24:
83:e0:ff:ac:ee:89:73:bb:9f:a5:d7:b8:dc:59:b0:c8:0d:96:
a9:0c:f5:94:0b:c8:6b:55:f7:f2:8b:b1:70:8b:fc:a7:50:7c:
4e:f9:ef:2c:60:33:71:4f:07:4b:6f:41:25:0d:7e:08:7c:64:
72:91:f0:fc:33:57:f9:42:f0:02:dc:0f:1a:ea:3b:17:5e:5b:
23:65:de:d5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDtH/fSh7Eau3PXTinOVWh5cguQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjAxMjAwMjA2NThaFw0yNzAxMTkwMjExNThaMDMxMTAvBgNV
BAMTKDJCNDcyMUU0MzUwNTM4QUUwQTc1RDAyRTA1MzgzNzZGNURBNUIzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHarapQfW29JIfU9kCMJUBXAj+
sWSQd80HxLGdOPR9M56cpeKDwDOG3+Nr7XJCgCMWtIjG7QkzA9AJFIp7mqzXpX91
oGgzXBdM+uMc7BWZeDskJwCLBEAl1lUsfTo9LADWG1QBkwSNPOpX3A8+hEfGedka
IES14Elm6nlxNrIr0qMotHVRtZD9PULgeeCLAuTtCv7cEV5mDIfPXSo+mXmjAIC6
Tjkfiwz43Hc3IEtWuE1vRzjcmSJFweLRbeyFmRRDEExzm7xewkQWWjc9pDlMx9B+
IvxBdcCIS+SxZoM6fg2vqF6GyAKoaXOF0QCLWcLDvXMf/BuI25NG+R2AKxHXAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUK0ch5DUFOK4KddAuBTg3b12ls9MwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMwMzEyZTMy
MzMzMjJlMzEzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmXofDANBgkqhkiG9w0BAQsFAAOCAQEAEADBdK0ARPJXpH0wAalO
lvL2JCBq5wxpsh9eNc7QX9oJY9ftgrGDeoBtEkpYW7D9TVmsD+9PLx5Nbm3ebbEg
asL4Rpdsgk5DWc/m3v7asxMrdif2rlXtQJmJ31o9spmeaLwfJdRTXaFHkqLU7wSj
wocHMhzsJtxeFLq7m8sZtjVcRlYnlMQerjRyMaT9ZSkiNCFcHieLO40uh8tO0Q0B
VGN57h0eO/6P33TXBXDHjyGrykMkg+D/rO6Jc7ufpde43FmwyA2WqQz1lAvIa1X3
8ouxcIv8p1B8TvnvLGAzcU8HS29BJQ1+CHxkcpHw/DNX+ULwAtwPGuo7F15bI2Xe
1Q==
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:29:13 2026 by rpki-client