This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
File: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: /iGkkIqO0FSP5CywowzeIsIdOQnf8YsmMX+nUyXOQLk=
Subject key identifier: 47:4F:5A:CF:16:B0:23:B0:9A:7D:54:44:FF:F1:30:93:85:ED:83:D1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 79BDE95EB5FA904F8D62D5E8BDB2E8474F9DFCB4
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
Signing time: Tue 20 Jan 2026 02:25:02 +0000
ROA not before: Tue 20 Jan 2026 02:20:02 +0000
ROA not after: Tue 19 Jan 2027 02:25:02 +0000
asID: 4808
IP address blocks: 113.208.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:bd:e9:5e:b5:fa:90:4f:8d:62:d5:e8:bd:b2:e8:47:4f:9d:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jan 20 02:20:02 2026 GMT
Not After : Jan 19 02:25:02 2027 GMT
Subject: CN=474F5ACF16B023B09A7D5444FFF1309385ED83D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:68:14:5a:3c:69:05:12:48:38:d4:05:2d:
c8:c4:9b:62:99:71:db:02:07:c4:08:d9:36:e2:03:
47:95:18:06:8b:5d:90:19:64:f7:10:d0:3d:d0:db:
5a:ea:c9:be:2b:4a:a3:6c:68:23:50:0d:04:9a:0e:
83:2e:13:1f:36:f9:3b:ea:b9:da:79:44:dd:50:65:
7f:c6:22:41:ab:25:51:71:84:78:8e:11:9b:8e:90:
e4:d8:fe:20:07:a8:75:52:5d:55:83:8e:48:56:8a:
f6:f4:b0:c4:d1:29:ef:1d:0c:ae:17:13:b3:19:bc:
77:a2:04:67:00:7a:d4:f0:42:5e:f8:83:4f:f7:6e:
8e:28:52:70:64:21:75:b8:0e:18:88:c2:7a:3c:31:
66:43:5d:ca:7d:6b:1f:ab:2b:2d:77:2d:6b:1d:e8:
e2:f6:67:ab:85:28:d5:eb:01:9f:df:e5:cb:4c:1b:
e9:62:eb:5e:f1:fd:5c:ca:ed:5f:cc:25:2b:e1:8d:
0e:48:b8:ea:b9:ce:3f:c1:98:dd:9d:a3:66:1b:ab:
e3:c4:c5:ea:1d:3b:ef:63:86:a3:47:1c:10:d6:c6:
fe:80:02:b3:70:04:49:46:87:b3:4b:da:fd:ef:38:
67:87:ef:b3:c9:93:06:fd:38:44:e4:3e:63:88:22:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:5A:CF:16:B0:23:B0:9A:7D:54:44:FF:F1:30:93:85:ED:83:D1
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.208.112.0/22
Signature Algorithm: sha256WithRSAEncryption
70:2b:51:4e:c7:d4:1a:d4:49:7f:8f:7c:fe:c4:79:47:7e:b1:
f0:18:08:e2:61:b0:e9:39:b9:8e:e2:75:d4:b7:1f:b8:22:f5:
ad:7c:c1:94:f6:5b:7d:1f:48:84:f8:fe:5e:5e:1f:fd:44:e6:
9b:df:92:32:f2:e4:65:f2:30:44:d0:2c:73:4c:65:dc:5d:1e:
f8:bd:51:80:7f:00:49:4e:54:c7:f7:71:bb:f2:d0:fc:e3:d3:
3c:85:c5:98:d8:7d:70:9a:fd:21:7e:aa:21:8e:48:e4:5d:c1:
35:27:39:a4:db:89:98:ae:b8:eb:a6:0a:82:5c:43:52:f0:89:
f3:6e:0f:2a:a9:94:2a:97:4f:95:12:87:03:43:b7:01:1d:e1:
01:0c:9c:61:23:7c:4c:81:58:90:07:f9:26:ac:ac:2c:fc:8d:
c4:09:75:67:d2:d7:28:ad:e3:d9:2d:8f:a4:f3:c1:83:9a:da:
8a:a0:ec:0d:8d:95:c0:54:ec:15:8c:cf:8e:7e:c9:0a:32:25:
0d:0b:2e:e2:1b:22:ca:1b:94:b0:64:a0:74:5a:ae:4c:a4:d1:
17:92:a0:90:3b:69:05:87:73:2a:0a:cc:95:a8:d1:0b:e1:70:
bc:b4:be:01:7e:21:90:5c:06:40:0c:a5:7e:1a:35:9b:f9:00:
8c:0d:8f:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:47 2026 by rpki-client