This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa
File: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (raw, json)
Hash identifier: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=
Subject key identifier: 17:8B:A7:FC:F1:01:16:44:A4:8F:B3:2C:67:5A:E6:E4:24:89:89:FF
Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Certificate serial: 73614916FA6674324EFA9481CE7EEBC5A5D384DB
Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa
Signing time: Tue 20 Jan 2026 02:15:33 +0000
ROA not before: Tue 20 Jan 2026 02:10:33 +0000
ROA not after: Tue 19 Jan 2027 02:15:33 +0000
asID: 135061
IP address blocks: 202.46.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:61:49:16:fa:66:74:32:4e:fa:94:81:ce:7e:eb:c5:a5:d3:84:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Validity
Not Before: Jan 20 02:10:33 2026 GMT
Not After : Jan 19 02:15:33 2027 GMT
Subject: CN=178BA7FCF1011644A48FB32C675AE6E4248989FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:7b:6f:80:39:b3:15:f6:c2:de:49:e6:3b:
54:2f:ba:77:ca:64:ce:6e:19:0e:1d:a5:30:37:db:
35:51:27:66:17:fd:c4:5e:7b:4c:2b:61:fc:61:a3:
ba:1f:f8:d4:88:c2:56:f7:0c:8b:11:50:cb:85:71:
94:bb:01:89:a8:d9:75:87:2e:fb:4c:31:41:6d:13:
06:d6:c3:19:da:1a:49:50:c4:9c:7b:30:f1:b4:74:
16:1a:85:70:7d:1f:06:a6:96:d3:b6:91:c9:9b:a0:
98:f0:4c:e0:3a:19:29:b5:28:1c:d1:c2:f7:f3:2b:
90:ce:d9:b7:70:74:23:59:47:c3:0d:5d:6b:e0:cf:
e4:c1:3c:da:51:02:7c:e9:f4:5e:26:86:db:34:9c:
32:23:a0:8d:10:56:dd:0b:67:4e:c2:a7:20:a5:96:
1e:3b:cb:a4:5c:f7:ea:37:a9:96:7b:73:b5:83:99:
8e:1e:71:65:c0:91:a9:59:9e:8b:b5:ce:56:53:59:
2d:25:4e:f4:59:dd:64:f5:78:e4:79:21:4f:85:8d:
e1:23:1b:d0:90:20:37:29:63:07:2f:b8:15:68:a2:
e8:71:a5:be:49:17:62:21:6b:cb:f0:86:09:5a:f0:
d9:86:ba:3c:74:15:45:4d:a6:e1:8b:13:26:c9:c0:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:A7:FC:F1:01:16:44:A4:8F:B3:2C:67:5A:E6:E4:24:89:89:FF
X509v3 Authority Key Identifier:
keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.224.0/20
Signature Algorithm: sha256WithRSAEncryption
70:c1:52:45:2a:40:a9:66:ce:47:28:88:f6:00:af:47:56:80:
f0:00:e9:44:9b:54:c2:af:32:65:8e:c8:ad:3d:46:9e:88:86:
cd:c6:93:ae:f9:4d:18:8c:51:fa:ad:f3:71:87:d4:96:d7:65:
e4:f1:70:77:6c:53:e1:4f:10:5d:32:86:7f:18:93:75:d0:23:
fa:01:e0:ce:5a:25:df:30:ab:dd:2d:c8:e7:83:ab:e5:cf:cb:
fb:07:3e:75:2b:27:fd:09:31:fc:8d:bd:47:84:e6:52:e1:94:
10:88:eb:12:f3:49:55:b5:d8:d9:0a:38:8e:fd:6f:5d:5f:b4:
3f:b4:08:ee:56:44:91:c4:e2:35:87:89:f2:c2:74:ab:1e:36:
b7:7b:69:7c:f9:61:7f:c3:7e:5f:d5:72:40:6f:a6:b0:b2:83:
9e:b0:1d:75:1c:8c:0e:83:ee:5c:3e:b7:0d:49:0a:87:5e:9d:
1a:bb:e9:e7:01:43:c1:e8:ce:31:b9:07:b5:c8:6d:ba:5c:45:
aa:1f:fe:c6:33:61:f2:f9:4e:b2:db:48:50:49:bd:b0:02:cf:
6f:69:80:ab:fb:46:59:ee:22:02:e3:95:76:1b:b3:d2:7c:d6:
ed:bc:56:20:1f:9f:7a:75:14:eb:fb:50:d2:39:91:e6:93:49:
da:04:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:06:05 2026 by rpki-client