This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa
File: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (raw, json)
Hash identifier: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=
Subject key identifier: D6:28:58:3B:0F:97:38:07:2E:82:17:74:E8:BC:18:84:66:95:77:9A
Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial: 5CFA971D21A5CCAD9193A7AA4E8EC9A61DBFD760
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa
Signing time: Tue 20 Jan 2026 02:27:20 +0000
ROA not before: Tue 20 Jan 2026 02:22:20 +0000
ROA not after: Tue 19 Jan 2027 02:27:20 +0000
asID: 24427
IP address blocks: 202.170.218.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:fa:97:1d:21:a5:cc:ad:91:93:a7:aa:4e:8e:c9:a6:1d:bf:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Validity
Not Before: Jan 20 02:22:20 2026 GMT
Not After : Jan 19 02:27:20 2027 GMT
Subject: CN=D628583B0F9738072E821774E8BC18846695779A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:fa:8a:47:43:f8:57:0d:a1:24:87:7c:9b:
35:ab:3b:45:79:99:94:d7:59:a3:87:39:bf:c0:9d:
12:4d:c2:34:c1:1c:be:d4:d1:3c:3a:b2:5c:5d:b0:
1e:3f:4a:78:7a:a1:5e:e5:94:37:dd:66:7e:c0:97:
31:63:4e:0e:5f:44:f7:4c:d6:1d:33:37:1e:74:5f:
a9:9d:80:57:c4:23:fa:10:95:e2:34:5e:e6:8c:17:
a5:87:f7:3c:c0:77:57:52:b5:1c:2e:5e:c6:31:e2:
4e:63:20:f7:07:a9:38:4b:34:fb:35:1b:11:ea:21:
ce:50:de:e7:60:52:09:50:3e:98:4c:23:3b:08:a8:
39:14:76:52:4a:80:e4:21:74:99:74:25:6f:f0:e6:
a7:85:2e:41:26:17:dd:83:11:05:35:4e:c0:c8:f1:
ab:27:57:f5:31:5f:02:be:3b:55:6a:9e:4c:04:14:
e4:0e:b1:2f:50:65:55:34:e4:e3:f6:64:28:45:3f:
3a:02:4d:d6:de:63:b5:4a:7c:b0:7d:e4:8a:6b:b0:
ed:89:e1:5d:ce:b2:68:b5:75:a6:71:cf:ec:62:a5:
d5:44:42:ef:79:00:df:28:11:fc:cc:05:3b:93:c8:
be:7e:71:4f:4f:fa:7b:37:bc:c5:dd:95:83:45:58:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:58:3B:0F:97:38:07:2E:82:17:74:E8:BC:18:84:66:95:77:9A
X509v3 Authority Key Identifier:
keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.170.218.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8b:29:52:c4:3d:90:18:e9:03:f3:a7:bc:e2:f9:a5:08:6b:
b9:65:c2:b8:3b:89:56:90:b0:32:21:84:dd:30:4a:3a:5f:31:
ec:29:36:bb:77:c0:89:31:57:30:9b:d5:83:74:1a:86:c6:f0:
6a:67:73:0f:51:0a:11:3a:8f:2c:ad:ed:30:cb:0b:0c:ff:75:
7c:76:a5:dd:89:84:46:69:40:e9:69:70:41:7b:c0:f2:99:02:
64:d8:25:66:7f:e9:ed:5d:ef:3c:51:00:97:4a:6f:d7:ba:55:
de:75:76:26:96:ce:c3:3b:5a:48:62:c2:5e:46:e7:5a:3f:cf:
c5:57:e6:b8:9d:4a:6b:87:4f:14:bc:c6:49:de:f9:21:37:7d:
37:6b:5d:70:1f:35:33:ea:9b:a6:b1:1b:05:80:ac:0b:82:1a:
33:1d:c8:d2:2f:e9:d0:2c:f6:fb:a6:36:09:84:19:ee:b2:3e:
68:c0:ef:c1:2c:55:3b:46:e5:11:41:3b:96:05:a4:2d:b3:07:
2e:43:b9:4e:e6:63:2d:53:9e:d5:f5:aa:b8:ec:33:25:fb:b5:
ef:f6:07:be:f6:85:6d:4f:4c:8f:b9:f2:62:f3:55:f8:84:23:
eb:b0:c1:02:93:b6:2a:b4:87:85:8b:fa:cd:ce:1f:cc:b4:1b:
e8:55:c4:36
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXPqXHSGlzK2Rk6eqTo7Jph2/12AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG
NDgyRDhENTAeFw0yNjAxMjAwMjIyMjBaFw0yNzAxMTkwMjI3MjBaMDMxMTAvBgNV
BAMTKEQ2Mjg1ODNCMEY5NzM4MDcyRTgyMTc3NEU4QkMxODg0NjY5NTc3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46PqKR0P4Vw2hJId8mzWrO0V5
mZTXWaOHOb/AnRJNwjTBHL7U0Tw6slxdsB4/Snh6oV7llDfdZn7AlzFjTg5fRPdM
1h0zNx50X6mdgFfEI/oQleI0XuaMF6WH9zzAd1dStRwuXsYx4k5jIPcHqThLNPs1
GxHqIc5Q3udgUglQPphMIzsIqDkUdlJKgOQhdJl0JW/w5qeFLkEmF92DEQU1TsDI
8asnV/UxXwK+O1VqnkwEFOQOsS9QZVU05OP2ZChFPzoCTdbeY7VKfLB95IprsO2J
4V3Osmi1daZxz+xipdVEQu95AN8oEfzMBTuTyL5+cU9P+ns3vMXdlYNFWK6rAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU1ihYOw+XOAcughd06LwYhGaVd5owHwYDVR0j
BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB
RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx
MzczMDJlMzIzMTM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzIzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMqq2jANBgkqhkiG9w0BAQsFAAOCAQEAB4spUsQ9kBjpA/OnvOL5
pQhruWXCuDuJVpCwMiGE3TBKOl8x7Ck2u3fAiTFXMJvVg3QahsbwamdzD1EKETqP
LK3tMMsLDP91fHal3YmERmlA6WlwQXvA8pkCZNglZn/p7V3vPFEAl0pv17pV3nV2
JpbOwztaSGLCXkbnWj/PxVfmuJ1Ka4dPFLzGSd75ITd9N2tdcB81M+qbprEbBYCs
C4IaMx3I0i/p0Cz2+6Y2CYQZ7rI+aMDvwSxVO0blEUE7lgWkLbMHLkO5TuZjLVOe
1fWquOwzJfu17/YHvvaFbU9Mj7nyYvNV+IQj67DBApO2KrSHhYv6zc4fzLQb6FXE
Ng==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:32 2026 by rpki-client