This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38302e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=
Subject key identifier: FE:29:45:E1:B6:DA:AA:95:2A:97:BB:FE:71:9C:74:46:00:40:FB:83
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 2F4FAAD1B9655E65962323FE5CF6F3087FADEDBC
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38302e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:01 +0000
ROA not before: Tue 20 Jan 2026 02:07:01 +0000
ROA not after: Tue 19 Jan 2027 02:12:01 +0000
asID: 151270
IP address blocks: 110.40.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4f:aa:d1:b9:65:5e:65:96:23:23:fe:5c:f6:f3:08:7f:ad:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:01 2026 GMT
Not After : Jan 19 02:12:01 2027 GMT
Subject: CN=FE2945E1B6DAAA952A97BBFE719C74460040FB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:04:99:8f:81:3e:3f:74:4e:28:e2:05:fb:
7e:66:d8:fb:4a:1c:f6:ed:e9:7e:87:9f:30:d9:54:
0c:6f:e5:39:a8:70:03:57:1a:e7:b2:cb:c3:68:0d:
18:52:94:97:28:12:5d:4e:85:9a:55:3e:48:c0:cd:
af:a5:05:1e:5f:a9:69:e7:9f:c4:1b:03:f9:45:ae:
da:44:ac:25:34:1d:c5:39:c9:c3:dd:a3:f0:1b:7b:
5d:05:a0:ca:1c:04:4c:5b:f0:c6:00:3c:29:cf:01:
3d:d0:1d:5a:da:9d:a1:6e:c8:44:5e:8c:fd:d4:56:
88:c6:f9:8f:9e:6d:45:cc:9f:61:0a:7a:c2:e4:72:
0a:dd:d9:f8:59:f9:ad:17:a0:a5:22:b5:cf:00:0e:
4d:fa:76:fb:4d:15:a9:fc:06:00:5d:3d:da:a1:d9:
fb:63:2d:cd:10:28:e5:cf:a3:48:38:84:47:41:69:
7f:88:7d:2b:68:00:fe:46:2c:f3:13:fa:2a:38:e9:
cc:a0:90:1c:eb:28:c4:08:d6:64:03:17:b5:41:13:
1f:f2:d1:4f:ab:35:5b:af:1b:87:3c:e2:9e:f4:2e:
86:4d:64:88:ac:4e:14:fa:2a:6e:8a:64:93:55:ea:
d1:5d:ca:be:d5:e4:19:ba:8c:0b:64:01:a9:e8:73:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:29:45:E1:B6:DA:AA:95:2A:97:BB:FE:71:9C:74:46:00:40:FB:83
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38302e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:77:c3:8a:4b:e4:1a:32:77:73:e3:af:a1:bb:bc:3c:36:91:
dd:00:05:7e:fb:ba:d8:29:32:52:23:08:e2:b6:62:ea:47:0d:
2d:1a:f2:57:c6:f8:f5:a5:b9:17:47:58:e8:56:c1:9d:ef:d0:
4c:12:03:d3:a1:dd:a5:c3:07:5f:b5:ab:3c:b8:3b:0e:ba:81:
91:63:64:ca:0b:74:fd:3f:60:6d:eb:e5:cd:23:e3:99:3d:7e:
10:b0:05:88:27:20:00:ba:95:42:43:ea:db:b5:8f:dc:38:f9:
a7:d6:fb:ba:91:2b:ee:da:af:1a:e7:d9:ae:ef:06:ff:05:5c:
ac:e7:24:e9:8d:0f:ea:80:a3:d5:1b:48:c3:75:bf:6f:e7:9a:
9d:e7:10:64:37:d6:7d:ea:f0:a2:14:82:08:4c:c2:d4:07:0d:
d4:31:c2:19:c5:8c:3a:54:b3:8b:ed:4b:38:d1:ef:e3:33:84:
28:17:6c:98:3f:84:69:17:7b:64:ab:e0:bd:1b:c3:7c:be:7d:
4c:e2:bc:1f:29:d1:cd:3e:1c:97:5d:fd:2e:1c:cc:30:7f:e9:
20:3b:8f:8f:ad:e3:74:c7:64:91:d4:f2:48:15:f5:f5:a7:d3:
56:ce:61:4a:4f:b6:83:ef:91:a8:98:22:2a:67:07:75:c2:df:
cc:f1:3b:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:17 2026 by rpki-client