This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa
File: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (raw, json)
Hash identifier: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=
Subject key identifier: 74:79:FD:D1:39:F9:39:8D:12:8F:57:FB:F9:AC:97:AA:07:F8:66:05
Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD
Certificate serial: 47634B33594306F6C6C2D5BB2FDF6BD423BCF9E3
Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa
Signing time: Tue 20 Jan 2026 02:27:12 +0000
ROA not before: Tue 20 Jan 2026 02:22:12 +0000
ROA not after: Tue 19 Jan 2027 02:27:12 +0000
asID: 137730
IP address blocks: 2403:d9c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:63:4b:33:59:43:06:f6:c6:c2:d5:bb:2f:df:6b:d4:23:bc:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD
Validity
Not Before: Jan 20 02:22:12 2026 GMT
Not After : Jan 19 02:27:12 2027 GMT
Subject: CN=7479FDD139F9398D128F57FBF9AC97AA07F86605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:42:be:f0:c0:6b:ff:bb:ff:50:2d:c8:48:
0b:72:44:90:19:9e:8f:e3:43:ce:18:38:c5:c2:cf:
24:23:2d:5b:1d:cc:f1:49:b6:ea:d2:d4:f4:28:31:
1f:fd:9b:b4:de:65:54:9c:3d:b7:b4:d6:b8:a0:f9:
d7:16:9b:63:01:8d:df:82:61:d6:ed:b9:7d:5a:b5:
8e:ae:2f:c3:4c:a8:dc:af:58:90:3e:98:e9:0b:53:
71:7f:54:20:84:e0:41:20:d8:4c:18:54:d0:d1:65:
43:00:3e:98:7f:22:35:bb:f2:63:bf:78:6d:34:b7:
b5:03:30:72:1e:39:ab:4b:12:0d:af:29:8a:2f:bd:
84:6c:47:2c:4c:28:31:2b:b2:5c:ab:73:fb:12:d0:
23:e5:9e:44:df:1c:a3:d1:7e:7a:28:61:dc:8f:70:
ae:71:3c:43:63:c0:dc:fe:c1:ce:17:7f:a0:e0:f8:
8a:06:30:11:8d:d3:61:f0:14:e5:19:f0:80:e8:f3:
70:63:8f:37:2d:9f:40:83:e2:8a:2b:a3:47:05:bb:
49:c2:52:c2:c7:53:f2:98:e9:c2:36:5f:b1:5f:d5:
22:2f:c7:b6:6a:ef:e0:f3:8d:bf:37:68:cc:d9:81:
c5:e8:8e:3e:a0:97:61:2b:39:66:a1:c1:c1:e5:a6:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:FD:D1:39:F9:39:8D:12:8F:57:FB:F9:AC:97:AA:07:F8:66:05
X509v3 Authority Key Identifier:
keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:d9c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
44:bf:68:e8:be:fe:3a:86:e5:a9:6b:ed:2c:19:b3:55:e2:4e:
04:4d:9c:67:5e:41:eb:db:e2:fe:f3:c7:dc:46:97:9d:fb:21:
4e:32:f0:9a:d5:d1:0a:a0:f2:78:1e:96:80:89:bb:80:06:9a:
7b:21:23:7e:9f:e1:45:5c:3c:0e:94:0a:16:df:07:05:b2:af:
cd:08:b3:c9:5b:aa:48:1a:b7:a3:9d:a0:4a:e3:60:f3:b0:b0:
6f:f7:4b:b0:42:6a:86:0f:09:82:3d:4f:57:48:38:60:3e:2f:
ae:1b:06:eb:64:a9:ac:4d:e6:5c:f3:95:1c:87:7b:ed:89:6a:
5a:64:9a:14:f4:cd:c1:b3:7a:0b:c3:37:81:10:0d:5b:0e:eb:
1e:be:ae:dc:45:70:b0:4b:8b:0d:d2:2f:01:cb:0a:49:d9:c4:
6b:a0:30:62:23:ac:8b:0a:1f:2b:26:98:ed:ae:f9:9d:e0:c7:
84:96:f1:4f:3e:83:10:d4:83:b4:ea:86:a5:31:1a:05:b0:34:
9b:60:d3:54:79:a7:6d:73:d3:df:a1:90:02:e0:41:37:af:a3:
8b:84:75:ae:a0:9e:e0:4c:d8:f3:ba:e2:87:20:89:a4:7e:25:
f6:e6:86:7f:2f:74:39:c9:7f:01:fd:b8:74:31:c2:45:d0:b1:
28:2b:37:7b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUR2NLM1lDBvbGwtW7L99r1CO8+eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5
NzdFRDFBRDAeFw0yNjAxMjAwMjIyMTJaFw0yNzAxMTkwMjI3MTJaMDMxMTAvBgNV
BAMTKDc0NzlGREQxMzlGOTM5OEQxMjhGNTdGQkY5QUM5N0FBMDdGODY2MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSkUK+8MBr/7v/UC3ISAtyRJAZ
no/jQ84YOMXCzyQjLVsdzPFJturS1PQoMR/9m7TeZVScPbe01rig+dcWm2MBjd+C
YdbtuX1atY6uL8NMqNyvWJA+mOkLU3F/VCCE4EEg2EwYVNDRZUMAPph/IjW78mO/
eG00t7UDMHIeOatLEg2vKYovvYRsRyxMKDErslyrc/sS0CPlnkTfHKPRfnooYdyP
cK5xPENjwNz+wc4Xf6Dg+IoGMBGN02HwFOUZ8IDo83Bjjzctn0CD4ooro0cFu0nC
UsLHU/KY6cI2X7Ff1SIvx7Zq7+Dzjb83aMzZgcXojj6gl2ErOWahwcHlpvdTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdHn90Tn5OY0Sj1f7+ayXqgf4ZgUwHwYDVR0j
BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE
NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MzIzMzkzLzAvMzIzNDMwMzMz
YTY0Mzk2MzMwM2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzM3MzMz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACQD2cAAAjANBgkqhkiG9w0BAQsFAAOCAQEARL9o6L7+Oobl
qWvtLBmzVeJOBE2cZ15B69vi/vPH3EaXnfshTjLwmtXRCqDyeB6WgIm7gAaaeyEj
fp/hRVw8DpQKFt8HBbKvzQizyVuqSBq3o52gSuNg87Cwb/dLsEJqhg8Jgj1PV0g4
YD4vrhsG62SprE3mXPOVHId77YlqWmSaFPTNwbN6C8M3gRANWw7rHr6u3EVwsEuL
DdIvAcsKSdnEa6AwYiOsiwofKyaY7a75neDHhJbxTz6DENSDtOqGpTEaBbA0m2DT
VHmnbXPT36GQAuBBN6+ji4R1rqCe4EzY87rihyCJpH4l9uaGfy90Ocl/Af24dDHC
RdCxKCs3ew==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:01:53 2026 by rpki-client