This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35392e302f32342d3234203d3e203633353636.roa
File: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (raw, json)
Hash identifier: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=
Subject key identifier: 72:BF:8F:8B:F7:07:49:38:ED:0D:FA:43:B7:65:6B:CC:2E:CC:10:92
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 46881CD7212DF39B872E5D1516C380571FB6FA37
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35392e302f32342d3234203d3e203633353636.roa
Signing time: Tue 20 Jan 2026 02:10:55 +0000
ROA not before: Tue 20 Jan 2026 02:05:55 +0000
ROA not after: Tue 19 Jan 2027 02:10:55 +0000
asID: 63566
IP address blocks: 118.194.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:88:1c:d7:21:2d:f3:9b:87:2e:5d:15:16:c3:80:57:1f:b6:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jan 20 02:05:55 2026 GMT
Not After : Jan 19 02:10:55 2027 GMT
Subject: CN=72BF8F8BF7074938ED0DFA43B7656BCC2ECC1092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:cf:1a:de:65:78:51:04:b8:25:d4:c7:66:
54:5d:7f:ff:31:b3:f1:54:1f:a3:7c:b7:36:55:5b:
04:28:35:65:04:32:18:a3:ab:82:ae:0e:d7:d5:71:
68:d7:41:3e:92:fe:ef:49:b2:b6:eb:51:ec:f9:1f:
83:4d:90:1b:57:02:9f:9f:a3:b4:a0:29:23:e5:88:
01:2c:c9:ce:1e:56:2f:16:dc:2c:ff:dc:1d:4d:44:
2d:3d:f0:21:01:0f:20:8d:f8:d8:f8:8c:4b:c4:86:
f8:ae:b7:5f:eb:a7:fe:c8:68:cd:40:62:0a:dc:26:
d6:3f:6a:7f:12:f8:49:52:b9:33:ea:ab:b4:5d:b9:
ee:69:1a:73:40:14:7d:d8:03:a0:ca:bf:37:2e:75:
70:64:15:3e:f6:7f:1a:93:b5:02:06:3d:74:d9:6f:
13:d5:c8:19:bc:ef:ba:72:20:f4:e0:43:a4:39:01:
8e:5c:b4:29:f8:11:7b:0e:d7:77:5f:72:05:be:ee:
42:bf:e5:ac:ce:cb:7e:a3:1d:5f:42:c7:45:26:56:
0b:46:0f:20:a6:2c:fe:ce:7f:6e:e8:41:b1:43:0a:
30:6c:3a:86:ac:62:35:65:18:77:8e:90:28:98:c9:
d0:c0:cf:19:c3:b2:a1:c0:50:8a:eb:81:54:0a:2c:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:8F:8B:F7:07:49:38:ED:0D:FA:43:B7:65:6B:CC:2E:CC:10:92
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35392e302f32342d3234203d3e203633353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.194.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:eb:1f:aa:0f:2d:fd:37:cf:2c:31:8a:3d:0e:9a:f7:3b:f8:
d9:6e:5a:1a:a1:80:5d:77:4b:6a:06:a3:7e:c7:a1:c9:e3:16:
6c:f7:5e:1c:44:42:10:3a:52:ae:81:54:6d:32:2f:0c:89:21:
55:09:ef:21:42:ae:e9:55:de:d2:eb:7b:f2:2c:e9:d0:5a:7b:
83:bf:85:16:c7:ea:44:a5:49:f6:ee:c6:81:e1:2d:0f:8f:c9:
cd:f6:16:3a:03:65:87:c1:c2:81:bd:a0:02:76:ee:ee:d5:ae:
be:8c:c9:13:7f:d7:92:0a:6c:a4:16:f8:e4:ac:c3:1e:02:f0:
95:e8:a2:59:f1:6d:a6:73:39:f4:0f:5a:e2:ae:32:7a:79:ac:
70:6c:e4:df:c9:d1:32:b4:88:6e:42:ae:94:98:a1:78:d0:ec:
43:f4:aa:3c:e0:e1:2e:ff:f3:dc:96:e7:e8:83:7c:ca:86:1b:
a9:c9:bb:c8:0c:ce:93:e9:c7:e2:13:73:1b:5b:20:99:fe:52:
1f:e8:35:de:ba:92:9a:79:51:71:f8:74:52:1d:5e:0a:5c:03:
3a:f6:40:3f:ae:f0:b4:93:5f:03:0d:aa:88:21:e7:04:1f:19:
e9:47:d0:b8:7d:02:85:ae:57:e0:fb:94:90:9f:fb:e3:70:92:
1d:7c:11:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:08:22 2026 by rpki-client