This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3234203d3e203538383334.roa
File: 3230322e3136382e3136302e302f31392d3234203d3e203538383334.roa (raw, json)
Hash identifier: MiBAQeOPDC+yOniGuI6BxUueVI1cOesN9F0ULGHsJIA=
Subject key identifier: 53:E3:B6:73:71:F4:F8:8E:E9:73:8B:83:E0:2C:90:F3:86:59:76:E3
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 197C8A99DF0EA43ED6C0E7C49E8C5DFF825EA75A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3234203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:08 +0000
ROA not before: Tue 20 Jan 2026 02:08:08 +0000
ROA not after: Tue 19 Jan 2027 02:13:08 +0000
asID: 58834
IP address blocks: 202.168.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7c:8a:99:df:0e:a4:3e:d6:c0:e7:c4:9e:8c:5d:ff:82:5e:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:08 2026 GMT
Not After : Jan 19 02:13:08 2027 GMT
Subject: CN=53E3B67371F4F88EE9738B83E02C90F3865976E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:c7:f7:c3:81:be:3b:90:9e:54:a4:ec:6c:
60:65:23:64:97:e0:2c:aa:7c:29:3c:16:98:5d:38:
4b:a7:91:a7:d5:ff:a4:49:70:fb:bb:8b:9b:7c:dd:
43:a2:c0:25:62:49:2e:cb:1c:81:eb:0b:c1:f4:62:
d7:fd:87:b4:94:31:17:d7:61:4c:3e:6c:fa:ca:26:
54:17:8c:89:93:ea:b9:26:43:44:7a:13:19:ad:07:
3c:e8:97:aa:66:36:88:a8:79:4f:59:95:01:3f:c6:
0f:e9:f9:f7:a4:5c:0e:90:18:d2:61:9a:83:d1:2f:
6f:e6:87:f0:11:97:5d:a1:46:b6:c6:45:86:47:12:
84:58:62:d8:0e:e5:72:b0:81:14:2e:e4:ea:1e:26:
47:f6:bc:af:9d:c9:92:b4:ce:65:55:68:e8:60:3b:
2b:cd:1e:f4:b2:f0:0f:b4:fa:9f:5b:6b:4b:5b:53:
f1:69:c5:c7:67:d6:60:8a:38:ed:7f:57:b8:e0:a0:
69:39:3e:2b:c7:5c:11:e8:58:be:1b:89:4c:c9:a2:
ba:33:b5:aa:4f:b3:55:b8:1c:71:a3:5d:f3:6f:b5:
9a:bd:68:c7:65:1a:20:0e:0c:fc:03:ca:07:76:54:
74:8e:7f:63:45:a5:be:63:75:06:7f:a0:13:04:93:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:B6:73:71:F4:F8:8E:E9:73:8B:83:E0:2C:90:F3:86:59:76:E3
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3234203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:8c:b6:c7:ae:61:8f:ed:ff:a1:51:1f:59:5f:47:34:45:02:
83:68:0f:f7:d7:b5:ed:d2:0d:a8:b9:cd:f7:1d:98:ec:de:e5:
04:9c:01:ef:01:aa:b9:62:90:74:33:f0:72:7c:e9:84:a2:e4:
74:17:42:72:89:34:59:d8:5c:d7:6e:c8:81:47:01:d0:04:c4:
79:9b:55:98:eb:08:32:a1:0c:17:47:16:7c:94:2b:63:2c:06:
f8:e7:93:5f:ae:8c:06:60:76:09:ec:08:43:3c:a9:0d:00:d1:
b2:31:f2:e5:e2:12:2c:7a:d5:cd:b8:a2:95:49:9c:fa:06:ac:
05:c5:c8:85:98:4d:6d:8c:1c:78:99:28:6d:24:80:37:00:b1:
ed:4c:ea:6c:59:0c:ad:f8:ee:d5:65:a5:f7:5a:dc:39:b6:90:
fd:84:ac:4c:a2:33:fc:e8:1a:85:1c:b9:e4:2b:39:bb:e8:2a:
0b:26:40:7c:3a:9f:cc:c2:60:35:df:d6:6c:16:7e:d0:b9:23:
a8:0b:90:cc:20:52:9d:24:0e:11:06:a6:35:c6:e7:e9:5f:34:
8a:d1:67:34:93:70:09:1d:21:10:4b:38:02:ca:6a:d2:b6:75:
a9:a1:52:10:6b:04:54:b8:ee:26:36:53:87:1a:33:5a:76:12:
0b:76:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:44 2026 by rpki-client