This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34322e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=
Subject key identifier: AC:B1:4A:97:41:8A:AD:DF:7C:34:49:77:57:F8:5B:4A:DD:3F:72:3C
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 5F1459E44B113B2913D9EE4BD79AC117ED7A1520
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34322e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:00 +0000
ROA not before: Tue 20 Jan 2026 02:07:00 +0000
ROA not after: Tue 19 Jan 2027 02:12:00 +0000
asID: 151270
IP address blocks: 110.40.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:14:59:e4:4b:11:3b:29:13:d9:ee:4b:d7:9a:c1:17:ed:7a:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:00 2026 GMT
Not After : Jan 19 02:12:00 2027 GMT
Subject: CN=ACB14A97418AADDF7C34497757F85B4ADD3F723C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:08:6f:0e:09:2f:33:68:f0:af:c8:a0:cb:
53:41:8f:80:f9:62:51:ec:39:63:e9:81:29:31:ca:
29:21:0d:ce:77:5f:55:9a:fd:ae:91:0c:f7:3f:50:
c5:8f:c1:c8:5b:be:36:17:d5:31:76:11:3d:0b:34:
39:17:99:70:d6:15:51:e8:b3:1b:31:37:a7:60:38:
e7:8c:f9:d6:41:5d:05:5b:08:a7:ed:c5:cb:d1:0f:
2c:55:c0:dc:7f:d9:91:aa:f6:74:ee:3b:c4:89:e9:
07:17:84:61:77:98:f6:59:2e:d3:2c:3f:01:40:a1:
b6:ff:b6:a8:74:63:62:49:4e:d2:dd:dc:41:84:d4:
99:81:72:38:4d:d1:5a:a4:c2:e5:c4:ed:4b:f7:51:
bd:f8:50:77:ca:12:55:67:0f:f9:91:39:1a:dd:b5:
20:09:73:4c:d7:49:37:62:70:2f:6f:f4:d6:7f:a6:
00:c8:68:9c:ce:f7:25:6d:38:e2:35:01:1b:35:a5:
82:8c:26:28:6e:5b:0e:c2:81:3d:51:1c:b2:42:1f:
0f:6c:dd:41:e4:98:05:c6:cb:43:12:63:2a:9c:c9:
36:8a:40:a4:4d:3b:4a:17:57:91:fd:7e:8b:3d:71:
88:cc:4f:2b:d0:df:c4:8e:ba:6e:76:6b:d6:37:b3:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:4A:97:41:8A:AD:DF:7C:34:49:77:57:F8:5B:4A:DD:3F:72:3C
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34322e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.42.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e6:3a:d8:b0:47:e8:67:fd:e2:f2:3f:e5:c7:c5:8e:8f:83:
63:ae:28:c5:6a:0d:75:7f:81:cb:3d:ab:bc:ea:15:7d:56:f4:
96:83:b5:a5:51:5e:93:df:62:1d:f7:09:1e:82:4d:6b:1b:9a:
12:ac:b2:71:18:0c:4b:10:f3:60:42:64:ec:b6:90:1f:b6:ef:
35:53:04:05:0f:b2:03:7c:13:00:2a:94:2a:2b:e3:37:4d:f2:
39:e6:9b:f0:81:6f:66:74:ce:47:65:5e:c6:ca:3a:39:28:b2:
3e:63:df:8e:29:5f:7c:bf:67:1f:81:a3:00:87:a3:48:cf:21:
e7:28:96:a3:1b:b3:85:6f:fd:f2:f1:ba:79:c6:3f:37:8e:93:
db:31:8c:93:09:9e:86:03:7f:14:cc:4a:34:ba:0b:a3:0e:c6:
df:62:ea:1f:27:cb:72:78:c4:f3:b3:2b:c4:7e:96:87:0c:bd:
7f:f8:27:5a:44:33:2e:1b:86:c7:ab:25:d0:04:fa:6a:bc:ea:
82:73:31:c6:50:2f:07:14:31:23:a9:23:9d:89:89:bd:12:c3:
4d:dd:8f:74:5b:8a:21:ca:10:ed:f8:b2:ab:7c:6b:77:50:a0:
b5:6f:c0:8e:c8:6c:23:ec:8d:ab:67:f7:91:59:3b:68:40:3b:
b8:8d:d1:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:02 2026 by rpki-client