This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e203138313138.roa
File: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (raw, json)
Hash identifier: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=
Subject key identifier: 19:A9:0E:A9:59:FA:0F:0D:3D:1C:95:EA:8D:B1:FC:44:4E:EE:89:CF
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 663CFFB4D3ED1BDCEF2DFB41DC1BE5FAD948AC78
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e203138313138.roa
Signing time: Tue 20 Jan 2026 02:25:04 +0000
ROA not before: Tue 20 Jan 2026 02:20:04 +0000
ROA not after: Tue 19 Jan 2027 02:25:04 +0000
asID: 18118
IP address blocks: 120.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3c:ff:b4:d3:ed:1b:dc:ef:2d:fb:41:dc:1b:e5:fa:d9:48:ac:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jan 20 02:20:04 2026 GMT
Not After : Jan 19 02:25:04 2027 GMT
Subject: CN=19A90EA959FA0F0D3D1C95EA8DB1FC444EEE89CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:ce:a4:bc:3b:93:3c:dc:f4:0b:0f:5c:e0:
7d:f8:72:17:a0:e2:1f:b0:e7:79:86:ba:26:c1:a8:
cf:36:b4:db:db:81:6f:f6:3e:81:0a:47:41:1c:72:
03:d0:23:fe:94:26:a6:aa:9d:a3:5c:69:0b:c2:62:
57:f3:e6:83:88:42:63:92:d0:1a:fa:c1:8e:ac:0a:
25:ac:e2:c3:29:2d:90:ab:56:00:f1:e8:2e:70:f0:
08:f8:5e:43:53:50:67:47:ba:c7:51:c3:f9:44:03:
f8:73:6c:85:c7:06:46:ee:b3:a5:ad:ed:d8:a3:4d:
4a:a8:da:9a:4b:fe:88:3e:f8:e0:24:d0:1e:15:e5:
2e:de:46:42:de:a4:cb:b8:a1:b0:1a:61:6a:b2:d3:
a5:20:7a:a8:cf:c1:7e:5e:ee:3b:e4:00:c4:5a:fa:
05:a6:55:3a:f2:e7:16:0e:f4:17:78:7d:f2:a3:ac:
39:71:d9:a0:85:e5:f2:31:84:b7:03:56:ef:5f:d5:
07:fc:f4:85:3b:de:f7:bb:79:21:14:a9:7e:30:3d:
02:69:ac:86:82:9f:4a:2d:52:c1:6b:57:9d:fc:17:
7c:84:11:d7:84:4f:e6:1f:dc:8c:81:5d:92:ec:4c:
f7:98:f1:4d:6e:b0:b3:9e:24:ee:8f:4e:a1:75:08:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:0E:A9:59:FA:0F:0D:3D:1C:95:EA:8D:B1:FC:44:4E:EE:89:CF
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cc:5b:b7:6a:52:dc:15:32:16:8a:12:bb:f2:37:0e:d7:5b:35:
4a:61:51:0b:0d:5e:74:00:1b:c8:54:ac:7b:78:06:17:13:e8:
25:b2:e1:99:af:cb:37:9a:7c:60:cc:ac:e9:37:7c:e8:2c:83:
18:f2:74:9e:88:24:70:29:4d:65:11:47:c6:09:e7:2c:1b:1b:
64:74:f2:ca:a5:bc:6d:eb:1c:98:32:d8:cb:de:e2:ce:15:7e:
44:3e:ce:ac:70:fa:7b:41:ff:47:6a:99:37:d3:98:38:8d:ad:
63:ab:9b:f8:7d:9e:88:5e:51:bc:54:8b:a3:85:71:2e:cc:16:
65:58:5d:d4:8b:c4:78:23:5f:69:a9:60:f9:a8:4d:4c:dd:da:
ec:94:ce:77:55:09:27:f3:67:74:7d:65:7b:4d:1b:3d:bb:87:
fa:a1:f2:38:bd:73:08:9a:39:d9:69:7d:8e:b8:36:81:7d:ff:
bb:5c:8e:ff:bb:6f:56:5f:5e:af:ef:16:c8:e4:7f:eb:8d:cb:
b7:8a:5a:b2:f2:4a:a8:df:f6:02:25:a1:cf:c2:d4:bf:c0:32:
37:94:64:c8:96:30:f9:65:53:53:c3:cb:9a:cc:b3:d5:43:ef:
6b:cc:dc:02:d0:f5:04:d1:b6:79:74:7a:bb:4a:00:89:63:7c:
7e:c4:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:56 2026 by rpki-client