This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa
File: 3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa (raw, json)
Hash identifier: xy7xooXB+PVidNPWLl7qUWndqTspUgFVS6wN9vWLbZs=
Subject key identifier: C0:83:8C:91:79:95:7D:E1:28:58:93:BD:63:DD:CF:F0:C4:C5:46:21
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 575CCE63684E88029533FA28186F8E75869649C8
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa
Signing time: Tue 20 Jan 2026 02:16:46 +0000
ROA not before: Tue 20 Jan 2026 02:11:46 +0000
ROA not after: Tue 19 Jan 2027 02:16:46 +0000
asID: 63689
IP address blocks: 202.160.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5c:ce:63:68:4e:88:02:95:33:fa:28:18:6f:8e:75:86:96:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:46 2026 GMT
Not After : Jan 19 02:16:46 2027 GMT
Subject: CN=C0838C9179957DE1285893BD63DDCFF0C4C54621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:59:d1:fb:8d:1d:ee:13:7d:40:86:c0:7f:
a6:71:7d:9f:d8:21:33:e2:96:81:2a:95:21:6b:d0:
bb:dd:3a:53:dc:f3:b0:88:b9:4f:f7:a1:6d:a4:47:
a2:11:ee:a3:9b:5e:83:2e:f3:9b:dd:12:9d:81:47:
59:93:9f:70:5f:97:09:2a:6f:ae:12:6e:3f:9d:4c:
af:a2:5c:69:c8:f3:cf:7f:1d:95:90:c9:d2:49:3b:
84:03:c2:28:d7:44:f7:51:aa:9f:ce:49:a7:10:a0:
76:98:0e:ab:fd:ca:69:7b:79:17:eb:a5:94:29:fa:
ff:ed:43:b8:16:c7:87:df:3c:99:c7:78:6e:3d:46:
4c:cc:91:d5:bd:d1:d6:ff:f5:9b:f8:77:5c:c1:fd:
43:ee:46:80:83:8f:63:05:01:82:77:7a:8f:6d:75:
87:ef:c4:8c:da:28:2d:87:34:8f:8f:9b:d0:13:00:
34:20:73:96:57:e4:ec:96:4a:85:20:c8:93:26:b1:
06:8a:6a:77:76:c3:06:3a:95:95:43:fb:4b:ba:30:
c5:fa:d3:de:15:9f:56:92:7e:3b:4b:88:d1:a3:a5:
f6:09:ed:49:a9:85:f8:39:f1:42:87:53:07:72:ae:
93:e8:5e:57:53:5b:68:63:63:ed:2b:56:28:ae:d7:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:8C:91:79:95:7D:E1:28:58:93:BD:63:DD:CF:F0:C4:C5:46:21
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.160.140.0/23
Signature Algorithm: sha256WithRSAEncryption
93:70:38:f7:d9:18:aa:bb:9e:41:bc:cf:01:ad:e7:69:6c:06:
cb:d6:ba:1a:7a:cb:43:dd:d7:5b:39:ca:73:f6:0c:aa:0b:8a:
2e:cc:ad:60:ba:55:74:57:ec:54:6e:5b:0b:a1:5e:c2:f6:9f:
6b:19:7a:16:21:ae:e0:04:8e:35:85:fc:49:59:2a:fb:ea:44:
14:75:11:9f:d3:e5:6b:97:5d:77:65:a6:b3:f9:cf:b2:b9:fc:
4e:f0:ce:ef:c9:14:0d:8a:9b:a7:3a:8e:7f:09:14:67:ff:71:
f6:85:e7:65:79:64:9a:d9:8d:c1:f6:ab:08:30:a6:9a:aa:fb:
00:c4:cf:20:f2:a1:f2:e3:3c:68:ee:50:16:d4:3a:7b:e3:b3:
15:ab:9f:4c:c2:f4:68:71:98:08:66:08:7f:03:66:1e:16:58:
b9:d5:5c:31:6e:f6:f5:8b:7d:7b:44:cf:e7:83:5e:1f:6a:94:
12:86:2d:1e:82:d1:4e:bc:25:b7:81:2c:ed:7a:dd:c1:70:a0:
ba:c0:89:b9:0b:61:fc:d6:ed:e6:fa:53:db:c0:23:4f:79:b9:
96:d0:63:fb:f5:61:9a:a9:8f:61:c6:c5:23:7f:3f:74:c5:51:
74:f4:d5:f7:92:0e:c4:9a:f7:fb:0a:68:ee:09:d6:cb:31:89:
44:4e:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:41 2026 by rpki-client