This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e2038303735.roa
File: 323430323a376438303a383838383a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier: jJYeF1KMxY/B5YUuRHvZEITfMqvsE05Lt1L3BtZS3nI=
Subject key identifier: FE:74:6F:49:8C:7B:23:B4:A3:10:66:A9:DA:44:7C:AF:26:8C:9E:89
Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial: 18FB48B69257F87604B4560EB8ADAEE8969FE4AB
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e2038303735.roa
Signing time: Tue 20 Jan 2026 02:15:38 +0000
ROA not before: Tue 20 Jan 2026 02:10:38 +0000
ROA not after: Tue 19 Jan 2027 02:15:38 +0000
asID: 8075
IP address blocks: 2402:7d80:8888::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fb:48:b6:92:57:f8:76:04:b4:56:0e:b8:ad:ae:e8:96:9f:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Validity
Not Before: Jan 20 02:10:38 2026 GMT
Not After : Jan 19 02:15:38 2027 GMT
Subject: CN=FE746F498C7B23B4A31066A9DA447CAF268C9E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:d6:5b:24:cc:88:b5:00:b7:5b:ed:30:f3:
84:78:de:6c:d3:f0:18:e3:61:98:36:7f:3f:11:0c:
1e:b5:ef:bd:f7:ab:32:e6:87:75:3d:ed:f5:7a:2a:
ed:17:f3:d7:31:e3:4e:34:cc:1b:77:e6:4d:2b:05:
2e:13:3a:c0:16:50:01:40:bb:55:b0:cc:ab:9d:f1:
1a:3e:62:c4:95:6c:36:81:3d:06:f4:68:bb:8e:e5:
da:8f:ae:c0:80:f9:fb:95:92:f9:3c:ee:14:d1:0c:
8a:81:04:6c:f5:d9:0c:f2:65:a4:30:a0:27:dc:4d:
09:bd:c0:4d:9c:1a:ef:c6:07:6f:40:11:69:61:65:
90:95:76:68:0f:4e:04:dd:0f:c3:fa:4e:1a:8c:f6:
9f:81:73:41:e1:5b:ad:b6:f5:02:08:be:b5:de:b8:
a7:92:db:24:d9:15:af:ac:4e:42:f0:d3:46:7b:c4:
03:5c:7f:34:bb:05:90:8e:52:0f:3d:b5:c6:85:18:
a8:83:3a:c3:39:17:56:73:95:e6:d0:3e:96:dc:16:
a9:f7:ac:89:a2:b1:bc:35:ca:30:97:4e:71:7a:98:
25:58:c6:66:2c:ce:94:19:59:b1:56:8d:58:f9:7c:
d2:1c:88:a6:08:93:24:eb:98:ca:23:4a:b9:8c:3f:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:6F:49:8C:7B:23:B4:A3:10:66:A9:DA:44:7C:AF:26:8C:9E:89
X509v3 Authority Key Identifier:
keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7d80:8888::/48
Signature Algorithm: sha256WithRSAEncryption
67:98:fa:db:ed:8c:7a:49:96:65:ec:59:e8:38:98:86:b9:8f:
f5:48:9c:90:35:d1:19:c3:38:67:da:92:9b:64:89:85:e1:94:
0f:99:7d:b0:af:d5:9c:b2:27:8c:dd:8f:20:44:a5:f3:f5:83:
89:b2:fa:ba:d5:fc:c0:04:f8:8e:a2:6a:a0:6b:c2:a7:16:9c:
82:df:eb:86:32:2b:49:e0:d6:26:4a:f6:37:d6:89:5c:71:19:
e4:5d:f3:41:c9:56:a9:d4:51:19:7a:93:90:7d:40:d7:27:29:
58:6c:2f:76:5e:d8:6d:22:9e:88:60:2a:3e:ad:d1:30:50:2b:
1e:14:57:90:ad:77:1d:a9:81:9f:1c:13:91:0b:84:52:59:e2:
69:42:93:24:d4:f4:20:56:0d:21:29:c2:06:ea:93:c5:1e:38:
a2:4e:dd:0c:93:20:52:ff:21:d4:22:dd:2e:a1:a8:2f:06:be:
c0:6a:46:30:27:79:ab:3b:71:c6:dc:d5:a1:d7:f7:06:27:6b:
09:33:8e:17:e3:86:91:a6:69:82:41:c6:1c:08:78:0e:2b:61:
23:a6:f8:62:04:fd:86:78:cf:5c:08:ed:52:29:6e:6f:4a:a4:
e1:aa:53:80:f2:4b:6d:05:4c:4b:99:02:a7:1a:6f:16:66:43:
15:0b:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:05 2026 by rpki-client