This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135322e302f32312d3234203d3e203633363331.roa
File: 3131392e3136312e3135322e302f32312d3234203d3e203633363331.roa (raw, json)
Hash identifier: BBTRwX86DtfzxU9rTrkCfkvyq+j6Fyat/htWxMwmilE=
Subject key identifier: C4:D1:65:3A:FF:F2:DF:3A:8D:74:13:56:89:A3:F7:32:9B:FF:1F:92
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 36597B6151012BA8A0037A793510591CCCF4039B
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135322e302f32312d3234203d3e203633363331.roa
Signing time: Tue 20 Jan 2026 02:24:52 +0000
ROA not before: Tue 20 Jan 2026 02:19:52 +0000
ROA not after: Tue 19 Jan 2027 02:24:52 +0000
asID: 63631
IP address blocks: 119.161.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:59:7b:61:51:01:2b:a8:a0:03:7a:79:35:10:59:1c:cc:f4:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Jan 20 02:19:52 2026 GMT
Not After : Jan 19 02:24:52 2027 GMT
Subject: CN=C4D1653AFFF2DF3A8D74135689A3F7329BFF1F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:f1:5c:6b:36:59:c5:2a:d1:86:ea:a5:72:
c2:4e:25:80:3a:a3:3e:7f:da:6a:fe:2c:27:01:a0:
a2:b7:b4:dd:c6:55:38:78:a7:46:37:e2:2a:66:17:
77:7c:2c:0d:a0:47:bf:12:1e:68:4b:0b:03:ab:53:
ad:9f:65:34:e4:b9:9b:41:95:a3:a0:4c:cc:35:2c:
b6:94:b5:e6:96:a6:fb:d6:c6:c7:c3:e5:35:36:ef:
1e:fe:82:53:83:8f:e1:3b:9e:0b:60:32:9e:a6:e6:
a6:01:e4:f3:ab:a5:1c:f5:58:e8:dc:35:0f:88:37:
3c:b5:76:6f:4b:40:c6:52:fd:cf:9b:86:14:d9:74:
16:62:ce:12:ef:2e:78:c2:d6:5d:03:b7:77:fb:1f:
f5:bc:4a:7a:56:b7:2c:36:11:c4:f9:f0:0a:d1:8e:
7b:30:22:bf:69:fd:13:8e:82:0c:2f:7b:df:a0:a9:
7a:f8:d9:c9:24:40:18:cc:94:56:04:2d:49:dd:4b:
31:c4:95:80:93:0f:83:32:82:75:e0:81:e6:d8:80:
eb:76:d2:78:de:79:6f:ec:4f:66:75:78:c3:7c:10:
80:37:c0:7a:48:3f:91:e9:a6:65:01:7b:8d:cb:f7:
59:17:6d:4c:9b:d8:e1:4d:84:14:cb:c9:b3:e4:b8:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:65:3A:FF:F2:DF:3A:8D:74:13:56:89:A3:F7:32:9B:FF:1F:92
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135322e302f32312d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.152.0/21
Signature Algorithm: sha256WithRSAEncryption
12:f5:7c:2b:72:b7:64:42:a2:4f:94:04:e1:96:fb:28:87:26:
44:3c:49:20:76:50:ed:79:98:c6:37:46:27:7a:86:f0:d8:85:
c4:26:f0:f8:32:9d:56:da:a6:9c:78:82:39:59:e3:21:e1:78:
a6:f9:37:71:44:58:f6:6d:c9:c7:50:76:08:c2:b3:2e:66:6a:
ee:1b:a1:9f:81:02:e1:a4:e6:e4:45:78:77:39:cf:1c:97:53:
b7:fa:e0:2a:7b:92:59:60:1c:86:59:46:74:ba:45:9d:25:53:
8a:6b:99:34:81:fd:8f:5f:0e:53:e9:e3:0b:42:c1:c7:74:05:
86:26:9b:7d:82:97:a9:76:54:14:72:e6:5c:51:eb:02:3f:78:
07:88:32:32:de:68:e1:10:aa:8a:5f:33:9d:48:87:d5:47:13:
48:28:0d:2f:34:5f:b0:0d:9e:10:37:6a:be:d8:ee:f3:87:fc:
43:67:e2:37:6a:e4:bf:51:9d:00:c0:04:21:b4:0c:bc:d3:6c:
92:2c:6e:5d:39:7a:b4:1e:42:62:42:9e:93:30:00:5d:ff:14:
d9:12:f7:88:68:3c:3e:e9:bb:e8:3a:f9:ed:67:18:d4:23:35:
1d:43:9c:c8:5c:f4:70:b2:23:85:21:df:de:db:4a:b6:94:7a:
be:9e:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:10 2026 by rpki-client