This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139076.roa
File: AS139076.roa (raw, json)
Hash identifier: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=
Subject key identifier: 99:A9:BC:BE:1B:0B:30:03:09:F3:17:47:E8:DA:72:EF:49:E8:F6:91
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 77C3E27EC8F6F56FF8111F8B7950B847AAAC256C
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139076.roa
Signing time: Tue 20 Jan 2026 02:15:27 +0000
ROA not before: Tue 20 Jan 2026 02:10:27 +0000
ROA not after: Tue 19 Jan 2027 02:15:27 +0000
asID: 139076
IP address blocks: 103.221.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 20:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c3:e2:7e:c8:f6:f5:6f:f8:11:1f:8b:79:50:b8:47:aa:ac:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: Jan 20 02:10:27 2026 GMT
Not After : Jan 19 02:15:27 2027 GMT
Subject: CN=99A9BCBE1B0B300309F31747E8DA72EF49E8F691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:74:d9:5b:4f:dc:15:36:29:cd:9c:a4:8f:
e8:37:39:42:06:6b:ea:b2:37:c0:52:d5:db:be:1a:
da:11:00:23:c9:68:66:b1:df:87:20:48:2b:c2:5f:
23:6e:0b:31:cc:93:34:6c:62:d5:27:1f:50:0c:19:
5c:f2:49:c8:73:5c:38:1c:6d:21:76:93:be:68:00:
c8:ed:b2:ab:a3:11:79:df:f7:21:8a:fd:f6:5e:1b:
ff:7c:da:bc:5b:3b:d1:53:ce:7e:0c:01:54:5c:f2:
10:d2:e5:1c:5c:9d:e9:c2:be:ab:1d:dd:a5:e6:fa:
54:4e:16:e2:cc:80:b4:e9:16:0b:f3:e8:a7:bc:7f:
55:8b:0e:35:05:08:87:20:d9:3f:88:7b:d3:fa:8a:
4c:12:29:7b:54:f8:2b:12:bc:10:22:8b:77:35:31:
a5:e6:2c:a6:72:20:a2:e2:52:82:61:5c:5c:01:a7:
3a:1f:cd:b3:e9:75:c5:8d:f1:d2:e6:6d:57:65:70:
f0:43:e3:e8:27:a0:20:1d:41:86:74:7e:65:1b:61:
d8:f5:38:a6:5f:fb:06:64:be:b2:f7:2a:bf:66:bd:
20:11:3b:b5:47:54:df:a9:56:91:24:3a:89:af:80:
3f:1f:78:d5:13:28:05:25:24:87:da:29:9c:1b:f1:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:BC:BE:1B:0B:30:03:09:F3:17:47:E8:DA:72:EF:49:E8:F6:91
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b3:a9:aa:87:8a:8c:3c:e2:3f:db:74:aa:bd:d3:47:35:ab:
7e:f2:d5:b2:2f:14:e0:90:c4:1e:13:5e:f6:0f:3a:32:88:63:
ac:a3:59:1d:c0:e1:cd:01:9a:04:8a:cc:00:8e:96:e4:62:81:
be:4b:34:d8:34:a2:a0:48:38:dd:f4:56:ee:8b:5b:52:00:c5:
d2:89:fd:22:6e:9b:c0:bc:e3:93:5d:12:16:f6:d3:65:4d:c3:
0f:e6:32:bc:12:10:87:e4:ab:c6:c5:76:3f:2c:b7:59:fb:ea:
9c:9f:fb:7f:97:94:b6:49:66:bb:b8:f1:e7:83:85:9c:52:e3:
8c:2b:52:0d:97:22:88:41:32:f4:92:ab:6e:5d:96:a3:2a:10:
95:93:84:0d:a8:82:ac:63:f5:25:65:9d:5f:f5:7b:8f:d8:5f:
98:59:cc:7a:8b:87:21:5e:ae:24:95:05:90:28:16:b6:c3:c8:
86:a6:b1:56:0b:af:e3:86:ca:7e:b2:7c:ac:eb:d5:32:c6:c5:
c5:9a:49:ab:2b:d0:7f:41:e7:69:17:fe:29:17:3b:a9:43:68:
01:1b:af:04:bb:56:98:2d:23:c9:7d:70:90:fc:ba:8b:5a:65:
69:15:50:9e:0f:50:26:b5:0a:5c:ea:0d:89:0f:4c:e7:4b:44:
2f:2e:e3:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:29:09 2026 by rpki-client