This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313336393538.roa
File: 3131382e3134352e33322e302f31392d3234203d3e20313336393538.roa (raw, json)
Hash identifier: UiamN2wkzqZhkNz40PE3trMYi3CAd1o2tlIYJoTv1Uo=
Subject key identifier: 3B:71:B8:C7:93:72:F2:B1:FF:C7:EF:74:45:20:5F:92:C1:E4:CD:C0
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 41BA74C88377178CFB1F6003A06D35325F916607
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313336393538.roa
Signing time: Tue 20 Jan 2026 02:09:42 +0000
ROA not before: Tue 20 Jan 2026 02:04:42 +0000
ROA not after: Tue 19 Jan 2027 02:09:42 +0000
asID: 136958
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ba:74:c8:83:77:17:8c:fb:1f:60:03:a0:6d:35:32:5f:91:66:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:42 2026 GMT
Not After : Jan 19 02:09:42 2027 GMT
Subject: CN=3B71B8C79372F2B1FFC7EF7445205F92C1E4CDC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:71:4c:49:f6:3c:7b:53:76:cf:f4:fa:3c:
a9:9c:0c:2a:17:41:18:45:bf:f7:98:ef:26:01:f3:
04:fd:8f:db:90:ea:c3:f4:25:35:3b:ed:5c:76:59:
cf:25:bb:b4:34:37:16:c5:5a:8d:b7:2b:d2:81:c4:
29:04:d7:0b:23:b2:4c:2c:c5:a3:5c:5f:34:3c:c0:
95:57:b7:f0:1d:31:0b:51:2a:9e:d0:12:e9:a7:43:
54:3a:16:0d:d7:5a:8e:ea:73:00:c5:93:96:c8:01:
b5:0c:2f:44:7d:fb:7f:e3:17:22:aa:9d:e3:1d:cf:
e9:33:22:f7:36:71:36:d9:3b:a3:e8:81:68:d3:01:
61:c2:65:82:9e:ad:13:39:9b:34:b1:1d:7b:90:fd:
d7:32:a3:c8:d0:35:de:e4:ec:85:de:97:23:73:20:
89:be:ae:20:21:56:37:1c:bc:93:a7:bb:47:c9:98:
af:88:7b:28:7c:16:99:4d:be:62:25:f0:f9:92:12:
e3:f0:e3:7c:5e:5f:48:ae:41:0d:af:42:d6:7b:1d:
2f:12:89:b1:4c:c7:11:6c:ec:9a:50:12:28:d8:ee:
ea:71:03:38:bd:3f:15:f7:e1:97:5f:8f:61:ca:5c:
17:42:fd:0f:6c:c4:12:c0:ce:31:ba:15:f0:62:15:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:B8:C7:93:72:F2:B1:FF:C7:EF:74:45:20:5F:92:C1:E4:CD:C0
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313336393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:c4:94:22:4f:fb:86:f6:80:7a:f9:c5:6d:8a:4e:b0:49:b7:
5b:fa:cc:c6:48:44:35:35:18:be:1b:fa:52:c9:40:2d:80:c2:
07:3b:ce:5e:83:fe:9f:92:86:c2:f1:c1:2d:ca:f0:e9:cf:63:
6d:53:07:26:d1:cd:c4:e2:3d:bc:f9:c8:41:93:a2:35:62:98:
77:de:62:13:a0:21:16:cc:f7:34:09:1e:e0:72:b5:ec:13:db:
29:e1:62:93:ed:73:41:8b:d7:a2:6d:b3:3c:c5:e6:f3:69:b6:
48:8c:d4:ea:1c:db:39:93:27:42:a3:66:4f:c6:45:f4:55:74:
aa:df:75:dc:68:fe:c7:75:db:7f:2c:a7:e9:31:da:db:fd:6b:
8b:a0:e5:57:77:2d:d5:97:c9:67:cc:c6:09:46:ba:9b:d1:63:
6f:8e:db:77:0f:14:0e:f5:8e:d4:d0:b0:98:75:b0:c3:a9:53:
ae:34:54:2a:f7:a9:3e:87:eb:48:29:e6:a3:d3:62:6d:52:5b:
08:ea:ac:fb:88:2b:67:5c:de:88:05:3b:4a:8c:00:e0:04:9d:
df:cd:9d:98:90:c3:ce:01:f9:e5:2f:0f:2e:d6:53:fd:8c:a0:
f0:df:ec:ca:4f:a3:32:5a:37:04:ad:bc:7e:7a:a3:5a:ad:06:
ec:7f:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:42 2026 by rpki-client