This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3135362e302f32322d3234203d3e203533333536.roa
File: 3130312e3233322e3135362e302f32322d3234203d3e203533333536.roa (raw, json)
Hash identifier: acHm1cx9A4vbiUrlaoK4q0P7D4imDFdyhSny3rqGIo8=
Subject key identifier: B4:DF:C0:CA:67:8C:4F:50:EB:87:71:42:4C:08:DB:0A:18:8A:E4:24
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 6D38A8C45F4496EAA24A0C9DCF3BEC257DF3DD03
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3135362e302f32322d3234203d3e203533333536.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 53356
IP address blocks: 101.232.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:38:a8:c4:5f:44:96:ea:a2:4a:0c:9d:cf:3b:ec:25:7d:f3:dd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=B4DFC0CA678C4F50EB8771424C08DB0A188AE424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:20:56:79:f5:62:ad:55:9a:65:e2:e6:ed:
b2:6d:f8:6f:7b:25:bc:1c:36:64:22:9e:f5:67:26:
a5:e2:df:fc:c9:51:72:15:c5:88:d0:90:17:27:76:
1c:19:88:d7:01:d0:24:6b:0a:37:e5:ca:7c:4d:da:
c4:6c:65:74:b2:9c:51:9f:97:bb:50:da:80:32:6f:
5a:89:5a:95:98:1e:20:8e:2f:1b:c8:d3:56:65:ad:
9b:8f:ff:46:95:83:1d:4d:ed:30:38:cb:6d:96:0d:
f3:5f:dc:e1:b5:f8:94:ee:20:f3:7a:cf:f6:05:37:
5a:0c:22:3b:9a:6c:82:df:dc:de:2f:90:d3:06:df:
80:8a:88:b7:30:f7:c9:ae:80:60:30:bb:47:3d:27:
01:67:5b:8d:28:5f:2b:97:a9:03:db:f7:6f:af:50:
58:92:57:22:18:98:7e:ad:6d:85:3a:46:aa:1d:b3:
81:f3:31:b8:a0:55:2c:a9:ad:b1:da:e6:df:d6:26:
bc:ae:d2:5b:83:ed:3c:ce:2e:c1:0b:85:9d:40:94:
e2:21:fe:15:2f:60:ae:3c:cd:38:d7:10:f1:29:8a:
7b:a1:18:b5:93:4b:0f:b7:f5:ef:70:38:d9:fb:0f:
a4:c2:c6:c2:9a:ea:35:6b:7f:00:cd:f9:90:b1:59:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:C0:CA:67:8C:4F:50:EB:87:71:42:4C:08:DB:0A:18:8A:E4:24
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3135362e302f32322d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f1:5e:00:e5:a2:ad:31:4a:96:30:36:07:ab:3e:85:4e:dd:
63:6a:29:c3:63:d5:80:9c:fa:79:bf:2e:e1:8b:f4:2a:18:2c:
a6:df:64:61:c6:8f:f8:9e:91:89:59:96:7d:23:3b:27:02:0f:
62:6f:63:84:02:fa:af:f3:27:2d:3b:ee:cf:ff:f6:6d:df:8d:
27:a8:d8:4c:95:78:94:8b:40:76:84:ef:17:61:3b:68:ad:6f:
c5:94:ac:de:30:42:f5:51:44:01:7a:6e:6f:0f:54:b2:8f:af:
c2:74:3c:b1:6d:42:28:b9:b9:3a:84:60:fd:6c:f7:e2:4c:41:
36:14:04:dc:d3:f7:e6:c3:4c:ea:b1:57:4d:d3:02:93:f0:5c:
19:ca:84:49:45:08:12:c9:61:22:d4:2f:46:30:ec:09:1d:7d:
c2:ae:fa:51:53:06:84:9f:40:44:13:ab:4b:39:ba:4e:ce:79:
71:06:23:d1:a4:58:55:ce:33:e2:f2:13:53:66:74:4d:9b:9a:
54:99:85:0d:dc:c4:d3:77:3d:29:6e:5a:aa:10:80:a3:9b:e6:
31:8e:9b:91:06:98:48:54:02:fd:c6:df:61:1d:0e:d5:60:26:
ed:5c:cc:3f:dc:88:6e:91:f9:0a:be:b1:a1:f7:09:4e:29:8d:
8b:7b:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 18:05:34 2026 by rpki-client