This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34352e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=
Subject key identifier: 6A:7E:D1:8A:5F:B6:44:AF:A1:EA:55:61:78:B0:5D:E3:14:80:47:0A
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 513857E494DC0F0A689F369C434AE4F2757E73DF
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34352e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:01 +0000
ROA not before: Tue 20 Jan 2026 02:07:01 +0000
ROA not after: Tue 19 Jan 2027 02:12:01 +0000
asID: 151270
IP address blocks: 110.40.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:38:57:e4:94:dc:0f:0a:68:9f:36:9c:43:4a:e4:f2:75:7e:73:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:01 2026 GMT
Not After : Jan 19 02:12:01 2027 GMT
Subject: CN=6A7ED18A5FB644AFA1EA556178B05DE31480470A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:bc:9d:9c:aa:c0:23:d0:b7:0b:73:e7:e7:
7c:2c:7b:45:b6:02:94:d1:b7:f7:46:21:aa:3b:cc:
7c:36:2c:6b:52:d9:28:e9:86:fc:45:12:ee:cf:41:
f8:4a:22:63:3f:dd:7a:8e:05:f8:b4:b8:79:ca:4c:
26:f3:be:ed:99:fb:67:00:6b:0d:72:f4:86:70:8a:
5e:b6:34:b7:bb:23:4e:7b:96:26:72:8f:d6:cc:7c:
12:58:db:cf:94:0c:90:61:ec:1b:e0:33:87:e3:50:
64:73:d9:03:9e:34:72:98:e1:0d:9b:9a:e7:72:8a:
02:82:16:3f:ff:8c:b8:bb:22:48:94:ec:d3:41:43:
aa:d7:be:a6:d4:ba:c8:f4:95:f4:cf:00:9b:b9:77:
7b:94:ac:c8:16:4a:bb:61:23:ff:8c:af:60:6a:a9:
f0:a4:e2:f0:7a:44:d4:87:37:ba:14:3a:b0:bf:03:
d3:8d:68:46:01:06:db:a1:a7:c2:39:2b:ca:48:79:
9b:27:26:e6:2e:1e:60:18:8d:6b:1c:57:6a:7a:77:
cd:62:2a:d3:f0:c0:97:a5:b1:47:50:20:12:8f:d8:
c0:a0:5e:6a:37:a2:04:c3:2a:47:11:04:0a:8b:2d:
2c:bb:8f:11:af:ac:02:ec:3e:07:83:90:93:bc:ce:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:D1:8A:5F:B6:44:AF:A1:EA:55:61:78:B0:5D:E3:14:80:47:0A
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34352e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e6:42:10:b7:88:4d:93:46:e1:76:aa:86:1d:28:f8:65:09:
20:e8:be:76:68:53:b3:c2:9f:11:89:6a:26:71:91:ce:37:4c:
5a:88:82:09:41:7b:08:70:3f:60:97:13:93:8f:18:bc:4f:a3:
fc:1e:be:0a:2b:45:b4:07:27:68:51:01:e1:0d:d3:db:e0:12:
4b:9b:b5:69:49:c2:19:67:bb:04:f2:dd:b1:0e:e7:60:95:08:
d4:f7:6c:b4:0b:fc:6a:37:05:15:a6:9f:7a:e3:ef:3a:fe:ab:
14:bf:6b:b5:5f:28:e7:2d:da:e7:8a:7e:78:3c:ff:38:f9:62:
72:e4:fd:9c:68:eb:b3:81:d3:ae:3d:6e:e1:6b:67:1f:64:a6:
c8:66:72:8e:87:78:5b:40:b5:c4:da:4f:0b:6a:f5:df:ca:15:
84:c6:fe:a0:b3:4c:09:bd:54:24:50:2d:67:64:21:99:e2:dd:
4f:15:b9:ed:90:ef:b6:4c:cb:57:09:f5:78:e9:63:08:fc:e0:
d8:7d:19:47:35:77:db:55:e1:36:79:54:c6:df:5b:97:7c:a2:
a3:3c:5b:ec:d6:1f:c7:d2:77:e2:44:2a:41:89:1e:e6:9e:80:
ac:6e:44:a9:bb:39:e3:6b:99:c4:8b:2c:ed:d8:2f:bb:af:53:
ce:54:93:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:13 2026 by rpki-client