This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e36342e302f31382d3234203d3e2034383131.roa
File: 3131382e3134352e36342e302f31382d3234203d3e2034383131.roa (raw, json)
Hash identifier: C9aEBt/k3BgFVGqdpCLP2fIbacua1N2BsURk3cTp+VA=
Subject key identifier: 0E:C4:A3:30:CA:79:9C:40:C7:17:9A:A8:F6:3A:62:CB:66:E1:E8:15
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 7AA1369F7C1F45C682FCA795C8E413DA2E5E6D0D
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e36342e302f31382d3234203d3e2034383131.roa
Signing time: Tue 20 Jan 2026 02:09:43 +0000
ROA not before: Tue 20 Jan 2026 02:04:43 +0000
ROA not after: Tue 19 Jan 2027 02:09:43 +0000
asID: 4811
IP address blocks: 118.145.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a1:36:9f:7c:1f:45:c6:82:fc:a7:95:c8:e4:13:da:2e:5e:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:43 2026 GMT
Not After : Jan 19 02:09:43 2027 GMT
Subject: CN=0EC4A330CA799C40C7179AA8F63A62CB66E1E815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:11:30:dc:4e:fb:c1:3f:ca:1b:7f:f3:ec:
6b:ff:97:56:bd:10:5b:da:22:48:cf:a7:39:df:1b:
8d:df:36:1c:ee:0f:e6:57:c7:7f:11:c7:1b:e6:78:
66:4a:04:01:a7:7d:61:36:8f:1f:0e:08:2f:d3:11:
31:5f:a1:3e:00:80:80:5d:f9:e7:32:f4:e5:b9:8f:
ce:71:b3:85:27:7e:6a:a5:00:11:63:21:16:ec:59:
15:85:6c:42:c9:cf:3d:1b:d7:fd:37:2e:04:f3:dc:
57:70:ae:1a:cc:ed:07:32:1f:22:84:22:bd:79:b2:
61:39:e0:48:38:ff:6f:58:47:74:d8:bb:cf:aa:f5:
d1:65:86:27:dd:2c:eb:1b:3c:ed:88:10:67:8b:5c:
cd:59:4e:fa:b7:d9:34:7c:c4:89:43:3c:f9:25:be:
82:e3:36:f1:25:22:9c:a8:5d:24:67:6f:60:9b:c3:
70:4c:d6:cb:58:70:26:89:a6:9b:21:2d:fe:15:af:
71:e3:f4:20:20:02:92:31:cb:d0:08:33:24:90:04:
5d:82:c2:0d:7a:88:c5:4a:c7:56:78:29:0f:89:17:
4f:6e:c5:f7:ad:81:ef:20:7e:d9:c7:70:b2:cd:82:
fe:ba:6c:e6:8a:fc:e3:62:f7:41:ac:93:62:15:e4:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C4:A3:30:CA:79:9C:40:C7:17:9A:A8:F6:3A:62:CB:66:E1:E8:15
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e36342e302f31382d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.145.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:41:68:99:c5:c4:c3:16:91:f1:f4:86:14:af:eb:a0:48:52:
50:c4:f1:d1:a8:ad:76:a2:4d:23:4f:94:02:60:de:8b:55:96:
0b:47:56:cd:ec:fa:4c:5a:82:58:74:97:3d:b6:25:02:3e:ff:
04:41:cb:d9:f9:25:2c:3b:66:1f:cc:8b:d9:3d:38:00:8e:da:
9a:41:80:ff:9a:3d:9c:a3:04:0c:b8:e3:3e:e1:e3:a9:2f:c2:
bf:8d:63:6c:fa:bb:24:2b:3c:72:57:0c:db:22:26:14:2e:cf:
f4:f8:b5:b3:77:0a:6f:2b:ea:3e:5a:5b:e0:98:ce:4f:24:d9:
dc:59:59:28:00:f0:07:bb:0f:62:2c:66:da:bc:b4:1d:c3:02:
1c:60:4a:f7:8f:82:44:76:66:6b:dc:7c:84:9c:f9:ea:34:b3:
01:9f:96:53:7a:30:5b:39:2f:d8:9c:dd:96:ff:6c:f8:1b:9e:
52:19:b5:28:da:86:ae:70:1d:84:e9:74:c6:7a:64:d7:fe:71:
9a:8a:bf:03:1e:68:f7:ce:39:05:1d:3e:45:62:8e:b0:63:23:
46:ef:97:82:0c:77:08:a0:2a:92:f6:cb:66:2e:c0:aa:07:bb:
86:07:fc:7c:aa:dd:cd:15:4c:0e:0a:87:d6:23:bc:2a:a2:8c:
c1:25:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:41:51 2026 by rpki-client