This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/323430303a386663303a3a2f33322d3332203d3e203337393639.roa
File: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (raw, json)
Hash identifier: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=
Subject key identifier: F0:80:B3:68:46:14:48:CB:68:64:3D:E5:8A:51:98:65:DD:F0:7F:B6
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 470C4ED91B4DF300A60D05FE48A14C48E3A72824
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/323430303a386663303a3a2f33322d3332203d3e203337393639.roa
Signing time: Tue 20 Jan 2026 02:23:48 +0000
ROA not before: Tue 20 Jan 2026 02:18:48 +0000
ROA not after: Tue 19 Jan 2027 02:23:48 +0000
asID: 37969
IP address blocks: 2400:8fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0c:4e:d9:1b:4d:f3:00:a6:0d:05:fe:48:a1:4c:48:e3:a7:28:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: Jan 20 02:18:48 2026 GMT
Not After : Jan 19 02:23:48 2027 GMT
Subject: CN=F080B368461448CB68643DE58A519865DDF07FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:17:d2:ea:a8:da:2e:3f:c2:fd:78:e6:4f:
e0:93:ce:b3:8d:00:1c:7a:2b:c8:6d:02:f4:38:df:
34:de:82:93:4c:67:2e:4a:17:0d:ba:90:62:65:8a:
ce:39:2b:ad:b8:3d:08:49:b2:1e:9b:49:40:19:3f:
30:9c:69:95:fd:e4:e0:b3:8e:82:ba:07:ef:91:f2:
b6:9b:71:93:73:22:e9:84:c4:28:32:98:75:bf:1b:
37:64:60:60:0e:0f:78:8c:60:74:8e:7c:ba:a4:50:
c6:38:bb:5d:80:88:a9:f1:c3:79:33:3d:0a:84:a2:
74:b8:10:92:c8:91:2d:45:f6:1f:fb:3c:24:30:fa:
f7:5d:2d:33:9e:1f:cd:b0:ee:11:5d:8d:40:a4:3b:
e9:78:66:dd:db:ae:60:3d:75:2f:29:ce:e9:3b:01:
27:1f:92:8d:67:ec:12:b1:f0:c6:5d:a7:c1:64:60:
e7:1b:84:56:11:6b:39:57:f8:f5:67:c5:ec:68:9b:
2a:ca:b7:67:d9:26:03:19:30:7a:1f:cb:fd:8d:1e:
8d:f8:2c:a4:6c:30:7a:db:0e:e3:ee:8c:55:0e:3d:
bc:6e:c6:d0:85:d8:dc:5b:a8:c5:d9:69:d4:43:0f:
6e:46:1f:94:ec:13:57:af:52:a7:89:43:58:ba:27:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:B3:68:46:14:48:CB:68:64:3D:E5:8A:51:98:65:DD:F0:7F:B6
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/323430303a386663303a3a2f33322d3332203d3e203337393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8fc0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:0c:07:8d:01:2d:fe:8a:f2:2c:db:50:be:dd:84:fd:4b:3e:
85:e7:6b:c5:82:84:ee:8d:3b:64:c4:b3:96:53:01:ef:a8:f4:
9d:b3:1a:71:9e:2a:a5:1c:6f:3d:85:d0:1b:f1:bb:60:f3:2e:
3b:11:5a:a0:2b:43:a2:17:36:a3:d8:84:df:aa:2c:dc:a0:ef:
ee:58:ec:d4:16:9c:06:08:f0:96:5f:33:3a:01:fb:85:5d:f2:
a8:fa:7e:db:fd:c7:b2:59:85:d7:4b:22:f7:51:7e:f3:cf:a8:
20:ad:3d:48:81:4f:31:a5:0b:b5:cc:15:a8:c2:a2:5b:4b:0c:
d6:f8:a6:d6:10:aa:b8:19:24:61:56:10:0b:8e:4d:4d:0a:9f:
cf:fb:28:71:74:49:36:fc:29:9b:7b:c3:0e:27:97:66:70:a5:
87:58:31:bd:20:41:9b:44:5f:a6:18:28:be:1f:1b:5d:1a:86:
c5:86:5b:4b:39:95:8e:dc:e9:9f:01:b6:b2:d8:a7:a7:70:fb:
fc:b2:a9:8c:58:6d:d8:3c:65:4c:30:6b:2f:b8:7b:97:14:d6:
21:1f:bf:e0:77:a6:40:e7:46:f2:b8:5f:7d:2c:16:20:37:78:
6d:77:71:e2:92:b7:a8:4d:cc:83:1e:f3:40:28:2e:8d:35:c8:
78:82:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:05 2026 by rpki-client