This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa
File: 3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: yU65BB1qrplK2lLxtpF/uVSmP1uOUvh6JmJKAK+0pfg=
Subject key identifier: 24:3D:A5:DE:86:52:D9:BD:2E:B4:D1:91:92:C9:72:A5:CC:F6:81:00
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 3DF6B313A14695E28BD3ACA93837F73B89AE41F3
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 62387
IP address blocks: 101.232.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f6:b3:13:a1:46:95:e2:8b:d3:ac:a9:38:37:f7:3b:89:ae:41:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=243DA5DE8652D9BD2EB4D19192C972A5CCF68100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:59:ba:4d:4c:37:c0:4a:1c:6b:cb:3d:e3:
7d:98:95:97:76:ee:b2:f7:67:f9:6f:6a:72:b9:f8:
5d:6c:4f:f8:37:47:b5:66:fe:b8:7e:25:47:c3:39:
b9:a5:5e:c2:d1:d4:93:21:a0:3d:64:a4:a5:5a:7c:
3c:44:67:1a:74:b6:96:5e:26:e7:4a:c6:c8:eb:ab:
ac:0d:77:f0:d9:31:04:ff:a5:41:56:2a:e6:b4:d1:
4e:00:fa:18:cd:e8:e8:7b:c2:22:1c:11:42:7f:86:
d3:45:44:c4:ff:b3:d1:00:40:be:a7:2a:ef:41:fc:
3e:ae:d0:2d:d7:67:ac:5e:bc:35:ba:88:38:ac:d6:
ff:96:69:b9:7a:d6:d8:8e:6c:b9:1c:47:0a:f9:ca:
64:e0:df:f8:cf:a6:33:5f:44:af:ce:7e:24:28:4c:
dd:fa:c7:33:38:b4:8b:4e:9f:65:a1:fa:0b:cf:1e:
24:ee:dd:96:6b:86:f2:62:16:88:43:76:67:a6:77:
61:e5:c1:90:30:0e:ac:d8:70:55:4a:f4:1c:a2:30:
14:b4:73:2d:23:43:6d:3c:52:ad:c2:88:c6:0a:56:
c8:6d:11:1c:73:be:cc:4f:81:b0:2e:10:aa:d2:d0:
7f:fb:f5:45:a7:ad:3d:85:58:93:9b:3b:a4:e0:94:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:A5:DE:86:52:D9:BD:2E:B4:D1:91:92:C9:72:A5:CC:F6:81:00
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.140.0/22
Signature Algorithm: sha256WithRSAEncryption
15:1c:ce:af:8f:4f:cd:18:20:e2:1b:a9:8c:dd:85:73:92:d9:
9e:e8:da:03:ca:86:46:31:cd:66:26:ac:43:14:2f:37:48:a9:
9a:b6:64:be:5d:54:74:ed:36:ae:9d:fa:89:8d:74:2c:e0:e9:
cd:6f:01:f4:0d:3d:26:71:5f:18:7e:e8:e4:c1:18:93:33:09:
ee:09:ff:cb:23:ef:e7:ba:40:10:75:b4:d3:c1:cf:23:44:d4:
f8:3d:3e:4f:04:f3:61:28:51:ae:34:a5:7d:2d:81:1b:d4:c2:
fd:45:c7:73:1f:f8:2d:f3:05:73:af:d8:9f:b9:b4:a0:48:43:
be:ad:1b:4c:40:4b:6f:bd:0e:50:b4:34:1e:50:8b:a0:55:07:
23:18:75:98:22:81:a0:50:b8:e9:fb:33:58:f0:93:8b:13:e8:
ef:79:28:ba:e3:29:f5:29:d5:d1:61:68:5e:11:11:7e:7c:ae:
d8:81:61:55:6a:15:7f:72:c6:9d:ad:43:83:30:e2:f6:45:42:
54:ad:c1:3d:2b:64:74:de:1a:0a:a1:c2:73:22:39:fb:ee:5d:
b2:35:c6:3f:27:ff:cf:44:15:b7:82:5a:10:21:0a:28:ea:f8:
9e:6a:f9:4a:77:5b:53:97:fa:e7:21:a2:11:67:8d:5d:55:6b:
47:37:1a:68
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUPfazE6FGleKL06ypODf3O4muQfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjAxMjAwMjA2NThaFw0yNzAxMTkwMjExNThaMDMxMTAvBgNV
BAMTKDI0M0RBNURFODY1MkQ5QkQyRUI0RDE5MTkyQzk3MkE1Q0NGNjgxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdr1m6TUw3wEoca8s9432YlZd2
7rL3Z/lvanK5+F1sT/g3R7Vm/rh+JUfDObmlXsLR1JMhoD1kpKVafDxEZxp0tpZe
JudKxsjrq6wNd/DZMQT/pUFWKua00U4A+hjN6Oh7wiIcEUJ/htNFRMT/s9EAQL6n
Ku9B/D6u0C3XZ6xevDW6iDis1v+Wabl61tiObLkcRwr5ymTg3/jPpjNfRK/OfiQo
TN36xzM4tItOn2Wh+gvPHiTu3ZZrhvJiFohDdmemd2HlwZAwDqzYcFVK9ByiMBS0
cy0jQ208Uq3CiMYKVshtERxzvsxPgbAuEKrS0H/79UWnrT2FWJObO6TglOd7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUJD2l3oZS2b0utNGRkslypcz2gQAwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMwMzEyZTMy
MzMzMjJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmXojDANBgkqhkiG9w0BAQsFAAOCAQEAFRzOr49PzRgg4hupjN2F
c5LZnujaA8qGRjHNZiasQxQvN0ipmrZkvl1UdO02rp36iY10LODpzW8B9A09JnFf
GH7o5MEYkzMJ7gn/yyPv57pAEHW008HPI0TU+D0+TwTzYShRrjSlfS2BG9TC/UXH
cx/4LfMFc6/Yn7m0oEhDvq0bTEBLb70OULQ0HlCLoFUHIxh1mCKBoFC46fszWPCT
ixPo73kouuMp9SnV0WFoXhERfnyu2IFhVWoVf3LGna1DgzDi9kVCVK3BPStkdN4a
CqHCcyI5++5dsjXGPyf/z0QVt4JaECEKKOr4nmr5SndbU5f65yGiEWeNXVVrRzca
aA==
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:56 2026 by rpki-client