This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34342e302f32322d3234203d3e203535393333.roa
File: 3130332e3131352e34342e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier: ptSFcqyE/yUpxFkzm8+H2eC2//AIr3m4oJeJXEAwh6g=
Subject key identifier: A8:68:49:0D:D4:ED:8F:04:04:54:3A:7E:C4:98:8C:34:28:D0:66:0A
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 7DCB3E15C00C95AA81389B790600EFC66D9CBCB1
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34342e302f32322d3234203d3e203535393333.roa
Signing time: Tue 20 Jan 2026 02:09:37 +0000
ROA not before: Tue 20 Jan 2026 02:04:37 +0000
ROA not after: Tue 19 Jan 2027 02:09:37 +0000
asID: 55933
IP address blocks: 103.115.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:cb:3e:15:c0:0c:95:aa:81:38:9b:79:06:00:ef:c6:6d:9c:bc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:37 2026 GMT
Not After : Jan 19 02:09:37 2027 GMT
Subject: CN=A868490DD4ED8F0404543A7EC4988C3428D0660A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:3f:2b:a7:f9:f6:b3:62:41:49:8d:8d:6c:
83:7b:f7:21:24:98:a3:bd:41:26:3a:2f:6d:48:46:
d0:dc:3d:e1:5a:6b:1e:08:64:11:35:09:52:77:dd:
43:f4:b2:df:3b:61:19:91:b2:b2:35:ec:c3:5a:ad:
94:d3:f1:0d:5f:98:b4:15:27:05:64:6d:08:4d:ed:
6b:93:16:1e:32:0c:09:d2:fb:00:1b:86:54:5c:7d:
11:a7:b2:28:12:c9:b4:7d:6f:97:5d:82:bc:8f:c9:
70:a9:3a:f5:1b:30:5f:c3:ee:32:8e:fd:ba:2c:97:
d3:ce:90:5c:3c:ba:54:b6:7e:49:38:b6:a1:a0:0c:
76:46:b4:17:d1:56:fb:c3:64:bd:2e:17:22:df:c1:
6a:d5:5f:09:ab:20:8b:8b:61:03:a8:26:32:a4:7a:
b9:38:e9:ac:46:be:ab:68:12:20:39:28:18:44:aa:
e8:c0:77:89:34:0e:0a:5f:59:f2:65:ed:ba:d2:4c:
08:ba:38:a4:26:3b:fc:af:cf:fe:a8:42:fc:5c:0f:
02:3d:02:f7:d9:6c:7d:55:d1:8e:02:7e:74:cb:52:
cd:32:1b:5d:fd:29:31:09:7e:94:2c:3e:3d:4f:28:
5a:37:60:c3:5b:5f:49:65:b4:d6:7d:22:fe:7e:39:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:49:0D:D4:ED:8F:04:04:54:3A:7E:C4:98:8C:34:28:D0:66:0A
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34342e302f32322d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a6:24:d6:af:db:b3:2a:ee:5a:a5:66:75:1f:72:52:64:db:
7b:04:dd:43:b9:af:b3:ab:0b:91:ac:fb:c8:0f:d4:ce:0c:74:
d9:b2:5b:6c:8d:51:84:0f:73:23:19:2b:40:3e:ab:32:ee:3d:
4e:30:5c:81:46:70:49:1c:63:00:12:0d:7f:3f:ce:16:2e:69:
24:ea:a7:13:dc:9b:c7:01:f6:28:69:d9:e6:c9:79:cb:3a:0e:
cc:7f:7c:dc:da:16:c0:8f:b5:a9:3d:ca:a9:10:e1:1d:6c:7e:
1b:f0:4b:77:b8:38:dc:af:5e:a3:b3:9a:8c:f2:d4:87:b6:41:
12:42:f9:b5:51:24:dc:d6:c7:67:55:e7:c8:8f:7a:3f:6f:dc:
ef:91:d5:fc:64:21:b3:20:95:6e:5d:65:eb:85:b9:56:51:79:
8e:b4:20:1e:37:74:e8:0f:73:f0:6d:df:6e:95:1b:10:44:49:
30:5f:bf:c2:34:ec:6f:40:9d:61:a7:88:36:82:5c:ce:ca:4d:
f2:94:9b:de:14:a3:c9:2f:04:74:38:2d:05:4b:5a:dd:94:f6:
86:e4:e7:ab:2e:15:61:0b:36:54:6b:02:c5:3e:0b:98:b0:7f:
5f:a5:7c:4a:dd:ba:2d:6c:75:36:34:e6:a6:3f:9f:7f:ae:09:
09:63:03:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:22 2026 by rpki-client