This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa
File: 3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa (raw, json)
Hash identifier: WvSyW7YTV1pD7rlW8kL0SgPBrbkm666YUP9aQtCGrCU=
Subject key identifier: F4:12:6D:6B:11:4F:DB:6F:B9:05:B4:35:BD:50:09:64:91:43:2E:DC
Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial: 7AF846D2762D189FE9AD1AA5670C822D537E04A6
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa
Signing time: Tue 20 Jan 2026 02:08:23 +0000
ROA not before: Tue 20 Jan 2026 02:03:23 +0000
ROA not after: Tue 19 Jan 2027 02:08:23 +0000
asID: 58593
IP address blocks: 139.219.128.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f8:46:d2:76:2d:18:9f:e9:ad:1a:a5:67:0c:82:2d:53:7e:04:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Validity
Not Before: Jan 20 02:03:23 2026 GMT
Not After : Jan 19 02:08:23 2027 GMT
Subject: CN=F4126D6B114FDB6FB905B435BD50096491432EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:68:e0:f1:b4:dc:4f:ed:69:1f:6e:7f:ff:
f8:f0:c4:db:44:83:06:1e:37:3a:b3:5d:4b:6e:c9:
9b:e2:6c:2b:af:82:d8:ed:c3:d8:5f:35:2e:19:a2:
36:be:73:ca:2c:62:be:7b:d2:21:8c:0b:b4:d2:fd:
96:c0:f1:19:24:86:d9:6c:39:d2:9c:a0:c7:d5:d2:
a5:41:e3:1f:0a:2d:d3:08:5a:1a:5b:cb:be:36:7f:
b3:57:d7:1c:c1:57:6d:17:0f:0a:5a:18:f3:c5:d8:
12:62:f1:eb:18:ab:5d:59:a1:0c:9f:e9:53:21:18:
26:16:56:16:89:b5:1d:dd:0d:ba:17:2f:aa:f0:b5:
09:44:07:af:36:2a:83:b7:73:32:50:1b:3e:c0:a7:
cd:0b:f5:a2:e4:75:18:c3:a9:b5:26:35:b6:ec:d4:
bd:5f:d4:e5:3f:32:28:8f:06:f7:27:db:a6:45:93:
1f:8d:de:3e:3e:33:9d:27:5c:af:cf:21:c6:a1:75:
0a:c6:f6:c1:a2:1b:d6:f8:c7:35:92:fc:94:09:f1:
59:f6:0d:e6:bd:0c:dc:f7:ee:c7:e9:87:29:8e:2c:
98:1f:88:84:b7:53:3d:54:18:b3:47:78:dd:67:66:
d9:e6:37:26:f8:52:be:f1:6f:1d:7c:91:c2:79:ea:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:6D:6B:11:4F:DB:6F:B9:05:B4:35:BD:50:09:64:91:43:2E:DC
X509v3 Authority Key Identifier:
keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.219.128.0/17
Signature Algorithm: sha256WithRSAEncryption
91:12:0c:bd:11:17:f8:34:6e:2d:af:0b:8a:86:75:48:b3:1d:
8a:08:3b:b8:9c:8a:d0:3d:1f:6f:99:3f:30:d8:f4:ea:57:77:
9c:f4:9e:fe:c8:b1:3c:e2:9e:d8:c1:15:68:39:72:9e:36:70:
6a:e4:36:d6:5c:3f:b1:32:d3:0a:03:88:8e:a3:c2:12:eb:3b:
3c:c4:f1:f5:ea:ee:21:ef:1e:a9:ac:ae:93:58:42:53:05:01:
cf:e7:9c:d5:de:61:c4:e6:bc:63:d5:b6:c9:fb:6e:ff:9b:a6:
32:34:41:1b:4b:4a:f3:3d:c0:e2:e4:07:89:c5:3c:1c:81:5e:
1d:10:e9:35:13:c0:fb:b7:b3:b5:a5:1d:1a:70:a9:88:17:ee:
90:c3:d1:c2:18:2e:c5:04:e5:ac:30:21:45:6e:9d:97:d7:a9:
57:14:7e:6f:16:0a:c3:1d:a4:7e:a2:c1:7e:21:3c:37:5d:4f:
e7:87:19:3b:94:f9:0e:30:d8:a3:b8:cf:b6:e3:f2:ce:61:be:
8b:3b:9a:f0:f2:f7:69:1a:f7:0b:3a:2f:9d:5f:fb:5f:26:5f:
10:9f:d7:bc:39:f3:ba:03:49:3b:58:f2:f4:1d:6a:2e:85:f0:
eb:d4:a4:51:52:0e:f7:92:a9:56:5f:33:75:70:df:33:a5:20:
f7:c9:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:25 2026 by rpki-client