This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35352e302f32342d3234203d3e203234313437.roa
File: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (raw, json)
Hash identifier: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=
Subject key identifier: AB:EF:F9:9F:2A:9C:58:23:36:A4:7D:95:0A:76:69:69:76:9B:D9:10
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 0DCD66E0A46C0443524F6C97D9DEB3314731D948
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35352e302f32342d3234203d3e203234313437.roa
Signing time: Tue 20 Jan 2026 02:25:00 +0000
ROA not before: Tue 20 Jan 2026 02:20:00 +0000
ROA not after: Tue 19 Jan 2027 02:25:00 +0000
asID: 24147
IP address blocks: 203.86.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cd:66:e0:a4:6c:04:43:52:4f:6c:97:d9:de:b3:31:47:31:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jan 20 02:20:00 2026 GMT
Not After : Jan 19 02:25:00 2027 GMT
Subject: CN=ABEFF99F2A9C582336A47D950A766969769BD910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:18:c6:b2:57:43:8c:d5:88:0f:dd:bc:42:
69:dd:ea:51:cd:cf:e5:c6:c7:0e:df:a4:0e:e7:27:
66:d3:73:a5:1f:f6:86:31:cc:e1:f9:1e:c0:20:a1:
ce:34:db:93:75:a6:6b:f1:4d:b4:8c:ba:2d:60:51:
2b:bc:30:81:47:82:bc:f9:f2:60:e9:31:30:fb:60:
b7:7d:0d:7c:03:24:0f:e0:d7:3e:05:64:48:cb:2a:
86:21:93:f5:20:ba:9c:8e:d9:9e:15:2c:13:23:35:
05:c7:a9:c7:87:2b:44:e9:75:cc:3f:48:dd:31:f0:
72:36:8c:53:19:ca:8d:c1:02:13:ec:fd:f9:c4:9c:
9a:21:94:44:a9:8b:9d:37:21:23:1d:ae:1c:4e:63:
12:16:d5:c5:7d:8c:42:f3:f3:d7:09:13:e6:3a:54:
0a:93:9f:15:07:70:b8:ab:3d:d3:9a:ee:e7:49:34:
4a:dd:5d:4d:a6:c9:8a:ce:79:f8:23:0b:3e:8f:bc:
91:ad:68:32:2e:84:2f:e1:ac:d8:85:02:72:aa:05:
2a:cd:9b:51:0a:9f:49:22:fa:c0:14:26:06:cc:21:
86:a9:8b:df:24:8a:0b:e9:eb:7f:60:79:9e:41:e4:
42:30:11:d9:d3:78:60:b4:dd:31:88:9e:a3:fa:c9:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:F9:9F:2A:9C:58:23:36:A4:7D:95:0A:76:69:69:76:9B:D9:10
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35352e302f32342d3234203d3e203234313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.86.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:95:40:87:9b:ae:48:e9:af:50:a8:51:37:3f:08:6d:11:4f:
2f:0f:b9:86:3c:ad:35:2d:3b:3f:e5:8a:4c:fd:a8:ce:de:75:
ca:7b:3d:39:40:7f:a1:77:af:2a:30:1e:c2:c6:3f:84:8f:18:
2f:e8:db:5d:9d:68:79:f7:15:4e:8d:48:15:11:b8:fa:77:fd:
b7:50:4a:a7:5f:19:db:b9:ef:d4:20:e4:b7:ec:ff:4c:71:e3:
98:e9:cf:38:44:fa:18:48:f0:58:d0:5a:13:d7:01:bd:5a:f3:
6e:77:da:2b:86:a2:e6:2e:33:c4:c9:58:16:0d:cd:20:c7:2c:
f2:6c:33:7a:d3:f9:1e:7a:06:79:bc:63:bd:4e:34:ac:be:5a:
62:7d:6e:7a:88:77:14:fe:d9:91:28:41:92:0f:95:6c:92:0e:
89:d2:c7:45:8c:74:b6:09:e0:93:71:7e:ce:22:bd:b5:d4:10:
df:e8:07:39:6f:80:73:0f:85:b5:1e:eb:8c:4b:7a:c4:f4:fb:
6a:3a:cf:ee:7e:8e:f3:d4:1b:39:0c:f5:99:5e:00:60:a7:ef:
5f:3f:78:2d:33:6b:64:42:ce:63:d2:a7:2c:18:97:e7:09:98:
ee:09:ad:57:82:d7:c9:4f:2d:41:0c:6a:f8:5e:c5:18:2d:1d:
57:56:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:30 2026 by rpki-client