This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa
File: 34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa (raw, json)
Hash identifier: itMokTGxwSWWJTnoUOrsbnDHxxrgvRgcTta07z0tGug=
Subject key identifier: A8:45:AF:4D:61:AA:4F:1F:3E:0C:4C:94:7B:82:AE:80:88:A0:68:20
Certificate issuer: /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial: 4298CB6E5B5259FEE844EA768CD6B5872723B7C0
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa
Signing time: Tue 20 Jan 2026 02:25:03 +0000
ROA not before: Tue 20 Jan 2026 02:20:03 +0000
ROA not after: Tue 19 Jan 2027 02:25:03 +0000
asID: 132369
IP address blocks: 45.127.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:98:cb:6e:5b:52:59:fe:e8:44:ea:76:8c:d6:b5:87:27:23:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
Validity
Not Before: Jan 20 02:20:03 2026 GMT
Not After : Jan 19 02:25:03 2027 GMT
Subject: CN=A845AF4D61AA4F1F3E0C4C947B82AE8088A06820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:f0:5e:4d:ed:57:86:90:2a:c2:aa:92:71:
4b:c2:6d:b7:f7:ff:23:6c:fb:96:69:21:73:5e:1d:
4c:39:bf:9b:8c:ed:5b:19:17:36:f8:2e:d3:f6:e9:
13:bb:16:f5:65:c3:d7:22:f9:e5:21:85:5b:85:f3:
08:6a:4c:13:27:34:91:0d:d0:07:8f:40:6d:e8:be:
0b:69:e4:6e:d7:b0:ea:f9:6b:b0:5f:39:1f:0c:f0:
71:c5:d8:ef:9e:9c:fb:a7:ca:c9:53:44:da:95:1a:
e3:a1:df:b5:57:d5:95:52:97:fe:49:31:3d:c1:43:
83:3e:63:04:42:78:cc:2a:e0:e0:de:d2:1b:a6:ee:
1a:3c:15:75:fd:0e:ae:92:71:4c:24:6f:17:4a:5b:
19:da:fc:92:6e:0a:45:f1:88:43:66:69:38:c1:69:
90:97:87:fa:1a:54:cd:e1:8f:ad:a5:fb:ae:1e:be:
c0:dc:b8:78:96:51:aa:b4:6f:3d:c3:ab:f7:25:bd:
9b:3b:ba:ae:01:c6:ec:1c:15:66:7c:08:48:78:2c:
bc:da:2a:57:cc:b5:b7:de:6d:16:72:f1:3b:1c:39:
b5:fd:66:c0:f2:f7:66:81:dc:d7:7e:7a:a4:ff:68:
f6:1d:2b:77:b1:3d:ab:1b:9a:6d:4c:fe:71:75:63:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:AF:4D:61:AA:4F:1F:3E:0C:4C:94:7B:82:AE:80:88:A0:68:20
X509v3 Authority Key Identifier:
keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:4b:16:b3:51:08:08:60:38:00:8f:53:2a:41:e4:44:39:40:
e2:a8:29:a0:7a:a0:79:a5:89:52:2a:66:eb:19:db:78:6e:df:
7e:d3:18:d7:ee:84:86:59:96:90:ec:c1:98:c7:7e:8e:9f:23:
47:af:2a:20:37:fb:4d:de:5d:80:da:a4:ab:95:e2:a7:de:de:
0f:8e:8a:46:a2:70:77:e7:b8:24:67:e6:af:69:65:92:ee:61:
8f:e1:38:6c:76:1d:0d:dc:14:b7:55:b9:d2:46:ff:b5:ce:ab:
98:14:cb:61:b0:3e:fa:15:27:90:ac:4b:3e:bb:f4:e5:df:92:
a4:ac:95:3c:51:46:71:98:4a:50:cc:6f:e3:a4:57:81:cf:83:
cb:84:ce:44:c4:49:c1:41:ba:09:a5:31:db:8f:b2:72:f2:e1:
80:ad:f5:2d:10:94:93:d0:5f:6c:1e:39:2d:47:a2:d7:d8:87:
0e:f6:64:ed:df:22:c1:4a:09:12:5a:a5:4b:70:c6:cd:ee:e7:
93:74:02:2c:05:62:b2:0c:c5:f3:e8:01:6e:aa:7a:5d:32:4b:
c6:46:96:70:28:23:6f:ae:e9:70:2c:76:26:97:6b:e2:98:15:
bd:54:cd:5f:0e:f3:e7:f6:41:d3:31:62:d0:36:2e:b4:bf:05:
52:2b:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:08 2026 by rpki-client