This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa
File: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (raw, json)
Hash identifier: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=
Subject key identifier: 9C:02:C0:5E:80:4A:66:1E:9B:33:78:0B:F7:B2:AE:C4:7B:15:A8:31
Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial: 6437A0F59345F1A99CC50BC001FD0686E8F8357B
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa
Signing time: Tue 20 Jan 2026 02:23:46 +0000
ROA not before: Tue 20 Jan 2026 02:18:46 +0000
ROA not after: Tue 19 Jan 2027 02:23:46 +0000
asID: 9808
IP address blocks: 202.141.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:37:a0:f5:93:45:f1:a9:9c:c5:0b:c0:01:fd:06:86:e8:f8:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Validity
Not Before: Jan 20 02:18:46 2026 GMT
Not After : Jan 19 02:23:46 2027 GMT
Subject: CN=9C02C05E804A661E9B33780BF7B2AEC47B15A831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:e9:9e:64:91:e2:61:c4:ba:3f:99:2d:df:
bc:b7:eb:80:29:5c:c2:e5:10:1b:69:b7:f9:c4:59:
a4:b3:fe:3b:fc:4f:0d:18:44:53:52:48:5a:f9:19:
02:d9:43:3e:ad:3a:78:46:b4:b5:a8:ac:70:84:f3:
3a:e8:52:5d:fa:19:f6:c4:58:8e:82:3c:22:e0:da:
75:b4:37:81:10:e5:2d:41:23:68:f7:02:6e:36:1e:
6f:91:39:58:9c:d7:1c:98:7e:85:16:95:65:17:c0:
bd:ec:36:62:aa:f5:8f:07:46:9c:b6:05:41:cd:8c:
9a:2b:60:a9:cc:ee:f3:bf:58:91:80:b3:1d:2a:93:
1d:7d:f9:ac:72:60:3e:ff:9b:a0:c8:e7:8c:8c:c1:
11:a8:98:90:5b:19:ce:f2:cd:f2:46:7b:1c:9e:4a:
ea:dd:f3:a6:8f:99:d7:56:94:15:71:e0:88:e5:9b:
4a:52:eb:20:98:a8:cd:96:0a:42:f3:91:16:eb:ab:
ed:cc:8b:e6:4d:e8:1c:2d:a2:5d:c4:a1:9e:bc:98:
47:63:aa:10:09:9d:c5:bc:b6:bf:c9:28:38:8d:81:
07:6e:51:1e:e2:99:1a:05:de:1f:70:ce:83:b1:42:
ba:11:8b:2b:c8:99:bd:d1:73:c4:0c:15:49:bc:b1:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:C0:5E:80:4A:66:1E:9B:33:78:0B:F7:B2:AE:C4:7B:15:A8:31
X509v3 Authority Key Identifier:
keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.141.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:34:be:26:b2:a1:a7:d9:0f:81:d7:10:8f:98:79:0d:9e:0a:
fd:95:68:54:b2:60:6b:1a:0c:e3:79:df:94:36:75:22:4e:ee:
49:1b:58:85:8a:37:91:bc:5b:14:f0:0f:a2:bb:4e:3a:88:94:
60:fa:a0:79:ea:ad:d5:1c:bd:23:1e:02:cb:81:37:30:f4:63:
17:0a:7b:0d:d0:f5:bf:d6:da:0d:4b:2d:68:ce:2f:29:74:ba:
2a:62:a1:b3:0d:8f:85:65:cf:da:12:82:14:61:bf:24:d8:2d:
45:3a:b4:7d:6c:2f:92:d7:2c:d0:d3:b3:95:d9:20:4c:11:35:
4b:97:72:2b:d1:80:de:20:4d:df:57:28:cc:31:37:39:0b:67:
67:de:e4:1f:f6:c0:5e:3b:22:ac:62:33:3a:33:a6:da:5e:4a:
ff:73:83:e9:53:bb:7c:62:59:47:e6:2c:09:0c:99:17:05:fb:
b6:86:21:07:e2:1f:9e:f1:5f:d4:13:3a:c7:28:15:1d:77:20:
9d:71:4e:a4:ff:38:25:44:59:dc:3b:7c:60:d4:2d:90:fc:53:
be:87:e8:c2:4c:9b:af:13:b6:32:0d:d6:0f:c8:aa:9d:91:89:
61:0b:e2:77:8b:54:18:fc:c1:15:cf:c6:99:a4:86:29:b8:8f:
34:6d:76:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:01 2026 by rpki-client