This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32332d3233203d3e203234313437.roa
File: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (raw, json)
Hash identifier: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=
Subject key identifier: A4:EC:94:D7:27:0C:D5:0D:5B:A7:1F:9A:F1:59:F6:41:C9:08:BF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 13803C8166E8DC42917B2A2E5E453FC2A57CA999
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32332d3233203d3e203234313437.roa
Signing time: Tue 20 Jan 2026 02:25:02 +0000
ROA not before: Tue 20 Jan 2026 02:20:02 +0000
ROA not after: Tue 19 Jan 2027 02:25:02 +0000
asID: 24147
IP address blocks: 203.86.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:80:3c:81:66:e8:dc:42:91:7b:2a:2e:5e:45:3f:c2:a5:7c:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jan 20 02:20:02 2026 GMT
Not After : Jan 19 02:25:02 2027 GMT
Subject: CN=A4EC94D7270CD50D5BA71F9AF159F641C908BFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:0b:af:fe:b8:dc:69:6c:18:02:b7:7d:b6:
aa:50:fe:79:5a:70:dc:93:66:5d:6d:8d:c9:81:78:
59:fe:4e:dc:3d:43:80:a1:86:6b:a0:11:7d:0d:43:
a7:85:08:03:91:57:b6:01:06:d0:c5:1b:d9:0d:20:
e9:fe:cd:2f:89:75:e8:38:78:d3:a3:37:3c:36:b3:
05:24:de:17:8d:62:2d:3d:7a:3b:1a:03:88:6a:66:
36:56:7e:fa:eb:c7:bd:79:dc:0a:fe:1b:8f:ee:c3:
22:df:bb:b7:76:29:ba:7c:5a:4d:5a:b8:ea:d1:24:
e6:01:05:4a:38:2b:3e:5d:e8:78:b2:1b:bf:7f:eb:
45:fc:33:65:9f:4e:1f:a1:6e:56:8e:ac:86:46:c0:
4f:c7:23:46:b4:48:62:30:e8:49:d0:c1:94:8e:f7:
c9:cc:9f:44:19:2e:9e:4a:43:e0:5f:04:89:27:60:
1c:3c:02:37:2f:d7:0c:62:d8:45:93:07:2d:5b:35:
de:b6:65:13:49:e9:ca:13:52:cb:72:78:7d:6a:4f:
b6:ae:9f:9d:c0:14:15:6e:39:c4:be:76:6c:ad:33:
b8:90:a6:3c:13:a5:1e:e7:d3:06:3a:9c:7c:50:8c:
66:e1:63:58:8c:eb:11:e6:94:81:da:d1:06:c1:d0:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:94:D7:27:0C:D5:0D:5B:A7:1F:9A:F1:59:F6:41:C9:08:BF:C1
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32332d3233203d3e203234313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.86.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:92:d7:9d:68:fe:ae:45:4a:21:bd:f1:88:e6:85:72:38:1f:
64:d3:73:9d:95:68:10:0d:9e:25:e9:16:a0:cc:af:1c:c0:75:
6a:73:c5:b5:ed:c1:c9:83:23:b5:70:f4:34:5b:6b:b4:2a:47:
3a:6d:00:9e:98:45:16:c1:09:1f:64:c5:99:90:0b:04:a0:b3:
9a:50:35:28:16:c1:9d:19:0d:ea:9c:f7:16:6e:7c:a1:64:e3:
08:b3:b7:99:04:e7:90:a3:5a:ac:12:c7:f6:41:be:26:c3:db:
a6:e7:fa:f8:92:d8:ef:59:ee:54:23:df:86:ea:90:6a:30:a9:
b7:53:b7:3b:9f:14:d3:d8:6a:21:0d:d9:14:3b:af:b4:2e:d0:
86:83:a7:73:6d:2e:4c:f7:76:92:85:2f:aa:f0:98:54:32:84:
68:5b:33:f2:d0:98:09:49:35:59:bf:07:fe:6f:b6:06:d8:48:
ea:40:ea:5e:c8:74:f7:82:d0:0e:0c:0b:11:0c:7d:9a:59:1d:
0e:4b:f6:ac:bf:d5:48:c2:91:3f:95:d1:2e:b1:5a:0a:92:0f:
40:41:0d:62:e4:dd:b8:24:03:15:2f:0a:cd:82:c8:73:f5:8c:
90:0f:cd:e5:f7:06:e7:6d:8f:17:8a:87:0d:77:b9:06:ea:66:
99:b5:cd:e7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUE4A8gWbo3EKReyouXkU/wqV8qZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz
MTYzQ0ZDMTAeFw0yNjAxMjAwMjIwMDJaFw0yNzAxMTkwMjI1MDJaMDMxMTAvBgNV
BAMTKEE0RUM5NEQ3MjcwQ0Q1MEQ1QkE3MUY5QUYxNTlGNjQxQzkwOEJGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmQuv/rjcaWwYArd9tqpQ/nla
cNyTZl1tjcmBeFn+Ttw9Q4ChhmugEX0NQ6eFCAORV7YBBtDFG9kNIOn+zS+Jdeg4
eNOjNzw2swUk3heNYi09ejsaA4hqZjZWfvrrx7153Ar+G4/uwyLfu7d2Kbp8Wk1a
uOrRJOYBBUo4Kz5d6HiyG79/60X8M2WfTh+hblaOrIZGwE/HI0a0SGIw6EnQwZSO
98nMn0QZLp5KQ+BfBIknYBw8Ajcv1wxi2EWTBy1bNd62ZRNJ6coTUstyeH1qT7au
n53AFBVuOcS+dmytM7iQpjwTpR7n0wY6nHxQjGbhY1iM6xHmlIHa0QbB0CL3AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUpOyU1ycM1Q1bpx+a8Vn2QckIv8EwHwYDVR0j
BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2
OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDExLzAvMzIzMDMzMmUzODM2
MmUzNTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNDMxMzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEActWNjANBgkqhkiG9w0BAQsFAAOCAQEAuZLXnWj+rkVKIb3xiOaFcjgfZNNz
nZVoEA2eJekWoMyvHMB1anPFte3ByYMjtXD0NFtrtCpHOm0AnphFFsEJH2TFmZAL
BKCzmlA1KBbBnRkN6pz3Fm58oWTjCLO3mQTnkKNarBLH9kG+JsPbpuf6+JLY71nu
VCPfhuqQajCpt1O3O58U09hqIQ3ZFDuvtC7QhoOnc20uTPd2koUvqvCYVDKEaFsz
8tCYCUk1Wb8H/m+2BthI6kDqXsh094LQDgwLEQx9mlkdDkv2rL/VSMKRP5XRLrFa
CpIPQEENYuTduCQDFS8KzYLIc/WMkA/N5fcG522PF4qHDXe5BupmmbXN5w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:29 2026 by rpki-client