This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa
File: 34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa (raw, json)
Hash identifier: Pg8t0dpy+alNQ7GNJZSlH3B+oaIcPpb23mHndUI5HFM=
Subject key identifier: 4A:DE:8F:9C:2D:79:31:F2:0D:93:68:F6:BB:BC:9B:1E:A9:48:8A:33
Certificate issuer: /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial: 17045A8D1B3511EA1C70A794CC06B9FA5EC15C7E
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa
Signing time: Tue 20 Jan 2026 02:25:02 +0000
ROA not before: Tue 20 Jan 2026 02:20:02 +0000
ROA not after: Tue 19 Jan 2027 02:25:02 +0000
asID: 132369
IP address blocks: 45.115.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:04:5a:8d:1b:35:11:ea:1c:70:a7:94:cc:06:b9:fa:5e:c1:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
Validity
Not Before: Jan 20 02:20:02 2026 GMT
Not After : Jan 19 02:25:02 2027 GMT
Subject: CN=4ADE8F9C2D7931F20D9368F6BBBC9B1EA9488A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:7b:fb:79:22:73:31:46:37:77:52:72:77:
92:ad:2b:87:46:ba:ad:f8:ac:35:43:a8:86:8d:b7:
37:6f:e3:c9:58:e6:59:64:b7:48:03:13:29:d5:3c:
a3:db:d0:1f:08:d4:e9:4b:c7:45:2b:ca:fc:67:e0:
50:90:b4:8d:27:61:00:14:34:32:66:81:96:8a:15:
ec:a5:3e:4a:d7:d0:b4:24:be:0f:33:f7:72:a4:0a:
e7:f0:54:39:b4:eb:86:3a:55:7e:fd:57:b2:7b:73:
42:1c:1b:f2:e2:2c:bb:63:b7:1c:1b:76:e9:fb:11:
dd:cc:7a:5c:9e:f1:0c:9b:8c:e2:30:a9:9e:b9:85:
e7:f5:ab:79:a8:6a:d6:b7:12:b4:ed:c9:a6:6e:19:
75:3f:a8:5f:a2:59:8a:b6:30:3e:46:de:83:f8:e2:
c2:29:f7:6f:fa:7b:b4:6e:97:63:be:47:92:b3:85:
25:25:4b:4d:0a:2b:fd:91:96:3d:a8:65:07:01:37:
0e:86:dd:12:f7:73:8c:11:79:63:e9:d7:98:b3:91:
d7:9c:0d:b7:d5:b6:82:31:b5:de:72:7d:12:58:2e:
ab:73:1c:0c:9f:87:38:3d:fc:9d:58:17:5f:83:57:
1c:c0:a9:24:89:b5:69:49:b6:67:ca:3e:70:c2:26:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:8F:9C:2D:79:31:F2:0D:93:68:F6:BB:BC:9B:1E:A9:48:8A:33
X509v3 Authority Key Identifier:
keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.228.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f2:8d:a3:fa:2c:cc:72:b6:a3:c4:bb:c4:7d:00:8a:17:9c:
fb:ed:b2:0f:fa:c4:42:b6:e0:3e:52:17:f1:3a:c8:67:30:1c:
07:63:f4:e4:a0:f0:25:fd:a4:d8:0a:e3:d5:9b:49:3f:63:99:
ec:90:8f:20:76:f6:03:ef:3f:29:a8:cd:53:35:e7:e9:79:33:
29:fd:0f:84:fb:1b:0e:8d:a5:25:79:bc:1b:11:d7:76:0d:cf:
6e:19:3a:97:fa:af:aa:46:e2:2d:13:60:c8:9e:8f:d4:b1:83:
bb:5a:68:a3:7f:15:06:5c:b9:f8:0c:86:82:ef:6d:65:e7:05:
5a:ac:c7:ab:9d:6b:1c:ef:70:48:d6:b8:37:9c:f9:0f:3d:91:
a7:8e:a1:85:47:53:8d:21:61:48:8a:7b:87:ea:c4:de:6a:45:
a8:18:49:cf:58:8b:ac:13:bd:d3:10:10:39:5b:a3:b0:ec:ce:
fc:8f:43:58:fe:7f:f9:8a:4c:d6:0d:04:ab:3d:a7:d8:fb:c9:
87:f9:b8:d6:7c:d5:be:34:a2:74:df:6d:95:9f:2c:7e:71:42:
a4:55:82:b7:94:40:e8:e0:89:4c:c2:43:3a:1d:49:eb:d9:69:
d9:25:11:91:92:9e:07:62:3b:d6:5a:19:d9:98:12:84:b6:5d:
aa:79:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:08 2026 by rpki-client