This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa
File: 3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier: dbFkgWyjy8X8GncXpxQoBFFPgTPL2kB20+CSBFEFwDM=
Subject key identifier: F5:1A:07:B7:97:1A:0E:67:D1:95:4E:AC:BB:07:FA:77:F7:DA:0C:00
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 1F0BB53C62601DEC2F07E9F9A1FAC9EA0FBE0B19
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa
Signing time: Tue 20 Jan 2026 02:09:35 +0000
ROA not before: Tue 20 Jan 2026 02:04:35 +0000
ROA not after: Tue 19 Jan 2027 02:09:35 +0000
asID: 134823
IP address blocks: 103.118.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0b:b5:3c:62:60:1d:ec:2f:07:e9:f9:a1:fa:c9:ea:0f:be:0b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:35 2026 GMT
Not After : Jan 19 02:09:35 2027 GMT
Subject: CN=F51A07B7971A0E67D1954EACBB07FA77F7DA0C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:9d:cd:fa:69:da:3b:91:18:85:a5:af:a7:
29:19:84:a5:09:c4:94:b6:f8:15:d9:eb:c2:ac:96:
2c:3e:a6:3c:85:8a:a5:d6:0f:c2:19:8b:4d:fb:e6:
9d:b4:74:43:01:62:b7:d9:ef:f7:ed:be:38:6e:0f:
1b:5a:d1:58:10:42:00:63:bc:2d:90:81:11:88:d3:
e4:ed:cf:55:35:63:26:fa:12:f3:8e:f9:23:61:93:
85:16:b4:a8:c4:ff:1b:c6:55:16:a5:44:41:9d:7a:
29:22:06:69:5c:c1:e2:a3:66:b8:25:93:01:5a:74:
e4:44:8a:07:b2:c0:f5:f5:35:4f:b8:f6:74:c0:19:
76:5a:af:d5:58:7d:88:b2:6e:8a:e5:2f:57:31:62:
2d:a8:c0:83:c3:2e:e9:a8:e0:6b:f9:04:31:8f:9e:
6e:92:e4:31:d1:21:6a:61:80:33:6a:e6:cb:18:c5:
ca:6d:ea:88:c7:cd:67:76:dc:a7:16:58:b6:94:be:
d9:2c:be:ec:f0:45:3e:53:d6:bf:52:a4:3b:15:7a:
ec:ed:47:18:4c:6e:0c:35:63:29:95:84:48:ee:b4:
0f:50:d2:97:98:55:08:85:86:a8:dd:df:2a:76:43:
e5:cf:8b:5b:1c:13:bf:c2:77:e7:3e:fc:3e:3c:ee:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:07:B7:97:1A:0E:67:D1:95:4E:AC:BB:07:FA:77:F7:DA:0C:00
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:5a:7d:9a:09:29:cb:bb:83:e7:65:4d:c9:bc:67:b8:20:3d:
d5:65:0f:18:77:02:34:1d:64:6b:9e:6c:e0:22:03:e2:c7:4b:
05:4e:ba:00:0a:cc:c9:be:87:fb:d0:fa:92:ef:36:b9:96:4a:
84:34:97:36:e8:db:e8:ee:81:32:e3:40:ae:90:1b:3f:db:9d:
b6:e4:20:2d:11:c0:8d:bc:33:ff:8e:8c:9e:f9:c2:26:66:8e:
f6:e3:4a:0d:a7:61:94:94:3f:fd:13:a6:fc:92:8d:dc:5e:71:
e2:da:e6:e3:e0:00:d2:83:fc:8f:66:af:3c:70:83:bc:b3:1d:
47:14:a4:e2:78:76:45:c8:8c:2b:ad:44:6d:95:13:71:82:7a:
ea:b1:4e:7f:04:49:21:39:6b:a3:f4:4a:76:df:62:09:a9:9a:
53:8b:ad:36:e1:f9:8d:5c:af:92:44:1f:b9:1d:a1:4e:37:49:
6a:1e:8b:bd:37:1d:5a:92:a6:f2:db:d6:77:12:07:1d:9a:ff:
a5:b5:18:50:a9:41:d5:e2:1d:de:ce:12:2f:65:79:cf:fb:21:
0f:63:22:83:0b:e4:d7:1e:ac:42:20:e7:da:cd:6f:76:7e:0d:
34:5c:c3:95:cb:82:55:e7:91:48:ff:04:d5:80:01:80:81:83:
90:5a:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:21 2026 by rpki-client