This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3136332e3232382e302e302f31362d3136203d3e203538353933.roa
File: 3136332e3232382e302e302f31362d3136203d3e203538353933.roa (raw, json)
Hash identifier: McQVkD6zpkjnYd8Gth5kQsmIhEdOBEHwxMGRARJU1cE=
Subject key identifier: D1:CC:BD:B2:15:73:59:3E:1E:9E:1F:2B:FB:99:E9:9D:2E:13:36:EB
Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Certificate serial: 0132BF91EAFA578BFC19B9B9515C0F45D2F6C008
Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3136332e3232382e302e302f31362d3136203d3e203538353933.roa
Signing time: Tue 20 Jan 2026 02:08:22 +0000
ROA not before: Tue 20 Jan 2026 02:03:22 +0000
ROA not after: Tue 19 Jan 2027 02:08:22 +0000
asID: 58593
IP address blocks: 163.228.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:32:bf:91:ea:fa:57:8b:fc:19:b9:b9:51:5c:0f:45:d2:f6:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Validity
Not Before: Jan 20 02:03:22 2026 GMT
Not After : Jan 19 02:08:22 2027 GMT
Subject: CN=D1CCBDB21573593E1E9E1F2BFB99E99D2E1336EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:41:d9:de:10:4c:3a:75:eb:ae:74:15:b1:
d8:b0:49:c8:94:05:ec:e5:fb:99:21:b0:23:a2:da:
3f:58:d2:70:0f:50:1b:b7:82:bf:1d:05:e7:d0:2a:
d2:6e:6b:67:ba:25:dc:01:c9:de:aa:71:5a:9a:7e:
72:9f:ce:cd:c5:d7:10:f6:31:b0:2e:d8:96:a7:db:
0a:62:10:ba:ff:3b:56:71:82:37:fe:00:ed:8e:35:
fb:57:77:f3:4b:66:1c:1c:68:f7:e7:85:01:3a:6f:
b3:0e:ab:39:9a:27:ad:75:0a:02:15:91:12:26:db:
8b:f3:1c:89:6b:64:13:2c:5c:12:4c:77:9d:88:e1:
ec:15:ab:25:5b:64:c1:0d:05:28:72:89:bc:20:a4:
de:f6:c1:cd:15:69:e0:00:ff:5b:cb:4c:75:9d:25:
fb:8f:b9:fe:fa:fd:16:2c:71:67:82:98:c4:7d:a7:
94:94:66:2f:fe:a7:17:b7:d5:85:6f:5e:f0:61:40:
e2:9a:a9:be:48:da:61:15:1b:e8:2a:41:23:9b:12:
96:80:60:f2:d4:d0:86:5f:72:e6:75:b8:46:d2:bd:
02:b3:d7:fe:c7:57:11:a1:48:65:a4:aa:2c:fb:2c:
20:e7:69:15:97:49:ed:7b:a6:90:32:5b:93:61:1a:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CC:BD:B2:15:73:59:3E:1E:9E:1F:2B:FB:99:E9:9D:2E:13:36:EB
X509v3 Authority Key Identifier:
keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3136332e3232382e302e302f31362d3136203d3e203538353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:a5:30:9c:78:b9:b0:ff:da:1f:86:45:fb:3f:0e:9b:3c:c4:
9b:38:45:68:b4:91:98:ea:bf:8b:49:f5:82:15:f2:a9:83:87:
56:ac:26:3b:17:6d:6a:cc:05:91:dd:43:5a:b0:15:99:40:8d:
f5:b9:36:b2:07:e0:50:fa:56:bc:20:43:bf:60:55:ec:3c:30:
d6:92:16:b8:35:aa:91:ba:e1:02:ba:af:1e:59:66:82:86:7d:
c1:b7:f1:53:c8:fe:b0:03:87:f0:a5:07:3c:40:6b:36:98:5e:
2c:0a:f2:d9:2e:f6:cb:fb:52:c9:35:a5:a3:56:8e:78:c2:e2:
e5:53:09:a4:fb:83:7e:89:24:72:d0:e0:23:7f:68:a9:c7:f9:
88:1e:cc:39:62:e2:f9:c4:93:cf:a9:52:ee:55:3c:2d:a9:b7:
13:96:39:48:f8:c9:d3:02:69:77:6b:57:20:5d:2b:a4:dc:25:
ba:3c:29:dd:a8:57:43:f3:11:ad:c8:28:b1:28:5c:74:d5:36:
a2:30:29:ce:6f:71:e4:0c:dc:72:80:3a:4a:9a:d6:61:d6:8d:
78:23:49:ed:4e:3e:7c:6b:87:b5:f9:6a:14:ae:b8:cd:8f:c5:
27:80:7f:40:a7:aa:f4:7a:14:b6:1c:c5:e2:2c:32:fa:ce:6b:
a2:46:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:48 2026 by rpki-client