This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e38342e302f32322d3234203d3e203632333837.roa
File: 3130312e3233322e38342e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: bQrtgxtEZujaOYa1g+bXECA8PgP0wTLYkHlg34oXrCs=
Subject key identifier: 20:87:B9:15:7D:F5:7C:63:E1:7B:8B:54:EE:36:71:EC:8F:FB:3F:59
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 200EB5D20036333E902EBEF63C3265CB67EE0F69
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e38342e302f32322d3234203d3e203632333837.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 62387
IP address blocks: 101.232.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0e:b5:d2:00:36:33:3e:90:2e:be:f6:3c:32:65:cb:67:ee:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=2087B9157DF57C63E17B8B54EE3671EC8FFB3F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:74:2f:e5:d5:e2:63:77:e0:5d:e5:53:d8:
a3:0c:0b:40:ff:f2:d8:4b:e3:a0:4e:19:07:f8:ed:
70:bc:07:db:2c:cc:05:7f:83:ee:1a:88:84:9b:4e:
97:70:d0:96:38:12:38:e3:67:aa:7c:fb:65:93:ae:
e5:ee:e9:4c:11:71:b6:aa:91:20:20:34:4d:26:78:
ad:8f:0c:bc:ca:77:cc:e7:59:9f:ee:82:b6:df:fa:
97:84:51:64:4d:71:d5:c9:f7:73:04:75:32:96:bb:
7d:cb:b0:ac:74:39:18:07:03:1b:34:c7:5c:15:2d:
87:95:08:0c:2a:73:be:61:f0:c4:b5:f5:c5:46:b8:
30:40:8f:d0:6c:d5:e0:60:90:cf:c6:26:b1:62:5e:
22:bd:95:b8:39:01:52:76:67:a0:43:aa:e8:4f:d8:
98:77:1a:4a:e5:c3:fd:6f:32:94:3d:a4:d9:71:16:
02:f7:1b:66:5d:31:a1:7e:89:86:33:ec:9d:0d:0c:
97:6e:55:ed:15:1e:4b:22:e5:ca:59:68:ae:75:0a:
61:41:7b:80:f4:b2:f1:08:d2:f6:02:a9:6f:95:21:
70:24:a2:8c:ac:f3:f0:65:59:10:72:f2:b9:be:64:
7a:dd:72:bb:7b:78:e5:8d:6e:51:77:f8:5a:e5:3d:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:B9:15:7D:F5:7C:63:E1:7B:8B:54:EE:36:71:EC:8F:FB:3F:59
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e38342e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.84.0/22
Signature Algorithm: sha256WithRSAEncryption
51:fd:a3:cd:08:fd:7b:bb:cb:2f:7f:bb:08:c6:b0:09:67:a6:
2a:57:78:2b:b7:4b:90:81:60:e6:37:93:9c:7a:81:d5:36:0a:
2a:9c:22:ab:e1:b6:c1:ab:b8:e9:36:93:4c:37:18:9f:f2:64:
b8:97:43:fd:fd:54:c2:dc:ac:a8:45:bc:0f:64:ee:80:35:31:
8a:bc:c5:2f:c4:3b:5b:3a:b4:31:e7:41:6a:29:35:a8:ef:5c:
47:47:a0:1a:dd:80:88:89:86:15:a3:8d:51:d9:87:6b:f2:7f:
7f:a5:94:33:4a:37:f4:26:83:ff:a0:e0:79:67:e2:f7:7c:a1:
0f:4e:75:6e:a9:d9:c9:13:3b:a5:d3:69:fe:de:e7:d1:f5:d5:
b1:bc:67:c6:49:c4:d8:80:49:0e:85:ca:58:16:24:76:a7:2e:
e5:15:14:19:4b:b6:09:28:69:13:37:93:80:39:13:6f:90:1b:
ee:c6:d8:cd:e3:72:b6:ad:a3:6d:52:76:36:14:b6:cd:43:86:
ac:e2:b6:be:ca:50:03:9f:c8:42:62:03:34:42:18:ae:d4:01:
87:65:4e:9e:5e:d8:68:90:c4:df:a7:8e:2f:68:b2:d6:31:79:
a6:cb:9d:78:4b:ff:21:a0:a3:3c:6f:fc:de:93:bb:90:ca:ae:
19:a8:c7:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:30:29 2026 by rpki-client