This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa
File: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=
Subject key identifier: E8:61:82:D0:78:D8:11:2B:EE:2C:DB:DA:C7:2D:D0:F6:C3:D1:89:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 57F268AC8D8928A3AFEA6FEA139686E564F6C282
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa
Signing time: Tue 20 Jan 2026 02:25:01 +0000
ROA not before: Tue 20 Jan 2026 02:20:01 +0000
ROA not after: Tue 19 Jan 2027 02:25:01 +0000
asID: 4847
IP address blocks: 211.102.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f2:68:ac:8d:89:28:a3:af:ea:6f:ea:13:96:86:e5:64:f6:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jan 20 02:20:01 2026 GMT
Not After : Jan 19 02:25:01 2027 GMT
Subject: CN=E86182D078D8112BEE2CDBDAC72DD0F6C3D189C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:29:98:e0:3b:5a:d8:3c:8c:c9:b6:f5:5f:
8e:07:89:3f:64:ef:0d:f8:b1:3a:2b:e0:e5:c9:74:
49:cc:45:8a:d2:0e:b4:45:9a:d3:8b:f1:0e:3c:74:
90:10:18:6e:92:d3:26:1f:e5:f3:8d:b8:93:2c:ba:
74:ef:fa:61:c9:13:cd:21:2f:0a:8b:1a:33:18:1f:
0e:a3:c3:05:c0:c3:0a:9b:a3:8f:b6:57:5c:b7:e2:
17:c7:9b:e2:75:93:ec:80:5b:ee:7f:0e:d0:5e:dc:
06:6b:a6:64:53:db:3c:6c:bd:0c:3a:50:9c:ec:19:
aa:31:b8:57:9b:15:78:c5:63:12:70:87:61:64:e3:
fd:ab:0a:e1:a5:ca:25:cf:16:0c:03:6c:5c:15:2f:
40:10:6b:a8:43:c7:38:b1:28:2c:e4:77:3b:97:d2:
f9:9c:81:46:36:40:d7:df:e4:31:db:8d:f1:c8:84:
38:28:f8:ea:4a:70:7c:9b:98:9e:a1:1f:ee:24:21:
97:4b:f4:84:e6:bd:ef:1f:31:df:f5:f8:b7:2d:28:
c3:24:4f:b4:08:9d:f5:b2:d5:a9:6b:44:72:7a:21:
b7:37:69:29:6b:3f:13:8f:70:cc:b9:5f:d7:d8:50:
b4:3a:23:e2:a3:7c:41:ca:28:69:ca:74:87:11:7e:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:82:D0:78:D8:11:2B:EE:2C:DB:DA:C7:2D:D0:F6:C3:D1:89:C1
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.102.240.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:67:32:8c:d5:7d:85:51:e9:31:e7:a1:da:2b:02:9a:82:4d:
b9:02:67:ae:a8:f8:27:86:f5:4a:05:0c:d5:39:ac:8d:37:ad:
e6:e5:a8:2c:fe:01:2f:8b:b2:bc:8a:52:7d:f3:6f:96:02:a6:
cd:9f:51:b6:d9:83:8e:f0:7f:39:ea:74:16:da:c8:68:d2:33:
a2:c0:2b:f8:1d:e6:7d:23:dc:6e:d5:82:ca:bc:eb:5d:a8:69:
3d:33:fa:76:6e:c5:ca:a2:9b:a8:aa:2c:27:bf:5e:ca:39:1f:
bd:29:02:ce:29:bf:d8:3e:bd:38:e5:f3:20:26:f2:e4:05:ec:
50:a3:d3:d3:43:ca:bb:55:c2:fb:f2:ac:01:43:08:68:10:61:
3e:2a:61:75:2d:b0:f8:dc:71:fb:cd:0c:d1:a5:e6:29:76:1e:
a3:02:4d:a7:e9:ff:fb:f3:19:73:a0:71:48:ab:ad:92:8e:f5:
e9:ff:66:6d:ff:f5:d8:09:7e:f1:48:2a:38:3b:a4:fb:74:00:
62:1d:ba:f0:c0:cf:dd:0e:16:bd:37:16:88:be:a2:c0:51:27:
b2:6d:83:8c:af:54:c6:29:c7:a7:71:18:74:c2:cf:19:7f:84:
da:cc:a8:f6:52:14:c4:d0:3c:13:6c:c5:12:67:af:51:29:b9:
60:0a:cb:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:29 2026 by rpki-client