This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039333138.roa
File: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (raw, json)
Hash identifier: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=
Subject key identifier: 89:6C:CC:7B:D6:49:48:78:E4:9B:17:37:84:2A:A4:FD:07:C0:A3:E3
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 786650A09B63681558402692C61C77E8CDC37840
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039333138.roa
Signing time: Tue 20 Jan 2026 02:22:43 +0000
ROA not before: Tue 20 Jan 2026 02:17:43 +0000
ROA not after: Tue 19 Jan 2027 02:22:43 +0000
asID: 9318
IP address blocks: 112.73.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 15:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:66:50:a0:9b:63:68:15:58:40:26:92:c6:1c:77:e8:cd:c3:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jan 20 02:17:43 2026 GMT
Not After : Jan 19 02:22:43 2027 GMT
Subject: CN=896CCC7BD6494878E49B1737842AA4FD07C0A3E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:c2:e1:6c:2f:eb:74:ca:22:bc:96:cd:3b:
dd:d4:0c:16:ba:bc:38:f2:1b:80:6f:b4:5e:0f:ad:
3d:3d:53:9e:28:30:1a:1f:b3:82:2f:7b:ad:97:68:
de:58:a4:c8:c8:e0:4d:2d:d0:0e:a1:bc:1d:43:c4:
a5:8b:ad:d9:dc:76:99:49:e8:1b:24:cc:02:50:5b:
a9:f2:77:cf:3f:ef:9e:be:07:5a:ec:34:e8:2b:f5:
9d:0b:40:63:8f:43:9c:e6:a6:30:9a:6b:c3:22:72:
03:10:fd:d1:90:a6:2c:83:9f:c2:14:54:88:86:4d:
b2:c3:79:64:75:28:71:fc:44:e2:36:9c:6d:c1:15:
d3:08:62:b8:e3:52:02:ca:73:a8:f6:5a:8d:27:ee:
be:34:14:d6:f0:62:96:36:b4:ff:1b:e8:63:16:4e:
84:03:50:f8:e2:74:0a:75:2d:d6:f9:ed:3c:08:64:
05:88:de:c1:6b:f4:3b:c5:05:be:a8:38:f1:93:5e:
54:24:88:64:a1:be:24:a1:1a:cf:8a:21:b1:6e:f4:
c9:65:9e:b4:ec:22:71:34:93:29:b6:15:6f:f3:45:
b6:ae:df:25:3e:24:b7:82:0a:28:94:07:cd:1c:6f:
cd:fc:87:95:24:ae:02:27:ea:69:e4:90:d2:7d:7c:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:CC:7B:D6:49:48:78:E4:9B:17:37:84:2A:A4:FD:07:C0:A3:E3
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:e4:24:bb:12:ea:86:f5:62:e0:dd:c8:fb:8d:eb:f5:2b:f6:
86:af:07:cb:38:27:2a:b9:7f:24:41:f1:41:f8:35:ad:6e:81:
df:3c:fa:18:28:c0:b8:8d:85:e1:01:87:1b:15:14:e7:b6:69:
ac:2b:09:8c:5a:b1:95:db:49:7b:20:5b:68:c9:1a:08:12:cf:
40:ac:57:8d:3f:93:87:a6:d7:03:3e:23:f8:59:25:a0:51:1f:
1e:9d:0b:c6:23:a3:b5:8c:2c:a3:f6:50:12:85:a5:83:a4:2a:
b8:f3:b2:7e:13:ed:82:be:cb:b1:87:35:04:3f:23:b6:41:35:
68:92:40:6a:54:5b:13:a0:ee:7c:e6:36:36:a4:3d:fa:2b:b0:
13:55:c2:9b:de:8f:c3:1f:b5:74:96:d4:b6:d7:25:5e:7f:3a:
21:44:9d:5b:7e:e5:83:76:86:cb:41:c8:68:35:77:30:f5:aa:
a3:d8:d5:2b:f7:37:76:ee:11:ed:23:73:81:99:eb:f7:cb:b2:
b4:2c:9b:a9:f7:49:8d:53:12:a0:5b:9e:13:4b:27:c6:3b:c2:
d8:18:1b:95:c2:39:f9:73:bf:69:ea:a3:64:12:70:2b:00:e2:
d0:d7:9e:e9:e3:62:5e:55:a7:d7:b0:aa:b0:69:c3:7a:c1:d1:
a5:59:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:21 2026 by rpki-client