This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35322e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=
Subject key identifier: 10:AC:F0:F3:DB:D1:B5:66:17:96:F1:11:E5:CE:4A:3B:3B:56:C4:94
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 4335773AF6602C45FEBBC39E57A6AAB73120A41F
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35322e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:11:59 +0000
ROA not before: Tue 20 Jan 2026 02:06:59 +0000
ROA not after: Tue 19 Jan 2027 02:11:59 +0000
asID: 151270
IP address blocks: 110.40.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:35:77:3a:f6:60:2c:45:fe:bb:c3:9e:57:a6:aa:b7:31:20:a4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:06:59 2026 GMT
Not After : Jan 19 02:11:59 2027 GMT
Subject: CN=10ACF0F3DBD1B5661796F111E5CE4A3B3B56C494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:ae:f7:54:07:f9:4d:ea:3f:dc:bc:92:e1:
d9:d8:74:b2:77:ee:6e:f3:21:e0:54:13:2f:c1:b9:
f8:0f:a3:62:6e:0f:e2:7f:a7:38:af:d9:fc:64:76:
fc:8e:4a:dc:2a:ec:22:d3:d5:5d:63:9e:c5:55:40:
76:a8:81:1d:ca:bd:64:97:dd:d9:e0:5e:e7:45:00:
b0:f1:16:e3:96:f1:02:44:8d:07:4d:75:29:5e:08:
d2:49:70:1e:a7:54:50:2d:ba:6b:9b:08:06:a4:b1:
9c:2e:d1:54:d2:3a:c0:1e:9b:ec:52:b9:8b:d0:cd:
bd:cf:5d:c7:c1:9e:25:b9:2e:d9:50:5a:5c:27:76:
62:3d:9f:08:1e:61:79:ea:97:a9:50:d0:ca:87:b4:
4a:57:88:38:80:f1:ad:b4:5a:ad:d8:88:18:6b:14:
b4:ab:fe:a6:ce:98:c2:82:f4:e7:7c:71:22:e6:19:
35:e8:d3:95:53:0d:bc:a7:df:ee:7b:51:2e:16:7d:
a5:09:33:9b:e6:ee:83:e0:fe:35:2e:7b:0c:ab:51:
81:9f:c1:dd:24:60:61:5a:07:2f:ab:e0:50:69:fc:
8d:f3:93:f2:b4:00:47:9d:a1:bd:4f:33:de:36:0f:
66:b8:ed:46:1d:a5:78:2e:a5:9c:9f:2a:8c:35:9e:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:F0:F3:DB:D1:B5:66:17:96:F1:11:E5:CE:4A:3B:3B:56:C4:94
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35322e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.52.0/24
Signature Algorithm: sha256WithRSAEncryption
55:32:f4:0f:86:34:9a:d4:10:80:eb:1a:11:8f:5e:01:b5:38:
c6:88:88:42:af:c9:72:57:f0:39:c5:0b:86:a0:85:65:71:ab:
c8:e0:31:c3:eb:1a:28:20:92:01:ef:bf:39:3c:cc:96:e9:c1:
bb:5c:ec:40:21:e1:f7:30:63:f3:fa:33:b5:b0:21:40:7e:b2:
09:6a:f9:68:60:9b:77:a7:bd:f5:52:5f:98:86:69:01:f4:27:
cc:30:14:24:64:a0:2b:58:40:38:1e:02:40:6b:cd:0c:3f:08:
26:e1:72:42:5a:1e:3a:f6:46:c6:83:31:6a:90:ce:21:de:b0:
69:61:23:23:66:d0:db:36:92:8d:1b:25:5a:ca:b8:73:52:3a:
9b:5d:0d:fd:68:34:aa:42:c9:65:cd:45:c1:53:15:69:3b:90:
86:d2:d8:dd:19:81:68:fa:5d:b9:1a:5b:ed:a5:77:35:ee:71:
f3:74:44:4a:d7:63:7b:a4:de:16:4c:98:45:4e:21:a4:2d:40:
35:b1:54:e9:f5:8d:03:6f:c1:b7:a4:c9:76:32:20:a8:06:8f:
92:d8:48:93:c7:25:c2:98:ba:9c:ba:d5:ab:a2:9d:79:c9:f0:
24:70:0f:51:2b:97:92:c9:6f:85:c2:8d:6d:8b:c1:1f:45:a3:
9d:ca:86:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:04 2026 by rpki-client