This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e3132382e302f32342d3234203d3e203538353933.roa
File: 34322e3135392e3132382e302f32342d3234203d3e203538353933.roa (raw, json)
Hash identifier: gPIwBaPlCTBO3WEryWK2cMkayeCOg0/aQ/g2KIkD0xM=
Subject key identifier: 11:32:FA:B0:98:AF:61:EC:57:45:AA:DF:97:D0:DA:64:46:9E:E1:D2
Certificate issuer: /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Certificate serial: 068C8495D5E723D72D277F95FA527DA653ADE13A
Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e3132382e302f32342d3234203d3e203538353933.roa
Signing time: Tue 20 Jan 2026 02:08:21 +0000
ROA not before: Tue 20 Jan 2026 02:03:21 +0000
ROA not after: Tue 19 Jan 2027 02:08:21 +0000
asID: 58593
IP address blocks: 42.159.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8c:84:95:d5:e7:23:d7:2d:27:7f:95:fa:52:7d:a6:53:ad:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Validity
Not Before: Jan 20 02:03:21 2026 GMT
Not After : Jan 19 02:08:21 2027 GMT
Subject: CN=1132FAB098AF61EC5745AADF97D0DA64469EE1D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:4d:93:8b:08:c1:03:c2:38:78:7b:30:11:
83:25:4c:5d:f6:44:93:9b:b5:b8:e1:31:4b:3f:48:
f2:2c:08:e8:a5:37:44:c5:72:30:54:d9:22:60:78:
4c:68:82:2b:62:b9:93:a1:e5:ef:05:c2:79:87:0b:
24:29:43:4c:71:17:da:19:01:af:47:4c:98:50:f6:
c3:50:e5:10:0b:7c:43:17:da:4c:79:36:32:d5:5d:
ba:4d:80:01:81:fb:fa:59:67:d6:48:46:5b:b7:55:
3f:5a:a9:df:ff:78:0c:fd:24:9b:02:35:ee:87:cd:
a2:37:64:27:e3:ed:69:dd:e7:4d:c3:eb:6d:81:fe:
93:a7:0a:63:4e:f1:51:57:49:e8:52:23:9e:35:e1:
5e:ca:63:f0:72:11:ba:57:b3:01:6e:94:2c:8d:9b:
73:91:ad:62:e1:9c:ad:44:80:b6:d9:75:4e:c9:ef:
62:a2:36:a6:72:f0:8a:b5:eb:8a:95:e6:31:3a:34:
87:32:95:03:a5:ac:db:81:be:f6:5e:e3:61:60:63:
98:8a:ef:55:a9:1b:fe:7e:da:ba:e4:17:a8:25:86:
6a:cf:cb:ed:d2:a3:c6:44:18:96:25:36:cf:fd:bf:
5e:06:41:88:af:b7:3c:c1:96:d0:f0:bc:a1:65:fb:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:FA:B0:98:AF:61:EC:57:45:AA:DF:97:D0:DA:64:46:9E:E1:D2
X509v3 Authority Key Identifier:
keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/34322e3135392e3132382e302f32342d3234203d3e203538353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.159.128.0/24
Signature Algorithm: sha256WithRSAEncryption
87:01:57:9e:fe:18:98:b1:0a:d8:c2:bb:a6:e1:6b:b3:ec:b1:
11:7d:77:14:05:52:7d:b6:ff:4c:b9:c7:8c:70:9a:87:3a:42:
e7:28:5e:60:d9:62:0a:22:33:4e:b0:df:b6:30:f8:34:72:70:
6d:24:82:19:de:98:83:41:be:42:56:98:e1:ce:fd:1e:f4:fa:
e0:ed:be:bf:e1:79:25:56:30:fc:7b:63:af:62:65:20:5b:1b:
c5:89:07:09:c5:b3:4a:6f:bb:66:0b:cb:c8:e1:1f:b0:91:e7:
19:7b:6a:93:a8:90:c5:6c:de:cb:7a:48:ea:62:8e:c3:8f:74:
1e:3c:94:18:f1:44:13:4f:0c:42:37:44:0c:2a:47:48:50:29:
3b:e4:e3:50:f8:15:bd:15:57:23:20:8f:0d:ff:d0:1c:53:a3:
bf:8b:43:27:cc:6d:15:3f:c7:18:45:15:5c:34:bb:0e:4b:4f:
94:90:54:6b:42:d6:ac:1b:05:f6:39:cf:63:99:15:0d:53:02:
36:6e:0d:4f:01:85:ee:ad:2f:3d:d5:bc:c0:77:34:40:ee:11:
e1:5f:f2:48:18:2e:cd:27:ae:f4:97:1a:7a:18:31:1f:e2:b4:
01:26:f8:54:39:af:90:42:c3:e4:59:bf:3d:7a:6a:0a:58:2b:
65:5c:4c:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:33 2026 by rpki-client