This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e39362e302f32322d3234203d3e203632333837.roa
File: 3130312e3233322e39362e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: XB4M3bcChr+d8inKZBES9ct2hshjy+3uu1hxJ7cn64g=
Subject key identifier: 20:5E:94:D3:79:62:94:02:18:19:87:9E:88:33:5E:D0:FA:10:90:6E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 08A68875B4D49BF8A4AB39CDC8FDD0C61DBC7FF9
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e39362e302f32322d3234203d3e203632333837.roa
Signing time: Tue 20 Jan 2026 02:11:58 +0000
ROA not before: Tue 20 Jan 2026 02:06:58 +0000
ROA not after: Tue 19 Jan 2027 02:11:58 +0000
asID: 62387
IP address blocks: 101.232.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 10:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a6:88:75:b4:d4:9b:f8:a4:ab:39:cd:c8:fd:d0:c6:1d:bc:7f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jan 20 02:06:58 2026 GMT
Not After : Jan 19 02:11:58 2027 GMT
Subject: CN=205E94D3796294021819879E88335ED0FA10906E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:bc:58:1a:9b:8b:56:99:d6:b3:b7:66:5e:
9e:46:7d:f6:95:5a:cb:d8:e9:89:ad:65:a8:4e:be:
63:83:2d:42:81:10:68:f8:65:94:31:ae:db:0d:a5:
1a:fd:a9:01:67:d4:ce:1e:db:ef:66:12:82:73:93:
4c:de:72:b2:25:3b:76:54:82:c1:a8:5c:f3:b8:e4:
a9:fc:25:21:dd:51:d8:6d:18:cb:a5:e6:1a:18:0e:
c2:b1:c1:67:45:34:c2:97:ac:b2:e4:55:19:11:98:
14:93:ab:33:23:5b:f9:b6:3e:92:e0:f6:be:da:f6:
b7:da:36:71:71:60:1f:f6:7b:f8:17:89:3f:06:a8:
77:cc:23:cb:1d:97:00:aa:7c:42:cf:3a:74:41:e7:
08:2c:6d:fe:57:7b:53:39:9c:38:ff:ef:da:8d:13:
d0:80:68:07:93:b0:2c:92:1c:7e:4c:21:6d:11:4b:
9c:f3:66:c2:7b:89:b9:82:47:85:0b:40:16:61:4e:
a5:a2:3a:3d:0d:0b:02:5c:f8:f9:8a:8b:da:03:14:
4b:e1:aa:c6:8a:7e:2b:75:38:5e:f8:42:3b:b3:60:
3b:49:51:b0:35:56:10:03:8b:88:00:f9:5f:d7:26:
d0:72:8b:b3:d0:3b:26:fe:4d:93:74:9a:e5:c2:9a:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:94:D3:79:62:94:02:18:19:87:9E:88:33:5E:D0:FA:10:90:6E
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e39362e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
03:82:1b:fc:d0:f2:50:2c:57:bc:24:8f:d8:4d:2c:a7:7f:ef:
d7:c6:76:b4:8c:88:c0:8f:83:9b:bd:04:11:f3:5b:a1:8f:96:
7b:25:0c:5f:08:3a:ca:17:ef:26:bb:22:40:9d:a2:a6:84:83:
95:61:97:db:9b:ea:a3:e9:99:0e:d9:f8:15:62:79:97:c5:52:
ab:d1:e4:88:d8:a1:b2:6b:93:04:41:9d:5e:c0:57:f2:48:2a:
4d:b6:88:e7:3e:b3:d9:5a:99:69:a2:38:0c:4c:32:14:68:c9:
01:2f:35:f8:b1:cc:5a:ca:87:9f:b9:4c:6f:d0:de:a8:6a:59:
3b:3a:7e:4a:bb:8d:32:cc:18:48:95:c1:86:de:fa:a8:20:2e:
61:ea:6c:54:a7:ac:37:0b:19:3d:f6:f9:08:1c:1e:8e:a0:b8:
52:4a:75:ba:91:82:13:f6:c6:6f:15:a8:42:98:0f:d1:7f:4f:
32:6e:5b:7f:e1:b3:e8:37:e6:40:08:02:b0:cb:66:75:af:e0:
72:1b:e5:6d:42:a6:b3:6c:b3:a2:3d:cf:f3:25:75:57:46:9b:
62:89:c3:71:2d:77:6e:09:31:b0:e4:14:79:06:a3:06:12:df:
d9:40:49:54:bb:0c:0f:6f:39:66:07:b8:f5:07:ca:93:2f:72:
a9:7e:22:46
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCKaIdbTUm/ikqznNyP3Qxh28f/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjAxMjAwMjA2NThaFw0yNzAxMTkwMjExNThaMDMxMTAvBgNV
BAMTKDIwNUU5NEQzNzk2Mjk0MDIxODE5ODc5RTg4MzM1RUQwRkExMDkwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmbxYGpuLVpnWs7dmXp5GffaV
WsvY6YmtZahOvmODLUKBEGj4ZZQxrtsNpRr9qQFn1M4e2+9mEoJzk0zecrIlO3ZU
gsGoXPO45Kn8JSHdUdhtGMul5hoYDsKxwWdFNMKXrLLkVRkRmBSTqzMjW/m2PpLg
9r7a9rfaNnFxYB/2e/gXiT8GqHfMI8sdlwCqfELPOnRB5wgsbf5Xe1M5nDj/79qN
E9CAaAeTsCySHH5MIW0RS5zzZsJ7ibmCR4ULQBZhTqWiOj0NCwJc+PmKi9oDFEvh
qsaKfit1OF74QjuzYDtJUbA1VhADi4gA+V/XJtByi7PQOyb+TZN0muXCmqNvAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUIF6U03lilAIYGYeeiDNe0PoQkG4wHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzAzMTJlMzIz
MzMyMmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmXoYDANBgkqhkiG9w0BAQsFAAOCAQEAA4Ib/NDyUCxXvCSP2E0sp3/v
18Z2tIyIwI+Dm70EEfNboY+WeyUMXwg6yhfvJrsiQJ2ipoSDlWGX25vqo+mZDtn4
FWJ5l8VSq9HkiNihsmuTBEGdXsBX8kgqTbaI5z6z2VqZaaI4DEwyFGjJAS81+LHM
WsqHn7lMb9DeqGpZOzp+SruNMswYSJXBht76qCAuYepsVKesNwsZPfb5CBwejqC4
Ukp1upGCE/bGbxWoQpgP0X9PMm5bf+Gz6DfmQAgCsMtmda/gchvlbUKms2yzoj3P
8yV1V0abYonDcS13bgkxsOQUeQajBhLf2UBJVLsMD285Zge49QfKky9yqX4iRg==
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:30:28 2026 by rpki-client