This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34332e302f32342d3234203d3e20313436383036.roa
File: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (raw, json)
Hash identifier: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=
Subject key identifier: F5:BC:04:26:2C:6A:0C:29:CF:77:C8:DF:0B:64:0E:FA:FA:06:B9:34
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 5C8C3C721FD7703156E19176B0B91346BFFDE37F
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34332e302f32342d3234203d3e20313436383036.roa
Signing time: Tue 20 Jan 2026 02:09:29 +0000
ROA not before: Tue 20 Jan 2026 02:04:29 +0000
ROA not after: Tue 19 Jan 2027 02:09:29 +0000
asID: 146806
IP address blocks: 157.66.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8c:3c:72:1f:d7:70:31:56:e1:91:76:b0:b9:13:46:bf:fd:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Jan 20 02:04:29 2026 GMT
Not After : Jan 19 02:09:29 2027 GMT
Subject: CN=F5BC04262C6A0C29CF77C8DF0B640EFAFA06B934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:9d:0d:45:6f:de:bb:d7:72:72:c7:58:8f:
87:44:05:e8:3b:34:b5:f6:58:d9:5c:05:65:c2:03:
96:dc:b3:7d:09:e4:76:0a:13:51:16:7c:7e:f1:e7:
23:ab:0f:10:39:58:08:97:e7:98:27:40:4c:f5:f0:
60:56:4c:b3:aa:c7:84:0b:0a:30:b8:55:00:27:bd:
b5:3b:5d:c5:96:7c:d3:61:a0:51:7d:87:50:10:1b:
93:a3:03:51:26:a7:f6:25:33:ff:a0:c6:a4:d2:b3:
d0:97:6f:73:83:7a:86:ef:b3:e5:1e:ce:50:90:28:
6b:3e:76:ff:29:c2:c6:04:d5:fa:a0:52:f8:62:4e:
81:6c:10:74:a8:f7:cb:25:9b:a5:b6:1b:de:77:2f:
51:a6:fa:a5:db:5d:36:d6:cd:06:e5:39:27:a0:49:
a1:ce:1f:0f:77:b7:1f:9c:28:3a:0f:97:99:99:23:
4e:6f:6f:b1:bb:c3:59:1b:e0:2f:15:16:7a:b8:96:
c5:b5:61:a0:45:f6:be:ea:49:cc:25:a4:aa:6d:a6:
b9:61:33:f2:64:7d:03:db:f5:dd:72:18:51:58:3c:
9f:e2:da:5d:24:37:c8:36:ca:eb:2d:21:65:90:dd:
68:d4:67:bb:ce:03:52:99:0e:33:7e:4d:97:6e:82:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:04:26:2C:6A:0C:29:CF:77:C8:DF:0B:64:0E:FA:FA:06:B9:34
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34332e302f32342d3234203d3e20313436383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ee:ba:a0:e2:3f:35:9f:7c:95:26:9f:fd:de:31:cc:53:04:
70:7a:c1:86:4c:01:50:0b:d0:73:bd:17:c2:f5:7a:67:d6:da:
0b:5b:6e:0b:6e:41:11:4f:6b:7d:fe:36:1f:07:da:d1:19:92:
0c:73:79:cc:70:57:6c:13:90:28:e4:41:8f:92:d5:85:26:22:
4e:d8:9a:33:60:d9:39:ad:24:cb:fe:52:03:17:5b:10:b8:96:
24:4e:fc:fa:54:94:6f:72:28:ee:1e:22:d7:90:f1:b4:c7:09:
0e:6b:52:41:a1:44:c1:99:63:33:03:58:8b:b9:a8:09:8a:f4:
41:1b:c8:cf:60:e6:e8:51:88:eb:f4:f1:2a:38:15:0c:67:71:
7d:9b:64:5d:63:d7:08:41:5d:89:28:aa:d3:55:97:18:75:d0:
b5:3b:21:f2:4e:7d:75:c3:66:af:fc:d3:73:9b:49:d1:0b:a6:
da:34:8f:36:b5:f6:cb:23:ba:14:43:9a:2b:c6:05:18:e4:c2:
78:74:2b:a6:11:a1:e2:87:d1:07:d1:74:73:00:ff:a8:7f:d7:
74:ca:05:b7:96:13:17:a6:14:3c:35:44:0a:98:79:67:ea:65:
db:30:4f:5b:b7:0a:29:27:d3:7e:7c:b3:9e:90:64:3e:09:de:
78:39:01:3e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUXIw8ch/XcDFW4ZF2sLkTRr/9438wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjAxMjAwMjA0MjlaFw0yNzAxMTkwMjA5MjlaMDMxMTAvBgNV
BAMTKEY1QkMwNDI2MkM2QTBDMjlDRjc3QzhERjBCNjQwRUZBRkEwNkI5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVop0NRW/eu9dycsdYj4dEBeg7
NLX2WNlcBWXCA5bcs30J5HYKE1EWfH7x5yOrDxA5WAiX55gnQEz18GBWTLOqx4QL
CjC4VQAnvbU7XcWWfNNhoFF9h1AQG5OjA1Emp/YlM/+gxqTSs9CXb3ODeobvs+Ue
zlCQKGs+dv8pwsYE1fqgUvhiToFsEHSo98slm6W2G953L1Gm+qXbXTbWzQblOSeg
SaHOHw93tx+cKDoPl5mZI05vb7G7w1kb4C8VFnq4lsW1YaBF9r7qScwlpKptprlh
M/JkfQPb9d1yGFFYPJ/i2l0kN8g2yustIWWQ3WjUZ7vOA1KZDjN+TZdugnYzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU9bwEJixqDCnPd8jfC2QO+voGuTQwHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzMxMzUzNzJlMzYz
NjJlMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzAzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAJ1CKzANBgkqhkiG9w0BAQsFAAOCAQEAL+66oOI/NZ98lSaf/d4xzFME
cHrBhkwBUAvQc70XwvV6Z9baC1tuC25BEU9rff42Hwfa0RmSDHN5zHBXbBOQKORB
j5LVhSYiTtiaM2DZOa0ky/5SAxdbELiWJE78+lSUb3Io7h4i15DxtMcJDmtSQaFE
wZljMwNYi7moCYr0QRvIz2Dm6FGI6/TxKjgVDGdxfZtkXWPXCEFdiSiq01WXGHXQ
tTsh8k59dcNmr/zTc5tJ0Qum2jSPNrX2yyO6FEOaK8YFGOTCeHQrphGh4ofRB9F0
cwD/qH/XdMoFt5YTF6YUPDVECph5Z+pl2zBPW7cKKSfTfnyznpBkPgneeDkBPg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:05 2026 by rpki-client