This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3132372e3231362e302f32322d3234203d3e203331393732.roa
File: 34352e3132372e3231362e302f32322d3234203d3e203331393732.roa (raw, json)
Hash identifier: P9UKOQsuxFs3xLZFpS5NqIKWNqCbgxr7EOJE3zoL3Cs=
Subject key identifier: E8:BA:E4:81:A4:B9:EB:36:E1:1F:CC:28:59:A5:C4:53:82:ED:23:30
Certificate issuer: /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial: 34CD828BCFB74E888B8CA69680719365FAF17B91
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3132372e3231362e302f32322d3234203d3e203331393732.roa
Signing time: Tue 20 Jan 2026 02:25:03 +0000
ROA not before: Tue 20 Jan 2026 02:20:03 +0000
ROA not after: Tue 19 Jan 2027 02:25:03 +0000
asID: 31972
IP address blocks: 45.127.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cd:82:8b:cf:b7:4e:88:8b:8c:a6:96:80:71:93:65:fa:f1:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
Validity
Not Before: Jan 20 02:20:03 2026 GMT
Not After : Jan 19 02:25:03 2027 GMT
Subject: CN=E8BAE481A4B9EB36E11FCC2859A5C45382ED2330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:ce:90:8a:f5:b6:0f:31:4d:71:37:74:86:
d3:45:d3:60:42:fe:85:44:0d:72:01:20:c4:14:9c:
5c:5d:36:aa:81:7b:e3:a3:4f:3b:8e:6c:ea:9c:11:
11:e0:0d:d6:1d:12:1f:93:36:58:ca:1b:3e:e4:ac:
21:06:dd:7c:9a:1d:58:1a:76:96:cb:35:59:f0:41:
00:fe:87:7b:b6:da:31:1e:29:ec:21:30:05:5d:be:
80:30:a6:06:0f:90:b4:17:48:e0:e8:67:c4:14:7e:
89:ce:af:14:fa:63:0b:dd:21:23:0b:74:e1:d1:e6:
60:f2:3b:99:e8:25:dd:08:fd:31:06:ae:55:96:5a:
99:14:d8:b1:65:e5:1d:69:74:66:6a:e0:72:6b:b8:
8a:c4:49:f2:b1:5c:0b:89:6e:dd:8c:ce:6b:ab:f0:
35:a9:50:bc:62:cb:f0:f3:ef:b6:05:3d:81:cb:a3:
6c:a1:0c:0b:1a:5f:ab:17:71:cf:a1:eb:62:63:a1:
eb:06:38:c3:f3:72:a0:99:cd:01:c9:bd:4d:8b:b0:
9d:20:cf:f6:48:68:77:b3:8a:26:60:5c:5c:5b:8c:
3f:cc:d8:2e:9e:f5:5b:f8:15:ad:81:13:f0:05:49:
c0:95:d3:b2:b0:64:b7:1b:86:30:2d:00:71:23:69:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:E4:81:A4:B9:EB:36:E1:1F:CC:28:59:A5:C4:53:82:ED:23:30
X509v3 Authority Key Identifier:
keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3132372e3231362e302f32322d3234203d3e203331393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.216.0/22
Signature Algorithm: sha256WithRSAEncryption
50:cf:9b:1c:ad:88:57:5e:08:7f:67:d2:da:37:1f:3c:95:8d:
69:f1:2b:53:f6:8f:ad:1c:da:60:d6:db:5f:8e:0a:5c:a6:08:
8b:2b:bc:9a:5f:ad:8a:c8:fe:77:26:ae:f9:32:81:66:e1:b7:
04:2e:82:95:3f:91:91:24:5f:e1:a8:5d:d7:5b:2f:37:ec:15:
a2:85:c1:dd:b1:6c:15:15:a3:c4:c8:7c:97:68:10:54:5f:bc:
df:69:e2:97:eb:c0:05:ed:8d:35:88:48:0f:4d:f5:04:78:11:
de:78:9a:af:01:61:12:b4:a6:f1:6d:ac:62:6b:7d:3f:7a:c6:
39:87:ce:99:c3:f7:c9:9e:3b:c8:40:ab:f3:99:09:9d:b2:8a:
d5:84:15:ff:e8:36:e4:73:0d:0e:54:fe:79:86:0b:41:f3:e7:
52:84:19:5c:af:c2:fa:6c:8a:49:fc:98:66:ae:be:07:5f:32:
3b:8d:3a:fc:29:3b:3c:9d:7a:0a:b4:c6:87:9d:43:9a:00:23:
43:34:6a:c2:9e:28:15:4e:6e:9f:c4:6f:a3:51:77:fe:97:e8:
74:26:84:ec:11:5e:7f:fb:6e:5b:de:b8:e1:20:99:d1:29:f9:
bb:01:60:1c:d2:48:b9:12:99:c5:b5:bc:f6:5c:f7:0c:e0:71:
f6:a0:fb:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:30 2026 by rpki-client