This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e203633353832.roa
File: 34352e3132302e3234312e302f32342d3234203d3e203633353832.roa (raw, json)
Hash identifier: jf6sm+2DoSZ5oxRYx2orgrvwXe4vh8YFM6RIJYzB7CM=
Subject key identifier: 45:F0:91:8F:1D:40:ED:BF:1C:68:22:65:23:BE:93:8E:DC:38:C3:CB
Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial: 7A7874808B809C46531099D7D58F4EDDE1064B08
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e203633353832.roa
Signing time: Tue 20 Jan 2026 02:15:38 +0000
ROA not before: Tue 20 Jan 2026 02:10:38 +0000
ROA not after: Tue 19 Jan 2027 02:15:38 +0000
asID: 63582
IP address blocks: 45.120.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 08:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:78:74:80:8b:80:9c:46:53:10:99:d7:d5:8f:4e:dd:e1:06:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Validity
Not Before: Jan 20 02:10:38 2026 GMT
Not After : Jan 19 02:15:38 2027 GMT
Subject: CN=45F0918F1D40EDBF1C68226523BE938EDC38C3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:85:df:51:ad:17:f9:f0:ef:9a:e7:9b:5f:
84:cc:ec:50:d4:ac:77:f0:01:34:39:84:33:25:10:
30:23:60:f0:8a:38:62:9e:6b:72:1e:f6:03:c5:de:
da:6e:98:a5:98:17:fe:29:5c:1c:68:aa:78:ed:5c:
a5:86:8e:e0:9b:36:7d:0e:31:1c:80:f8:60:42:78:
c7:91:7c:65:cb:47:88:7f:43:43:c7:09:d3:f6:14:
87:5e:02:ae:3e:47:26:c9:a6:9f:ec:af:c3:0a:c0:
97:07:40:78:9f:48:24:ef:02:e2:e4:47:38:f9:fd:
b9:2f:f1:b7:9b:c0:6f:5f:2f:57:16:a9:ea:5b:29:
b1:9a:1e:61:08:16:10:68:8b:ea:55:06:45:3a:be:
88:90:18:8c:56:9b:73:2b:84:3c:2b:72:25:d4:bb:
33:0e:0b:24:c7:f1:53:23:91:1a:c0:f8:4c:9f:d9:
f1:02:1d:aa:7d:23:c2:34:c4:dd:2f:9e:85:74:97:
c4:83:59:b8:83:67:88:0e:ef:ee:7a:a8:25:22:13:
96:9b:0b:18:7c:3f:ab:4a:7a:85:e6:21:9a:6c:9f:
e3:ea:be:19:d8:c1:12:43:6e:69:fe:6c:18:6e:ae:
e1:92:9e:d4:e6:d8:e3:66:6e:18:f6:62:99:56:2a:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:91:8F:1D:40:ED:BF:1C:68:22:65:23:BE:93:8E:DC:38:C3:CB
X509v3 Authority Key Identifier:
keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e203633353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2d:67:c6:08:06:aa:e2:5f:b5:a2:b4:fa:e9:8d:73:03:f4:
2f:fe:9b:b6:42:3a:59:f8:bf:db:fc:5a:49:7d:33:43:4b:56:
4f:32:7e:7f:38:08:41:3e:09:6e:7b:d3:a5:bd:91:ef:3c:2d:
99:a2:29:66:6a:0e:16:4b:7b:d9:7f:e8:85:83:d8:f3:9d:26:
7b:0e:bf:93:56:fd:db:93:fa:5d:b2:8f:ec:a2:7e:b9:cf:ad:
2b:f7:4b:9e:e8:1d:45:f4:05:e0:9e:81:4a:b7:9b:88:36:71:
25:93:bf:a0:89:bf:2d:c3:2b:51:1b:74:92:38:45:e1:47:71:
75:3f:7d:21:51:c9:8c:19:22:89:4a:66:36:37:c7:9e:16:b0:
be:07:00:cd:c1:1d:b9:0c:0f:d5:4f:54:2e:2d:74:a8:a1:cf:
32:2e:51:bd:78:79:f3:05:40:3d:0b:92:4b:aa:10:ee:ca:2d:
f9:f5:89:2e:4e:48:78:bf:4c:85:2f:53:21:d9:06:fd:d7:3e:
23:76:e4:8e:68:27:f5:ab:ea:d8:31:7f:66:ca:58:c1:6c:55:
c0:53:e2:df:ec:57:ee:11:c8:ed:dc:e6:17:09:8e:c8:44:25:
14:b9:61:e9:26:5e:e5:a5:99:53:c5:b7:a9:06:90:14:31:8c:
dd:92:39:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:17 2026 by rpki-client