This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131342e37322e302f32322d3234203d3e203531383437.roa
File: 3130332e3131342e37322e302f32322d3234203d3e203531383437.roa (raw, json)
Hash identifier: wHu71LQ6oHbOQLHEynYrrQoG4mmklEtF/UnoNWg5sLY=
Subject key identifier: 09:0A:E9:99:80:CE:F3:3D:F6:A0:F1:C4:4F:46:76:14:33:EF:6D:D1
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 2E64F7E97506C97DF0986C89BD1E8E5F5C8C7096
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131342e37322e302f32322d3234203d3e203531383437.roa
Signing time: Tue 20 Jan 2026 02:09:32 +0000
ROA not before: Tue 20 Jan 2026 02:04:32 +0000
ROA not after: Tue 19 Jan 2027 02:09:32 +0000
asID: 51847
IP address blocks: 103.114.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:64:f7:e9:75:06:c9:7d:f0:98:6c:89:bd:1e:8e:5f:5c:8c:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:32 2026 GMT
Not After : Jan 19 02:09:32 2027 GMT
Subject: CN=090AE99980CEF33DF6A0F1C44F46761433EF6DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:ec:17:fe:dd:00:3c:d8:62:5a:19:27:6f:
a7:f7:d9:3c:47:36:92:d1:c7:fe:c4:c4:97:a8:25:
c0:5b:60:2c:5c:1a:fd:8a:aa:80:3d:f8:54:f4:42:
7d:b6:41:d2:e7:19:fc:e4:7d:b7:af:29:46:76:02:
e6:09:a9:fc:6c:e2:30:3d:bc:b9:a6:7f:88:4c:7a:
b8:3c:25:84:89:47:89:b2:b0:84:c5:89:b3:fc:32:
56:e3:b8:b8:e2:2a:01:73:cd:f5:63:e0:58:51:97:
cc:73:5e:74:ee:34:c6:55:47:5a:75:54:27:9e:9c:
75:56:8d:52:6a:38:82:f7:e2:1f:50:30:97:67:ff:
19:a6:6b:d6:1b:3f:8e:27:bf:9a:b5:d6:80:2e:fd:
db:34:5d:c1:1b:d5:92:cc:04:21:04:c9:45:47:7a:
8d:c0:fa:d7:92:28:19:a4:8a:29:e8:25:90:c6:0b:
a6:e0:b3:14:39:2f:31:d0:de:c6:69:28:38:28:0c:
a4:85:41:ca:49:91:90:8d:2d:10:f1:cf:7b:b4:77:
e3:ed:3b:0d:e4:3c:e5:61:0a:3f:e2:08:63:06:46:
31:48:63:03:54:2a:c9:52:81:c6:fb:bf:e6:1d:a0:
fa:1e:fc:34:0a:b8:d3:45:f4:40:23:38:d6:65:93:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:E9:99:80:CE:F3:3D:F6:A0:F1:C4:4F:46:76:14:33:EF:6D:D1
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131342e37322e302f32322d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:20:84:16:10:85:e6:02:5e:b2:fa:6d:47:02:85:19:c4:d2:
3f:ec:78:13:8d:c3:84:3a:09:db:4a:fe:25:f5:d7:f7:5f:4a:
fe:9f:0c:d6:e8:0c:e7:c2:95:94:a0:99:1a:ac:d9:76:29:ee:
b4:f8:e8:f0:2e:ba:c4:19:93:b1:34:c8:bb:b1:b9:40:cf:2e:
6a:85:85:be:3e:fc:8f:0d:b3:6d:44:bc:5a:66:b5:75:52:25:
3f:0c:4f:c2:92:6b:ba:65:b5:25:e5:ad:56:14:e7:78:b3:f2:
c4:3b:69:c1:57:76:71:89:d2:25:d2:92:77:db:cf:91:f0:18:
96:f9:3b:0e:31:16:26:2e:5f:18:f4:4d:a3:13:a7:03:8a:b3:
bd:88:30:ec:1e:35:bf:56:26:55:b4:fe:e5:67:84:a9:e9:78:
52:43:36:c5:a5:54:b8:08:3a:3e:21:f4:21:29:d2:81:7f:df:
fe:d9:65:af:45:4f:c5:ab:01:de:e4:ad:83:a2:43:ff:26:e9:
49:a0:5c:6e:40:6b:66:b7:3b:ef:d9:e9:7e:6f:19:7a:d5:50:
99:d6:50:35:ae:29:ed:71:fe:7c:54:88:c4:4d:f7:20:99:00:
b9:92:58:98:42:2d:2f:a7:79:d2:27:1d:f5:0d:76:5f:bb:e0:
fc:2b:c4:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:07:46 2026 by rpki-client