This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa
File: 3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier: p15UFJ5gbxigm9w5yBCyY5hLYHnp/CBaedjOCUHIif4=
Subject key identifier: B0:7C:A7:55:E5:28:B2:1F:52:E7:74:3A:54:54:9D:58:1C:E6:FE:D4
Certificate issuer: /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial: 056F0A37E16D077513ED490B2644B2A07CA3B4AE
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa
Signing time: Tue 20 Jan 2026 02:16:48 +0000
ROA not before: Tue 20 Jan 2026 02:11:48 +0000
ROA not after: Tue 19 Jan 2027 02:16:48 +0000
asID: 63689
IP address blocks: 202.160.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6f:0a:37:e1:6d:07:75:13:ed:49:0b:26:44:b2:a0:7c:a3:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Validity
Not Before: Jan 20 02:11:48 2026 GMT
Not After : Jan 19 02:16:48 2027 GMT
Subject: CN=B07CA755E528B21F52E7743A54549D581CE6FED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:68:3f:43:aa:f5:ca:84:6a:2d:01:c2:5e:
a2:7d:27:d2:4e:f6:e0:1d:9a:fe:06:9f:81:b3:5e:
96:f7:43:e4:0d:d0:4f:41:17:69:3c:c5:ba:e4:bc:
0a:3c:b6:0d:05:83:de:c8:a0:06:2c:6e:02:32:7c:
c2:f8:34:4f:51:5f:19:06:14:0a:f0:25:42:60:63:
f3:05:f2:56:98:f4:b6:f3:9a:c8:3b:60:22:68:00:
59:d8:63:9d:8a:e1:e4:06:f5:b7:a6:43:ce:16:05:
0d:75:5d:bc:5e:2b:05:53:10:53:da:ed:9d:af:90:
57:4d:c2:55:3f:2b:a5:61:e3:fb:e9:7c:fa:d6:11:
ed:d0:ec:37:b6:08:b6:06:13:3f:b5:94:03:81:6a:
ee:68:7e:65:05:f0:0b:fa:0d:d3:83:24:bd:34:97:
b9:0d:a6:1c:ae:b1:78:7a:c3:08:87:7b:21:9f:e6:
e8:06:a5:64:91:79:f1:24:c3:ae:13:38:04:45:63:
17:5a:d6:8a:83:15:04:26:1b:96:06:25:68:81:69:
e8:ea:79:38:a9:70:26:d9:f8:38:50:35:6e:81:8f:
0a:fc:fc:a6:fb:b2:40:ab:8f:e4:9c:79:5d:ce:1a:
cc:94:8c:c5:8a:8f:9e:ae:18:04:39:c9:24:d8:66:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:A7:55:E5:28:B2:1F:52:E7:74:3A:54:54:9D:58:1C:E6:FE:D4
X509v3 Authority Key Identifier:
keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6b:80:16:60:40:e0:18:92:e6:00:38:fc:b4:14:26:74:56:
5a:7f:e8:e6:89:9e:2e:4c:bd:6f:10:ab:08:f2:3e:f0:fb:cd:
c2:f4:2e:8e:19:f9:68:56:fc:a1:13:f3:a6:d4:de:a5:35:f9:
e0:18:60:4c:c8:fd:32:57:ee:ad:a1:74:c8:00:84:e1:4f:de:
61:fa:15:96:78:a9:ff:dc:b9:bf:4c:79:5b:fb:a2:34:74:d1:
d0:ae:9d:2d:38:ba:84:d7:1c:dc:66:57:2f:03:a2:38:4b:a1:
b4:63:2b:52:e1:45:de:5c:e2:b2:26:74:e4:2e:71:40:6e:2d:
b8:4d:c6:10:a3:06:07:01:7a:e7:ef:53:94:49:a9:9e:fd:ac:
5d:73:b6:d2:93:1d:b6:6d:1e:91:e7:1e:7a:0f:a0:14:45:52:
2d:00:0d:78:bf:f3:39:0d:76:e5:96:5c:53:f2:5e:ec:9d:9a:
40:9a:c1:a5:5c:6e:ba:9c:e8:07:f8:b5:82:0c:3f:da:ce:38:
96:70:fd:b8:46:46:3a:c2:f6:b5:fd:e2:95:a9:aa:4a:92:8e:
f5:16:82:86:cd:c2:20:19:64:1d:7b:db:99:e8:69:c7:0a:ed:
38:84:4e:9f:31:ce:5f:1b:00:b2:94:63:b2:8d:27:7a:63:d8:
25:f6:90:bb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUBW8KN+FtB3UT7UkLJkSyoHyjtK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3
RkU5MTM0RDAeFw0yNjAxMjAwMjExNDhaFw0yNzAxMTkwMjE2NDhaMDMxMTAvBgNV
BAMTKEIwN0NBNzU1RTUyOEIyMUY1MkU3NzQzQTU0NTQ5RDU4MUNFNkZFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8M2g/Q6r1yoRqLQHCXqJ9J9JO
9uAdmv4Gn4GzXpb3Q+QN0E9BF2k8xbrkvAo8tg0Fg97IoAYsbgIyfML4NE9RXxkG
FArwJUJgY/MF8laY9Lbzmsg7YCJoAFnYY52K4eQG9bemQ84WBQ11XbxeKwVTEFPa
7Z2vkFdNwlU/K6Vh4/vpfPrWEe3Q7De2CLYGEz+1lAOBau5ofmUF8Av6DdODJL00
l7kNphyusXh6wwiHeyGf5ugGpWSRefEkw64TOARFYxda1oqDFQQmG5YGJWiBaejq
eTipcCbZ+DhQNW6Bjwr8/Kb7skCrj+SceV3OGsyUjMWKj56uGAQ5ySTYZq4TAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUsHynVeUosh9S53Q6VFSdWBzm/tQwHwYDVR0j
BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0
QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMjMwMzIyZTMx
MzYzMDJlMzEzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMqgjzANBgkqhkiG9w0BAQsFAAOCAQEAjmuAFmBA4BiS5gA4/LQU
JnRWWn/o5omeLky9bxCrCPI+8PvNwvQujhn5aFb8oRPzptTepTX54BhgTMj9Mlfu
raF0yACE4U/eYfoVlnip/9y5v0x5W/uiNHTR0K6dLTi6hNcc3GZXLwOiOEuhtGMr
UuFF3lzisiZ05C5xQG4tuE3GEKMGBwF65+9TlEmpnv2sXXO20pMdtm0ekeceeg+g
FEVSLQANeL/zOQ125ZZcU/Je7J2aQJrBpVxuupzoB/i1ggw/2s44lnD9uEZGOsL2
tf3ilamqSpKO9RaChs3CIBlkHXvbmehpxwrtOIROnzHOXxsAspRjso0nemPYJfaQ
uw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:33:31 2026 by rpki-client