This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38332e302f32342d3234203d3e20313531323730.roa
File: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=
Subject key identifier: BC:F1:E7:15:F1:90:72:18:DE:C6:A5:E9:D0:3C:09:E8:B8:57:EF:9A
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 2871B101D7E608645D65F889685EA8EBC717F9DE
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38332e302f32342d3234203d3e20313531323730.roa
Signing time: Tue 20 Jan 2026 02:12:00 +0000
ROA not before: Tue 20 Jan 2026 02:07:00 +0000
ROA not after: Tue 19 Jan 2027 02:12:00 +0000
asID: 151270
IP address blocks: 110.40.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:71:b1:01:d7:e6:08:64:5d:65:f8:89:68:5e:a8:eb:c7:17:f9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Jan 20 02:07:00 2026 GMT
Not After : Jan 19 02:12:00 2027 GMT
Subject: CN=BCF1E715F1907218DEC6A5E9D03C09E8B857EF9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:be:09:ab:61:7f:00:ae:c3:39:7a:34:2e:
47:b7:38:c2:90:7d:41:11:d6:1e:2d:53:f0:46:02:
a2:14:d0:2a:33:d8:83:08:bd:0d:1a:f6:04:02:d7:
12:0c:18:06:21:3c:57:77:ab:7d:ac:60:17:b3:71:
eb:a2:17:cb:8f:a2:06:8c:0f:a2:c8:72:d0:75:34:
29:41:9b:6a:bf:17:39:83:4b:f3:c5:19:0f:34:8d:
0a:a2:1c:e0:54:3b:e9:ac:f1:21:5e:18:19:37:65:
22:fe:6c:31:54:fb:33:3a:7e:e4:46:73:fd:da:dd:
18:7e:be:ca:64:a1:b0:c0:53:f1:6b:72:df:1c:89:
90:9e:f6:cb:7e:a1:6d:54:43:d8:7c:3d:2c:cb:65:
ff:99:9d:71:05:be:fa:06:e7:5e:2a:7e:02:a3:b8:
dc:e8:a7:c1:8b:71:d2:c8:80:8a:ef:75:fb:50:43:
8c:f9:bc:e2:cb:99:16:7e:e1:fc:30:cb:48:07:cf:
85:7f:fa:d2:a5:7b:f5:0a:70:2e:ac:8d:33:15:b1:
4e:e6:f0:ec:58:94:cd:a0:8c:28:87:dc:21:39:ac:
0d:c9:a6:9c:5f:42:1d:8c:bc:88:19:e9:4f:c6:05:
e1:a5:65:c2:a9:f4:43:82:3e:70:cf:00:dd:64:80:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:E7:15:F1:90:72:18:DE:C6:A5:E9:D0:3C:09:E8:B8:57:EF:9A
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38332e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.83.0/24
Signature Algorithm: sha256WithRSAEncryption
58:87:57:10:6d:c0:6b:85:77:8e:18:06:2c:4e:5e:69:d5:c3:
bc:c2:4e:06:13:5d:06:cf:90:2b:5a:b9:63:6b:8d:ac:81:a1:
52:89:b4:74:8f:f5:68:15:6b:fc:2e:47:d2:68:d7:8b:9f:c2:
44:d1:10:9d:df:d1:38:d4:2c:d2:54:8f:25:57:c9:9c:23:57:
c1:f5:b5:96:c7:29:97:2f:fe:4d:0d:17:c3:8f:70:81:76:33:
07:e3:e0:ab:28:47:d2:a9:7e:27:84:82:e5:08:5f:eb:39:5d:
ae:c5:66:ea:83:74:37:c2:79:72:22:41:9d:5f:11:82:d7:4c:
b6:cf:43:ae:2a:84:c5:0e:37:71:97:3e:fb:35:b5:a4:85:e0:
2f:ee:66:40:f6:0c:6e:56:3f:43:06:4a:d3:32:b0:85:37:79:
0c:83:ac:36:60:57:3c:30:a3:83:c1:ed:5c:3e:6d:97:9c:b9:
2e:84:60:ea:51:f1:ef:d7:c3:63:63:0f:c0:cd:5d:b4:cc:b1:
57:23:03:e8:3d:20:7b:5d:82:b1:a3:2f:c3:bd:7f:ea:04:18:
e6:8a:91:28:54:69:54:0f:b5:bc:33:3b:47:16:a0:a5:95:78:
9e:09:61:03:3d:c0:ae:83:c5:a4:1b:3b:15:bf:e1:67:58:d4:
3f:89:2a:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:10 2026 by rpki-client