This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35322e302f32342d3234203d3e203234313437.roa
File: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (raw, json)
Hash identifier: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=
Subject key identifier: 44:A3:55:3C:B9:4E:0A:15:BE:9E:36:58:6E:93:4C:0C:64:C8:A3:B2
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 1C88886E0C0A3C1478A875D6CB28D30A77F6F4ED
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35322e302f32342d3234203d3e203234313437.roa
Signing time: Tue 20 Jan 2026 02:25:01 +0000
ROA not before: Tue 20 Jan 2026 02:20:01 +0000
ROA not after: Tue 19 Jan 2027 02:25:01 +0000
asID: 24147
IP address blocks: 203.86.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:88:88:6e:0c:0a:3c:14:78:a8:75:d6:cb:28:d3:0a:77:f6:f4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jan 20 02:20:01 2026 GMT
Not After : Jan 19 02:25:01 2027 GMT
Subject: CN=44A3553CB94E0A15BE9E36586E934C0C64C8A3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:01:4f:de:78:3b:27:16:2b:82:7f:a0:ee:
1b:af:87:75:28:e1:cf:04:30:3d:14:f4:a9:01:60:
07:c7:c0:f1:15:aa:81:5f:20:a2:3e:7e:c7:7a:23:
19:cf:2e:a5:67:60:9c:81:6d:4c:da:37:53:97:9e:
3a:93:aa:89:bd:ed:28:ca:05:05:05:41:fe:8c:3e:
b6:60:48:c1:30:3e:89:41:42:b1:28:56:f2:d1:ae:
14:50:8c:56:70:5d:50:ce:79:02:17:c8:1a:a4:5d:
2d:aa:db:6e:f6:c2:c4:36:72:d8:57:a9:2d:2b:0a:
35:0e:15:05:3c:7b:94:d3:ed:e5:fc:b9:52:af:d2:
1e:a5:22:66:a4:9d:4c:42:02:bb:13:9d:11:60:4e:
36:00:cf:16:ac:89:b4:95:04:8b:1a:6f:08:15:1b:
bd:a8:a9:36:10:c0:bc:0c:d0:06:78:2f:97:41:3d:
09:3f:2a:21:4d:80:41:3d:be:d4:e4:15:c0:2a:8c:
cf:cf:bb:45:21:50:e4:cb:a8:d9:45:35:24:33:fd:
90:2a:7e:2d:23:86:f9:de:81:cb:37:c8:92:b6:60:
14:73:78:4b:ac:ca:e2:2b:ae:5d:dc:65:af:11:d8:
f0:a2:a8:bf:88:1e:b8:8c:1f:26:7d:00:25:f5:f0:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:55:3C:B9:4E:0A:15:BE:9E:36:58:6E:93:4C:0C:64:C8:A3:B2
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35322e302f32342d3234203d3e203234313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.86.52.0/24
Signature Algorithm: sha256WithRSAEncryption
81:42:36:a0:5d:34:0a:51:bb:ed:d3:16:f5:c8:36:d8:66:c9:
7e:30:9e:f7:0e:e1:5c:36:f0:e6:4c:fa:c0:eb:0d:c7:d1:52:
ad:03:48:6d:c4:9f:37:d4:d1:4b:7d:10:d0:5f:9d:76:5d:4a:
a0:60:32:ba:7e:1c:39:2f:27:01:65:b1:01:2a:db:73:8e:78:
88:45:f3:6d:f3:10:53:bf:2c:e1:59:88:d5:33:bb:93:c0:bc:
02:80:38:15:b3:2a:ba:8e:10:1c:f0:4d:68:10:c6:ea:4c:df:
a4:af:8f:80:b1:8e:85:3e:7b:60:1d:ab:6f:04:ba:fe:23:2d:
5a:de:2c:08:bb:e0:a4:9d:cf:72:34:51:a9:e9:16:37:b9:c3:
39:39:bb:e3:2e:3c:80:06:d2:11:0d:43:45:bf:00:99:35:6a:
b6:5e:89:83:45:d2:30:0c:6a:b6:43:07:99:db:57:f6:7c:a6:
fe:e9:ba:20:58:d7:ab:1b:c5:52:6f:60:51:ac:35:15:14:d8:
35:ae:6d:99:f9:78:70:7f:23:a1:af:73:fc:ef:e6:d1:5c:69:
cd:b4:58:e7:5e:a5:01:9b:e6:c6:b3:2c:41:06:75:92:d6:97:
dd:77:0e:10:da:8d:2f:07:8f:bf:31:29:a7:df:00:93:a8:6b:
ff:cf:3d:5b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHIiIbgwKPBR4qHXWyyjTCnf29O0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz
MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDFaFw0yNzAxMTkwMjI1MDFaMDMxMTAvBgNV
BAMTKDQ0QTM1NTNDQjk0RTBBMTVCRTlFMzY1ODZFOTM0QzBDNjRDOEEzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8QFP3ng7JxYrgn+g7huvh3Uo
4c8EMD0U9KkBYAfHwPEVqoFfIKI+fsd6IxnPLqVnYJyBbUzaN1OXnjqTqom97SjK
BQUFQf6MPrZgSMEwPolBQrEoVvLRrhRQjFZwXVDOeQIXyBqkXS2q2272wsQ2cthX
qS0rCjUOFQU8e5TT7eX8uVKv0h6lImaknUxCArsTnRFgTjYAzxasibSVBIsabwgV
G72oqTYQwLwM0AZ4L5dBPQk/KiFNgEE9vtTkFcAqjM/Pu0UhUOTLqNlFNSQz/ZAq
fi0jhvnegcs3yJK2YBRzeEusyuIrrl3cZa8R2PCiqL+IHriMHyZ9ACX18AqlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQURKNVPLlOChW+njZYbpNMDGTIo7IwHwYDVR0j
BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2
OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2
MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMtWNDANBgkqhkiG9w0BAQsFAAOCAQEAgUI2oF00ClG77dMW9cg22GbJfjCe
9w7hXDbw5kz6wOsNx9FSrQNIbcSfN9TRS30Q0F+ddl1KoGAyun4cOS8nAWWxASrb
c454iEXzbfMQU78s4VmI1TO7k8C8AoA4FbMquo4QHPBNaBDG6kzfpK+PgLGOhT57
YB2rbwS6/iMtWt4sCLvgpJ3PcjRRqekWN7nDOTm74y48gAbSEQ1DRb8AmTVqtl6J
g0XSMAxqtkMHmdtX9nym/um6IFjXqxvFUm9gUaw1FRTYNa5tmfl4cH8joa9z/O/m
0VxpzbRY516lAZvmxrMsQQZ1ktaX3XcOENqNLwePvzEpp98Ak6hr/889Ww==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:26 2026 by rpki-client