This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e203539303738.roa
File: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (raw, json)
Hash identifier: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=
Subject key identifier: FB:1C:3F:1A:9D:D8:E2:42:AC:50:1C:42:56:23:0A:BB:03:CD:FC:8C
Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial: 13B315363F2C3A7A7CFCD470FF1296A1F5B11067
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e203539303738.roa
Signing time: Tue 20 Jan 2026 02:16:49 +0000
ROA not before: Tue 20 Jan 2026 02:11:49 +0000
ROA not after: Tue 19 Jan 2027 02:16:49 +0000
asID: 59078
IP address blocks: 101.48.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b3:15:36:3f:2c:3a:7a:7c:fc:d4:70:ff:12:96:a1:f5:b1:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Validity
Not Before: Jan 20 02:11:49 2026 GMT
Not After : Jan 19 02:16:49 2027 GMT
Subject: CN=FB1C3F1A9DD8E242AC501C4256230ABB03CDFC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:2d:23:94:7d:91:4f:8b:8b:57:fa:83:3d:
7d:f0:8e:b7:d3:a7:0e:b6:0d:28:70:b6:76:12:8a:
6e:af:3f:be:c0:39:17:8b:4b:76:c5:ab:61:16:2f:
5f:68:45:34:1f:8a:9a:87:2f:63:76:02:1c:43:db:
55:79:26:20:77:8b:40:36:f8:1f:02:0d:04:37:d7:
f1:76:82:79:19:8e:0b:cf:64:0b:8f:be:21:a7:80:
ea:b5:99:32:48:25:c8:5c:1a:78:74:14:38:db:8a:
a4:d2:8d:63:c1:04:7d:49:e4:b9:67:40:f7:85:f1:
38:5a:2e:da:90:d8:ee:09:dc:09:af:24:d7:9f:ac:
98:20:73:f9:ac:fb:46:76:44:e1:5c:07:15:bb:28:
70:81:ee:4f:84:df:4e:28:d3:2b:75:b4:8d:42:46:
5e:44:ed:9e:80:1b:e3:29:a1:62:3b:62:8a:39:04:
5d:4c:0f:48:8b:11:c9:e4:1b:d2:91:40:d5:89:29:
cd:8f:53:1e:06:e8:95:b6:b3:1a:c3:8f:be:64:69:
20:2b:61:07:d7:44:22:d5:25:20:8d:0a:a5:28:cf:
3b:d5:50:19:a1:ca:41:b3:28:f5:9a:dd:80:f4:dd:
b2:0f:ec:02:71:0e:e0:a1:37:29:2e:50:c5:b3:41:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:3F:1A:9D:D8:E2:42:AC:50:1C:42:56:23:0A:BB:03:CD:FC:8C
X509v3 Authority Key Identifier:
keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:c7:28:4c:13:f9:d0:89:c3:6d:1d:1a:8d:37:e5:0a:f5:2e:
aa:2a:62:a8:86:ae:7f:41:d6:a3:2b:3b:b6:16:27:f2:8c:f5:
a9:59:59:49:85:9a:06:a8:c7:70:ef:a0:e1:ee:c3:f3:5d:02:
99:3e:bd:2b:88:c6:ca:c5:70:2f:f9:01:ce:90:67:e0:80:7f:
15:af:c0:d9:e0:17:2b:39:93:a8:a7:ef:17:a6:61:5b:c7:5d:
12:a2:5d:07:6c:36:48:a9:5c:c3:68:64:71:3c:8b:15:81:ab:
1f:a4:53:9b:d9:17:b2:0b:9b:ca:b6:d4:1b:bb:1b:45:e7:02:
c3:d9:ac:37:c2:bf:83:9f:d7:50:1e:aa:6c:17:e8:f3:43:b7:
50:0c:08:7e:69:22:d7:2d:16:3c:96:05:db:d9:8a:28:4a:41:
e6:51:b2:fd:d0:3e:22:49:0d:a3:07:6c:f3:7e:8b:9a:a7:36:
d0:0b:7a:f4:f2:a0:4f:88:8c:7f:65:7d:f9:85:a0:f1:b2:83:
3e:32:e0:10:9a:be:92:e7:2e:dc:bf:8b:51:f9:50:31:bc:12:
d3:d0:11:dc:ad:ca:1e:fb:34:d4:4e:1d:fa:69:8c:8a:bd:82:
df:db:11:6c:33:52:32:77:64:6d:9d:7f:52:24:00:cb:a0:75:
a0:dc:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:56 2026 by rpki-client