This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa
File: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (raw, json)
Hash identifier: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=
Subject key identifier: 91:F8:55:E1:8E:8E:F4:1A:84:C2:0F:DE:47:74:5E:7E:0F:1A:18:9A
Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial: 22B8EAB93A100FCE4C1D69FAFF197B718E5B9CB6
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa
Signing time: Tue 20 Jan 2026 02:27:20 +0000
ROA not before: Tue 20 Jan 2026 02:22:20 +0000
ROA not after: Tue 19 Jan 2027 02:27:20 +0000
asID: 24427
IP address blocks: 202.170.216.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b8:ea:b9:3a:10:0f:ce:4c:1d:69:fa:ff:19:7b:71:8e:5b:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Validity
Not Before: Jan 20 02:22:20 2026 GMT
Not After : Jan 19 02:27:20 2027 GMT
Subject: CN=91F855E18E8EF41A84C20FDE47745E7E0F1A189A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:70:e5:6a:06:8e:fc:b3:09:ea:50:28:8c:
86:c0:6d:ad:76:cd:c6:91:9d:fa:d9:f5:ac:a2:66:
53:95:2c:fb:c1:54:11:0b:5d:16:29:96:4b:8b:b3:
24:4b:40:f2:75:77:19:9e:64:17:99:46:90:36:95:
14:5c:3f:58:87:fb:66:45:b2:74:6b:06:da:62:76:
77:dd:84:7e:a9:3f:ef:d8:fa:8e:60:2b:77:8d:5f:
09:27:31:9a:b0:f7:87:04:2a:f7:b2:41:a1:97:09:
ab:b8:fa:2b:03:1c:4c:81:20:b6:c6:3c:26:ee:ef:
71:a5:fa:b1:88:ba:ca:12:bb:71:41:c1:ee:65:34:
1b:a4:e5:7f:fb:36:6e:a3:4c:9f:1c:e6:91:5c:39:
6d:71:bb:8e:8a:9d:ba:6a:d9:53:f6:e9:20:e4:e2:
37:50:b1:f8:e6:e6:18:1c:53:0c:6e:25:dc:69:6b:
fd:df:33:41:5c:c0:61:95:8c:ad:3f:29:b0:7a:b9:
d6:b3:b7:26:72:8c:62:5d:76:9a:71:5d:80:fb:1d:
ee:77:01:e2:83:f6:6d:c8:08:82:7c:5d:3b:2b:40:
4c:87:ac:d6:21:d1:91:12:95:5e:80:6a:d2:85:c0:
25:37:33:74:b6:8d:83:4b:45:0f:d0:e0:90:20:e0:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F8:55:E1:8E:8E:F4:1A:84:C2:0F:DE:47:74:5E:7E:0F:1A:18:9A
X509v3 Authority Key Identifier:
keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.170.216.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cc:27:b0:3d:63:7d:70:a5:50:db:cf:3d:ca:2e:bf:2c:c5:
97:b0:d3:69:41:b2:52:5f:c6:75:24:ae:16:16:1f:d3:47:56:
94:cb:e0:d5:b3:2a:3d:1f:8a:fb:72:0f:00:6e:76:9b:20:5e:
cd:68:51:b9:73:98:34:8a:59:8d:b5:16:a8:b5:5f:4a:a5:5f:
84:c0:26:4c:38:e8:03:dc:f6:ce:4f:72:50:6d:7d:8e:48:63:
17:b2:fe:3f:eb:5a:00:9a:82:93:20:98:c1:67:fb:15:2a:bb:
22:a1:05:cf:db:67:62:a6:92:1b:a5:d5:3b:c7:48:e4:14:71:
c8:d8:10:a6:da:6f:f7:ff:54:3f:b1:8d:cb:c3:2e:8e:37:5e:
87:ba:fb:fd:83:e6:8a:eb:8d:03:c0:73:81:1c:72:5e:3d:53:
41:51:49:fd:b2:43:7f:a2:f4:03:ef:6e:5a:8c:5a:79:55:fc:
71:07:56:81:85:f5:cc:1b:85:86:2e:7e:50:c7:c3:07:51:07:
bd:02:2d:9f:f1:ca:b0:bc:e2:0b:9b:fc:3d:90:a7:82:ce:a1:
b1:e3:dd:93:e7:68:a8:41:1c:c3:26:1f:a0:c5:a5:f3:b8:e0:
c3:2d:a1:05:d6:02:2c:40:9f:32:92:a6:ff:7d:bb:2b:4c:91:
f8:2e:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:31 2026 by rpki-client