This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3131302e34342e3134342e302f32302d3230203d3e203234343236.roa
File: 3131302e34342e3134342e302f32302d3230203d3e203234343236.roa (raw, json)
Hash identifier: sc7s7TqrnqLeG+Kb+177ZlZkdc44RY6eR05Q//758aY=
Subject key identifier: D7:55:B4:43:E3:4D:BD:E8:38:09:DC:6A:90:DF:A5:63:1F:13:85:78
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 0E04CBA791AABB33462AAA9815AC45D89326466A
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3131302e34342e3134342e302f32302d3230203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:07 +0000
ROA not before: Tue 20 Jan 2026 01:14:07 +0000
ROA not after: Tue 19 Jan 2027 01:19:07 +0000
asID: 24426
IP address blocks: 110.44.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:04:cb:a7:91:aa:bb:33:46:2a:aa:98:15:ac:45:d8:93:26:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:07 2026 GMT
Not After : Jan 19 01:19:07 2027 GMT
Subject: CN=D755B443E34DBDE83809DC6A90DFA5631F138578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:3b:6c:2a:6c:4c:8d:40:2f:09:dd:2b:b7:
cc:59:25:60:78:70:62:81:4d:dc:da:83:30:86:f6:
e3:d4:57:f0:1c:7e:04:4c:2e:f8:d9:db:dc:21:48:
24:31:01:69:24:3a:e4:25:c4:e3:31:b9:82:4b:74:
9b:9a:15:32:f6:86:24:7c:65:21:c8:2b:76:6e:f7:
1d:88:2a:13:cb:87:77:ba:48:9d:6c:eb:00:7a:b6:
28:ce:1d:94:06:55:95:af:96:c1:48:7c:2e:31:b3:
f7:19:02:86:5f:aa:9b:cf:51:ce:7c:e5:30:59:99:
58:c8:be:cc:c9:b0:8e:5a:c6:a8:74:32:88:c7:b2:
4a:a3:91:4f:dd:b9:68:6a:c0:2a:78:cb:46:d7:fe:
01:5d:46:43:d4:5a:4b:77:98:c4:e3:5e:ee:72:74:
da:9f:9a:00:9b:f0:79:af:ed:df:e4:d8:e0:77:96:
16:fb:c1:6f:96:a5:49:e9:7a:1f:ec:9f:02:3c:88:
21:e3:16:da:5f:22:92:ae:46:2b:2f:4b:81:d5:24:
f9:6f:b6:36:69:8f:2e:a6:9f:cf:2a:c6:11:b4:02:
03:d7:3b:6d:fa:2b:1b:11:23:90:53:1c:46:fa:a3:
25:b1:8b:96:2d:87:0b:27:48:2d:73:1c:b0:8f:4a:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:B4:43:E3:4D:BD:E8:38:09:DC:6A:90:DF:A5:63:1F:13:85:78
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3131302e34342e3134342e302f32302d3230203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:8d:76:2e:44:b2:3c:60:3d:ff:cf:cc:cf:05:90:0a:a1:76:
b2:d0:54:bb:98:38:79:ee:c5:6c:d5:50:f5:91:ee:29:e2:39:
c2:95:be:4f:81:7b:a1:39:b1:c7:02:d2:8d:5c:a2:84:1a:93:
e3:57:1c:5d:cc:38:42:d4:07:6d:e0:33:d8:a6:76:a5:9b:ed:
93:14:35:e9:7b:a9:79:70:b4:d1:f4:8e:b1:18:41:e3:06:a2:
ae:cd:26:04:50:bf:d4:c7:e1:de:f5:4a:7b:19:4a:6b:69:62:
08:da:4e:8c:a1:bd:5b:01:ca:74:76:19:fd:81:ba:b0:81:db:
50:60:c9:1e:16:81:26:ab:ff:eb:d0:3f:c2:20:93:c5:47:69:
ca:05:63:4b:73:42:3a:47:98:df:29:30:9b:05:29:d2:8b:32:
5e:0d:a6:b5:49:c2:6d:1f:a8:91:71:e0:69:63:90:a3:6f:46:
5a:43:da:83:be:84:0e:35:ff:da:0e:b6:3d:22:e9:fd:26:9b:
15:99:0b:db:69:f9:82:52:05:33:58:a5:3b:e5:7a:5f:7f:c8:
65:0f:0e:f6:88:69:47:81:7a:fe:d0:e8:3b:b1:0e:b7:b5:0a:
c4:51:61:00:ce:86:38:f5:2f:4c:4e:30:b0:36:7e:f4:fa:4b:
34:bd:4f:1d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDgTLp5GquzNGKqqYFaxF2JMmRmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV
BAMTKEQ3NTVCNDQzRTM0REJERTgzODA5REM2QTkwREZBNTYzMUYxMzg1NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5TtsKmxMjUAvCd0rt8xZJWB4
cGKBTdzagzCG9uPUV/AcfgRMLvjZ29whSCQxAWkkOuQlxOMxuYJLdJuaFTL2hiR8
ZSHIK3Zu9x2IKhPLh3e6SJ1s6wB6tijOHZQGVZWvlsFIfC4xs/cZAoZfqpvPUc58
5TBZmVjIvszJsI5axqh0MojHskqjkU/duWhqwCp4y0bX/gFdRkPUWkt3mMTjXu5y
dNqfmgCb8Hmv7d/k2OB3lhb7wW+WpUnpeh/snwI8iCHjFtpfIpKuRisvS4HVJPlv
tjZpjy6mn88qxhG0AgPXO236KxsRI5BTHEb6oyWxi5YthwsnSC1zHLCPSuTBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU11W0Q+NNveg4CdxqkN+lYx8ThXgwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODE0MDU0Ny8wLzMxMzEzMDJlMzQz
NDJlMzEzNDM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNDM0MzIzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBG4skDANBgkqhkiG9w0BAQsFAAOCAQEAOo12LkSyPGA9/8/MzwWQCqF2
stBUu5g4ee7FbNVQ9ZHuKeI5wpW+T4F7oTmxxwLSjVyihBqT41ccXcw4QtQHbeAz
2KZ2pZvtkxQ16XupeXC00fSOsRhB4wairs0mBFC/1Mfh3vVKexlKa2liCNpOjKG9
WwHKdHYZ/YG6sIHbUGDJHhaBJqv/69A/wiCTxUdpygVjS3NCOkeY3ykwmwUp0osy
Xg2mtUnCbR+okXHgaWOQo29GWkPag76EDjX/2g62PSLp/SabFZkL22n5glIFM1il
O+V6X3/IZQ8O9ohpR4F6/tDoO7EOt7UKxFFhAM6GOPUvTE4wsDZ+9PpLNL1PHQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:00 2026 by rpki-client