This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39342e302f32332d3233203d3e203337393639.roa
File: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (raw, json)
Hash identifier: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=
Subject key identifier: 96:45:A9:98:73:EA:F1:91:BD:AB:89:A7:BE:7D:FA:D4:CE:DA:98:46
Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4
Certificate serial: 7FDF81DCD1662DAF763A6D0E6A6C3D494F168626
Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39342e302f32332d3233203d3e203337393639.roa
Signing time: Tue 20 Jan 2026 02:23:48 +0000
ROA not before: Tue 20 Jan 2026 02:18:48 +0000
ROA not after: Tue 19 Jan 2027 02:23:48 +0000
asID: 37969
IP address blocks: 157.15.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:df:81:dc:d1:66:2d:af:76:3a:6d:0e:6a:6c:3d:49:4f:16:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4
Validity
Not Before: Jan 20 02:18:48 2026 GMT
Not After : Jan 19 02:23:48 2027 GMT
Subject: CN=9645A99873EAF191BDAB89A7BE7DFAD4CEDA9846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:e2:15:90:41:d5:f9:89:d3:9c:32:f1:95:
80:7f:03:80:55:f7:ba:c8:cf:52:c8:c6:d5:a1:37:
f0:eb:05:13:ed:10:6b:f7:fc:75:0f:cf:b4:3f:13:
8b:fd:35:e0:b0:c6:86:38:46:c4:44:b4:7a:76:01:
87:2a:dd:03:b1:15:22:d5:61:58:c2:85:cb:54:da:
80:cd:f2:fd:d8:5c:98:83:b6:d5:3c:a4:86:62:35:
49:80:c5:14:b1:56:e3:18:f9:a7:57:e0:12:9d:e8:
74:1d:c3:b0:a7:45:05:7e:96:0c:cf:07:ff:92:52:
42:9c:f9:5f:05:c1:a3:7e:43:10:62:31:be:07:06:
4b:80:04:00:06:76:17:ec:ab:0d:8b:9c:e4:79:01:
7d:e8:8b:df:ea:8d:45:79:96:21:1d:6c:ed:11:14:
c0:cb:4c:10:b8:93:e6:ac:fa:22:56:ee:4f:fc:cc:
e0:6e:3a:a7:65:de:54:74:8d:26:8c:6d:3f:81:ee:
b4:11:16:db:00:23:92:6a:38:2d:6b:57:0e:2a:0b:
24:d0:3c:4b:89:da:20:69:07:9e:0a:9d:c2:6f:7d:
fd:ab:78:b1:52:9b:77:86:c8:8a:40:6f:c9:f8:ac:
23:c4:56:6b:28:ec:ed:bc:d2:1d:eb:c8:86:ab:e9:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:A9:98:73:EA:F1:91:BD:AB:89:A7:BE:7D:FA:D4:CE:DA:98:46
X509v3 Authority Key Identifier:
keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/3135372e31352e39342e302f32332d3233203d3e203337393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.94.0/23
Signature Algorithm: sha256WithRSAEncryption
62:14:b7:4a:79:51:f7:67:0e:70:25:37:05:9b:24:4b:71:46:
59:d1:1f:6b:d0:fe:a1:2a:bf:44:67:9e:e7:dc:d7:26:ac:35:
d1:9c:3b:d7:da:a9:3f:2d:ac:98:aa:e7:1f:27:46:7d:79:a2:
6f:2d:c0:7f:8b:32:bc:32:9d:4c:8d:65:5b:d7:cb:dd:44:3c:
9e:18:8e:34:ca:f1:e7:7a:9e:07:29:f4:68:1b:47:c3:7e:64:
43:de:be:38:ab:11:75:e7:5f:3f:2b:4d:ad:0a:a5:e5:c0:56:
82:4f:c5:a6:2a:de:06:da:2b:8e:6e:eb:49:15:9c:31:c9:eb:
8b:14:b1:5d:7b:f8:95:6b:d5:2f:ae:42:5c:a6:e6:3e:68:30:
f4:fb:89:41:70:cb:82:0f:d1:54:b1:f1:66:20:4f:58:0c:40:
df:b3:5d:f7:3d:f5:22:e3:4b:d2:86:6c:0b:96:fa:2f:5e:dc:
e4:ef:78:bf:d7:99:9e:4d:82:84:77:62:7b:28:25:6c:57:92:
e4:4b:b6:50:cd:39:f7:df:f7:2d:fe:41:77:98:fc:17:ee:da:
ed:ff:9c:94:92:e1:36:c4:28:2b:90:5d:b5:53:45:1e:db:4c:
d7:c0:17:1b:e4:04:3f:17:38:7a:5e:44:ca:6c:c9:8e:3b:12:
7f:8c:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:54 2026 by rpki-client