This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa
File: 3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa (raw, json)
Hash identifier: StaK6SSeiprmWoau8OYObABPFlZse2KFADia3kz1qt8=
Subject key identifier: 74:C5:03:77:50:09:2F:3A:1D:5D:AF:83:03:D9:7F:D5:68:9E:21:F5
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 46E55838BB0EE105A80BF5BB46382E6DCE1B7B85
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa
Signing time: Tue 20 Jan 2026 02:16:45 +0000
ROA not before: Tue 20 Jan 2026 02:11:45 +0000
ROA not after: Tue 19 Jan 2027 02:16:45 +0000
asID: 59033
IP address blocks: 202.160.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e5:58:38:bb:0e:e1:05:a8:0b:f5:bb:46:38:2e:6d:ce:1b:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:45 2026 GMT
Not After : Jan 19 02:16:45 2027 GMT
Subject: CN=74C5037750092F3A1D5DAF8303D97FD5689E21F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:7c:fd:bc:71:dc:17:5f:26:3d:31:39:9a:
c6:90:0f:9d:1a:63:49:60:c5:4d:7d:75:69:55:8b:
c2:94:46:e4:6b:79:74:f7:df:5c:67:2b:57:4e:ea:
23:d0:30:cb:33:0a:2c:13:db:70:67:40:40:7c:84:
7b:c8:96:8b:25:c5:5f:5c:d3:b8:d7:24:7c:0c:67:
bf:35:14:a0:f3:22:d1:12:6b:fb:89:5c:11:68:6c:
bb:ef:93:1a:ef:18:12:28:f5:df:4c:32:30:05:6f:
a5:58:11:5d:40:5e:af:f2:2f:11:4b:23:18:de:6a:
2e:1b:8e:3a:67:fd:eb:44:48:8d:75:ee:fd:96:a4:
f0:58:41:4e:3d:3a:54:00:53:70:14:39:f2:88:a9:
fe:45:37:f3:5d:2f:01:4e:78:63:50:f1:d3:d2:f4:
eb:22:f6:ef:ea:bc:20:e3:c9:a5:f1:51:ae:34:75:
2f:62:76:cd:e3:ed:0b:db:4d:b7:b6:03:1d:9a:6e:
dc:14:49:77:72:f6:94:24:ac:be:63:95:13:b5:32:
ae:71:4b:03:4e:1e:ab:47:d2:8c:a9:a3:9b:f2:72:
37:b0:13:10:a1:d6:cc:be:44:33:10:18:86:4f:8d:
0d:b4:52:47:b1:a1:12:4a:a3:df:83:db:ad:36:f4:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:03:77:50:09:2F:3A:1D:5D:AF:83:03:D9:7F:D5:68:9E:21:F5
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9d:41:22:14:4e:ce:38:c3:80:a2:f9:ec:2e:8a:84:75:08:
57:4b:20:e6:67:cd:77:9d:d8:63:1f:8c:4a:83:20:5d:42:6e:
5f:fd:06:07:b9:47:75:5e:50:73:5c:04:4b:d1:b5:52:c0:65:
ae:5a:3e:ef:8b:e0:a9:c0:76:83:5d:63:ca:19:9b:37:61:fd:
11:0c:e6:bc:1d:67:33:50:62:d6:51:4e:25:6a:89:74:bb:f9:
44:a2:f6:36:55:63:8d:fc:4f:b0:3a:37:50:40:5e:b0:d0:72:
b0:1a:34:c2:7f:54:f8:33:6c:e6:2a:ec:0a:d3:20:59:e6:f3:
42:66:92:e8:02:2c:95:31:af:96:be:c3:75:5d:f4:90:26:91:
76:eb:e1:ff:e2:a9:5b:42:2d:70:3f:9f:65:ae:3a:de:a9:24:
78:26:87:4c:a8:0d:a1:ae:af:0b:0a:85:7c:57:71:7c:f8:de:
de:c4:1a:18:ee:29:19:7f:7d:a4:4a:cd:48:56:85:bf:ae:6a:
48:11:ac:00:ce:21:82:d6:ba:2a:a4:70:e2:97:04:5e:98:be:
99:b8:3e:11:d6:d8:84:9b:b4:69:6e:a7:3c:16:ec:8a:a5:b9:
89:a7:0e:88:9b:82:94:92:e9:0c:08:27:da:fd:e7:58:65:24:
45:37:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:13 2026 by rpki-client