This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20333938373034.roa
File: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (raw, json)
Hash identifier: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=
Subject key identifier: 36:BF:A9:C4:EA:0A:AA:38:31:2E:59:17:B1:85:56:1F:8A:94:E2:7B
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 19CAF33D7934A6FC9DD10CBDE1B98CAE83E444A1
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20333938373034.roa
Signing time: Tue 20 Jan 2026 02:22:43 +0000
ROA not before: Tue 20 Jan 2026 02:17:43 +0000
ROA not after: Tue 19 Jan 2027 02:22:43 +0000
asID: 398704
IP address blocks: 112.73.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 15:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ca:f3:3d:79:34:a6:fc:9d:d1:0c:bd:e1:b9:8c:ae:83:e4:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jan 20 02:17:43 2026 GMT
Not After : Jan 19 02:22:43 2027 GMT
Subject: CN=36BFA9C4EA0AAA38312E5917B185561F8A94E27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:b2:6a:0d:8f:2e:e9:61:f3:86:f1:22:2b:
5e:9f:51:ba:ae:a1:31:b2:f0:be:91:8c:84:51:10:
3a:bb:28:bb:e5:2c:7e:68:f9:25:a7:94:b6:da:f7:
98:7c:a7:9c:8c:10:d7:35:0d:11:1f:a9:a6:64:cd:
66:13:82:1e:8b:69:fc:9a:3c:18:38:1f:8a:86:96:
d6:48:ad:09:4a:ee:0e:74:cd:3b:63:2d:fd:32:f1:
62:26:36:c1:1a:3d:21:a5:e1:3e:07:8a:55:13:22:
98:58:14:33:6f:44:63:a3:3f:03:5f:f1:9d:a0:1f:
1a:27:5f:a9:15:de:f8:fb:9d:fe:59:36:cb:53:a3:
93:4a:ec:8a:6c:78:84:2c:e2:05:f9:ea:12:4c:a6:
d5:c9:25:86:89:8e:d1:7e:7a:88:b7:c5:1c:c8:d4:
a6:81:de:de:30:f7:22:f8:38:8c:9a:6f:18:e9:cc:
28:8d:7c:62:df:ea:44:5a:0f:92:7d:02:5f:14:8a:
a9:b0:01:25:af:73:c8:4a:f0:7a:2e:c1:d2:f0:ed:
44:ff:6b:f2:5c:eb:8c:36:19:f5:a1:be:1b:1f:08:
3b:7d:1d:51:9b:08:0b:59:bd:a7:bc:76:cf:0e:19:
13:36:03:be:e8:90:b2:c3:ca:eb:28:18:1d:ef:d6:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:A9:C4:EA:0A:AA:38:31:2E:59:17:B1:85:56:1F:8A:94:E2:7B
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:c4:a2:4a:2c:da:d3:16:38:83:7e:68:49:27:15:a5:c8:d9:
49:3a:b0:c5:22:a2:ac:b7:59:17:8d:42:3c:c1:9d:37:ac:b4:
61:1b:6c:1c:1d:40:ab:b8:60:ad:63:e7:27:0c:f8:7e:d4:33:
e7:04:76:e1:30:6f:fe:34:46:e1:ff:44:e1:79:a2:c4:fa:dd:
8e:dc:3a:fd:76:bb:4e:51:32:a6:fb:9b:99:3c:70:d9:64:ef:
04:63:a4:fc:4d:68:b0:87:1c:1d:00:04:79:c6:1b:d5:c7:8f:
73:a0:bc:e0:f3:f1:52:bc:ef:33:24:f9:39:fc:f9:41:78:c9:
b5:d3:61:a9:a5:a2:f2:c2:d3:3b:d2:cf:28:1f:42:ab:bb:27:
d6:bb:ad:41:56:9e:5e:31:39:7a:74:6f:7f:bb:3c:b3:55:e9:
94:ef:5e:63:86:cd:61:8f:d9:96:65:bd:d2:18:cf:9a:e5:ba:
69:01:bc:2b:c0:d3:ec:f4:3d:e2:d9:69:7e:87:df:0d:b5:8f:
b4:19:ea:15:e2:d6:4d:df:e6:0c:ea:80:30:e6:33:57:40:b3:
3f:3d:48:7c:f3:fe:1c:52:b2:c1:c0:b0:b9:fb:45:be:54:e2:
a2:bd:f8:1f:8c:eb:a4:2c:52:2f:ce:67:76:bd:29:fd:ad:a5:
0e:7c:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:21 2026 by rpki-client