This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa
File: 3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: W/bQYZj/hsTlnoP7p5QDfey1W36vYQVxLnEsc4e0VVc=
Subject key identifier: E4:93:78:70:33:D8:76:3C:FB:6D:50:C1:1E:E3:2B:D5:97:91:73:1A
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 6F2F87E593485F58A4101585363459E71434664F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 62387
IP address blocks: 101.232.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2f:87:e5:93:48:5f:58:a4:10:15:85:36:34:59:e7:14:34:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=E493787033D8763CFB6D50C11EE32BD59791731A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:47:f6:bc:ee:e7:7f:2d:a8:45:16:9f:4c:
8b:a8:8b:c7:83:9b:dc:44:fb:0a:6f:e0:ab:45:d5:
c9:e9:2a:f8:73:51:8e:25:6d:6d:7d:51:69:59:b0:
59:1b:c8:1a:10:5c:2a:73:ee:03:c7:f8:e5:cc:4c:
f0:f5:49:85:33:44:28:c5:be:89:e4:1c:56:df:99:
84:cb:76:24:cb:69:ff:bf:0a:0e:62:26:13:28:76:
29:ab:1f:59:8e:6f:37:eb:98:4c:84:c5:1c:93:8b:
4c:5a:b0:2f:ec:d4:59:e5:bd:de:69:99:b0:3b:f6:
40:1b:0b:bc:17:12:27:ba:cf:4b:fb:37:f0:4b:1c:
40:ae:81:ca:82:48:db:ae:50:6c:f3:a0:98:b2:17:
63:f0:18:1c:19:e0:ed:bd:88:a0:7b:ee:64:94:0a:
79:1b:56:9a:f5:b0:7b:97:3b:29:3c:65:4d:2e:8a:
65:20:fe:a5:14:2e:de:06:d5:5f:e5:00:ea:2c:63:
24:ca:13:6d:3a:ce:3c:1a:75:ec:06:11:09:28:17:
0c:0a:3e:28:8f:0d:1c:ab:28:4b:ae:20:31:f0:75:
14:92:df:09:93:57:b6:19:58:d2:d2:dd:92:cf:75:
2f:27:8f:0d:05:e5:0e:55:a8:8f:e2:4f:87:ac:6f:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:93:78:70:33:D8:76:3C:FB:6D:50:C1:1E:E3:2B:D5:97:91:73:1A
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:35:9b:ea:6d:de:c3:c6:a8:65:06:15:db:ec:a5:08:9f:e6:
19:fe:fa:e0:a9:c7:81:58:b1:d5:8a:c9:32:14:fc:bc:3d:48:
7b:d6:ef:90:1b:bf:69:98:72:c5:c2:dc:be:f6:93:a7:63:c2:
78:38:77:c9:bd:a9:9d:f5:ae:6d:50:cf:9d:3d:03:3b:f7:51:
9b:44:e3:5d:51:50:21:4a:cc:58:9e:d8:39:76:f7:9b:c2:53:
07:48:71:9d:3a:67:c5:1a:1e:30:b2:af:c2:cf:a4:50:e7:00:
a4:1a:5c:8e:7c:2c:e2:de:bc:3b:f2:bb:12:5b:02:7e:a5:cc:
88:c2:71:1a:98:34:50:08:16:be:5d:36:67:38:65:3a:78:5c:
ba:c9:0e:a8:e0:2f:48:32:95:e7:3e:46:c7:59:64:a2:71:0f:
5b:03:58:4b:c9:5f:5f:29:ab:5a:8e:7a:15:e6:97:c6:36:1d:
19:6f:83:21:1f:01:78:59:2b:17:38:5c:f2:d5:d7:6f:dc:dd:
aa:99:65:7f:fb:c2:24:4b:c7:ce:a0:21:2e:26:99:60:62:c9:
8f:72:12:8f:87:19:14:d8:86:23:4d:2a:c7:63:52:35:22:dc:
35:56:23:f5:59:78:01:5e:cf:22:e9:bb:3a:b7:5b:54:d3:cc:
5e:ef:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:45 2026 by rpki-client