This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e35362e302f32312d3231203d3e203538383334.roa
File: 3230332e3133322e35362e302f32312d3231203d3e203538383334.roa (raw, json)
Hash identifier: tf6UXCrbI9Gu08I+ORnzUVUxvnMHgINYylMnexsPs3E=
Subject key identifier: 33:A2:6D:9D:9A:79:F6:5D:5E:13:A1:E5:6E:C5:29:37:F3:3D:20:33
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 29E5012FEE8471F8AFE1E78A14EF60A37A11310A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e35362e302f32312d3231203d3e203538383334.roa
Signing time: Tue 20 Jan 2026 02:13:05 +0000
ROA not before: Tue 20 Jan 2026 02:08:05 +0000
ROA not after: Tue 19 Jan 2027 02:13:05 +0000
asID: 58834
IP address blocks: 203.132.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 12:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e5:01:2f:ee:84:71:f8:af:e1:e7:8a:14:ef:60:a3:7a:11:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jan 20 02:08:05 2026 GMT
Not After : Jan 19 02:13:05 2027 GMT
Subject: CN=33A26D9D9A79F65D5E13A1E56EC52937F33D2033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:f1:03:fe:c3:2f:62:eb:81:e6:80:9e:82:
b6:c3:78:cd:0d:b1:d6:21:e1:b6:15:ba:d9:61:90:
90:15:5e:9d:5b:06:61:af:d5:50:5e:75:2e:22:91:
a5:74:37:22:8c:68:36:0f:67:b8:d3:9d:fa:cf:61:
8b:ce:7e:07:57:7e:f8:3c:17:03:31:01:c9:12:5f:
7c:e3:08:3f:34:aa:a4:03:ee:70:46:68:0e:a4:b5:
80:41:f8:ac:a0:8c:a5:8f:09:d2:93:62:64:90:b5:
ef:ad:b7:f0:06:68:33:4d:2e:27:92:ee:78:19:4b:
74:ae:9e:bd:90:11:76:15:85:2e:a4:2f:b0:a8:3f:
3f:fd:95:38:ff:55:87:00:49:f0:02:6d:57:f8:6e:
9f:ec:bb:4b:cc:70:0f:2c:4a:b7:06:1f:2b:6f:f3:
38:23:3a:1f:1f:76:37:15:fc:c7:06:9d:dc:35:4b:
5e:31:d4:37:13:e4:c2:5c:a0:4a:b6:bc:b0:3a:7a:
b4:89:06:ad:1e:b7:49:0c:3c:ed:5e:81:ec:c1:65:
d9:b6:ff:52:ec:4b:b3:08:5c:db:4e:c3:12:2b:26:
4b:ee:d7:7f:0a:0c:81:c7:66:44:4e:75:68:89:b8:
30:6f:a3:72:f1:0b:86:2e:39:42:45:86:c0:ce:2d:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A2:6D:9D:9A:79:F6:5D:5E:13:A1:E5:6E:C5:29:37:F3:3D:20:33
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e35362e302f32312d3231203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.132.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:c4:48:99:6a:34:cd:35:1e:a6:33:d1:dd:6c:bd:66:8f:ae:
ef:ce:76:30:53:a3:ab:40:a5:a6:e6:05:7c:67:f5:29:ff:24:
d6:a1:01:54:a9:97:c8:56:3d:70:c5:27:2d:3a:32:70:1a:8c:
b9:a8:41:b5:fc:de:d7:ac:ce:2f:4d:23:b7:b0:81:1b:52:af:
94:50:5b:3b:c3:ab:a7:cb:0b:7c:62:10:ce:14:f9:83:01:13:
ab:19:88:a4:1f:71:a4:ff:02:55:b2:9a:48:40:0d:1d:a9:c9:
87:93:9e:7e:2a:39:d7:0a:8f:f3:0c:57:87:e0:79:92:c4:c4:
59:d2:92:72:83:58:dd:2e:88:08:cc:5f:95:f9:97:a6:f7:91:
b1:1a:a9:95:4f:d2:c1:f2:d4:bf:e2:33:50:6b:53:93:50:a6:
86:4a:d6:f4:9c:fc:22:ea:47:f6:d1:1b:ff:3a:86:07:38:26:
02:0f:e1:21:2f:92:26:fe:bf:13:bd:73:38:f3:14:25:97:22:
5c:24:61:2c:59:dc:a4:f7:0a:8d:66:d3:22:40:13:de:c5:21:
f1:8d:81:91:b3:f5:19:e6:0a:98:ba:c6:29:d1:ea:ee:10:98:
0b:49:c0:62:32:6c:5d:78:b8:ce:df:67:5a:ac:aa:47:69:31:
11:c0:90:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:58 2026 by rpki-client