This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa
File: 3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier: M0yQw7hxpZMHGmsZRp58ORjna16g6Nw53eupOYTwaCI=
Subject key identifier: 56:AE:67:8C:FB:50:40:43:34:C4:F7:83:3A:22:30:0D:43:72:4C:6E
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 184D5C6D996E5BED324C7248D02CA5BE66A8817F
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa
Signing time: Tue 20 Jan 2026 02:09:33 +0000
ROA not before: Tue 20 Jan 2026 02:04:33 +0000
ROA not after: Tue 19 Jan 2027 02:09:33 +0000
asID: 138968
IP address blocks: 103.118.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4d:5c:6d:99:6e:5b:ed:32:4c:72:48:d0:2c:a5:be:66:a8:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:33 2026 GMT
Not After : Jan 19 02:09:33 2027 GMT
Subject: CN=56AE678CFB50404334C4F7833A22300D43724C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:b5:37:9f:7c:ab:af:c7:fe:33:b2:b6:e6:
a8:d6:1b:02:75:6f:29:52:b1:e5:c0:63:c4:af:0c:
ba:30:86:37:fb:9e:b7:51:5e:aa:25:bb:80:d9:b2:
4d:3a:a2:4f:d5:70:7a:dc:87:96:47:40:ee:86:65:
dc:ca:7d:24:96:2c:05:f6:81:90:27:15:13:48:6e:
cd:7b:99:f2:0e:6b:70:86:96:26:55:e4:e1:43:9c:
55:1a:79:73:35:0d:71:7d:0d:6e:91:d7:0f:1b:92:
f3:71:a7:27:d5:b6:5b:e5:52:db:5b:34:0e:e8:2f:
d2:02:fa:f1:ac:35:66:4d:15:7a:31:ad:b2:ab:e9:
ed:fb:74:e1:7e:58:a5:22:4d:f3:fb:fd:ac:89:76:
1d:ef:8b:54:c9:01:e7:84:df:2b:d3:b3:c0:b1:6f:
8d:10:c9:d6:4a:84:89:7a:75:11:88:55:e6:0e:84:
52:48:f5:0e:23:55:53:fc:cd:e2:a4:36:a7:df:38:
f0:d9:07:d7:46:3c:c1:de:a5:fa:d0:ed:cd:d4:5c:
34:49:69:59:f7:3e:75:74:6b:70:0e:08:e5:a9:85:
df:21:8f:c4:c9:6e:25:9a:9e:f7:68:ec:e0:17:8a:
83:96:25:6f:06:8b:c3:cd:9b:77:94:16:a6:e3:a0:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:67:8C:FB:50:40:43:34:C4:F7:83:3A:22:30:0D:43:72:4C:6E
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
55:15:e5:9b:aa:c3:f1:8e:42:6a:2b:6e:5c:97:b4:7d:6f:fe:
a9:62:70:90:f7:83:9b:e7:fb:13:6f:6d:a7:0a:12:fd:b5:3e:
22:b1:a8:0c:fe:b2:ab:d6:c2:15:af:7e:8a:67:91:6e:4a:23:
42:d9:f2:8f:79:c1:d8:fa:03:ef:d1:65:c7:68:74:e6:ff:26:
c8:13:23:a1:c2:5a:76:73:1d:a4:03:51:c0:cf:34:a7:53:8e:
b9:8f:a8:f3:b8:16:b6:46:22:46:45:4f:ba:86:00:96:e0:03:
b3:9b:eb:54:cd:e8:c4:08:4d:12:cd:db:eb:cf:48:43:e9:71:
a7:e6:58:b1:cd:54:97:cb:f0:dc:b9:5f:83:ac:e3:49:1e:92:
f9:d5:66:f1:0d:3f:3d:d0:ce:11:19:8c:cc:b1:d9:47:f3:09:
dc:a8:7b:36:df:43:9c:e1:bd:ff:ff:24:d9:1c:2e:b7:8e:0c:
d5:19:ad:31:99:8b:48:43:19:a8:44:f9:e2:80:2d:a7:f8:0d:
c5:7a:b2:d9:d2:43:cf:a1:aa:97:1d:22:c4:0b:da:75:4b:fe:
f0:38:7b:eb:56:d7:91:66:c2:a4:f7:d0:c9:0e:44:51:c8:81:
51:48:00:13:19:6c:58:90:6b:b3:1a:d9:82:5d:8a:3f:a2:15:
3b:1f:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client