This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20313436383036.roa
File: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (raw, json)
Hash identifier: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=
Subject key identifier: 27:B0:BB:38:D9:D7:32:F0:91:E2:19:69:08:51:CC:04:7F:FF:CE:A7
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 7C53B51EC3549289F6888D309127413F9229C791
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20313436383036.roa
Signing time: Tue 20 Jan 2026 02:09:29 +0000
ROA not before: Tue 20 Jan 2026 02:04:29 +0000
ROA not after: Tue 19 Jan 2027 02:09:29 +0000
asID: 146806
IP address blocks: 157.66.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:53:b5:1e:c3:54:92:89:f6:88:8d:30:91:27:41:3f:92:29:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Jan 20 02:04:29 2026 GMT
Not After : Jan 19 02:09:29 2027 GMT
Subject: CN=27B0BB38D9D732F091E219690851CC047FFFCEA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:23:09:2d:ba:62:2d:a7:f3:06:9a:16:6b:
ad:f1:77:f9:fb:23:b6:d3:f1:38:19:0a:e8:21:d2:
5b:53:97:71:b8:44:cd:93:c9:28:bb:02:b0:4c:95:
2d:c0:1a:fb:fd:8c:8c:97:64:fe:77:7b:2b:40:5b:
bd:7d:f7:f6:a9:6d:32:43:04:03:14:90:50:c7:9c:
57:c4:1f:08:eb:47:bf:1b:62:81:43:92:89:d0:ed:
53:27:4a:9d:35:e2:30:dc:b7:a1:95:3e:fe:cb:5d:
eb:e6:d5:5d:52:b9:83:05:5c:96:af:64:81:76:92:
52:a8:c0:c4:70:67:cc:d0:1f:ed:00:c3:8b:c1:af:
53:24:3e:b2:be:0b:09:98:0f:30:a4:7d:7d:b0:89:
58:0a:f5:56:4d:4d:78:1f:a6:a6:84:fc:a9:b0:38:
4c:ff:56:59:0f:60:e5:41:24:59:74:cd:d3:1b:64:
13:f1:80:bb:82:ab:3f:8f:59:02:64:bf:87:ab:5f:
e4:9c:96:5e:aa:92:22:d3:76:c3:ba:f7:fc:b5:2c:
69:71:5f:53:36:b7:c9:2c:ad:15:c2:5b:65:0a:c3:
06:8d:58:13:37:45:db:15:ab:6e:18:ed:7f:bd:cf:
54:41:ec:de:ac:dd:52:cd:9e:fb:67:4f:d1:ea:13:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B0:BB:38:D9:D7:32:F0:91:E2:19:69:08:51:CC:04:7F:FF:CE:A7
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20313436383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.42.0/24
Signature Algorithm: sha256WithRSAEncryption
64:03:0d:69:5d:16:05:a3:0b:71:b2:b2:34:59:69:4b:79:8e:
4f:f3:6f:94:83:3c:fe:5c:f9:97:96:12:d3:92:ae:01:92:98:
c1:5b:69:dd:36:40:21:a6:78:89:87:45:e1:13:0d:6f:f7:75:
64:f1:d0:e8:b5:b5:24:ec:c6:5b:f2:57:a7:74:28:70:41:58:
f0:39:d3:ab:c7:89:79:2a:e2:bb:22:ed:ff:f3:18:16:fc:ec:
18:6c:92:90:9e:07:14:8b:7e:5d:98:bc:83:65:99:1e:04:41:
82:a6:4e:a9:bd:e1:73:29:ee:fd:0a:cb:15:c5:08:28:58:ba:
50:6b:12:68:6f:ae:64:ea:f7:ab:12:2d:86:71:d3:28:6c:d0:
22:ad:09:7e:5c:ef:ce:22:7e:74:9d:b0:42:f8:b6:97:c8:85:
6e:40:09:fc:5d:2e:92:99:3c:84:0b:a1:df:13:26:76:54:38:
49:d3:94:5b:16:2c:3c:68:4e:ab:3d:da:0b:23:0b:8c:54:06:
5c:86:b8:bb:dc:da:ae:5b:ec:a1:c0:e0:53:cc:30:a8:21:0f:
e6:92:62:e5:64:13:51:31:88:eb:49:dc:97:e4:40:bc:e4:91:
73:a8:16:a9:68:e1:d2:9d:55:8e:55:f2:ab:4b:ec:66:96:10:
6f:80:11:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:56 2026 by rpki-client