This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36362e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=
Subject key identifier: 53:2B:CC:9F:EA:4F:2A:A6:CA:EC:B0:10:27:65:4F:53:B2:C6:28:3E
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 755E37E91BE7C7BB445F1E628119E5914D211421
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36362e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:00 +0000
ROA not before: Tue 20 Jan 2026 02:07:00 +0000
ROA not after: Tue 19 Jan 2027 02:12:00 +0000
asID: 151270
IP address blocks: 110.40.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5e:37:e9:1b:e7:c7:bb:44:5f:1e:62:81:19:e5:91:4d:21:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:00 2026 GMT
Not After : Jan 19 02:12:00 2027 GMT
Subject: CN=532BCC9FEA4F2AA6CAECB01027654F53B2C6283E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:a3:46:30:91:71:2f:68:8f:4b:2d:33:f1:
95:00:84:25:80:da:37:30:52:ef:32:09:e5:d0:91:
03:9f:ca:03:11:37:18:4a:f9:e5:ac:95:5f:cd:cd:
52:24:a9:f3:cf:44:da:dc:c0:87:57:0d:56:97:9f:
f6:16:78:b0:7f:52:f5:46:6c:b4:a6:08:e2:8d:a5:
38:9e:cc:85:d6:36:02:4b:25:1a:d0:40:ae:ec:73:
36:b2:fa:0f:f6:7e:d7:da:1f:ed:2c:3e:d1:e6:a7:
4d:a3:e8:83:f9:8c:c5:21:7e:07:e3:d4:b3:5c:02:
49:4b:00:f4:15:b3:71:3c:0f:bc:1a:1a:9e:ac:69:
00:4c:72:91:8e:c7:98:f0:2c:3f:6e:58:6b:86:52:
78:bd:1c:c3:32:bb:dd:e3:98:57:95:c3:5d:af:c7:
27:58:e9:9c:b8:1c:f5:2e:f1:3e:aa:aa:d0:8a:b7:
58:47:01:2f:68:15:e2:7e:fe:22:00:04:71:5d:b7:
29:3f:49:b9:00:d1:72:f3:0f:36:05:82:c3:8e:f0:
1e:10:14:ef:10:9f:54:b0:65:db:58:c2:5f:0b:6d:
1b:07:e7:06:ca:d4:85:3c:6d:ec:53:9c:9c:8b:f4:
7f:15:d7:6f:a4:87:ab:2f:2d:78:c4:c1:3c:b5:69:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:CC:9F:EA:4F:2A:A6:CA:EC:B0:10:27:65:4F:53:B2:C6:28:3E
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36362e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:65:8c:3c:50:c8:37:c1:dd:ac:bc:dc:af:d0:ba:e0:87:18:
c0:1d:d5:a1:fe:ba:8e:33:94:c9:dc:29:1d:e3:c9:b9:6b:89:
01:0c:38:93:55:ef:13:41:b4:94:62:c3:48:1e:54:87:af:00:
f0:e2:1d:a2:81:4e:2d:90:c5:c6:f6:5c:97:29:28:35:ea:f1:
eb:62:ff:97:a0:16:47:9b:29:0f:0b:e9:7f:f8:e1:2d:e2:dd:
07:4a:d6:f7:88:e9:3d:51:35:38:5f:11:55:80:37:0c:04:72:
d1:2a:dd:28:5b:c4:34:38:28:61:3e:af:57:1c:1d:6f:b0:0d:
c3:67:cd:1d:63:e1:4f:0d:c9:19:b2:cf:28:d8:1a:34:39:2c:
3f:70:5e:ac:a0:18:70:fd:19:d4:dd:89:bc:d4:af:d8:69:9a:
d4:7e:78:49:03:18:57:3a:10:34:15:a4:80:87:21:f2:87:3b:
72:fc:62:97:37:53:f7:93:84:74:7e:b8:e7:c3:f2:07:9e:83:
f2:1a:91:87:cc:f5:9f:05:62:82:e7:a6:3c:8b:53:72:e7:46:
30:72:f5:da:12:d1:65:56:b4:e8:26:f7:5f:6d:dc:61:10:87:
49:6f:91:68:fa:3c:e2:45:62:35:c0:6f:57:ea:08:94:0d:04:
dc:66:24:4b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdV436Rvnx7tEXx5igRnlkU0hFCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjAxMjAwMjA3MDBaFw0yNzAxMTkwMjEyMDBaMDMxMTAvBgNV
BAMTKDUzMkJDQzlGRUE0RjJBQTZDQUVDQjAxMDI3NjU0RjUzQjJDNjI4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF6NGMJFxL2iPSy0z8ZUAhCWA
2jcwUu8yCeXQkQOfygMRNxhK+eWslV/NzVIkqfPPRNrcwIdXDVaXn/YWeLB/UvVG
bLSmCOKNpTiezIXWNgJLJRrQQK7sczay+g/2ftfaH+0sPtHmp02j6IP5jMUhfgfj
1LNcAklLAPQVs3E8D7waGp6saQBMcpGOx5jwLD9uWGuGUni9HMMyu93jmFeVw12v
xydY6Zy4HPUu8T6qqtCKt1hHAS9oFeJ+/iIABHFdtyk/SbkA0XLzDzYFgsOO8B4Q
FO8Qn1SwZdtYwl8LbRsH5wbK1IU8bexTnJyL9H8V12+kh6svLXjEwTy1aVq1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUUyvMn+pPKqbK7LAQJ2VPU7LGKD4wHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz
MDJlMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAG4oQjANBgkqhkiG9w0BAQsFAAOCAQEAPmWMPFDIN8HdrLzcr9C64IcY
wB3Vof66jjOUydwpHePJuWuJAQw4k1XvE0G0lGLDSB5Uh68A8OIdooFOLZDFxvZc
lykoNerx62L/l6AWR5spDwvpf/jhLeLdB0rW94jpPVE1OF8RVYA3DARy0SrdKFvE
NDgoYT6vVxwdb7ANw2fNHWPhTw3JGbLPKNgaNDksP3BerKAYcP0Z1N2JvNSv2Gma
1H54SQMYVzoQNBWkgIch8oc7cvxilzdT95OEdH6458PyB56D8hqRh8z1nwViguem
PItTcudGMHL12hLRZVa06Cb3X23cYRCHSW+RaPo84kViNcBvV+oIlA0E3GYkSw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:15 2026 by rpki-client