This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38392e302f32342d3234203d3e20323136303437.roa
File: 34352e3234382e38392e302f32342d3234203d3e20323136303437.roa (raw, json)
Hash identifier: 0BoCIwBAFLi7tR9msw69O0FpAUzHzziBf8Rxr/iSelU=
Subject key identifier: 62:46:3B:A1:B2:37:BE:B4:EA:3F:8C:56:4B:8E:E9:11:6D:54:84:DE
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 3026923F695B180B98147C8A46CD17E85D38ABE3
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38392e302f32342d3234203d3e20323136303437.roa
Signing time: Tue 20 Jan 2026 02:09:33 +0000
ROA not before: Tue 20 Jan 2026 02:04:33 +0000
ROA not after: Tue 19 Jan 2027 02:09:33 +0000
asID: 216047
IP address blocks: 45.248.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:26:92:3f:69:5b:18:0b:98:14:7c:8a:46:cd:17:e8:5d:38:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:33 2026 GMT
Not After : Jan 19 02:09:33 2027 GMT
Subject: CN=62463BA1B237BEB4EA3F8C564B8EE9116D5484DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:01:a2:3c:a9:b8:8a:ad:14:62:57:5d:98:
f4:6f:f9:40:57:c6:be:31:d3:7b:2f:02:19:9e:79:
ed:9c:ee:ce:05:e5:a1:a3:2a:bd:e8:d2:0d:80:c6:
56:ea:6b:ed:80:01:3d:6b:9d:88:cd:27:00:74:86:
b1:50:b0:c8:45:19:2c:01:57:4b:ed:95:2c:72:85:
02:0f:08:d6:0f:26:73:55:ac:09:5d:4c:e9:bc:94:
e1:d6:43:9b:2a:93:50:cf:59:df:c9:e6:41:cf:32:
83:46:94:b9:81:c5:3f:bc:08:e7:91:71:2a:27:61:
4a:ae:a5:c6:e0:27:e1:84:5a:99:a0:93:6d:4c:1a:
e6:99:a1:f4:b2:28:a8:98:60:19:95:65:c2:c7:1d:
65:d0:86:ab:59:19:58:16:73:39:34:34:a3:dd:ef:
1f:12:9e:bb:b3:39:57:c9:ef:aa:70:6a:66:e9:3f:
4b:e0:30:65:7f:43:7a:9c:44:70:41:28:40:c4:3d:
d6:f7:15:be:07:b6:f6:0c:3b:4a:b4:78:bd:d9:cb:
13:44:84:91:0e:dc:29:5d:30:82:0c:84:67:03:60:
c7:6e:54:f5:f4:30:79:6d:3f:d6:23:16:ad:61:01:
9b:17:ac:e2:13:c9:b6:54:6b:e3:f9:09:ce:46:ec:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:3B:A1:B2:37:BE:B4:EA:3F:8C:56:4B:8E:E9:11:6D:54:84:DE
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38392e302f32342d3234203d3e20323136303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.89.0/24
Signature Algorithm: sha256WithRSAEncryption
07:53:a4:fe:3f:a6:af:15:f2:fc:6d:15:96:7b:d3:28:c6:aa:
ca:c1:31:97:bb:4e:b6:bf:4c:63:8d:f7:39:f3:82:3e:c6:79:
89:6e:c3:eb:54:cb:bc:2d:e1:7a:fe:42:e4:bb:28:06:5a:4f:
ea:93:b7:a7:b4:e8:28:b1:72:b0:5c:5c:f0:84:81:d5:5d:dc:
df:ac:8a:ff:b5:4e:86:0d:0e:72:a1:8a:65:c2:70:ab:0b:8d:
cd:b3:7f:83:6b:c9:8a:02:7a:06:37:a1:b3:5c:38:db:b1:63:
eb:8c:6f:73:b8:8d:94:1a:9f:49:7d:76:62:97:00:fd:c9:60:
bd:17:98:27:bb:9e:c4:c4:21:69:93:c3:98:35:45:b9:e7:c6:
10:29:e0:8b:2d:6b:b0:32:80:7f:22:c6:1c:1a:8a:1f:a5:fc:
8f:7f:d7:97:d2:7b:ad:ad:99:78:72:b4:0d:f2:ea:1f:1c:5b:
8a:7a:5a:86:b9:fc:78:b9:fd:e2:f3:6c:09:61:ee:21:b9:d4:
ac:28:0f:6d:75:2b:1a:d0:55:91:dc:b5:96:50:e9:70:d2:b2:
e6:80:e1:c8:1b:3b:28:5f:6d:9e:5f:69:64:8b:bb:79:e0:3f:
e1:03:c5:c9:06:a2:d4:b7:2d:d7:d0:05:ba:78:27:2c:f1:81:
89:b8:76:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:55 2026 by rpki-client