This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20313436383036.roa
File: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (raw, json)
Hash identifier: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=
Subject key identifier: 26:40:DB:08:81:FD:BA:F0:D5:FF:21:36:11:0E:B0:44:8E:82:C5:D5
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 6AC6E6C0376B1EAB3E30FC6F53F64DA752ED8973
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20313436383036.roa
Signing time: Tue 20 Jan 2026 02:09:29 +0000
ROA not before: Tue 20 Jan 2026 02:04:29 +0000
ROA not after: Tue 19 Jan 2027 02:09:29 +0000
asID: 146806
IP address blocks: 157.66.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c6:e6:c0:37:6b:1e:ab:3e:30:fc:6f:53:f6:4d:a7:52:ed:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Jan 20 02:04:29 2026 GMT
Not After : Jan 19 02:09:29 2027 GMT
Subject: CN=2640DB0881FDBAF0D5FF2136110EB0448E82C5D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:2e:78:82:61:11:d3:e0:24:9d:9a:bb:e4:
b6:f7:05:0a:47:19:ab:5f:ad:31:01:df:05:ed:9e:
a1:0c:25:3e:b9:2a:27:b0:19:25:01:ac:09:8e:fe:
b0:54:0a:3e:ae:49:63:6d:da:ac:cf:60:1e:3a:93:
17:c2:93:9d:6f:05:35:d7:81:ce:95:48:3a:d6:c6:
e5:f5:0b:57:ea:9f:48:54:d7:03:28:e0:06:8e:83:
a9:0d:3e:62:a7:2f:77:94:cf:5c:9b:15:04:28:91:
42:66:88:3e:b8:77:9d:f3:20:62:3e:72:1d:a7:97:
f1:a1:d8:2c:b6:72:45:ec:59:c8:77:8f:f6:f9:7e:
5d:1b:07:02:0a:7f:b2:a0:c9:1d:bd:9e:1a:ba:8c:
de:18:56:c7:f8:02:a4:bc:6c:cf:bd:99:f6:ad:db:
9e:71:68:8f:0f:df:cc:0f:b2:0c:1a:ca:e1:7b:ab:
d3:5e:fd:36:11:a5:1c:95:7a:5e:65:36:72:f5:66:
d3:1c:53:93:ce:75:38:3e:1c:f9:f2:31:f8:e6:06:
ae:79:dd:51:81:c9:ca:a1:15:b9:80:12:55:43:bd:
f9:a0:8e:9d:44:e2:86:d1:3d:bf:a7:6d:0e:0b:b3:
36:93:ce:ea:1c:fa:a9:db:c9:e4:cb:9a:04:bc:cb:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:DB:08:81:FD:BA:F0:D5:FF:21:36:11:0E:B0:44:8E:82:C5:D5
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20313436383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.42.0/23
Signature Algorithm: sha256WithRSAEncryption
83:53:78:c2:dd:21:47:d6:5c:98:81:25:f4:db:2d:c0:65:8c:
dd:42:e5:91:d0:7c:27:65:58:6a:93:53:b4:24:67:8c:03:f0:
62:47:cf:c4:4f:07:87:a4:de:52:d2:56:f9:14:f5:5c:4a:02:
43:b3:33:06:8e:6f:20:32:3b:50:87:e3:db:1a:16:cb:89:4a:
06:4a:07:27:d1:39:a7:71:ca:21:d7:3e:46:08:20:8d:39:6a:
b5:e9:44:95:8b:7a:26:66:84:76:ad:ab:8d:1b:25:10:c2:00:
d3:95:ed:37:a2:ed:66:c5:4a:81:b9:2d:ce:25:7c:96:93:68:
93:38:cd:31:e1:40:bb:20:30:2f:13:82:02:37:33:ec:28:ff:
65:eb:b7:4f:4a:ab:49:2e:d7:b8:8f:d8:08:f6:60:24:8e:41:
3d:30:7b:f7:ad:b3:fa:89:4f:5d:5e:cf:6a:e5:5c:a4:53:9f:
1d:d8:4a:b0:11:48:c4:1f:da:c9:20:4c:67:69:a8:b7:e1:6d:
b5:9b:5e:19:93:48:7b:8c:d4:1b:e4:b0:83:d2:45:33:6b:68:
1f:b8:b3:38:31:b3:62:3e:04:05:c7:bd:52:f9:57:e4:d9:19:
3b:21:b9:fe:0f:56:a1:ae:9c:d3:4d:15:59:2a:7b:bf:c2:19:
8a:7c:63:44
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUasbmwDdrHqs+MPxvU/ZNp1LtiXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjAxMjAwMjA0MjlaFw0yNzAxMTkwMjA5MjlaMDMxMTAvBgNV
BAMTKDI2NDBEQjA4ODFGREJBRjBENUZGMjEzNjExMEVCMDQ0OEU4MkM1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUS54gmER0+AknZq75Lb3BQpH
GatfrTEB3wXtnqEMJT65KiewGSUBrAmO/rBUCj6uSWNt2qzPYB46kxfCk51vBTXX
gc6VSDrWxuX1C1fqn0hU1wMo4AaOg6kNPmKnL3eUz1ybFQQokUJmiD64d53zIGI+
ch2nl/Gh2Cy2ckXsWch3j/b5fl0bBwIKf7KgyR29nhq6jN4YVsf4AqS8bM+9mfat
255xaI8P38wPsgwayuF7q9Ne/TYRpRyVel5lNnL1ZtMcU5POdTg+HPnyMfjmBq55
3VGBycqhFbmAElVDvfmgjp1E4obRPb+nbQ4LszaTzuoc+qnbyeTLmgS8y5YLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUJkDbCIH9uvDV/yE2EQ6wRI6CxdUwHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzMxMzUzNzJlMzYz
NjJlMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzNjM4MzAzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEAg1N4wt0hR9ZcmIEl9NstwGWM
3ULlkdB8J2VYapNTtCRnjAPwYkfPxE8Hh6TeUtJW+RT1XEoCQ7MzBo5vIDI7UIfj
2xoWy4lKBkoHJ9E5p3HKIdc+RgggjTlqtelElYt6JmaEdq2rjRslEMIA05XtN6Lt
ZsVKgbktziV8lpNokzjNMeFAuyAwLxOCAjcz7Cj/Zeu3T0qrSS7XuI/YCPZgJI5B
PTB7962z+olPXV7PauVcpFOfHdhKsBFIxB/aySBMZ2mot+FttZteGZNIe4zUG+Sw
g9JFM2toH7izODGzYj4EBce9UvlX5NkZOyG5/g9Woa6c000VWSp7v8IZinxjRA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:19 2026 by rpki-client