This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3232372e382e302f32322d3232203d3e20313331353734.roa
File: 34332e3232372e382e302f32322d3232203d3e20313331353734.roa (raw, json)
Hash identifier: iv/XuliIV+Q88lkU+kMXBj2h26tKig58b01TXXJyRSw=
Subject key identifier: 4E:BB:90:5B:68:C8:02:76:91:B3:D5:6B:4A:F0:1C:CE:8D:57:2B:93
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 5A8C382DA8C7B248781C8C40DBF05AD0AA5F64A5
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3232372e382e302f32322d3232203d3e20313331353734.roa
Signing time: Tue 20 Jan 2026 02:18:03 +0000
ROA not before: Tue 20 Jan 2026 02:13:03 +0000
ROA not after: Tue 19 Jan 2027 02:18:03 +0000
asID: 131574
IP address blocks: 43.227.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8c:38:2d:a8:c7:b2:48:78:1c:8c:40:db:f0:5a:d0:aa:5f:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Jan 20 02:13:03 2026 GMT
Not After : Jan 19 02:18:03 2027 GMT
Subject: CN=4EBB905B68C8027691B3D56B4AF01CCE8D572B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:a8:96:a6:b3:04:25:2e:9f:55:67:0b:72:
18:00:5b:a0:69:5d:d2:2f:b7:c0:10:ca:16:d3:eb:
2c:f7:eb:af:89:67:09:e3:be:c6:79:b0:a2:bb:11:
ae:01:4d:9b:d2:46:c8:c7:ba:2e:7c:64:1b:45:7d:
e0:9b:5e:43:5d:9c:d8:f2:a4:b4:18:75:35:85:6e:
e2:2b:f1:6b:11:e3:e7:0c:bd:0e:01:ab:34:3d:e8:
be:d7:4a:19:19:2c:af:61:ab:f5:ee:eb:6c:03:1f:
84:76:4c:86:c9:20:8e:23:b5:33:8e:36:a9:30:b1:
a0:a2:8e:e8:cc:98:a0:4a:07:e8:80:6a:93:e1:a3:
39:ff:76:15:0e:59:f3:1a:16:12:a7:e8:96:70:4d:
f6:c6:4d:4b:ec:11:f4:28:33:f7:e0:c6:3d:8a:5b:
a0:f0:23:f7:31:1d:dc:02:ef:aa:aa:df:22:f4:ca:
1d:bd:83:fd:88:26:0e:90:e4:67:40:2b:a1:09:76:
67:50:58:a0:16:cf:47:23:9b:b7:67:c8:1a:b6:d3:
63:db:2f:5a:20:b9:75:b4:b8:56:9d:72:ea:e2:a9:
27:cc:77:9c:e0:56:87:63:b0:2d:e9:c0:41:dc:16:
89:9d:d1:90:d8:bd:2b:de:87:e1:43:49:7f:4c:81:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:90:5B:68:C8:02:76:91:B3:D5:6B:4A:F0:1C:CE:8D:57:2B:93
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3232372e382e302f32322d3232203d3e20313331353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.8.0/22
Signature Algorithm: sha256WithRSAEncryption
28:e7:bd:36:1e:75:a6:c0:59:6a:b6:3a:5c:85:3d:c4:13:38:
01:0c:e2:3b:f0:11:a7:16:da:14:c4:e7:08:cf:ae:b8:d3:b3:
0d:1d:89:9f:76:53:06:dd:01:e1:99:fb:dc:c9:1a:58:b6:29:
05:f2:08:7c:ce:35:a3:f4:14:1e:36:97:a9:dd:ae:61:1c:21:
bd:a3:ce:35:67:a8:a2:cc:d2:0a:63:50:c7:26:74:51:a0:89:
25:02:49:b6:47:76:5d:e4:28:10:ed:23:6f:07:7b:ad:e3:80:
e0:81:fe:d9:b4:ba:3d:6c:87:02:c6:9f:76:04:a0:99:fc:e9:
50:e2:da:09:04:2b:2c:94:18:5c:c9:35:fc:97:cb:1d:9f:2c:
36:f9:91:78:40:a1:ee:7e:b9:5c:cf:15:ca:2b:90:80:27:7a:
27:90:d2:55:07:05:e0:43:f2:e5:15:56:0d:ac:22:54:a4:4b:
43:f0:ad:02:87:81:52:2d:3a:68:d5:8a:3d:8f:1f:32:f9:34:
a7:8f:61:a0:b4:02:5b:e9:8c:9e:81:f5:5e:36:c2:04:96:d1:
fe:3a:8c:55:31:59:b6:c7:8c:7e:cd:48:51:24:af:db:9e:35:
70:51:56:7d:be:2d:d7:54:40:2b:a2:59:67:f7:0d:81:bb:23:
68:82:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:08 2026 by rpki-client