This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e203633353833.roa
File: 34352e3132302e3234332e302f32342d3234203d3e203633353833.roa (raw, json)
Hash identifier: Inyf9nm4YilQldXMyzuGciBlD79nsY4+yTLX+vmgTSg=
Subject key identifier: A5:EF:DB:EE:68:A7:2E:15:4A:D6:3D:40:3D:43:E4:5C:99:10:49:AD
Certificate issuer: /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial: 16DE732CFABA4696555D6C79A42A99BACE7B5FE9
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e203633353833.roa
Signing time: Tue 20 Jan 2026 02:15:39 +0000
ROA not before: Tue 20 Jan 2026 02:10:39 +0000
ROA not after: Tue 19 Jan 2027 02:15:39 +0000
asID: 63583
IP address blocks: 45.120.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 08:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:de:73:2c:fa:ba:46:96:55:5d:6c:79:a4:2a:99:ba:ce:7b:5f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Validity
Not Before: Jan 20 02:10:39 2026 GMT
Not After : Jan 19 02:15:39 2027 GMT
Subject: CN=A5EFDBEE68A72E154AD63D403D43E45C991049AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:a6:0e:c0:b3:6f:69:85:54:82:d1:ff:e9:
87:19:75:47:4a:2c:f9:46:47:2e:e4:7b:0e:8f:97:
ba:7e:0b:70:6e:47:c6:ab:00:15:02:cf:b6:98:2f:
09:39:7d:2e:37:c9:a4:c4:d5:51:2e:52:2e:b2:6b:
82:c1:90:5e:97:87:f4:97:a1:6b:3e:04:d3:57:d5:
3f:2b:b3:ed:a1:b5:6e:20:75:7c:cb:6f:17:33:26:
7e:e1:c4:6c:e2:11:7e:ea:40:66:0c:65:f0:3d:6d:
d4:a7:5a:5b:b5:21:d5:e7:c8:02:5b:9a:f5:c9:22:
fb:60:0e:ee:da:c7:0b:8e:af:61:6e:2f:8c:79:2f:
18:fd:20:d1:86:3d:e6:9c:2e:da:c0:43:c9:ee:7b:
05:28:4b:fc:03:06:c7:35:66:b7:db:bf:2f:40:72:
48:9b:ac:cb:a9:75:7f:e3:f7:43:2d:6b:d9:71:7b:
7d:10:8b:fa:69:c3:4a:61:68:d1:87:29:d7:ba:b1:
d1:41:ce:65:92:bf:83:d6:a8:ae:a5:9a:b4:36:b0:
42:60:cc:7a:04:31:26:34:be:75:01:00:d9:1a:2c:
bb:00:64:2f:ac:88:1c:04:10:46:7b:49:65:d5:fa:
41:56:35:72:1a:93:93:94:37:df:db:2e:86:d1:19:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EF:DB:EE:68:A7:2E:15:4A:D6:3D:40:3D:43:E4:5C:99:10:49:AD
X509v3 Authority Key Identifier:
keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e203633353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.120.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5f:c8:58:f8:0f:3b:83:10:01:e5:4e:94:01:4a:97:a8:72:
8d:20:87:a3:ce:83:1c:65:55:c1:6b:71:1b:83:07:05:91:f5:
34:ea:00:aa:17:40:6d:4e:16:26:16:26:14:33:ee:ab:1a:7d:
39:a0:71:e1:0b:c5:4f:77:be:b2:6b:fb:29:68:f0:15:bb:6e:
0c:31:a2:70:64:c6:73:0e:29:ed:51:7a:e2:bd:a8:d3:5f:fa:
b9:69:df:68:ec:a0:0f:eb:18:7c:a2:03:4c:bb:d3:1f:0d:74:
e5:6e:bf:3e:00:60:2d:29:80:43:6d:ea:ef:31:66:ce:b0:7a:
6a:67:89:66:0b:14:51:23:28:cd:34:6a:68:a9:55:d5:02:fa:
f0:09:90:8d:0f:de:43:e6:d1:3c:be:7c:98:ee:a3:5d:44:8f:
88:ee:96:41:6c:d6:2a:ab:51:1e:5a:94:68:28:a7:4d:11:d4:
ae:f6:eb:64:a0:05:e9:d7:aa:bd:42:e9:84:9f:5a:02:63:9f:
79:3b:ca:d7:6d:c4:a2:01:98:73:21:bd:2b:aa:26:1f:43:4e:
05:c7:75:2b:60:06:24:dc:56:5d:6d:11:5d:b2:b8:0e:83:a5:
58:f2:16:1e:1f:74:df:96:73:d9:6b:e7:ec:34:69:a6:b5:12:
5e:3d:bc:12
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFt5zLPq6RpZVXWx5pCqZus57X+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD
OUUzRjEzNjAeFw0yNjAxMjAwMjEwMzlaFw0yNzAxMTkwMjE1MzlaMDMxMTAvBgNV
BAMTKEE1RUZEQkVFNjhBNzJFMTU0QUQ2M0Q0MDNENDNFNDVDOTkxMDQ5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1aYOwLNvaYVUgtH/6YcZdUdK
LPlGRy7kew6Pl7p+C3BuR8arABUCz7aYLwk5fS43yaTE1VEuUi6ya4LBkF6Xh/SX
oWs+BNNX1T8rs+2htW4gdXzLbxczJn7hxGziEX7qQGYMZfA9bdSnWlu1IdXnyAJb
mvXJIvtgDu7axwuOr2FuL4x5Lxj9INGGPeacLtrAQ8nuewUoS/wDBsc1Zrfbvy9A
ckibrMupdX/j90Mta9lxe30Qi/ppw0phaNGHKde6sdFBzmWSv4PWqK6lmrQ2sEJg
zHoEMSY0vnUBANkaLLsAZC+siBwEEEZ7SWXV+kFWNXIak5OUN9/bLobRGdt/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpe/b7minLhVK1j1APUPkXJkQSa0wHwYDVR0j
BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy
RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzM0MzUyZTMxMzIz
MDJlMzIzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC148zANBgkqhkiG9w0BAQsFAAOCAQEAT1/IWPgPO4MQAeVOlAFKl6hy
jSCHo86DHGVVwWtxG4MHBZH1NOoAqhdAbU4WJhYmFDPuqxp9OaBx4QvFT3e+smv7
KWjwFbtuDDGicGTGcw4p7VF64r2o01/6uWnfaOygD+sYfKIDTLvTHw105W6/PgBg
LSmAQ23q7zFmzrB6ameJZgsUUSMozTRqaKlV1QL68AmQjQ/eQ+bRPL58mO6jXUSP
iO6WQWzWKqtRHlqUaCinTRHUrvbrZKAF6deqvULphJ9aAmOfeTvK123EogGYcyG9
K6omH0NOBcd1K2AGJNxWXW0RXbK4DoOlWPIWHh9035Zz2Wvn7DRpprUSXj28Eg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:57 2026 by rpki-client