This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa
File: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (raw, json)
Hash identifier: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=
Subject key identifier: 09:F5:43:EA:FB:B9:87:09:E7:8A:95:AE:40:34:4A:0B:54:BB:23:8D
Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial: 28F6E31BB84A3DE7539466352854C1C94212517A
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa
Signing time: Tue 20 Jan 2026 01:19:11 +0000
ROA not before: Tue 20 Jan 2026 01:14:11 +0000
ROA not after: Tue 19 Jan 2027 01:19:11 +0000
asID: 151277
IP address blocks: 160.30.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f6:e3:1b:b8:4a:3d:e7:53:94:66:35:28:54:c1:c9:42:12:51:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
Validity
Not Before: Jan 20 01:14:11 2026 GMT
Not After : Jan 19 01:19:11 2027 GMT
Subject: CN=09F543EAFBB98709E78A95AE40344A0B54BB238D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:c6:53:93:8a:b9:c7:33:96:e4:0c:2f:85:
bf:41:a5:25:ff:ff:6d:80:e5:99:ec:fb:31:b6:a1:
dd:df:96:70:c1:62:f6:21:f7:9a:5b:41:bc:4d:1d:
28:ed:be:9b:11:e8:27:e3:a2:c6:40:6e:2e:17:12:
c1:f1:59:5a:72:8b:38:0e:2e:84:91:ac:a4:14:e0:
e4:17:1c:61:37:49:00:e3:54:73:74:61:81:94:93:
42:50:3b:88:c6:04:2d:96:ce:30:5e:be:0a:7b:61:
03:c4:3a:4f:51:1b:98:ac:54:46:b5:39:21:ec:cf:
c6:8d:06:3e:71:d1:d4:3e:12:47:42:14:0b:aa:cd:
84:5d:59:be:02:cb:25:7e:12:70:a5:6f:08:1b:5a:
d8:2d:0b:55:5a:af:65:cc:e0:e5:73:d8:3e:04:ae:
54:7e:48:d1:28:47:c4:fb:35:45:04:d4:1c:89:40:
9b:37:0e:7a:01:23:05:86:62:5c:9e:1c:20:40:2f:
56:9d:21:4b:54:7f:b2:ad:3b:7b:a2:37:b2:5f:7d:
f1:1a:26:78:51:1b:9e:0f:78:bc:be:07:5e:71:31:
d9:7e:c8:6c:8b:a0:59:44:aa:a3:b2:7d:1f:5f:e8:
cf:03:51:ea:31:c3:d2:e5:e1:12:29:85:6a:d9:2a:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:43:EA:FB:B9:87:09:E7:8A:95:AE:40:34:4A:0B:54:BB:23:8D
X509v3 Authority Key Identifier:
keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.30.151.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a8:ee:5d:b5:c8:a0:d8:d9:1b:45:94:d0:fa:d0:b3:8b:ec:
07:8d:1f:fc:66:ea:2c:2a:6e:33:da:56:75:4a:55:f0:c1:9b:
ed:ff:72:2c:c8:52:5e:cb:2a:96:a6:1a:20:60:c9:a0:c9:36:
15:06:5f:2e:05:28:3b:9a:fe:7a:28:ea:4e:29:20:57:0e:88:
89:23:8c:1f:49:b3:73:e7:4a:5e:74:21:25:8a:c9:9e:00:8e:
d7:ff:c5:78:4c:b7:e0:04:8a:fe:65:a7:53:b9:0e:92:e5:65:
21:a1:44:86:48:09:ef:ea:20:29:6e:93:c7:f9:55:c9:38:6f:
c8:ae:e9:25:67:18:51:ba:f9:e6:37:e4:ee:4f:b9:a6:02:f5:
81:83:85:ef:a6:36:c1:46:0c:01:b8:91:f0:78:16:36:63:20:
a0:34:fe:8c:41:3b:ae:f0:a3:03:26:8c:d7:bb:89:5b:c9:c4:
6e:f4:f4:c3:4f:04:3b:2f:89:b1:62:80:56:8c:90:6b:d3:9d:
45:b0:09:4a:93:ec:28:5e:f0:33:aa:8c:ec:f3:a2:34:08:28:
d0:fa:5a:ee:48:d3:47:59:49:f2:91:71:94:ed:b8:58:6f:e3:
05:62:4d:c3:fb:81:2d:18:9a:3a:f4:52:20:31:25:40:61:76:
17:ae:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:32 2026 by rpki-client