This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36302e302f32322d3234203d3e20313338393638.roa
File: 3130332e3131352e36302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier: IPxHc6GobBYh6gwe3JlYCSMAvsPumLnB1v43NtLoY24=
Subject key identifier: A9:14:BB:9A:A2:37:35:8D:72:5E:50:AA:12:BC:E8:00:27:ED:92:A7
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 67B4BC2452AEEB5681C40038E02D3124318A5235
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36302e302f32322d3234203d3e20313338393638.roa
Signing time: Tue 20 Jan 2026 02:09:35 +0000
ROA not before: Tue 20 Jan 2026 02:04:35 +0000
ROA not after: Tue 19 Jan 2027 02:09:35 +0000
asID: 138968
IP address blocks: 103.115.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b4:bc:24:52:ae:eb:56:81:c4:00:38:e0:2d:31:24:31:8a:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:35 2026 GMT
Not After : Jan 19 02:09:35 2027 GMT
Subject: CN=A914BB9AA237358D725E50AA12BCE80027ED92A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:02:38:51:b8:9c:3f:75:27:89:d1:a0:fb:
c6:0d:4e:b4:37:9d:30:9b:71:00:99:42:2b:bf:92:
b7:52:c3:d9:a8:db:99:df:46:19:3d:29:8e:59:80:
81:20:b4:e6:0e:96:9c:ff:72:3e:d0:ac:cd:c1:fd:
7f:2e:87:24:12:9b:c3:08:4f:fb:58:3f:f1:f4:3f:
e2:e4:56:01:37:d8:cd:f1:e6:72:5f:60:43:fb:41:
79:bb:92:17:48:c5:52:e8:fb:9e:c5:cd:51:f1:4e:
0c:90:9d:ee:29:c2:8a:a5:54:f8:6b:50:92:13:fe:
1c:41:dd:1a:3c:3c:fc:3b:64:e0:56:de:75:24:06:
2b:e1:a4:8b:5b:0b:e1:4b:bb:74:c6:d9:0b:90:e7:
b1:6d:32:2d:94:75:0a:b6:5e:89:2d:28:38:1a:ac:
8a:88:c3:a9:ce:94:df:f9:a6:bd:2c:f3:3b:af:6f:
35:bf:5d:31:d8:de:03:83:a1:d3:2e:00:c3:60:15:
bb:7f:68:42:c0:b0:24:79:ce:a8:1e:db:1b:61:46:
73:57:01:8b:84:3c:bf:4a:ff:e8:45:73:f8:20:bf:
bb:ce:c5:c3:d0:3e:0b:ab:1c:ec:19:c3:b7:a7:c8:
66:9d:07:82:d5:b4:51:7a:30:c5:6a:5f:98:cb:26:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:14:BB:9A:A2:37:35:8D:72:5E:50:AA:12:BC:E8:00:27:ED:92:A7
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36302e302f32322d3234203d3e20313338393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:40:be:bb:c9:51:24:df:e2:4d:44:06:7a:06:63:d3:32:d1:
72:5a:a4:bf:88:8c:ab:89:d8:3e:ef:8e:a9:1c:ba:d7:37:34:
39:a6:a9:6d:ad:9b:56:fa:7e:e0:70:df:de:3d:77:15:aa:be:
4a:ac:96:6d:16:fb:ea:d4:09:d7:e3:57:14:7e:fd:86:63:11:
9b:1b:b7:57:61:8e:ae:57:e0:54:d4:41:96:25:ce:5b:b9:3f:
04:32:cb:67:08:14:93:fd:61:f5:48:d7:77:84:56:e5:25:a7:
a0:a3:d9:af:08:74:78:70:97:a4:e1:2c:f1:f9:b1:7c:64:d8:
14:8a:a4:b0:67:c6:15:2e:e4:11:f9:a6:ff:6e:54:6a:8e:0f:
39:2f:93:98:f4:58:cd:12:e5:0a:0f:cc:7f:ac:6c:02:a8:42:
f3:8b:18:47:1f:1f:a2:af:de:e9:25:c3:b3:23:8e:5f:08:92:
f3:5f:ff:65:71:e2:4b:e7:a5:d0:69:a8:c5:90:e2:dd:6f:8d:
3e:1f:e1:8f:98:c9:2c:54:a5:75:1d:18:6b:48:d3:f5:78:03:
84:e0:eb:03:74:89:da:52:be:d2:99:aa:aa:0b:9e:ec:99:06:
83:86:49:c8:f7:20:b8:f6:7f:02:a0:85:22:e5:7a:a5:84:a4:
b2:99:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:21 2026 by rpki-client