This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa
File: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (raw, json)
Hash identifier: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=
Subject key identifier: 7A:83:AC:85:1F:F9:DA:AB:EE:E8:83:61:D3:61:D0:4E:9C:B7:78:FB
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 1F347F71DF6D728F5AAFA007343C98DEA59209F0
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa
Signing time: Tue 20 Jan 2026 02:22:43 +0000
ROA not before: Tue 20 Jan 2026 02:17:43 +0000
ROA not after: Tue 19 Jan 2027 02:22:43 +0000
asID: 398704
IP address blocks: 112.73.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 15:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:34:7f:71:df:6d:72:8f:5a:af:a0:07:34:3c:98:de:a5:92:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jan 20 02:17:43 2026 GMT
Not After : Jan 19 02:22:43 2027 GMT
Subject: CN=7A83AC851FF9DAABEEE88361D361D04E9CB778FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:bd:b1:b7:99:4b:da:a8:ca:57:8e:b4:ec:
de:93:a7:90:ea:0f:3f:f6:04:76:89:88:fa:a4:2c:
d8:fe:36:a8:3f:5e:71:dc:62:99:c4:81:24:83:65:
d0:f1:4d:82:95:c5:d0:f2:8f:45:46:47:21:65:fe:
86:f7:87:e9:2d:54:ca:a8:f5:26:70:97:8b:e9:74:
ff:8b:9f:b2:30:1c:33:8e:4c:18:5c:73:7d:09:a0:
ab:56:b2:f3:93:4e:66:63:05:3f:10:f7:d2:86:00:
01:b0:7b:d8:ae:25:cd:19:af:02:c9:dd:85:de:26:
ab:5c:8e:4f:6d:e5:50:b6:cf:0c:9d:77:d0:8a:30:
57:23:ad:02:c8:75:86:08:5d:4b:9a:65:d6:74:dc:
d7:23:a5:ce:58:26:d0:d2:3c:fc:55:77:15:40:93:
d1:05:45:79:1f:64:2e:1b:e0:67:f4:55:98:fa:7c:
db:96:f3:1c:2e:a5:fb:a7:11:02:25:94:ca:f1:7f:
12:14:53:c3:94:b0:24:b2:b9:76:ca:c7:cf:a6:53:
57:ec:14:bd:ef:f0:8b:ce:97:c4:4b:19:32:e1:cc:
8d:7d:3c:fc:07:92:b1:a8:79:23:92:16:e6:3c:a9:
ec:a7:15:4b:ca:73:3b:2e:61:b8:34:fa:94:f1:e9:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:AC:85:1F:F9:DA:AB:EE:E8:83:61:D3:61:D0:4E:9C:B7:78:FB
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.73.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:cc:f0:bd:56:50:da:41:10:ea:54:b4:61:9b:b7:aa:2f:99:
3c:b0:02:98:5a:c3:c5:c0:6e:25:ae:3f:b1:6d:2f:cf:ff:d7:
31:1b:19:3c:3f:60:3b:87:3d:69:14:b7:a9:99:e4:95:be:d0:
4b:81:58:e3:79:0c:0f:8c:08:cb:78:c2:4b:4d:c6:ad:30:ea:
4a:9e:34:1d:3a:c0:b8:06:61:4d:f0:20:df:d3:f4:7e:17:29:
03:d0:b3:31:7b:ba:3f:8b:0a:56:1f:85:f7:c9:28:5a:b2:38:
1a:01:ad:8f:e8:cb:66:c0:7f:fa:40:2e:5c:05:c4:6b:18:a1:
73:81:e6:38:84:0c:63:e3:b2:70:36:f7:d2:10:99:6d:3e:18:
fa:b9:88:45:1e:78:f5:d6:d5:dc:ef:2a:67:a2:17:32:3c:f9:
61:71:bf:e5:9d:ee:64:85:91:a1:40:5d:43:a4:8a:10:81:38:
aa:42:67:a3:78:68:e9:7e:81:95:fa:84:aa:89:f1:16:68:96:
fb:0a:a0:e2:10:3a:78:03:f4:a5:15:c1:65:07:b8:7d:4b:d2:
f7:af:e5:15:df:02:14:84:7b:99:4d:6e:c6:d4:c9:d3:99:1d:
ec:9b:a2:a5:af:2b:05:20:79:72:6f:f8:d0:4a:4d:de:83:b2:
c1:95:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:20 2026 by rpki-client