This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31312e302f32342d3234203d3e20313332383833.roa
File: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=
Subject key identifier: 64:20:82:38:D8:35:FD:9D:C8:71:64:10:B1:F9:AB:DC:FB:85:BA:99
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 3D4776F1494165ABE01F1F9A18FCB9A7FA4CB7CE
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31312e302f32342d3234203d3e20313332383833.roa
Signing time: Tue 20 Jan 2026 02:16:49 +0000
ROA not before: Tue 20 Jan 2026 02:11:49 +0000
ROA not after: Tue 19 Jan 2027 02:16:49 +0000
asID: 132883
IP address blocks: 203.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:47:76:f1:49:41:65:ab:e0:1f:1f:9a:18:fc:b9:a7:fa:4c:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Jan 20 02:11:49 2026 GMT
Not After : Jan 19 02:16:49 2027 GMT
Subject: CN=64208238D835FD9DC8716410B1F9ABDCFB85BA99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:3b:b4:33:70:30:08:b3:34:a4:41:5c:de:
14:ee:f9:9f:48:99:30:3f:33:3b:f2:1e:0c:6c:49:
4c:cd:10:1e:29:ff:d4:1f:6d:1b:a3:20:0d:99:2b:
54:61:6b:ef:fb:ef:dd:63:19:79:15:6f:7c:e7:d7:
f7:31:dc:53:77:8d:57:70:bb:3c:20:3b:98:8c:69:
66:5d:b2:08:3f:91:13:1d:c7:2f:7e:65:53:f9:ce:
1a:eb:f0:9b:e6:fe:75:5e:83:ca:a5:b9:1f:30:52:
f8:31:d4:b1:7d:1c:42:04:7b:1a:45:21:57:08:b0:
e8:b1:af:9c:07:94:cf:d6:fd:d7:45:72:27:ca:38:
e5:0c:bb:65:12:57:59:1c:f9:09:b0:9e:3f:39:91:
85:8f:a4:e4:d5:13:76:c4:fe:07:94:07:40:10:96:
57:bb:02:7c:83:84:5f:fc:6a:fb:23:88:dc:f4:5f:
7a:49:22:ea:bf:f7:71:39:35:c7:27:6a:c8:5d:4c:
b8:64:45:82:2f:74:81:91:c1:a9:7a:72:02:1b:31:
74:6d:96:b7:7f:f5:8c:78:a6:82:26:fb:ba:61:0d:
94:d5:b1:2b:91:a6:1d:8f:18:dd:ce:e6:53:2b:21:
2d:9c:40:46:34:9e:9f:48:2e:1b:c7:b6:8d:73:e2:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:82:38:D8:35:FD:9D:C8:71:64:10:B1:F9:AB:DC:FB:85:BA:99
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31312e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:46:7c:6b:53:ef:47:b8:39:72:50:a8:c9:a4:4b:e6:f5:48:
04:4e:7a:6a:f1:27:63:22:35:f0:ed:1a:f8:d6:be:9a:4a:b7:
8f:41:d1:95:fa:62:e5:fc:fc:86:e5:d3:db:51:43:be:a7:de:
76:01:d1:06:95:98:0a:f4:17:6b:e1:77:29:b6:bb:c9:d7:45:
a1:28:b7:c4:1d:e1:2d:d9:e7:c5:db:6a:01:3f:29:10:fe:91:
49:e8:3b:77:86:29:1e:1a:59:e6:42:e8:ca:3d:10:c4:0a:bf:
28:01:c8:02:97:b1:cd:db:02:a5:cb:c1:29:a7:07:64:b8:89:
85:bd:5c:e4:6e:e0:1a:29:0b:77:83:ea:75:1a:12:7a:e0:d0:
0a:49:52:51:e1:2a:99:24:51:fe:4c:20:b4:af:75:7d:8b:47:
90:49:56:00:00:fb:a4:ba:c6:a5:7e:d7:ea:f1:f6:02:d5:5e:
ce:72:1a:4a:c3:c8:76:cf:a5:b3:f7:db:c3:c5:a5:ef:de:a9:
f2:00:c4:af:32:79:d0:d5:37:9a:c2:17:5d:b9:df:9a:43:d2:
97:35:f4:06:9a:41:f5:cb:be:7a:8f:f0:c4:2a:be:4e:b0:f1:
47:64:fa:ce:82:d8:a6:c2:18:90:c6:07:9f:f2:cf:77:7c:e4:
8e:b9:87:ef
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPUd28UlBZavgHx+aGPy5p/pMt84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4
ODJFNzhBMDAeFw0yNjAxMjAwMjExNDlaFw0yNzAxMTkwMjE2NDlaMDMxMTAvBgNV
BAMTKDY0MjA4MjM4RDgzNUZEOURDODcxNjQxMEIxRjlBQkRDRkI4NUJBOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiaju0M3AwCLM0pEFc3hTu+Z9I
mTA/MzvyHgxsSUzNEB4p/9QfbRujIA2ZK1Rha+/7791jGXkVb3zn1/cx3FN3jVdw
uzwgO5iMaWZdsgg/kRMdxy9+ZVP5zhrr8Jvm/nVeg8qluR8wUvgx1LF9HEIEexpF
IVcIsOixr5wHlM/W/ddFcifKOOUMu2USV1kc+Qmwnj85kYWPpOTVE3bE/geUB0AQ
lle7AnyDhF/8avsjiNz0X3pJIuq/93E5NccnashdTLhkRYIvdIGRwal6cgIbMXRt
lrd/9Yx4poIm+7phDZTVsSuRph2PGN3O5lMrIS2cQEY0np9ILhvHto1z4iDXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUZCCCONg1/Z3IcWQQsfmr3PuFupkwHwYDVR0j
BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0
MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODI4ODAwMi8wLzMyMzAzMzJlMzgz
MzJlMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM4MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMtTCzANBgkqhkiG9w0BAQsFAAOCAQEAD0Z8a1PvR7g5clCoyaRL5vVI
BE56avEnYyI18O0a+Na+mkq3j0HRlfpi5fz8huXT21FDvqfedgHRBpWYCvQXa+F3
Kba7yddFoSi3xB3hLdnnxdtqAT8pEP6RSeg7d4YpHhpZ5kLoyj0QxAq/KAHIApex
zdsCpcvBKacHZLiJhb1c5G7gGikLd4PqdRoSeuDQCklSUeEqmSRR/kwgtK91fYtH
kElWAAD7pLrGpX7X6vH2AtVeznIaSsPIds+ls/fbw8Wl796p8gDErzJ50NU3msIX
XbnfmkPSlzX0BppB9cu+eo/wxCq+TrDxR2T6zoLYpsIYkMYHn/LPd3zkjrmH7w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:27 2026 by rpki-client