This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34392e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=
Subject key identifier: F3:3E:C8:4A:2F:C9:82:69:62:A3:B2:7F:C5:22:EF:B8:99:67:F1:90
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 21803DA936CD4FF08666680B292B02294E535075
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34392e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:11:59 +0000
ROA not before: Tue 20 Jan 2026 02:06:59 +0000
ROA not after: Tue 19 Jan 2027 02:11:59 +0000
asID: 151270
IP address blocks: 110.40.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:80:3d:a9:36:cd:4f:f0:86:66:68:0b:29:2b:02:29:4e:53:50:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:06:59 2026 GMT
Not After : Jan 19 02:11:59 2027 GMT
Subject: CN=F33EC84A2FC9826962A3B27FC522EFB89967F190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:6b:20:c3:2f:59:d0:6c:a3:6a:f2:05:dd:
20:0e:3c:89:24:60:0f:ba:b3:59:12:87:8e:c0:f7:
80:18:53:d7:33:e3:7b:01:2f:15:78:b1:4d:2c:8d:
a1:df:95:8e:57:86:aa:8c:3d:8e:4b:4a:d5:3c:a8:
1e:b3:b2:5e:1e:73:75:33:c2:9c:d8:8b:65:e1:07:
be:be:f5:03:b0:90:b9:c9:44:6a:e6:4a:88:b7:63:
0e:62:63:dd:04:5a:b4:22:39:93:96:da:1f:66:07:
29:43:30:f6:fb:20:96:fa:e3:ac:4e:b9:79:af:a8:
54:bc:e3:96:29:51:96:2a:0b:49:5c:45:18:b9:9d:
80:58:e3:f7:bd:d5:b3:10:73:8b:80:92:9a:ca:da:
1e:d6:47:95:f3:d9:4b:c5:24:31:7a:cb:f3:93:85:
01:5c:82:a8:92:3f:f8:65:6c:65:1e:98:76:b2:c3:
ae:65:d8:84:0d:08:39:c5:75:f7:d9:4f:40:b3:ca:
5b:85:4a:02:47:b2:ac:3c:27:d6:9e:38:fc:8e:7a:
14:f6:c3:45:d9:84:08:c1:37:97:74:95:91:54:e8:
91:d2:0e:46:b5:cd:de:ed:95:1b:93:f5:4e:d2:c2:
e6:e4:10:77:61:b6:48:ba:a3:a8:ef:94:aa:2c:d6:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:C8:4A:2F:C9:82:69:62:A3:B2:7F:C5:22:EF:B8:99:67:F1:90
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34392e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.49.0/24
Signature Algorithm: sha256WithRSAEncryption
26:07:0d:86:df:19:08:78:69:50:0d:35:61:d7:ae:1f:b9:61:
fd:d0:4a:92:cd:73:65:ae:29:a0:0f:c5:18:55:51:10:c3:3e:
a5:b4:62:15:22:b7:65:a0:43:b8:14:49:c1:9a:49:6a:01:9d:
09:8d:a6:11:b1:07:5c:3a:59:ac:92:7f:27:0e:eb:2b:d7:7d:
4e:98:ed:94:37:71:a0:2e:fc:de:0c:ba:5b:9d:10:7d:d6:50:
43:1e:48:f9:1d:5a:c4:ed:f2:5b:b7:86:51:39:40:ce:a1:c0:
e4:8c:35:8d:53:78:de:54:6f:73:a0:da:ec:30:44:ca:f1:0c:
0c:3b:13:70:7d:32:b0:88:d8:7a:57:8e:31:be:3a:66:4f:4d:
de:6e:6f:c0:2b:97:50:5a:37:e2:95:b7:48:e5:3c:d2:aa:33:
3c:95:b4:40:b1:1d:cd:20:7f:50:10:8e:26:a8:9b:2c:d4:1b:
50:0c:73:cb:a1:24:75:79:c3:a6:72:b1:38:85:7d:51:a9:97:
08:aa:da:c5:86:1a:3b:a6:94:fd:2c:bd:11:07:c1:1e:65:9e:
f4:af:eb:44:19:d7:69:08:98:55:6e:f2:93:ed:2f:b5:ea:5a:
53:23:16:f0:50:c7:3b:f7:a8:be:02:fc:2a:db:57:c9:e1:e5:
87:a8:00:e2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUIYA9qTbNT/CGZmgLKSsCKU5TUHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjAxMjAwMjA2NTlaFw0yNzAxMTkwMjExNTlaMDMxMTAvBgNV
BAMTKEYzM0VDODRBMkZDOTgyNjk2MkEzQjI3RkM1MjJFRkI4OTk2N0YxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbmsgwy9Z0GyjavIF3SAOPIkk
YA+6s1kSh47A94AYU9cz43sBLxV4sU0sjaHflY5XhqqMPY5LStU8qB6zsl4ec3Uz
wpzYi2XhB76+9QOwkLnJRGrmSoi3Yw5iY90EWrQiOZOW2h9mBylDMPb7IJb646xO
uXmvqFS845YpUZYqC0lcRRi5nYBY4/e91bMQc4uAkprK2h7WR5Xz2UvFJDF6y/OT
hQFcgqiSP/hlbGUemHayw65l2IQNCDnFdffZT0CzyluFSgJHsqw8J9aeOPyOehT2
w0XZhAjBN5d0lZFU6JHSDka1zd7tlRuT9U7SwubkEHdhtki6o6jvlKos1jOHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU8z7ISi/Jgmlio7J/xSLvuJln8ZAwHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz
MDJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAG4oMTANBgkqhkiG9w0BAQsFAAOCAQEAJgcNht8ZCHhpUA01YdeuH7lh
/dBKks1zZa4poA/FGFVREMM+pbRiFSK3ZaBDuBRJwZpJagGdCY2mEbEHXDpZrJJ/
Jw7rK9d9TpjtlDdxoC783gy6W50QfdZQQx5I+R1axO3yW7eGUTlAzqHA5Iw1jVN4
3lRvc6Da7DBEyvEMDDsTcH0ysIjYeleOMb46Zk9N3m5vwCuXUFo34pW3SOU80qoz
PJW0QLEdzSB/UBCOJqibLNQbUAxzy6EkdXnDpnKxOIV9UamXCKraxYYaO6aU/Sy9
EQfBHmWe9K/rRBnXaQiYVW7yk+0vtepaUyMW8FDHO/eovgL8KttXyeHlh6gA4g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:04 2026 by rpki-client