This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31302e302f32342d3234203d3e20313332383833.roa
File: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=
Subject key identifier: 5B:05:3F:C9:BF:F6:07:BD:C8:82:B9:19:5A:9C:ED:DF:9F:41:46:E4
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 16275656D5D73B8B5A250D3BBB589099BA33579E
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31302e302f32342d3234203d3e20313332383833.roa
Signing time: Tue 20 Jan 2026 02:16:48 +0000
ROA not before: Tue 20 Jan 2026 02:11:48 +0000
ROA not after: Tue 19 Jan 2027 02:16:48 +0000
asID: 132883
IP address blocks: 203.83.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:27:56:56:d5:d7:3b:8b:5a:25:0d:3b:bb:58:90:99:ba:33:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Jan 20 02:11:48 2026 GMT
Not After : Jan 19 02:16:48 2027 GMT
Subject: CN=5B053FC9BFF607BDC882B9195A9CEDDF9F4146E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:11:c8:b3:ec:58:18:06:03:7f:2a:71:91:
00:a1:e3:7b:6a:f6:9f:3c:7e:6c:99:49:03:f2:00:
6c:2b:5a:d8:51:af:31:f6:d6:23:b8:c5:76:3b:4e:
cd:32:96:de:56:bd:7d:4a:c4:d6:41:3a:ea:e2:48:
f6:34:90:2f:d8:88:8a:7d:4b:96:e0:b4:ac:42:c0:
08:0c:64:ad:8f:bb:a2:1c:c3:6f:b6:cd:7d:1e:6e:
8c:4b:a8:a7:be:b5:95:95:4c:18:b6:d4:31:ed:0a:
5c:e9:68:ad:7f:85:03:37:85:dc:c5:3b:f3:c9:37:
87:c5:e5:a6:b5:96:7d:33:12:3e:f1:02:4d:69:f9:
05:09:4a:4b:c1:2f:cb:8b:4a:c0:75:f3:8b:f0:0d:
24:7c:8c:7a:e9:8b:56:04:20:e4:3a:18:53:ab:7d:
f4:9e:98:3f:4d:2c:51:43:45:1c:8c:8d:d0:88:2c:
d1:44:d3:0e:5b:8f:4b:2c:22:1a:f6:eb:ac:b4:32:
66:72:71:88:3c:82:db:c0:b6:2e:cb:bf:f9:c7:68:
3f:9d:da:67:2b:40:2a:bf:8a:ca:c7:1a:b9:43:37:
7f:0b:a9:fc:7e:c4:1a:05:53:e8:f3:ef:b0:36:87:
1f:3d:6e:9b:fd:a4:72:91:68:e0:28:8e:f8:87:4a:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:3F:C9:BF:F6:07:BD:C8:82:B9:19:5A:9C:ED:DF:9F:41:46:E4
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31302e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.10.0/24
Signature Algorithm: sha256WithRSAEncryption
46:13:d7:73:1e:11:12:5e:a9:7c:d8:f5:f4:23:ff:b3:15:95:
cb:a1:e4:40:14:1c:aa:42:09:24:cc:af:36:5d:05:cf:32:27:
16:f8:98:1e:85:ad:c1:c1:42:c9:54:b6:89:b5:0d:ad:e0:1b:
2a:4a:78:18:d0:9a:f0:71:77:0b:25:6d:eb:d3:06:4b:1c:19:
78:28:82:7f:dd:ac:a9:a4:9e:aa:e6:55:be:a8:be:84:fe:99:
fb:bc:05:67:d3:13:4d:7f:06:c4:51:85:1e:9f:71:a6:a4:82:
6d:cc:7f:79:fb:7f:cd:03:68:9d:2e:09:34:15:39:1b:fc:e1:
b8:3a:c3:62:4b:56:d0:dc:c8:6d:b0:ee:ff:ec:50:c3:a9:13:
39:82:bb:fa:32:80:1b:a3:74:85:cf:89:76:8b:62:26:db:02:
c6:18:74:18:5c:73:1c:3b:8d:82:ea:2d:7b:e5:b5:d4:9c:79:
e6:be:5f:db:bb:52:4e:35:af:9b:01:e9:6e:be:88:19:33:51:
4f:86:88:e4:5e:ec:61:45:00:ea:a0:ae:c6:9f:09:d1:6b:11:
93:f0:12:89:d0:fb:95:9a:6c:38:b1:2b:7a:23:91:97:4c:e2:
64:66:dd:63:7b:1a:6c:58:d9:bb:a9:5e:29:dd:79:94:17:ac:
f0:e8:45:ca
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFidWVtXXO4taJQ07u1iQmbozV54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4
ODJFNzhBMDAeFw0yNjAxMjAwMjExNDhaFw0yNzAxMTkwMjE2NDhaMDMxMTAvBgNV
BAMTKDVCMDUzRkM5QkZGNjA3QkRDODgyQjkxOTVBOUNFRERGOUY0MTQ2RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61BHIs+xYGAYDfypxkQCh43tq
9p88fmyZSQPyAGwrWthRrzH21iO4xXY7Ts0ylt5WvX1KxNZBOuriSPY0kC/YiIp9
S5bgtKxCwAgMZK2Pu6Icw2+2zX0eboxLqKe+tZWVTBi21DHtClzpaK1/hQM3hdzF
O/PJN4fF5aa1ln0zEj7xAk1p+QUJSkvBL8uLSsB184vwDSR8jHrpi1YEIOQ6GFOr
ffSemD9NLFFDRRyMjdCILNFE0w5bj0ssIhr266y0MmZycYg8gtvAti7Lv/nHaD+d
2mcrQCq/isrHGrlDN38Lqfx+xBoFU+jz77A2hx89bpv9pHKRaOAojviHSjVxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUWwU/yb/2B73IgrkZWpzt359BRuQwHwYDVR0j
BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0
MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODI4ODAwMi8wLzMyMzAzMzJlMzgz
MzJlMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM4MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMtTCjANBgkqhkiG9w0BAQsFAAOCAQEARhPXcx4REl6pfNj19CP/sxWV
y6HkQBQcqkIJJMyvNl0FzzInFviYHoWtwcFCyVS2ibUNreAbKkp4GNCa8HF3CyVt
69MGSxwZeCiCf92sqaSequZVvqi+hP6Z+7wFZ9MTTX8GxFGFHp9xpqSCbcx/eft/
zQNonS4JNBU5G/zhuDrDYktW0NzIbbDu/+xQw6kTOYK7+jKAG6N0hc+JdotiJtsC
xhh0GFxzHDuNguote+W11Jx55r5f27tSTjWvmwHpbr6IGTNRT4aI5F7sYUUA6qCu
xp8J0WsRk/ASidD7lZpsOLEreiORl0ziZGbdY3sabFjZu6leKd15lBes8OhFyg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:26 2026 by rpki-client