This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa
File: 3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa (raw, json)
Hash identifier: PEiq15CzWq7YVz5yjYQ9845wTwEywGiN4bqFOhOBuiA=
Subject key identifier: BE:02:FA:7C:36:13:5D:FE:B0:4D:4F:8D:62:05:EA:2B:9C:F6:4B:12
Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Certificate serial: 75AC47D46A749775D03EFB29F323D4C906B84AFF
Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa
Signing time: Tue 20 Jan 2026 02:19:14 +0000
ROA not before: Tue 20 Jan 2026 02:14:14 +0000
ROA not after: Tue 19 Jan 2027 02:19:14 +0000
asID: 37965
IP address blocks: 222.126.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ac:47:d4:6a:74:97:75:d0:3e:fb:29:f3:23:d4:c9:06:b8:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Validity
Not Before: Jan 20 02:14:14 2026 GMT
Not After : Jan 19 02:19:14 2027 GMT
Subject: CN=BE02FA7C36135DFEB04D4F8D6205EA2B9CF64B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:be:a7:84:7e:b5:19:3d:f6:9f:82:d8:f0:
50:a5:05:2c:5a:21:c3:a4:73:61:d4:8a:fe:04:79:
a4:d4:2d:df:9f:d2:09:af:49:2c:2f:0f:63:10:00:
07:8a:a0:0a:81:ec:af:ae:77:37:a1:d1:f3:fe:96:
7a:93:d3:0f:2b:b3:80:db:cf:06:7c:a1:99:55:02:
0c:bb:3d:6c:c7:cd:05:9d:b0:37:92:da:30:a3:19:
08:c2:fe:22:6b:37:05:90:ed:be:6e:cb:77:71:79:
1d:3e:5b:19:65:de:b1:a7:c6:95:65:ba:6e:e1:aa:
90:e0:41:d9:96:0d:46:65:d4:b2:9e:ca:29:9c:d5:
a9:bb:78:f4:17:7b:15:0e:10:b1:ba:62:55:97:15:
7d:fb:35:da:bc:5d:a5:1b:ac:ea:69:74:26:e8:2f:
c3:b8:21:7c:c6:54:9b:b5:db:07:79:2c:e0:7d:10:
ba:b3:ce:ce:42:31:2f:c9:2f:23:b9:b3:24:24:35:
d2:3f:f6:98:a9:50:29:49:0b:af:c3:1a:6b:27:c8:
22:b1:46:43:b4:9a:98:26:58:65:a4:a5:eb:13:6a:
31:b7:b8:53:fa:e6:fd:9f:04:23:b9:a2:74:2b:9a:
e9:7b:81:43:f0:c7:c0:3e:70:29:4f:3a:b0:36:41:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:02:FA:7C:36:13:5D:FE:B0:4D:4F:8D:62:05:EA:2B:9C:F6:4B:12
X509v3 Authority Key Identifier:
keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.126.138.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5b:9f:b1:1d:18:d3:29:a4:0c:8f:8a:b3:29:df:7c:d5:87:
b8:fe:e5:bd:78:2e:7c:b8:44:4c:37:5b:8f:fe:04:f2:78:9e:
7c:7a:e9:05:4d:cf:d7:9e:58:f7:14:ea:9c:cd:03:ea:ee:d3:
09:91:7d:c4:d5:8a:a0:59:ca:0f:7b:40:9e:2f:70:85:f6:db:
ea:0f:99:30:0b:81:f0:90:c3:d5:cd:2c:45:9d:f0:61:bc:cd:
1c:ae:6c:9b:34:e3:d3:03:81:04:20:bb:6f:bd:5c:c6:a9:fb:
72:4c:f7:a7:77:20:31:d9:f9:f0:a1:a4:e7:b5:3c:02:d9:bf:
f5:bb:ab:05:ed:de:29:73:be:3d:ea:3b:79:e8:8b:85:10:2d:
fc:57:f7:bb:5c:2e:f4:49:15:14:ee:dc:06:c3:4e:28:31:dc:
d1:c7:78:4c:60:e1:c0:79:46:e7:ba:44:75:ca:43:34:d3:1e:
97:50:fc:08:f3:7e:db:74:8c:69:a0:84:ce:55:84:38:14:f0:
82:8a:38:8a:dd:c8:99:9f:50:de:0b:81:8f:af:f7:d5:f4:d3:
35:55:14:ef:ca:a9:a8:b9:3e:e5:22:ff:94:a9:4d:53:99:41:
b0:f1:9c:51:cb:18:6f:91:04:1a:b7:92:25:8c:80:b4:62:2a:
19:c9:e0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:46 2026 by rpki-client