This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203435313032.roa
File: 35392e38322e3133362e302f32312d3234203d3e203435313032.roa (raw, json)
Hash identifier: IqkUZ5luK9Yhi/2XfaVOwPeI4UW5zGTXPhH03zlIdvw=
Subject key identifier: 7D:15:8A:49:73:ED:70:9C:D3:15:FA:73:D7:36:8A:73:7D:B5:6E:C3
Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial: 70C64F3E0C7F79FB9BA13871B4E34C152F3A3423
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203435313032.roa
Signing time: Tue 20 Jan 2026 02:20:17 +0000
ROA not before: Tue 20 Jan 2026 02:15:17 +0000
ROA not after: Tue 19 Jan 2027 02:20:17 +0000
asID: 45102
IP address blocks: 59.82.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c6:4f:3e:0c:7f:79:fb:9b:a1:38:71:b4:e3:4c:15:2f:3a:34:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Validity
Not Before: Jan 20 02:15:17 2026 GMT
Not After : Jan 19 02:20:17 2027 GMT
Subject: CN=7D158A4973ED709CD315FA73D7368A737DB56EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:17:f2:e1:ac:35:4f:94:1e:32:f5:0d:ca:
3b:4d:71:4e:ed:59:66:d6:e4:bc:1d:b5:52:44:68:
4f:72:15:a2:88:d8:65:9f:d3:41:ad:f6:1f:32:69:
c3:c7:92:a4:3d:40:bf:ba:c6:51:c6:03:29:61:41:
b2:e6:0b:e4:b8:eb:c5:6c:79:1c:7b:43:36:3f:58:
b8:df:03:ef:3c:cf:c6:15:2c:13:2e:ab:ce:be:db:
cc:a7:19:85:c1:4a:63:85:62:ca:50:e2:7c:7c:f7:
b6:73:87:31:07:7e:3d:46:67:bd:93:37:5a:cf:98:
4d:08:df:cc:7d:20:4c:8c:a2:3c:bc:6b:00:dd:2d:
1f:d1:bd:73:b5:c0:a4:18:67:43:1b:3d:65:75:b5:
79:b2:ba:7f:66:35:37:69:3b:1a:e2:d4:de:7c:3c:
df:24:ba:1e:f1:4e:f8:2d:c9:34:9a:18:8f:8c:bc:
b9:6d:ec:90:ac:61:f9:1b:d3:9a:a7:55:98:37:83:
35:8f:01:9f:b5:43:be:01:3e:45:50:e0:c5:79:dd:
3d:05:50:64:a9:14:c1:e3:20:3f:10:43:91:46:34:
e9:ad:8a:1b:21:7a:e4:55:64:b4:be:26:22:f5:f3:
ad:14:72:b8:1d:6a:68:17:e5:d5:12:ab:43:c6:f6:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:8A:49:73:ED:70:9C:D3:15:FA:73:D7:36:8A:73:7D:B5:6E:C3
X509v3 Authority Key Identifier:
keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203435313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.82.136.0/21
Signature Algorithm: sha256WithRSAEncryption
95:55:a4:b1:01:94:b7:e8:d4:29:0d:e4:76:3c:6a:d5:e1:2e:
5f:9f:eb:3e:a4:fe:ff:8b:ea:a0:c7:c9:ef:19:b8:5a:1d:15:
ce:f4:c6:7b:78:95:fa:34:79:04:d4:4d:7d:c3:9f:c6:5e:d3:
ff:c9:c2:2d:98:32:5f:05:e6:ca:c4:fb:75:98:95:21:a2:c2:
4d:10:08:e0:da:ef:cd:b9:70:e5:46:43:21:a5:7c:d6:1a:3b:
5d:b6:a6:8e:62:22:59:20:d4:9b:e6:d7:48:48:de:2f:f8:a0:
7c:79:98:28:a4:77:ac:f4:fb:ba:e7:99:76:09:2d:c1:61:b4:
bd:7f:81:57:59:22:0e:b8:b5:ab:79:75:48:c2:d7:e8:a6:b2:
35:a0:4c:9c:66:a7:eb:e9:fe:57:17:47:63:0c:99:8c:19:1e:
d4:e5:87:4c:c1:13:2d:b4:52:11:28:39:50:ce:56:90:b1:10:
ae:90:35:11:6e:66:d2:b1:0c:d5:1f:a1:47:bd:ec:be:68:b4:
33:62:83:9d:4b:3c:02:e7:50:68:65:52:59:23:ff:fe:0d:92:
ba:bb:78:49:00:5c:87:6b:26:bf:53:56:5b:ad:4e:21:ec:12:
12:59:53:28:11:e1:79:94:72:53:1e:58:64:c2:0d:1b:4c:04:
d0:f3:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:51 2026 by rpki-client