This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa
File: 3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: jtdhKVajjO7i3gcLpLZQQ7uQjXqBR0hJCb7kPRr4BFw=
Subject key identifier: A5:BB:5A:60:2E:55:6F:B1:10:43:7E:7A:CC:17:24:B2:5C:82:44:79
Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial: 0ABD0D56A92E7A6E1D369B398DAB402A93BF252F
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa
Signing time: Tue 20 Jan 2026 02:08:20 +0000
ROA not before: Tue 20 Jan 2026 02:03:20 +0000
ROA not after: Tue 19 Jan 2027 02:08:20 +0000
asID: 209242
IP address blocks: 103.244.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 13:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:bd:0d:56:a9:2e:7a:6e:1d:36:9b:39:8d:ab:40:2a:93:bf:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Validity
Not Before: Jan 20 02:03:20 2026 GMT
Not After : Jan 19 02:08:20 2027 GMT
Subject: CN=A5BB5A602E556FB110437E7ACC1724B25C824479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:67:2f:d5:b9:73:b8:02:db:c4:70:4d:b8:
88:82:47:a2:9a:24:ac:07:01:7d:3c:4b:68:64:60:
c0:e3:0c:21:e0:17:44:a9:bf:5e:68:74:fb:71:eb:
35:4c:ca:63:33:7e:1d:8d:ce:50:77:03:36:32:8c:
61:42:67:ec:37:a4:62:5d:e6:b5:4a:03:c9:85:c2:
0c:aa:c5:fc:97:9e:12:a2:e7:10:ff:ff:bd:2e:d3:
37:52:93:35:b3:b9:61:1e:7d:f5:ef:7b:3c:b5:e9:
25:07:76:81:91:5c:88:38:ff:00:d3:7b:6b:b2:f3:
b8:88:7e:f4:fa:6f:c5:47:38:86:23:2a:c2:3a:3e:
c4:a9:37:8a:2b:e2:1a:68:7b:73:c9:d6:bb:48:97:
79:cd:18:17:9e:fe:de:e7:bd:48:71:96:7a:a6:30:
c8:63:5e:90:4e:e2:14:b0:6e:34:9b:33:2f:50:0c:
3a:90:2b:10:33:4c:57:2e:1e:0e:83:d2:10:0e:6e:
fd:5e:1c:a0:0a:55:f5:cc:30:62:33:01:ca:09:b1:
db:0b:11:d1:4b:1e:ad:08:f0:d0:aa:6e:a2:6c:46:
a2:67:29:43:5f:18:4c:a4:ce:2f:ee:b4:7f:2b:94:
a4:bc:f0:df:b4:62:5a:eb:8c:6c:56:20:47:78:15:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:5A:60:2E:55:6F:B1:10:43:7E:7A:CC:17:24:B2:5C:82:44:79
X509v3 Authority Key Identifier:
keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:78:2e:04:67:e9:75:20:4f:c1:52:b1:d8:20:a2:e8:7d:53:
de:38:6e:25:d9:b6:a6:55:58:c8:97:c9:04:89:0f:2d:82:60:
1b:7d:f5:91:46:8b:36:ba:f4:22:1f:10:4b:52:21:af:3d:04:
aa:ff:29:2e:81:6c:9b:72:ba:a5:91:90:9c:ea:e4:14:b6:4b:
59:2c:76:80:f9:38:37:10:b4:22:cb:6c:ee:00:09:2a:c4:a8:
37:82:cb:3c:e8:d1:e5:59:55:2e:84:68:7d:ea:88:54:60:61:
d2:b8:b1:1a:27:df:ed:19:e7:53:d7:0c:af:eb:e2:21:bb:22:
5b:8b:89:87:29:17:19:a3:f7:61:a1:24:11:fc:d0:d5:12:31:
d3:3d:3b:1d:9f:01:88:e1:c5:cf:c6:17:bc:4b:f2:13:81:96:
d5:5c:9e:21:de:eb:fd:4b:23:e3:0f:c0:1d:22:5a:12:2e:38:
9f:c7:7a:db:30:74:31:0d:d2:ad:f5:9c:59:8b:da:f1:c6:6d:
e4:8a:93:31:a3:20:96:db:5e:d2:4c:82:f4:54:dd:21:36:ea:
78:3b:32:51:fc:c5:e3:8b:a0:f3:71:43:77:b7:4a:27:02:ef:
9e:1f:db:00:fb:31:ca:25:00:91:9a:53:29:3d:08:c1:a1:0b:
1c:69:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:20:49 2026 by rpki-client