This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e33382e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=
Subject key identifier: 18:ED:DF:51:9F:EA:9A:EB:CC:20:4E:4A:17:37:11:5F:7F:CE:8B:10
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 78DAF60A6EE307C80D8ACF1321D3E3FB14DA7F0A
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e33382e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:01 +0000
ROA not before: Tue 20 Jan 2026 02:07:01 +0000
ROA not after: Tue 19 Jan 2027 02:12:01 +0000
asID: 151270
IP address blocks: 110.40.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:da:f6:0a:6e:e3:07:c8:0d:8a:cf:13:21:d3:e3:fb:14:da:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:01 2026 GMT
Not After : Jan 19 02:12:01 2027 GMT
Subject: CN=18EDDF519FEA9AEBCC204E4A1737115F7FCE8B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:54:bc:f2:f7:0e:9f:2f:97:47:34:fe:2c:
40:ff:47:c4:54:a8:f7:0c:07:37:94:74:4a:7c:bd:
9e:dc:8b:3c:3a:56:fc:28:a3:55:90:66:0a:5d:96:
02:65:40:1a:95:02:e1:3d:50:6d:40:05:8b:e6:65:
2d:d3:41:70:d0:e8:70:3e:20:10:f4:e7:46:93:a7:
75:db:36:c8:7d:10:fa:ac:58:94:fb:22:ff:25:6e:
f0:9e:af:0c:dc:3c:b2:88:cd:7c:23:37:3a:9f:fa:
91:44:77:67:50:cd:96:c4:e8:03:68:16:7f:93:73:
f5:c5:da:e5:00:4a:f9:13:53:73:34:21:b5:57:ad:
47:d6:5b:99:b1:5f:db:0f:01:32:6c:be:4d:19:1b:
1a:6f:f7:c6:ed:16:62:0b:47:e7:7a:cc:09:05:d3:
ba:3f:07:c4:7b:78:98:f8:87:cd:7e:6b:fc:9a:33:
22:c9:b1:d2:38:89:90:71:d6:6a:e4:76:cb:dc:f0:
0b:8a:fd:0c:f9:35:51:04:ec:b9:55:a2:87:55:58:
97:7a:28:6f:d7:a7:70:4a:69:54:d9:d1:ce:4b:71:
cb:69:69:46:11:b9:56:c5:84:3f:0e:00:5e:53:83:
e7:f0:cc:c9:b3:8e:81:80:e6:5b:24:38:2a:c5:d7:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:DF:51:9F:EA:9A:EB:CC:20:4E:4A:17:37:11:5F:7F:CE:8B:10
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e33382e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a4:e3:5c:4c:0a:10:63:c8:e6:f0:56:3f:ba:24:d9:1a:c7:
ca:f9:88:dd:26:50:3b:6d:77:97:ea:20:66:8a:5b:9a:b2:7e:
79:44:30:b4:e7:b6:50:bf:0f:80:bc:13:2e:15:0f:8d:ce:aa:
c7:23:e7:1d:af:c3:20:b2:a9:29:e0:ab:20:2b:4b:96:1c:79:
0a:33:5e:66:5c:cc:0c:ec:a1:07:f1:aa:6d:97:6f:66:74:51:
76:69:35:6f:59:f4:b4:08:ab:f1:c2:67:84:06:2d:41:d2:37:
0f:6b:55:e5:2f:35:e3:33:54:e2:98:26:4e:f3:10:be:9a:c9:
e9:a6:06:87:71:7c:2e:7e:8c:a8:6c:aa:c1:69:a8:21:39:0f:
1c:49:e3:7b:50:b6:c9:a0:29:fc:bd:bb:4d:ce:d1:3c:6f:e6:
37:fb:20:88:28:64:78:f5:af:b4:99:80:2a:50:be:b6:81:ab:
1f:72:f3:0d:62:be:65:cc:87:db:9b:e9:09:97:6b:80:37:3d:
e4:c0:2b:aa:d0:32:2f:ac:4f:a4:06:03:22:57:ba:51:a4:ff:
40:64:24:42:28:9e:90:c4:08:34:11:9b:13:35:a9:8e:3f:b5:
da:5f:21:dc:6c:c1:72:dc:14:2c:6a:27:2f:04:78:68:a4:1c:
46:81:19:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:12 2026 by rpki-client