This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3230322e38392e3233322e302f32312d3231203d3e203539303637.roa
File: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (raw, json)
Hash identifier: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=
Subject key identifier: B3:61:CE:C4:E6:BA:7A:9A:05:8B:13:31:C9:80:CF:59:9E:B9:35:90
Certificate issuer: /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial: 0BCDB850716B1B981EBBD390086BE9A628B50079
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3230322e38392e3233322e302f32312d3231203d3e203539303637.roa
Signing time: Tue 20 Jan 2026 02:15:31 +0000
ROA not before: Tue 20 Jan 2026 02:10:31 +0000
ROA not after: Tue 19 Jan 2027 02:15:31 +0000
asID: 59067
IP address blocks: 202.89.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cd:b8:50:71:6b:1b:98:1e:bb:d3:90:08:6b:e9:a6:28:b5:00:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
Validity
Not Before: Jan 20 02:10:31 2026 GMT
Not After : Jan 19 02:15:31 2027 GMT
Subject: CN=B361CEC4E6BA7A9A058B1331C980CF599EB93590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:52:67:5f:42:0c:25:b6:a9:d3:5b:24:15:
ac:a2:c1:25:0e:b3:7e:57:7d:ef:6d:7d:98:d2:c2:
67:62:ca:32:f6:a1:31:1d:1d:51:7f:e6:3f:2e:cd:
76:bf:4a:61:ae:63:35:88:c9:67:2d:69:c4:02:55:
b5:af:35:b6:f6:a2:e9:8a:1b:32:01:bf:6a:9f:31:
e6:a6:c6:95:6b:ac:d7:f4:b7:69:6c:d8:6c:ee:2f:
2a:58:37:bb:12:87:ca:57:65:fd:c9:e8:91:7a:7e:
46:71:e3:c6:88:70:d4:66:57:28:04:3e:ab:15:f3:
38:13:cf:39:d4:6d:a8:58:a4:4e:f8:80:eb:a9:5c:
2b:e4:b5:be:e2:30:ad:10:79:d4:6e:80:ce:52:b4:
48:8c:4b:22:d1:9c:c0:9a:6c:90:cb:f8:42:fa:87:
d4:55:ff:8d:09:78:9f:14:4b:b1:59:48:67:5d:51:
75:de:eb:c0:64:4c:2c:f0:83:72:f8:d5:47:8e:7e:
e6:e3:ab:48:f9:76:36:63:0d:26:74:42:73:e3:1c:
63:de:8d:29:8d:0b:06:4e:1a:43:41:12:4c:3e:e5:
29:1e:dc:13:21:bb:fb:37:4e:b2:fa:df:6a:c1:b4:
99:29:e4:7c:f7:81:10:5d:7e:a6:95:ab:d5:78:ce:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:CE:C4:E6:BA:7A:9A:05:8B:13:31:C9:80:CF:59:9E:B9:35:90
X509v3 Authority Key Identifier:
keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3230322e38392e3233322e302f32312d3231203d3e203539303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.89.232.0/21
Signature Algorithm: sha256WithRSAEncryption
25:a1:8b:c9:60:56:9c:4c:24:47:bb:1b:c0:b3:9e:b3:3c:0a:
ca:d3:e6:8c:04:64:32:53:f1:a0:43:ea:87:4f:49:c5:31:ac:
47:4b:36:55:f4:6e:c8:7d:1f:a0:22:19:c1:0e:d5:6e:e4:fb:
41:2a:64:aa:bf:ff:95:3e:9a:12:6e:c6:2f:89:33:74:f3:2f:
d1:55:75:85:a5:1e:c0:d7:74:9e:5b:e8:05:cc:59:ad:0c:c7:
cd:51:3a:93:66:7a:ed:ff:b1:e7:f1:c6:0d:bf:a9:46:4f:87:
5e:9c:f6:6e:cd:d0:3b:39:bf:3f:50:db:83:e0:d4:1c:24:f7:
c2:d3:1a:e1:58:da:c6:78:7b:91:13:74:f4:0b:e5:26:f4:5a:
c1:8b:38:3c:46:28:4e:a6:30:07:79:9c:7d:2e:67:f1:1a:85:
75:43:70:b8:d2:f3:d5:52:d9:44:ed:e5:54:10:2d:85:bd:da:
f1:01:50:ee:63:fd:2f:9e:7c:f1:36:c0:40:2c:0f:dd:20:f6:
08:0e:32:fa:ed:6c:96:b7:25:91:95:d4:9b:5d:75:79:eb:53:
70:ca:8a:bd:be:6d:38:17:53:85:82:b2:eb:c6:6f:1b:bf:e5:
38:05:8c:d8:53:96:9c:c9:64:9f:ff:21:8c:f5:cc:48:46:de:
d4:1f:93:40
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC824UHFrG5geu9OQCGvppii1AHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5NjYzQzk4RkIyNjdFRTc2N0Q4OTM1NDU0NkNGQjVG
MTk1MDA4MDAeFw0yNjAxMjAwMjEwMzFaFw0yNzAxMTkwMjE1MzFaMDMxMTAvBgNV
BAMTKEIzNjFDRUM0RTZCQTdBOUEwNThCMTMzMUM5ODBDRjU5OUVCOTM1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteVJnX0IMJbap01skFayiwSUO
s35Xfe9tfZjSwmdiyjL2oTEdHVF/5j8uzXa/SmGuYzWIyWctacQCVbWvNbb2oumK
GzIBv2qfMeamxpVrrNf0t2ls2GzuLypYN7sSh8pXZf3J6JF6fkZx48aIcNRmVygE
PqsV8zgTzznUbahYpE74gOupXCvktb7iMK0QedRugM5StEiMSyLRnMCabJDL+EL6
h9RV/40JeJ8US7FZSGddUXXe68BkTCzwg3L41UeOfubjq0j5djZjDSZ0QnPjHGPe
jSmNCwZOGkNBEkw+5Ske3BMhu/s3TrL632rBtJkp5Hz3gRBdfqaVq9V4zgLFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUs2HOxOa6epoFixMxyYDPWZ65NZAwHwYDVR0j
BBgwFoAUS5ZjyY+yZ+52fYk1RUbPtfGVAIAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTg4NzIzNC8wLzRCOTY2M0M5OEZCMjY3RUU3NjdEODkzNTQ1NDZD
RkI1RjE5NTAwODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEI5NjYzQzk4RkIyNjdFRTc2N0Q4OTM1NDU0NkNGQjVGMTk1MDA4MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTg4NzIzNC8wLzMyMzAzMjJlMzgz
OTJlMzIzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzYzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA8pZ6DANBgkqhkiG9w0BAQsFAAOCAQEAJaGLyWBWnEwkR7sbwLOeszwK
ytPmjARkMlPxoEPqh09JxTGsR0s2VfRuyH0foCIZwQ7VbuT7QSpkqr//lT6aEm7G
L4kzdPMv0VV1haUewNd0nlvoBcxZrQzHzVE6k2Z67f+x5/HGDb+pRk+HXpz2bs3Q
Ozm/P1Dbg+DUHCT3wtMa4Vjaxnh7kRN09AvlJvRawYs4PEYoTqYwB3mcfS5n8RqF
dUNwuNLz1VLZRO3lVBAthb3a8QFQ7mP9L5588TbAQCwP3SD2CA4y+u1slrclkZXU
m111eetTcMqKvb5tOBdThYKy68ZvG7/lOAWM2FOWnMlkn/8hjPXMSEbe1B+TQA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:08:06 2026 by rpki-client