This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e3132382e302f31372d3234203d3e2034383131.roa
File: 3131382e3134352e3132382e302f31372d3234203d3e2034383131.roa (raw, json)
Hash identifier: UZBpE5YZ7iCQ9d+VD995H+yPqLc3YTQdxypL17Pgf6Y=
Subject key identifier: E8:09:33:EE:F7:DC:3C:48:3C:DC:D8:F4:50:D5:47:DB:28:8B:74:5E
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 1813AFCF0082950C88765E1114988E3208A88935
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e3132382e302f31372d3234203d3e2034383131.roa
Signing time: Tue 20 Jan 2026 02:09:45 +0000
ROA not before: Tue 20 Jan 2026 02:04:45 +0000
ROA not after: Tue 19 Jan 2027 02:09:45 +0000
asID: 4811
IP address blocks: 118.145.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:13:af:cf:00:82:95:0c:88:76:5e:11:14:98:8e:32:08:a8:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:45 2026 GMT
Not After : Jan 19 02:09:45 2027 GMT
Subject: CN=E80933EEF7DC3C483CDCD8F450D547DB288B745E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:2b:c9:d7:85:96:66:77:bb:5e:2f:2e:a3:
c1:01:f1:a0:d9:ba:4e:11:21:41:3c:b8:62:b8:2b:
1a:5c:7e:85:7b:48:1b:65:e1:37:b7:86:ed:36:f8:
c3:3a:05:3c:9a:dd:da:3c:e2:71:f9:c2:dd:f8:ce:
2a:cd:8f:dd:7f:f4:f0:46:c6:64:04:16:57:32:b3:
3e:ca:d5:e0:52:d4:c1:5c:b5:e4:3d:99:df:96:e0:
e9:65:1a:4e:f2:0e:b2:45:f3:d7:31:57:7f:ce:3c:
51:5b:83:6b:a0:d7:c1:9e:34:91:84:c3:af:9e:c6:
f7:ed:d5:2f:55:2f:1f:bf:5b:bd:9d:70:2d:a0:4b:
13:d6:a0:81:a8:7e:d3:d4:37:ad:f8:e2:f7:a9:8b:
fb:94:b6:7c:4c:df:15:a3:70:9a:54:83:33:96:5d:
3f:bf:41:85:2e:5f:a6:09:4a:49:fb:df:61:00:01:
7c:31:41:0d:34:6b:f5:f7:b2:83:8c:90:29:1c:39:
0f:12:4d:2c:c2:67:5d:a8:13:49:34:4a:0b:ae:26:
81:ec:e8:4e:b8:cb:7d:f8:92:26:9f:67:23:77:68:
11:a2:84:52:23:78:2b:a6:5f:46:5f:11:cc:d6:db:
6a:74:9e:f9:80:d6:2e:bd:83:60:a2:87:50:bf:7b:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:09:33:EE:F7:DC:3C:48:3C:DC:D8:F4:50:D5:47:DB:28:8B:74:5E
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e3132382e302f31372d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.145.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:36:b1:89:53:17:22:c2:66:86:ee:7a:55:ce:53:81:f0:50:
42:4b:23:04:41:5e:3f:69:b7:36:72:6d:27:d8:7b:cd:41:ba:
5a:92:1f:3a:63:04:74:e1:4e:1d:b5:b5:96:ff:30:71:57:37:
5e:4f:95:eb:f7:b4:72:a4:76:73:69:f4:66:3e:cd:e4:2e:15:
d6:9b:b4:bd:c6:fe:ec:40:d1:6d:28:9b:83:48:ad:51:df:8d:
b6:0a:93:e8:9a:2d:52:0d:43:3c:4a:9a:87:31:28:ce:6a:05:
e9:0a:56:b4:c4:70:4e:b2:bc:7d:7b:70:60:64:04:56:d3:27:
fd:1a:d4:ba:57:52:73:7f:b3:82:19:5d:f5:fe:c9:f7:02:c7:
0e:da:11:c6:f3:3a:b2:97:4a:2e:b1:dd:86:46:6c:a7:bb:aa:
31:ea:34:01:06:ae:c0:80:16:27:ad:06:05:68:57:60:a9:4d:
9d:6a:c9:f6:d8:49:d2:07:f7:ea:47:08:ca:98:ed:b3:0e:8e:
ea:6a:4c:09:a6:ef:86:9f:40:13:06:d9:e8:4f:80:1e:d6:b7:
72:c3:2e:8a:b7:23:27:d7:e0:78:ad:31:64:97:af:ed:ca:9e:
47:81:0c:92:dc:29:b0:e9:3c:22:e4:3b:55:06:a3:26:c4:84:
77:5e:44:54
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGBOvzwCClQyIdl4RFJiOMgioiTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDVaFw0yNzAxMTkwMjA5NDVaMDMxMTAvBgNV
BAMTKEU4MDkzM0VFRjdEQzNDNDgzQ0RDRDhGNDUwRDU0N0RCMjg4Qjc0NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRbivJ14WWZne7Xi8uo8EB8aDZ
uk4RIUE8uGK4KxpcfoV7SBtl4Te3hu02+MM6BTya3do84nH5wt34zirNj91/9PBG
xmQEFlcysz7K1eBS1MFcteQ9md+W4OllGk7yDrJF89cxV3/OPFFbg2ug18GeNJGE
w6+exvft1S9VLx+/W72dcC2gSxPWoIGoftPUN6344vepi/uUtnxM3xWjcJpUgzOW
XT+/QYUuX6YJSkn732EAAXwxQQ00a/X3soOMkCkcOQ8STSzCZ12oE0k0SguuJoHs
6E64y334kiafZyN3aBGihFIjeCumX0ZfEczW22p0nvmA1i69g2Cih1C/eyFhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU6Akz7vfcPEg83Nj0UNVH2yiLdF4wHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTY5MTY1MC8wLzMxMzEzODJlMzEz
NDM1MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEB3aRgDANBgkqhkiG9w0BAQsFAAOCAQEAAjaxiVMXIsJmhu56Vc5TgfBQ
QksjBEFeP2m3NnJtJ9h7zUG6WpIfOmMEdOFOHbW1lv8wcVc3Xk+V6/e0cqR2c2n0
Zj7N5C4V1pu0vcb+7EDRbSibg0itUd+NtgqT6JotUg1DPEqahzEozmoF6QpWtMRw
TrK8fXtwYGQEVtMn/RrUuldSc3+zghld9f7J9wLHDtoRxvM6spdKLrHdhkZsp7uq
Meo0AQauwIAWJ60GBWhXYKlNnWrJ9thJ0gf36kcIypjtsw6O6mpMCabvhp9AEwbZ
6E+AHta3csMuircjJ9fgeK0xZJev7cqeR4EMktwpsOk8IuQ7VQajJsSEd15EVA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:52 2026 by rpki-client