This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20323131333932.roa
File: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (raw, json)
Hash identifier: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=
Subject key identifier: B4:B2:6B:B2:2F:DD:CF:F5:E9:40:B4:83:CD:0A:CA:47:14:BB:18:C2
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 3C9D3A7DF7B6EB4A0904AA328BC7204A2DBC3E1F
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20323131333932.roa
Signing time: Tue 20 Jan 2026 02:09:29 +0000
ROA not before: Tue 20 Jan 2026 02:04:29 +0000
ROA not after: Tue 19 Jan 2027 02:09:29 +0000
asID: 211392
IP address blocks: 157.66.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9d:3a:7d:f7:b6:eb:4a:09:04:aa:32:8b:c7:20:4a:2d:bc:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Jan 20 02:04:29 2026 GMT
Not After : Jan 19 02:09:29 2027 GMT
Subject: CN=B4B26BB22FDDCFF5E940B483CD0ACA4714BB18C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:4f:43:39:23:67:a2:84:38:00:88:83:da:
9f:87:eb:c9:39:17:ee:33:74:e1:d0:69:aa:76:a8:
05:09:7c:d4:19:c7:0b:a3:c5:98:06:b5:cc:cb:9b:
8b:80:88:64:ce:4c:c3:35:e2:a3:8a:a6:b4:d9:76:
2b:fd:d1:52:54:d1:91:41:69:67:ae:85:da:23:a0:
6b:e2:f8:d3:b8:b4:8b:12:34:18:5f:38:30:b1:bc:
7c:7f:d5:33:c9:e1:ef:20:db:49:ad:47:61:00:15:
dd:5e:4d:91:36:b4:4a:99:c3:7f:77:94:3a:17:43:
05:f7:4f:4f:7e:c9:f9:5d:74:87:9a:00:ae:de:90:
b8:8f:56:19:04:17:61:f0:57:7e:c3:8a:09:2d:cc:
c0:8b:6c:a7:e3:7f:ed:b0:66:ec:42:04:83:9b:61:
61:58:b0:af:1e:ca:de:37:34:f9:2b:41:61:ca:6f:
fb:91:6f:06:91:b1:d5:1c:df:90:fe:28:8c:37:7d:
4a:3a:48:a9:f6:6d:37:21:cc:68:90:0e:9f:3c:65:
a0:50:04:eb:42:03:f0:92:fd:07:b9:ce:1e:00:06:
1d:1e:b0:af:fa:ac:9b:f2:b5:47:3c:b6:a3:0a:27:
d4:29:4d:8b:c8:21:4d:79:76:c4:5b:bf:d3:a7:ac:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:6B:B2:2F:DD:CF:F5:E9:40:B4:83:CD:0A:CA:47:14:BB:18:C2
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20323131333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.42.0/24
Signature Algorithm: sha256WithRSAEncryption
02:04:8e:9f:44:55:77:46:ff:6a:72:da:05:05:1d:19:c2:93:
b0:9a:ca:c4:d6:3d:a9:42:83:0b:e6:22:b9:0e:02:11:4b:2f:
5a:cc:43:59:2f:b1:be:8d:5b:ad:d1:19:8e:69:25:6f:98:87:
f6:70:64:0e:5b:bd:46:e5:8b:5a:2c:dd:1e:d9:9f:87:dd:d0:
30:99:d6:cf:59:c3:31:37:53:f3:b9:84:4c:62:e3:5d:e1:74:
76:f5:83:af:88:d3:5c:97:c3:ce:e6:c3:7d:99:f0:89:68:5c:
1e:b7:9a:d8:ee:a3:35:74:21:50:d6:df:79:49:c1:af:59:f6:
16:1f:f3:66:ba:e3:31:fc:b6:e7:2f:f4:e4:25:06:81:44:e1:
da:1f:39:15:63:49:ea:d0:cf:61:4d:a7:d3:66:28:af:39:3c:
76:57:dd:af:f7:66:e4:d7:50:5b:9f:40:38:8b:fd:58:a7:b0:
15:3d:fd:59:91:4f:f3:1f:09:48:d9:7c:37:b4:4b:37:f1:f9:
ca:20:88:3d:86:ca:dd:d4:6e:c8:c1:4f:76:61:56:38:9c:fc:
af:6c:c2:9a:d2:9c:cf:bf:59:e7:e1:d9:88:27:59:13:94:0e:
94:dd:62:55:4c:e2:1a:72:cc:f7:a3:5c:f7:91:76:fa:95:18:
4c:35:61:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:47 2026 by rpki-client