This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa
File: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (raw, json)
Hash identifier: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=
Subject key identifier: 3A:70:7A:83:3B:C5:FC:80:68:0B:C6:A4:85:B5:6F:D6:99:10:31:63
Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8
Certificate serial: 6760EE0E7DD12494FD1A1632D2E67D19FDF3DCAD
Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa
Signing time: Thu 22 Jan 2026 08:09:52 +0000
ROA not before: Thu 22 Jan 2026 08:04:52 +0000
ROA not after: Thu 21 Jan 2027 08:09:52 +0000
asID: 214432
IP address blocks: 161.248.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:60:ee:0e:7d:d1:24:94:fd:1a:16:32:d2:e6:7d:19:fd:f3:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8
Validity
Not Before: Jan 22 08:04:52 2026 GMT
Not After : Jan 21 08:09:52 2027 GMT
Subject: CN=3A707A833BC5FC80680BC6A485B56FD699103163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:4f:ff:14:56:17:94:7d:34:ae:e9:a0:94:
32:40:16:ce:75:16:94:ba:e7:27:c6:c0:2f:cb:d0:
e5:43:2a:9f:6a:31:63:65:1f:de:c1:53:8d:4f:42:
6f:4d:51:19:bf:d3:bb:68:f9:e4:61:af:97:c7:5a:
15:a3:df:a2:d0:30:62:87:10:24:5d:7e:b2:c6:c2:
13:97:10:6f:10:bf:47:8d:0a:f8:08:fc:de:30:12:
3d:af:9b:ff:e1:72:cf:43:40:28:ff:39:60:6f:7e:
d3:a2:2d:df:ac:bb:46:53:bc:85:47:2b:c6:06:79:
ca:f7:87:d3:47:1e:7e:69:45:ed:50:9a:1a:49:f7:
46:49:96:31:c1:b8:49:3c:96:b2:88:c1:65:b8:b6:
71:07:68:5e:1c:35:fe:e6:21:4e:1a:ec:7f:02:b7:
be:ad:88:8e:18:03:ac:3b:29:92:0b:e1:7c:24:7e:
e6:64:9e:c3:fd:d5:d8:99:73:71:96:f6:9c:35:93:
df:be:1c:9f:fd:2e:fd:88:b5:9d:7a:3f:2e:66:63:
6e:9a:f7:0d:d5:b7:ec:8f:5b:d3:db:35:d9:47:89:
68:68:25:79:60:a0:81:17:0f:ed:f5:b5:b4:f3:1e:
7d:a2:fd:4c:ec:ea:fe:87:12:61:4d:8a:4d:8e:83:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:7A:83:3B:C5:FC:80:68:0B:C6:A4:85:B5:6F:D6:99:10:31:63
X509v3 Authority Key Identifier:
keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.248.84.0/23
Signature Algorithm: sha256WithRSAEncryption
31:11:47:1a:05:1e:0f:89:09:fb:89:45:c4:58:ac:cb:01:b5:
a0:b1:d0:05:56:20:02:8e:2a:66:4e:01:b3:ec:c5:c3:00:a0:
e9:ac:85:d0:c6:e0:aa:36:20:f7:55:0d:2f:38:db:72:f0:91:
a0:7c:c1:a6:d1:cf:fb:d2:c6:1a:4a:e6:fc:6f:5e:26:1d:91:
07:20:06:e0:8b:e2:91:f1:89:10:ec:be:d1:7d:24:29:78:87:
4b:f2:d2:b4:67:f3:81:65:ff:f2:87:6e:5f:f0:98:7e:d4:0f:
5f:dc:e5:b1:84:d4:86:fb:dc:d2:9e:8e:29:f1:4c:15:0d:65:
86:23:90:7e:90:1a:5e:6a:12:bc:af:cc:c5:65:f6:c0:09:0c:
b1:33:55:e4:ca:0c:55:57:ca:f4:de:9b:df:5c:e9:2c:3b:ae:
14:0f:4f:3b:7f:34:1f:8f:70:f9:cb:10:cf:22:05:b5:15:b1:
01:89:de:dc:3e:cf:d0:f5:f5:bf:08:3a:34:c5:d2:62:5c:b6:
24:b6:3c:7a:d6:52:a5:40:43:9a:63:d5:48:a8:30:d8:d4:3b:
07:a7:7f:98:91:76:b8:1c:a6:d3:a7:3c:7e:c9:07:56:05:3f:
f5:79:3c:7e:85:02:4f:a4:58:7b:ed:4e:a8:41:9c:bf:88:16:
3e:48:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:41:22 2026 by rpki-client