This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e33362e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=
Subject key identifier: B4:FF:D0:98:D3:09:19:C7:9E:BA:42:90:70:5F:03:23:76:9A:65:88
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 02E68D1BCF2B6C2296610C4DFE9221E4A945DACF
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e33362e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:01 +0000
ROA not before: Tue 20 Jan 2026 02:07:01 +0000
ROA not after: Tue 19 Jan 2027 02:12:01 +0000
asID: 151270
IP address blocks: 110.40.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e6:8d:1b:cf:2b:6c:22:96:61:0c:4d:fe:92:21:e4:a9:45:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:01 2026 GMT
Not After : Jan 19 02:12:01 2027 GMT
Subject: CN=B4FFD098D30919C79EBA4290705F0323769A6588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:12:6e:61:6e:9e:17:1d:f0:d9:4f:53:50:
04:80:92:9f:f6:77:3d:86:4e:01:10:67:bd:85:6e:
67:e4:1c:34:d6:26:32:2c:7a:74:be:81:b4:26:08:
a9:79:14:32:96:f5:07:c0:fb:5c:b6:65:90:1e:b8:
54:9d:c4:11:1b:8f:8b:11:12:7d:4b:6d:31:b1:36:
97:29:43:f9:f1:31:93:15:60:75:02:58:89:90:a6:
01:e2:66:d8:3a:04:36:98:1f:dc:41:87:19:68:b0:
9d:bb:04:86:c0:c2:13:b5:5f:d5:7d:6f:44:d3:60:
b6:0a:bf:f7:fc:92:8b:cb:2a:19:1a:c5:35:14:c3:
ef:99:0b:e0:11:a7:91:10:7b:fc:c6:a0:da:9d:9c:
30:bb:1a:20:0c:bb:f9:93:ee:e2:37:e9:3c:79:03:
f2:5b:be:42:fe:76:49:3d:75:65:e6:67:e8:2f:70:
7c:53:de:e7:99:9c:c4:2e:5d:6b:0d:ec:45:54:32:
54:4c:bb:3c:64:b3:9b:10:a8:4d:77:29:19:d9:c6:
29:5f:f2:74:6f:03:bf:76:ea:1f:d4:73:89:a0:7b:
5e:ef:d6:83:5f:e3:60:72:46:9e:cd:1c:56:41:6c:
dc:6b:4a:a9:93:bb:5f:59:84:99:4e:70:10:41:ca:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FF:D0:98:D3:09:19:C7:9E:BA:42:90:70:5F:03:23:76:9A:65:88
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e33362e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fa:37:04:a8:60:69:b4:a2:32:4f:f7:84:4b:97:1b:1f:f7:
10:de:aa:d3:20:04:da:2e:38:6f:8c:02:5d:b0:56:0d:d4:42:
27:e8:3b:8d:22:73:06:bc:52:a3:18:80:29:26:5a:69:dc:a3:
97:9f:35:7e:e0:c9:34:7c:0d:af:3d:cf:26:21:92:e7:40:81:
c7:3c:01:d9:d1:4b:84:b7:a6:21:8e:d7:46:09:43:e3:23:07:
55:53:76:ed:50:82:8b:07:e2:5e:b3:09:5c:5e:2d:b7:18:85:
1f:ae:39:10:43:20:69:bf:47:a2:c4:cd:f9:79:34:29:1c:9a:
29:52:31:fb:2c:db:8b:1d:57:d6:59:89:ae:be:e5:31:0e:a0:
b2:56:f8:a3:02:73:91:b7:fe:c3:36:a5:e9:6a:3f:5f:ce:5b:
24:9f:d3:2b:74:08:b6:0f:39:01:9c:16:3b:9a:17:ad:56:7e:
8c:35:fc:ec:5a:f1:e6:cb:a7:2d:4b:09:77:44:10:1d:4d:b8:
dc:9c:54:b7:a8:42:ab:dd:e5:ca:3a:ce:7f:22:c2:85:60:3f:
df:ab:3c:b6:63:55:74:0d:fc:8c:0a:3f:2f:04:84:fa:f1:47:
04:e3:6c:50:26:6d:b9:da:32:fc:3e:97:28:80:ae:d4:c9:73:
fe:c3:2a:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:18 2026 by rpki-client