This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e203234343038.roa
File: 3130332e3234352e32332e302f32342d3234203d3e203234343038.roa (raw, json)
Hash identifier: XIUkyhcqBCoi5zRucbNJwV7VNJYGwdhJAml+MvdzFng=
Subject key identifier: B1:72:C1:CB:95:E9:A8:84:0D:E1:AE:32:BB:1D:CC:33:49:06:A1:65
Certificate issuer: /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
Certificate serial: 7F01868C6DEF402293903372A24C27DB27DF54FF
Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e203234343038.roa
Signing time: Thu 25 Dec 2025 07:05:54 +0000
ROA not before: Thu 25 Dec 2025 07:00:54 +0000
ROA not after: Thu 24 Dec 2026 07:05:54 +0000
asID: 24408
IP address blocks: 103.245.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl
rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Jan 2026 01:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:01:86:8c:6d:ef:40:22:93:90:33:72:a2:4c:27:db:27:df:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
Validity
Not Before: Dec 25 07:00:54 2025 GMT
Not After : Dec 24 07:05:54 2026 GMT
Subject: CN=B172C1CB95E9A8840DE1AE32BB1DCC334906A165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:7a:b9:ae:8b:bb:c2:82:a3:da:89:07:16:
c1:19:0c:84:8b:05:4d:0b:7a:0f:73:fb:96:97:72:
e0:98:0f:81:fe:dc:ab:51:60:34:33:da:0e:d4:17:
2a:c5:b0:00:d4:ea:cd:37:01:ce:7e:fb:04:cb:c7:
81:58:1a:79:46:e1:d6:ae:c3:4d:66:8d:75:e6:24:
1a:d9:f1:9c:18:76:ba:b4:44:9b:93:cd:9b:23:fe:
f7:77:36:22:80:3b:11:f5:44:af:f6:c2:8c:0c:05:
0c:1d:b0:6f:39:63:10:dd:59:42:f6:54:cb:78:be:
53:2a:76:03:a1:7c:c6:54:f6:e6:c9:8f:72:54:3c:
98:d6:49:00:2e:25:d8:2d:01:67:b3:d6:c7:5c:42:
91:16:ed:01:2a:f4:13:6c:a5:f0:e5:bd:f6:1d:ce:
5f:c8:fc:16:d5:e6:d6:13:32:db:d4:54:df:7a:a1:
ab:3a:ce:94:3e:77:fe:d2:53:52:b3:2a:ca:c7:66:
65:59:96:91:d1:3c:4b:56:7c:58:23:47:d9:dc:8b:
4f:4c:0c:9e:ba:2b:f6:af:b9:68:16:e5:d3:c6:0f:
bd:d3:f5:c3:1d:93:02:df:8e:c8:89:5e:07:a8:10:
42:a9:11:f5:15:10:d3:f8:ab:28:47:67:61:9f:d2:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:C1:CB:95:E9:A8:84:0D:E1:AE:32:BB:1D:CC:33:49:06:A1:65
X509v3 Authority Key Identifier:
keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e203234343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e0:2c:e6:d8:ed:55:94:4f:87:ad:e2:3b:c1:93:01:0e:f8:
20:ef:b0:02:91:9a:72:76:84:c3:68:4b:13:31:96:c7:99:f5:
3f:82:d7:e6:45:5d:09:3c:54:50:18:ba:13:f1:a6:75:b4:d7:
52:d2:16:43:b1:9d:0f:00:07:05:92:9d:44:de:d0:99:f6:bb:
73:9a:a1:19:e9:a8:1e:a8:b3:64:0b:02:25:5e:86:6e:d0:1c:
d7:c8:4e:d3:0c:85:3c:51:be:af:44:91:c7:3b:8f:e5:4b:79:
53:1e:22:3d:cc:0c:d7:b9:46:6f:78:77:a1:70:19:60:7f:bd:
a0:2c:23:e8:9f:d2:3a:59:4d:cb:34:3a:d5:60:f2:1d:23:ab:
79:a3:39:96:f5:d8:80:f3:ce:da:f4:af:29:3d:76:13:72:a2:
e6:29:42:20:13:c9:80:80:a0:87:a6:d1:1e:7d:9b:7b:4b:6f:
36:2b:3f:3b:b1:52:0f:51:46:66:f2:93:dd:52:ac:bc:c8:bb:
25:26:75:7e:c9:3c:b1:c7:8b:2c:8f:af:b8:78:95:52:5b:a4:
5f:6a:b9:f0:47:b6:95:11:1a:35:89:de:3f:b9:bb:6a:5d:32:
86:76:95:23:a2:59:c5:94:0e:ae:bc:5a:1b:01:7a:b2:3f:46:
ae:f0:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:15:02 2026 by rpki-client