This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa
File: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (raw, json)
Hash identifier: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=
Subject key identifier: 9C:8D:0A:0F:92:23:B2:97:2E:CC:5E:EE:FF:D7:AF:24:10:B2:5E:54
Certificate issuer: /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial: 45962BC7143B95122A2BD1E6F9D0E8CDFBB41B3D
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa
Signing time: Tue 20 Jan 2026 02:19:12 +0000
ROA not before: Tue 20 Jan 2026 02:14:12 +0000
ROA not after: Tue 19 Jan 2027 02:19:12 +0000
asID: 138950
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:96:2b:c7:14:3b:95:12:2a:2b:d1:e6:f9:d0:e8:cd:fb:b4:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Validity
Not Before: Jan 20 02:14:12 2026 GMT
Not After : Jan 19 02:19:12 2027 GMT
Subject: CN=9C8D0A0F9223B2972ECC5EEEFFD7AF2410B25E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:ae:c6:92:74:fe:79:36:70:32:34:ae:8d:
85:c9:78:3a:af:6f:7e:65:9c:25:bf:18:a4:5b:de:
86:77:64:b4:21:d1:05:8d:55:34:ca:03:fd:8e:21:
8f:6a:d8:cc:b4:10:cc:66:a3:fc:17:32:75:15:d7:
1d:a7:98:32:54:bf:e1:c6:ef:05:7c:86:e0:2c:73:
03:6f:07:20:51:62:f4:a6:d2:83:67:9d:f7:01:31:
e6:a0:55:a3:d2:e5:97:2c:a1:8d:44:6f:5d:2d:1b:
bb:9e:09:06:08:0c:13:eb:40:db:be:a6:91:eb:49:
21:53:0b:28:2c:43:06:81:93:24:03:aa:1e:6d:bc:
e2:a2:b1:46:64:0f:c1:af:38:59:13:3b:1f:72:d8:
a6:80:f7:0d:c2:5a:6a:d1:eb:f9:c2:db:34:f3:db:
72:ce:c3:3e:f2:75:0b:84:e2:05:49:84:ba:98:05:
00:73:e8:05:3f:b3:98:a6:ff:4d:00:8d:2a:66:53:
4b:c4:b6:bf:15:fc:46:ca:5e:61:a7:3e:78:e7:47:
1b:59:aa:e8:e8:b9:25:f2:e7:2d:9a:30:33:1b:c3:
34:56:a2:c7:00:48:ad:a9:53:d7:ba:15:0a:b0:e5:
3f:bb:eb:19:eb:6f:ab:18:ad:ea:1a:dd:17:cf:02:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:0A:0F:92:23:B2:97:2E:CC:5E:EE:FF:D7:AF:24:10:B2:5E:54
X509v3 Authority Key Identifier:
keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
14:87:d4:02:06:16:af:0c:ca:13:67:54:a2:4e:a8:7b:f9:a3:
c4:34:b8:06:c1:3e:a2:1b:9f:41:32:cf:eb:4a:14:af:03:ce:
1a:4d:80:ea:4c:e4:40:40:04:b1:be:e2:bc:68:2f:c2:b5:70:
84:68:5b:7c:63:21:af:08:e8:d9:d0:87:21:10:25:9e:ff:85:
c3:27:1f:74:fe:65:73:c4:db:76:e8:b6:b1:b5:1d:4a:8b:39:
c8:32:04:62:85:e9:05:2f:00:ac:25:ff:2c:6d:94:83:1e:c1:
51:bc:cd:13:7f:3b:e9:ba:76:51:54:f6:c5:a7:e9:16:ec:14:
6c:f9:aa:39:4d:43:cf:ea:04:63:fe:bd:c4:1a:33:3e:eb:ea:
6a:af:d0:54:e8:9c:f5:ee:95:1a:c3:9f:6d:44:e0:c2:fd:1d:
28:e1:d7:27:50:cd:29:16:31:2e:48:fa:dd:c8:ed:0d:72:ce:
b3:4a:ea:c2:0a:ed:ef:18:f6:1c:e8:7f:75:9f:30:a4:52:d2:
e1:80:a5:6a:df:0d:31:ad:3b:97:1b:b4:d4:bd:c0:75:fd:25:
5b:34:a0:df:a1:57:4a:a7:9b:6e:f3:c5:2b:60:b5:fe:14:fb:
51:60:b4:04:00:36:66:f5:dd:f0:df:18:5b:ca:80:b4:2e:aa:
f7:6f:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:45 2026 by rpki-client