This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e37382e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=
Subject key identifier: 73:C3:68:33:05:7F:85:4B:FA:97:D4:F4:EF:25:83:7F:DA:C2:05:F4
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 687CC7B12DF899AD4907821FE35532F03152678A
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e37382e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:01 +0000
ROA not before: Tue 20 Jan 2026 02:07:01 +0000
ROA not after: Tue 19 Jan 2027 02:12:01 +0000
asID: 151270
IP address blocks: 110.40.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7c:c7:b1:2d:f8:99:ad:49:07:82:1f:e3:55:32:f0:31:52:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:01 2026 GMT
Not After : Jan 19 02:12:01 2027 GMT
Subject: CN=73C36833057F854BFA97D4F4EF25837FDAC205F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:7f:f6:6b:23:1f:58:cc:73:dd:8d:5d:f6:
1a:50:6b:a7:0a:01:a0:12:9a:6b:a6:a4:6b:65:4f:
4c:90:16:ee:4a:e9:20:a1:f6:fb:1e:3f:4f:be:1d:
0b:25:f3:6d:c0:7e:b6:78:89:2d:91:a4:3d:60:58:
52:78:52:22:84:af:47:49:ad:ca:40:2f:58:ef:b5:
c1:f0:ea:1c:dd:3a:ae:64:ee:21:27:71:b4:16:18:
1a:32:da:42:3a:eb:ac:6d:c7:72:be:3f:76:51:b0:
3f:2d:6f:6a:2e:26:a3:3f:99:36:cc:73:7b:03:96:
01:7a:00:b8:49:ee:e8:33:c8:6a:81:c2:93:ad:78:
fc:5c:6f:47:03:b0:0f:ab:3d:65:54:83:a5:b2:68:
0d:91:1e:72:bd:71:a6:b6:7d:87:f3:61:b8:7a:77:
86:4e:a1:e8:fc:00:3f:2b:11:e6:13:3e:bd:8d:13:
b7:df:fb:52:d8:e5:15:d0:b4:d8:5d:ea:74:30:90:
59:eb:d9:af:cc:56:15:56:45:e2:cd:3d:1c:58:3c:
57:02:83:14:37:83:b4:4c:63:c1:0c:ab:d9:79:ec:
84:c1:fe:4a:7b:55:bb:51:67:9b:6e:c2:b1:60:0d:
47:fe:87:54:b8:89:25:41:90:c6:bd:c3:6a:de:30:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C3:68:33:05:7F:85:4B:FA:97:D4:F4:EF:25:83:7F:DA:C2:05:F4
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e37382e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2d:f0:16:c5:12:9d:90:83:8b:3c:ce:d1:26:3d:59:d8:63:
e3:95:da:c4:26:81:8a:10:19:c9:ca:d7:d0:68:eb:07:8d:02:
6c:78:44:4f:f6:18:3c:3c:b9:f1:8d:39:1d:d6:0b:11:ba:87:
98:34:a7:3d:80:d6:84:73:0c:12:9a:65:9e:6f:7a:83:b2:82:
1f:5e:7e:9b:10:52:c5:0f:23:1a:e2:15:32:aa:93:3a:e7:a1:
90:ac:93:4a:22:ff:ed:e2:f3:ae:f7:8a:17:e6:67:de:0e:e3:
97:8f:c8:ab:91:03:4d:5d:ce:7d:d5:bd:62:b4:9b:a0:9a:11:
47:d6:11:43:e0:f6:37:f2:5e:fa:98:20:26:e8:25:69:ce:a8:
f8:f7:d1:5b:73:8a:7a:81:fe:57:76:2a:df:0f:85:cc:12:d8:
11:1b:ba:1e:61:89:ba:97:c2:15:ae:17:5b:9f:bc:0c:a2:9a:
98:c7:0b:c1:e1:5d:29:b6:01:8e:20:83:93:87:ed:6f:d0:45:
c8:3c:75:3a:11:00:1d:44:a1:e9:ef:30:15:bf:20:74:a3:cb:
91:9c:f8:db:6a:a7:f7:05:86:a3:7d:e7:c0:42:dc:aa:2a:fd:
53:dc:47:7b:b4:3c:5c:35:35:d1:57:a2:ad:91:52:0d:28:dc:
3c:62:ac:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:09 2026 by rpki-client