This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e203632343638.roa
File: 3130332e36302e3136342e302f32322d3232203d3e203632343638.roa (raw, json)
Hash identifier: auyuE2h/GPKANCvbz6Bw8Yi8e4eCZJDu9XTdgBKbank=
Subject key identifier: D6:AB:E0:26:BC:FC:15:29:87:F4:33:C8:98:DB:DA:73:60:7C:23:C5
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 25B0DEF1F3CF6AE9E46892F0275A262DF2FE5A8D
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e203632343638.roa
Signing time: Tue 20 Jan 2026 02:20:22 +0000
ROA not before: Tue 20 Jan 2026 02:15:22 +0000
ROA not after: Tue 19 Jan 2027 02:20:22 +0000
asID: 62468
IP address blocks: 103.60.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b0:de:f1:f3:cf:6a:e9:e4:68:92:f0:27:5a:26:2d:f2:fe:5a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Jan 20 02:15:22 2026 GMT
Not After : Jan 19 02:20:22 2027 GMT
Subject: CN=D6ABE026BCFC152987F433C898DBDA73607C23C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:d0:53:a5:64:b4:26:62:69:1a:8f:0f:6c:
a9:c5:fe:a4:5a:2b:00:e4:0f:d2:6e:b0:75:a8:19:
1d:92:28:60:59:5a:d6:aa:13:f3:b0:4a:9c:83:95:
6d:01:84:f3:c0:6c:8d:36:24:ec:70:fe:c1:e5:80:
27:f7:d9:ae:2b:bd:9a:d1:fb:86:c2:88:9b:5e:a5:
e0:0d:ae:c0:8e:fd:0b:38:34:d6:b0:bb:8e:08:29:
d1:36:79:47:f2:90:a3:0e:49:eb:5e:3f:8f:bd:99:
1c:00:f3:2a:ca:d4:93:6e:5b:1c:f1:e1:8c:e9:28:
6f:cf:26:92:d5:d5:18:94:ba:14:cd:1d:39:43:0d:
03:f7:ef:cd:c6:0e:25:e6:da:9c:01:04:9d:9e:88:
fb:3c:5b:93:b7:62:be:51:48:75:2f:a8:b9:0a:79:
a8:cc:7c:fd:74:6b:84:f2:1b:51:66:83:39:d4:13:
aa:78:ff:99:8b:41:7e:b4:f8:c1:ae:26:6a:a0:de:
a4:54:02:77:f7:d4:5d:56:56:85:fc:15:62:96:c6:
90:b7:4a:ee:20:a8:64:db:cb:6a:5d:68:f8:fa:aa:
b6:26:92:90:3d:90:80:0a:48:23:a0:1f:4e:a2:36:
ba:47:69:2b:17:11:cb:d5:9f:5a:be:08:92:e3:49:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:E0:26:BC:FC:15:29:87:F4:33:C8:98:DB:DA:73:60:7C:23:C5
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e203632343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:b2:4c:71:ff:96:21:93:fc:eb:82:52:ac:06:ca:87:ea:3a:
5d:82:f3:ba:b4:6d:a0:a5:b4:ac:d2:88:17:6a:76:e5:41:a4:
ce:c4:70:55:b1:4c:91:8a:ef:bd:64:bf:fe:b5:0e:ba:a6:57:
c0:d4:2a:9b:bb:a6:2b:5a:48:38:3d:4b:22:e7:f4:85:3e:29:
e1:7a:51:9c:8b:c0:02:5e:39:d9:5f:2c:52:8a:71:2a:36:ba:
dd:52:a8:0b:f1:c2:c5:0f:c9:4b:de:e8:fe:cf:ee:b6:d5:5a:
9b:23:de:cb:a2:a3:07:0f:f0:3d:fd:fc:b4:88:86:6d:43:52:
e1:e6:e4:1b:5e:ac:81:fa:24:d1:f2:2c:ca:d1:7f:0f:ef:12:
62:a0:0e:ba:92:c4:a4:3a:9a:01:d7:78:df:b2:48:dd:17:b4:
d8:4a:7b:0f:17:e4:b8:31:1f:a6:4c:a1:09:81:6e:27:14:8b:
72:be:ee:44:b4:ba:46:bf:f8:d0:b9:df:ee:cd:a9:f2:ec:5f:
88:3b:a3:c8:15:59:58:76:6c:35:d1:1b:3e:42:07:7d:e5:10:
b0:77:7e:9f:b3:08:9c:92:ca:d7:46:9d:3b:ae:4a:c7:ce:dd:
54:51:a5:3e:b1:bf:9a:a2:ad:32:94:7b:f3:0f:8f:5a:05:58:
8f:79:e8:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 18:03:08 2026 by rpki-client