This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e302e302f31362d3234203d3e2034383131.roa
File: 3138302e3138342e302e302f31362d3234203d3e2034383131.roa (raw, json)
Hash identifier: wcVpKlasf3u1irIxbC3y/8y2e2yOoN1HBYDv7e6+oTc=
Subject key identifier: 4E:1F:01:B0:D2:C4:37:E5:1D:75:8F:4E:46:A1:B3:35:3D:40:C3:77
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 1827539942BD5AC0449D2E18EF0E83A34D912EE0
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e302e302f31362d3234203d3e2034383131.roa
Signing time: Tue 20 Jan 2026 02:09:45 +0000
ROA not before: Tue 20 Jan 2026 02:04:45 +0000
ROA not after: Tue 19 Jan 2027 02:09:45 +0000
asID: 4811
IP address blocks: 180.184.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:27:53:99:42:bd:5a:c0:44:9d:2e:18:ef:0e:83:a3:4d:91:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jan 20 02:04:45 2026 GMT
Not After : Jan 19 02:09:45 2027 GMT
Subject: CN=4E1F01B0D2C437E51D758F4E46A1B3353D40C377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:0c:fc:02:c5:96:bd:38:4a:a8:87:fa:32:
43:da:79:d0:3d:6f:22:08:0c:47:2d:25:89:0d:87:
7e:13:c8:a7:89:24:2f:d0:b4:ac:72:ab:a7:c2:c5:
56:92:75:6e:6b:39:7e:a4:39:63:cb:42:3d:1a:a3:
b9:64:74:80:e6:72:1c:fd:ef:9d:6e:99:39:ce:5d:
8f:b8:0d:aa:14:22:b7:83:99:0e:9b:42:b7:2e:f8:
b1:67:50:75:ba:10:07:c9:21:05:0f:12:13:a1:99:
fc:3c:97:63:b2:e7:2c:b5:e3:27:9c:11:72:1e:c7:
7d:32:9b:00:02:ff:a0:64:7a:4a:a3:bc:20:0c:ba:
45:7c:55:54:dd:44:27:bb:32:0f:a8:26:86:f1:80:
b8:ce:f9:56:b9:fd:90:ce:e0:02:78:6f:48:de:2f:
39:38:d1:c9:8c:bb:0b:b9:bf:07:bb:3c:3f:d5:f5:
60:bc:35:a7:7f:b4:00:c9:9c:66:21:2f:69:1a:83:
1d:15:30:b2:ed:94:6f:1e:a9:ec:c1:5f:f1:7e:7c:
19:9e:dd:b8:77:10:14:19:7c:83:d8:24:f4:71:b8:
d0:87:9b:59:f5:9f:23:5d:08:f3:14:d3:3a:7f:4a:
77:bc:3c:e4:a2:71:9d:18:67:1a:3d:c3:a8:31:2c:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:01:B0:D2:C4:37:E5:1D:75:8F:4E:46:A1:B3:35:3D:40:C3:77
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e302e302f31362d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:8a:c9:ce:e7:d0:5a:38:32:1b:05:c4:92:ef:a6:87:d2:45:
cb:ad:08:e3:2b:58:2f:5b:db:27:db:98:42:f1:f8:95:6c:44:
bd:29:2d:8e:43:76:a2:a5:77:3c:08:1e:d0:f3:7c:02:c5:a0:
9b:74:27:83:e9:b3:db:fe:41:3e:84:5a:e1:65:3e:a5:4c:31:
f8:cc:4f:34:f4:19:94:01:79:6a:72:3b:b1:c7:e7:0c:e4:7c:
22:9d:18:7b:33:c1:d0:42:65:6c:dc:a8:76:52:19:91:99:7e:
c6:28:4c:51:c8:fb:aa:09:b6:e0:14:ec:fa:58:93:dc:dc:7d:
72:1a:4a:88:f0:87:da:03:44:b0:db:97:03:9e:d7:04:bf:f9:
bb:56:01:f4:cd:26:44:c1:97:06:7a:ea:59:d6:46:cf:ba:9b:
1b:a2:78:92:0e:ec:42:12:b9:f3:33:04:84:bb:b2:29:76:8b:
cb:24:74:49:74:de:eb:5a:db:ca:57:d0:58:6c:f0:db:b8:b4:
32:b7:ac:46:75:5a:1e:93:81:a8:9f:74:e0:c7:b4:e8:2a:83:
2e:89:9f:3d:e0:01:df:f9:0f:b1:c2:09:2c:73:10:f4:43:a7:
77:92:71:d2:24:1f:13:de:a6:46:42:4c:47:1a:0d:84:25:e5:
43:ac:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:59 2026 by rpki-client