This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e382e302f32342d3234203d3e20313332383833.roa
File: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=
Subject key identifier: 7B:00:6E:EB:99:6F:56:52:4C:B4:07:31:12:6E:5A:C4:D0:D5:41:53
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 6D077AF57472BC68CC1D01E1009B66368037D420
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e382e302f32342d3234203d3e20313332383833.roa
Signing time: Tue 20 Jan 2026 02:16:48 +0000
ROA not before: Tue 20 Jan 2026 02:11:48 +0000
ROA not after: Tue 19 Jan 2027 02:16:48 +0000
asID: 132883
IP address blocks: 203.83.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:07:7a:f5:74:72:bc:68:cc:1d:01:e1:00:9b:66:36:80:37:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Jan 20 02:11:48 2026 GMT
Not After : Jan 19 02:16:48 2027 GMT
Subject: CN=7B006EEB996F56524CB40731126E5AC4D0D54153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:6f:c4:a6:8a:ba:43:8e:59:46:a0:dd:47:
a8:5c:f3:cc:5e:a2:5a:64:a7:9c:25:d8:cb:91:6a:
8a:24:8a:c0:59:fd:c9:da:0b:68:a2:2a:a1:ed:17:
9e:3b:9c:04:ab:ae:09:91:97:10:d5:07:af:ef:80:
67:75:30:c7:9f:3c:75:1d:c5:ab:33:f5:31:43:7d:
b2:0f:66:b7:cb:b0:5c:27:19:4a:02:ca:8e:1a:67:
bf:7b:b8:ad:4e:7e:50:24:2f:4b:f7:41:f5:da:3a:
96:3b:73:8c:68:d2:69:12:dd:24:6b:cd:50:04:55:
77:41:b0:5f:98:91:65:47:4a:51:4e:45:9f:96:f6:
6c:29:58:ca:6a:66:0e:23:d6:25:94:6e:ac:7c:5a:
68:6b:92:81:12:24:3f:2f:b8:25:4b:37:9d:74:b4:
ed:0f:57:74:65:e0:3c:49:9b:e3:35:4d:3f:a6:1e:
d4:45:ef:a3:ce:40:aa:5a:82:c3:e7:8d:e8:9b:a6:
28:71:3a:81:ab:a8:a5:76:98:21:0a:c2:2c:d2:d3:
80:fd:c4:f4:a3:b7:89:ea:f1:e5:77:0d:2a:38:f9:
26:75:72:1b:3a:d3:af:00:83:a6:5b:d8:c0:0b:6f:
06:28:37:4f:d1:d1:18:11:ed:4c:b4:b8:c8:4b:6d:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:6E:EB:99:6F:56:52:4C:B4:07:31:12:6E:5A:C4:D0:D5:41:53
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e382e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:49:0c:8d:84:61:da:d9:a8:e4:a1:c0:29:e1:5e:c6:75:8a:
a0:de:1d:b0:23:97:20:fa:a4:cf:46:34:de:39:e0:b0:1f:39:
0e:df:c7:81:bc:cf:8f:3a:c7:48:1f:1f:af:3d:50:4c:4b:4f:
92:29:cf:ad:bf:77:30:02:e5:1e:67:68:a0:07:74:b6:88:bc:
00:3e:98:3c:28:09:14:ae:82:d8:46:78:1d:88:93:74:e2:c3:
08:14:95:c0:79:a4:7b:36:c0:e5:cb:7b:2d:e8:5c:2e:2d:d5:
fc:4e:d7:54:e9:f6:a1:bc:6e:9c:31:58:60:90:69:c8:3e:dd:
34:68:69:a2:8f:61:cb:4f:47:57:ba:df:27:28:2c:43:9e:41:
5d:9f:22:7c:89:ef:45:57:5f:34:ac:b6:b0:00:d0:37:bc:97:
21:18:50:75:0e:d8:70:65:28:00:19:8e:63:e8:fc:56:cb:42:
a4:da:7e:db:db:ee:b5:8a:ed:51:74:e2:58:ea:64:2c:b2:5b:
8e:da:ca:c5:42:39:0c:2f:97:3f:b5:c6:43:94:2f:05:0b:20:
a6:06:8a:1b:25:61:7d:10:68:bd:3a:7c:53:e5:3e:82:3a:62:
be:45:5a:4f:d1:10:ef:03:24:9c:5c:cd:2b:b2:24:6d:aa:eb:
53:fc:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:28 2026 by rpki-client