This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138302e302f32322d3234203d3e203538383334.roa
File: 3230322e3136382e3138302e302f32322d3234203d3e203538383334.roa (raw, json)
Hash identifier: 17dOebVhKV53+Ben7Rwem/smFPLq53/fJQTIMu+cRto=
Subject key identifier: C5:38:0B:5B:E2:FD:00:85:30:13:37:D8:9B:6D:1B:94:D0:07:D4:CB
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 3B428ECF3F33CB84719855EC943128184A3DD4A5
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138302e302f32322d3234203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:07 +0000
ROA not before: Tue 20 Jan 2026 02:08:07 +0000
ROA not after: Tue 19 Jan 2027 02:13:07 +0000
asID: 58834
IP address blocks: 202.168.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:42:8e:cf:3f:33:cb:84:71:98:55:ec:94:31:28:18:4a:3d:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:07 2026 GMT
Not After : Jan 19 02:13:07 2027 GMT
Subject: CN=C5380B5BE2FD0085301337D89B6D1B94D007D4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:61:c8:6f:22:f6:10:b9:f2:7b:7d:d1:c5:
88:98:23:f7:45:47:be:e3:fa:cc:f4:a1:d2:cd:fe:
6e:01:6b:aa:fc:57:0b:bb:83:e6:66:b5:c7:0b:56:
ba:48:c2:ea:84:4f:29:93:fb:34:c0:c1:52:dc:22:
bc:5d:39:52:36:55:9c:f3:74:a2:db:f9:22:d4:99:
21:91:68:5c:2a:63:c2:fa:45:5e:4f:63:e3:19:59:
83:9a:e7:01:c1:68:3e:1d:a5:6b:6f:d7:eb:9d:af:
90:fd:79:b2:aa:87:00:68:72:6e:44:60:b9:f4:56:
d9:f2:ff:f3:d3:c5:04:0e:64:65:5f:5c:16:3b:bb:
75:28:e4:af:70:84:a7:4b:42:0f:92:d5:88:15:62:
4b:1c:d5:95:2d:d9:0c:3c:60:f5:2d:ae:ab:fe:78:
c6:54:78:5e:99:7b:c7:f4:90:ea:2b:c3:95:b3:61:
c7:10:35:fd:a6:b9:68:b7:cb:dc:6e:91:bc:9d:1c:
d1:33:eb:09:66:80:4a:d4:86:c3:55:4f:10:1d:91:
c4:76:de:c2:bc:86:6e:57:21:42:81:ae:d6:ae:de:
ba:bf:be:49:00:7e:a6:6f:10:ab:51:cc:5e:ce:d2:
8c:20:a5:73:90:58:aa:22:f1:3f:2a:68:ea:76:f7:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:0B:5B:E2:FD:00:85:30:13:37:D8:9B:6D:1B:94:D0:07:D4:CB
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138302e302f32322d3234203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.180.0/22
Signature Algorithm: sha256WithRSAEncryption
05:cd:73:b1:97:63:e0:2d:2e:2b:f9:47:1b:29:81:c4:5a:15:
60:7b:c3:22:05:cf:93:57:bc:e2:76:bb:13:3d:4e:70:79:15:
7b:a2:a6:49:60:93:f7:e2:a6:b5:33:e1:5c:b2:1e:2c:59:a6:
a8:19:93:66:52:e8:27:39:79:f9:b0:08:b9:52:25:66:fa:b6:
6e:d4:d6:aa:9b:fb:89:b3:ef:b5:2c:ba:5e:33:12:f9:29:68:
35:27:ac:5e:e2:59:c9:17:f9:6d:7a:11:32:d3:83:10:cf:aa:
64:32:db:c1:2e:43:8c:cf:e4:e3:de:c8:49:3d:03:67:f1:6d:
13:05:24:15:58:06:03:0e:85:ef:ee:e7:d5:56:c0:d1:d9:45:
e6:fb:bc:b4:89:57:7f:07:18:69:54:f5:1e:b5:f6:05:84:73:
f2:8b:da:04:d9:9b:8d:46:a5:36:c2:9c:b0:26:81:3a:c2:28:
3a:fe:83:99:e9:ea:ae:63:2b:f9:3d:15:49:0b:d3:bb:af:cb:
54:e1:7f:18:aa:cf:a9:58:7f:37:52:79:39:bc:e8:4e:d0:a5:
b9:01:ee:2e:4f:29:e2:9d:20:55:df:be:42:83:84:6e:53:bb:
02:c9:c5:50:f9:6e:7d:00:c6:08:3f:68:0e:48:6a:c8:ca:f2:
ef:cc:90:bc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUO0KOzz8zy4RxmFXslDEoGEo91KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDdaFw0yNzAxMTkwMjEzMDdaMDMxMTAvBgNV
BAMTKEM1MzgwQjVCRTJGRDAwODUzMDEzMzdEODlCNkQxQjk0RDAwN0Q0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYWHIbyL2ELnye33RxYiYI/dF
R77j+sz0odLN/m4Ba6r8Vwu7g+ZmtccLVrpIwuqETymT+zTAwVLcIrxdOVI2VZzz
dKLb+SLUmSGRaFwqY8L6RV5PY+MZWYOa5wHBaD4dpWtv1+udr5D9ebKqhwBocm5E
YLn0Vtny//PTxQQOZGVfXBY7u3Uo5K9whKdLQg+S1YgVYksc1ZUt2Qw8YPUtrqv+
eMZUeF6Ze8f0kOorw5WzYccQNf2muWi3y9xukbydHNEz6wlmgErUhsNVTxAdkcR2
3sK8hm5XIUKBrtau3rq/vkkAfqZvEKtRzF7O0owgpXOQWKoi8T8qaOp29383AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUxTgLW+L9AIUwEzfYm20blNAH1MswHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ1NTMzNDUvMC8zMjMwMzIyZTMx
MzYzODJlMzEzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzODM4MzMzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAsqotDANBgkqhkiG9w0BAQsFAAOCAQEABc1zsZdj4C0uK/lHGymB
xFoVYHvDIgXPk1e84na7Ez1OcHkVe6KmSWCT9+KmtTPhXLIeLFmmqBmTZlLoJzl5
+bAIuVIlZvq2btTWqpv7ibPvtSy6XjMS+SloNSesXuJZyRf5bXoRMtODEM+qZDLb
wS5DjM/k497IST0DZ/FtEwUkFVgGAw6F7+7n1VbA0dlF5vu8tIlXfwcYaVT1HrX2
BYRz8ovaBNmbjUalNsKcsCaBOsIoOv6DmenqrmMr+T0VSQvTu6/LVOF/GKrPqVh/
N1J5ObzoTtCluQHuLk8p4p0gVd++QoOEblO7AsnFUPlufQDGCD9oDkhqyMry78yQ
vA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:40:10 2026 by rpki-client