This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa
File: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (raw, json)
Hash identifier: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=
Subject key identifier: 93:65:88:01:CF:D1:6F:B4:D9:9D:76:B1:8A:10:F1:15:69:50:0E:5F
Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial: 06FA3610D8D8D4C13FA2B241C735C8ED6844A607
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa
Signing time: Tue 20 Jan 2026 02:20:21 +0000
ROA not before: Tue 20 Jan 2026 02:15:21 +0000
ROA not after: Tue 19 Jan 2027 02:20:21 +0000
asID: 146806
IP address blocks: 45.250.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fa:36:10:d8:d8:d4:c1:3f:a2:b2:41:c7:35:c8:ed:68:44:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Validity
Not Before: Jan 20 02:15:21 2026 GMT
Not After : Jan 19 02:20:21 2027 GMT
Subject: CN=93658801CFD16FB4D99D76B18A10F11569500E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:3f:3e:d7:6f:5a:a1:e9:d7:8c:cb:fd:2a:
cc:a0:ce:9a:9c:d1:e2:86:b3:e7:32:91:16:15:c5:
b6:e6:18:9a:2a:57:cf:36:89:a6:86:88:7e:f9:e3:
db:8f:17:6f:99:96:1b:48:33:4d:dd:5f:76:5a:2d:
e8:05:a0:2e:f5:da:cd:50:30:a3:6a:2b:9b:82:ee:
bf:cb:31:d2:28:1e:cf:83:9e:28:15:52:e9:cd:bd:
0c:9d:ea:45:19:d0:99:5d:43:0a:3f:a7:fd:2a:6a:
cb:df:e9:58:80:4a:a9:57:ff:16:90:68:94:9b:0a:
d3:b7:03:46:53:8a:c6:29:1e:44:b6:d5:e2:c8:39:
ca:de:79:00:71:2a:1f:a3:87:c7:db:9b:71:96:7d:
71:23:04:4d:35:5d:e9:95:c7:06:b6:5b:e9:90:76:
be:cd:62:7e:db:9d:ac:01:aa:8e:41:10:41:4f:6e:
7e:8b:af:7f:a6:4f:d7:46:8f:90:88:33:63:3b:2f:
a1:a0:56:fa:4f:d7:45:67:13:ff:2f:50:00:cf:27:
bc:1b:fc:b6:12:d2:49:40:f8:07:e3:1d:6c:24:1c:
1a:b0:37:e8:3c:b4:61:2f:13:00:a8:a6:f5:c6:f3:
e6:87:d3:c9:95:7d:1e:0f:30:f9:dd:cf:e3:3b:f1:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:88:01:CF:D1:6F:B4:D9:9D:76:B1:8A:10:F1:15:69:50:0E:5F
X509v3 Authority Key Identifier:
keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.154.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c7:a2:35:9c:31:08:94:8a:bb:fb:e9:0b:ce:cb:0c:a8:3c:
30:6d:e5:d4:24:c7:05:69:21:c5:ab:31:63:81:09:2b:db:e0:
d5:d4:67:ce:e7:e5:8c:4d:ac:44:d8:34:70:e6:c6:37:2a:a5:
f9:94:bf:29:e5:14:a1:52:15:be:67:5e:3e:b9:02:d8:d1:ef:
40:a4:ae:75:96:9a:3e:b0:30:b1:79:07:74:92:24:6d:48:b0:
01:70:09:00:07:3b:d0:02:3e:0f:1a:d2:05:48:08:d9:a1:31:
0b:97:0a:82:27:42:b9:ef:12:08:a7:bc:a9:1d:68:62:20:ac:
00:d6:a3:d0:f3:9e:09:63:7d:8f:71:1e:91:79:e4:bd:5c:49:
7d:bf:a5:b5:f1:e3:6e:28:d4:ef:f3:10:f2:7c:81:2d:01:e4:
3c:38:88:a3:61:4a:65:14:f6:cd:da:ea:d0:28:9b:fa:28:8b:
00:2b:00:00:8f:33:fb:66:9d:c2:13:13:dd:42:b7:29:37:26:
5a:c1:95:16:f0:ab:c3:92:c6:22:05:28:28:86:bd:e4:cf:40:
0e:2e:20:42:68:67:99:67:58:12:03:84:9f:d3:1f:13:f4:3a:
15:f0:92:59:4f:04:fe:96:35:fb:9a:f4:1f:1e:b6:0b:e5:b1:
bc:12:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:36 2026 by rpki-client