This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31362e302f32342d3332203d3e20313331353339.roa
File: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (raw, json)
Hash identifier: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=
Subject key identifier: F8:81:04:03:9B:94:80:AE:40:E7:F2:F5:12:5C:B5:0D:4C:60:20:D3
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 695C6DAE58E4C07A558CCA31A5674017B1F60383
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31362e302f32342d3332203d3e20313331353339.roa
Signing time: Tue 20 Jan 2026 02:12:04 +0000
ROA not before: Tue 20 Jan 2026 02:07:04 +0000
ROA not after: Tue 19 Jan 2027 02:12:04 +0000
asID: 131539
IP address blocks: 110.42.16.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5c:6d:ae:58:e4:c0:7a:55:8c:ca:31:a5:67:40:17:b1:f6:03:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Jan 20 02:07:04 2026 GMT
Not After : Jan 19 02:12:04 2027 GMT
Subject: CN=F88104039B9480AE40E7F2F5125CB50D4C6020D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:99:d9:b7:93:92:b4:cf:8b:c9:5b:f8:5c:
2d:58:3a:a7:0e:a9:0e:fe:db:a3:8a:72:29:56:74:
96:02:78:fe:ce:19:71:26:bf:16:16:11:3f:06:bb:
91:f2:12:f4:2c:88:4e:b4:be:80:27:aa:f3:b5:2a:
d1:bc:ee:12:1b:39:89:0f:b1:ef:c1:76:f7:f1:c8:
43:49:07:17:ba:7e:4f:35:1f:51:45:1a:90:eb:d2:
ae:ee:b2:e6:c3:33:a9:18:c9:dc:d0:9a:00:7e:27:
4f:2b:12:e9:75:7d:d3:2a:00:e2:a6:1b:13:ef:b0:
92:a4:81:04:3a:ff:7a:64:a5:9a:d4:89:a7:f7:f5:
74:7c:b1:16:36:b6:3c:94:2f:9b:dc:1a:ed:86:6d:
a9:7c:9d:28:09:12:1e:41:b3:72:42:f4:a5:de:7b:
6b:b2:19:c7:c0:43:66:95:e8:63:26:c2:6e:75:da:
4d:f2:40:cc:b6:1f:e0:62:48:dc:22:70:68:62:95:
73:c3:a7:18:4c:e6:d2:a6:2c:76:e2:9e:36:7b:6a:
2d:ec:de:c0:41:20:dc:0a:57:94:ec:70:8d:cf:b4:
b9:b8:0c:1d:f4:19:1a:dc:da:d1:3b:7f:b2:dd:96:
b0:79:dc:58:c6:c7:b9:b4:74:10:19:a6:1d:73:a4:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:81:04:03:9B:94:80:AE:40:E7:F2:F5:12:5C:B5:0D:4C:60:20:D3
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31362e302f32342d3332203d3e20313331353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.42.16.0/24
Signature Algorithm: sha256WithRSAEncryption
34:35:91:8e:59:77:c8:b3:62:e6:53:df:d6:d6:99:fb:05:47:
7b:03:ac:5c:db:8c:f3:47:d2:8d:21:e6:ca:2e:27:a5:1d:53:
9f:f1:61:9f:48:fd:0e:5b:5d:1e:83:b3:02:06:f7:ce:3f:01:
e7:d1:2b:2f:e2:6d:af:36:89:03:84:7d:3d:d2:48:0f:89:d4:
b3:74:56:68:01:52:a9:dd:98:92:ae:f5:3b:03:ce:af:d9:98:
8c:5c:ff:d1:04:5d:67:18:9f:e5:4f:37:f8:dc:07:2e:73:11:
26:b4:78:04:58:97:fe:6a:81:67:9a:90:7f:57:00:e0:dc:4d:
63:6a:52:90:5f:38:22:a9:d4:e8:a3:42:26:d1:99:8b:5f:75:
0b:77:5f:57:7f:c4:8e:2c:1f:98:33:89:a4:03:a5:20:65:67:
c9:2e:0b:e1:f2:e0:c8:0a:d5:0f:61:da:d6:b1:d9:4a:a4:10:
1f:f0:1e:fc:46:82:36:30:a4:43:cf:86:10:1f:07:5b:a3:b7:
5d:00:1d:87:3f:bb:3a:72:cb:60:d4:b1:98:dc:76:c5:fb:ad:
a9:0a:40:9c:e8:a0:29:b5:63:da:26:1e:c6:96:ac:15:7f:51:
f8:c3:44:10:81:dc:5d:1c:c1:43:30:15:96:b7:cd:66:4c:04:
94:cc:12:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:06 2026 by rpki-client