This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa
File: 3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: dnP0455oLYXVgpr0/l53Y31YnAi8TXoahm/DGNNY1Pk=
Subject key identifier: FF:E5:79:AC:4E:ED:5D:B6:D2:5D:70:F1:5F:FB:C2:63:52:23:85:61
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 05132266F18B68AE2FE1193DAF71528B1C131431
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 62387
IP address blocks: 101.232.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:13:22:66:f1:8b:68:ae:2f:e1:19:3d:af:71:52:8b:1c:13:14:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=FFE579AC4EED5DB6D25D70F15FFBC26352238561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:2f:f9:cf:d7:79:cc:3e:17:d3:97:6a:e6:
25:40:5f:ff:a6:31:28:17:c5:fa:f1:a1:09:a9:0e:
3e:e3:66:23:0d:46:f9:bd:80:4b:56:49:eb:2e:41:
ed:37:4a:7c:b3:72:bd:b7:3d:35:66:2d:ad:51:f4:
35:81:cb:1c:25:79:f4:da:09:50:89:1a:d8:99:3e:
83:01:2a:9c:66:4e:a8:ab:eb:1e:9e:bf:d5:ef:51:
47:03:dd:52:cd:1e:e7:6b:cd:36:2a:11:df:9d:45:
d4:c4:8c:b1:80:09:62:f6:79:5f:97:85:91:bf:6d:
22:cc:44:62:90:4f:b1:8a:0f:32:ad:8c:d9:9d:ce:
f3:e0:57:f3:44:60:84:f4:9a:f4:03:a3:8d:2c:35:
2e:23:cb:b6:d5:cd:9a:a7:b6:f0:f8:46:c4:eb:24:
4a:be:0f:9c:a3:7c:70:3c:11:34:7b:e2:24:1f:c5:
42:54:cc:05:25:9a:76:59:df:c4:28:06:da:00:e7:
14:14:a2:50:69:fa:18:af:b5:57:d4:bf:56:77:13:
e8:11:76:8c:91:6f:68:78:60:b6:17:6a:9f:50:9b:
c5:c5:dc:12:fd:ce:95:9e:8d:e7:b8:dc:a6:c0:14:
61:4c:91:5c:cb:e5:af:60:2e:28:d9:8d:b6:90:3f:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:79:AC:4E:ED:5D:B6:D2:5D:70:F1:5F:FB:C2:63:52:23:85:61
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.144.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b2:3d:7a:4a:ae:d3:6d:db:6b:67:c6:a1:00:5a:b8:b5:85:
6a:d8:2e:8e:59:4e:be:ac:63:77:f7:c6:d1:94:bd:36:44:83:
2c:97:a8:53:90:c6:fc:27:93:62:44:fe:6a:13:a3:b4:15:8a:
92:c2:49:8b:89:cb:86:92:62:26:4e:df:90:6f:29:5b:1e:98:
14:0c:41:a5:e1:3d:28:e5:01:92:d9:ea:54:94:ca:5f:7b:22:
41:a9:f8:17:2a:c7:88:86:6a:38:0a:3c:22:a4:58:5e:84:f5:
64:8c:17:6c:c2:79:30:48:6f:77:17:92:80:b1:9d:b4:e7:ad:
c5:98:5c:16:06:8c:e3:c2:58:73:13:2e:97:54:c0:2c:d5:86:
d8:69:da:6e:49:96:0a:20:c9:c3:81:8f:73:a3:2c:64:1e:05:
15:ea:18:f6:41:6b:27:bb:af:c2:85:27:21:39:5a:d8:8b:e5:
a1:97:72:a2:71:37:ae:33:54:d1:d3:1a:79:e0:54:d8:1d:8a:
6e:25:1c:a6:31:c6:b0:d8:a7:c7:ac:9d:08:ca:7b:45:e6:4b:
12:b7:7e:c6:3b:83:f0:7f:0b:4c:2c:88:ce:28:d7:c0:38:58:
53:a9:60:c1:92:ee:cf:f0:42:88:73:67:12:1f:5f:99:2b:a1:
a8:5d:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:56 2026 by rpki-client