This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131392e302f32342d3234203d3e20313339363438.roa
File: 3130332e3234342e3131392e302f32342d3234203d3e20313339363438.roa (raw, json)
Hash identifier: OmK6j15NAg+MDqUoLqKInmeLrcYCXRs/mOBb9QUfFEc=
Subject key identifier: 46:2D:A4:68:C4:62:DF:96:18:A5:25:86:B6:95:15:9F:F2:98:7F:E3
Certificate issuer: /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial: 4B03D380E86E2D0946A16A714FF19065BB446473
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131392e302f32342d3234203d3e20313339363438.roa
Signing time: Tue 20 Jan 2026 02:08:20 +0000
ROA not before: Tue 20 Jan 2026 02:03:20 +0000
ROA not after: Tue 19 Jan 2027 02:08:20 +0000
asID: 139648
IP address blocks: 103.244.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 13:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:03:d3:80:e8:6e:2d:09:46:a1:6a:71:4f:f1:90:65:bb:44:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Validity
Not Before: Jan 20 02:03:20 2026 GMT
Not After : Jan 19 02:08:20 2027 GMT
Subject: CN=462DA468C462DF9618A52586B695159FF2987FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:cd:c9:f8:97:62:c9:a1:d6:3f:91:c6:87:
1b:d9:12:1a:fe:21:0f:74:21:06:36:f7:09:5f:a1:
14:44:fe:f9:e9:de:8e:c4:66:98:47:7e:97:dd:4a:
8c:88:75:b7:67:42:bb:8c:60:01:55:ed:82:7b:b9:
95:4a:72:82:2e:2b:de:24:a4:ed:1b:78:9f:48:9c:
cc:5c:4d:f4:25:6a:6a:5d:fd:7c:2a:bd:28:a6:73:
17:74:6a:23:f9:d8:5a:01:0a:c6:6f:47:8f:7d:85:
49:f9:9c:f7:90:37:18:af:d9:f5:93:99:06:bb:fb:
db:d1:0b:3f:8e:13:64:56:df:d8:96:cd:d0:f1:a5:
c7:0e:2c:93:ca:47:37:82:90:9f:9c:d8:c9:dd:a4:
db:64:89:61:57:03:bb:71:1d:1d:21:e2:98:e2:3f:
79:4b:c5:e1:83:25:05:3d:1f:00:85:0b:ed:37:85:
03:5c:d6:f8:f3:23:6c:90:6c:00:d1:4f:ea:f0:8b:
89:81:17:69:8e:ab:26:e8:f8:9b:e4:c1:a8:cd:af:
d8:a4:e2:5c:f8:1e:f0:fd:0b:bd:4f:87:8c:25:9e:
bd:83:a9:f0:92:e3:c6:f5:1a:5a:06:f3:54:58:ec:
78:1c:7c:f4:46:27:65:ce:04:99:77:7e:ea:67:86:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:A4:68:C4:62:DF:96:18:A5:25:86:B6:95:15:9F:F2:98:7F:E3
X509v3 Authority Key Identifier:
keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131392e302f32342d3234203d3e20313339363438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.119.0/24
Signature Algorithm: sha256WithRSAEncryption
57:42:8b:50:d2:05:ac:ee:dc:5c:93:6c:b4:c1:93:89:68:81:
61:23:c3:6a:c8:a7:a6:a3:4b:12:a0:12:1d:11:aa:a0:9c:dd:
c8:68:05:3e:73:fc:bb:73:29:2b:6e:ee:e7:e0:d7:e3:b6:a8:
0e:d1:ac:ed:9d:2b:21:01:94:81:3e:20:d1:4f:2d:82:57:f1:
6d:c9:91:ad:95:e1:ce:e3:ec:60:a5:40:94:67:8a:8d:8d:f1:
aa:43:e2:b0:35:71:eb:5a:0e:86:3d:57:49:f7:42:a7:99:04:
e3:38:ce:2b:15:e8:2f:ca:2c:92:d9:63:cd:31:4e:52:52:2e:
a5:68:5c:59:60:83:49:c7:3d:d7:7a:7b:b4:1d:9d:96:5c:db:
23:29:13:f7:26:b3:56:f5:89:f4:39:39:78:75:7a:b1:67:0a:
2b:53:26:79:98:90:6f:4b:d9:bc:de:ff:36:e4:e8:a8:49:bb:
92:6f:35:b1:9b:e4:60:fa:cb:2b:79:e3:b3:93:fd:91:b5:2c:
01:20:ab:0c:af:a8:ce:53:e2:1a:f5:47:2a:f6:22:f5:d7:2d:
b2:ad:a4:9c:31:1c:55:d4:74:2d:53:27:b6:40:cc:93:7d:e7:
58:41:4c:13:e9:58:fc:ee:2c:01:5f:a2:73:6a:dd:5d:30:b6:
e7:e9:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 23:35:12 2026 by rpki-client