This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313337353038.roa
File: 3130332e3131382e3230342e302f32322d3234203d3e20313337353038.roa (raw, json)
Hash identifier: ujiXy7Bj2grYLw6ZiD9emIT/3t8ee68w924lQ/xY3ZE=
Subject key identifier: E0:3D:C0:32:BD:9D:8C:D2:25:D8:76:31:A4:57:84:18:54:44:5F:65
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 7F209AA896E08CA46F84E6BCC213DA8A6ABB9224
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313337353038.roa
Signing time: Tue 20 Jan 2026 02:09:39 +0000
ROA not before: Tue 20 Jan 2026 02:04:39 +0000
ROA not after: Tue 19 Jan 2027 02:09:39 +0000
asID: 137508
IP address blocks: 103.118.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:20:9a:a8:96:e0:8c:a4:6f:84:e6:bc:c2:13:da:8a:6a:bb:92:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:39 2026 GMT
Not After : Jan 19 02:09:39 2027 GMT
Subject: CN=E03DC032BD9D8CD225D87631A457841854445F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6a:f8:76:3a:ef:43:1a:80:b3:51:af:81:21:
a6:82:4f:dc:15:b2:86:b5:7c:04:1b:37:76:69:05:
b2:1d:1a:40:48:6a:01:21:bd:12:13:a2:e3:2f:5b:
12:97:08:c0:e2:e6:da:6c:19:53:e5:81:45:42:a9:
6f:2b:8b:8c:e5:5a:b1:b4:66:40:f8:0f:a4:6e:69:
2d:9b:4d:de:3e:59:da:83:06:92:fc:fe:58:7e:2b:
ef:de:47:5e:61:c0:ab:eb:cc:77:de:da:25:23:65:
ac:ce:3e:25:7f:22:24:5f:7e:2f:4d:12:10:4e:8f:
14:33:dc:d0:95:3e:1d:21:33:fb:16:2a:d5:da:23:
9b:bd:18:29:11:12:3f:1e:b3:5c:4c:da:62:8d:92:
31:e0:0b:ae:2e:8f:fa:07:71:9a:33:fc:71:04:be:
0a:15:c8:5d:bf:95:8a:a7:ba:13:10:83:02:30:39:
fa:7a:d5:49:2b:06:8e:d1:5f:43:c2:3b:00:09:17:
f4:2e:27:68:63:1e:5d:be:0f:f5:fc:61:5e:1e:41:
1e:b8:e4:e8:bc:5b:b8:f7:9b:55:dd:d5:1d:85:6d:
01:a2:67:e9:ee:c2:07:95:f3:c6:58:0a:56:92:0c:
6c:26:3c:ef:48:66:19:f2:d9:77:9d:a5:c6:f0:8e:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:C0:32:BD:9D:8C:D2:25:D8:76:31:A4:57:84:18:54:44:5F:65
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313337353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
67:64:8b:ba:6c:f4:89:84:dc:c3:d9:e3:d2:b2:88:28:5b:9d:
10:75:8e:6e:15:24:48:da:ea:27:a3:7a:8f:ce:4b:7c:06:64:
ca:44:d4:88:a3:3d:fb:16:b6:8f:d6:1c:1b:8a:98:ff:2a:aa:
08:31:cc:c3:82:8b:1b:dd:c5:62:e3:1d:9c:69:d8:b8:c2:7d:
13:e5:fb:9d:ce:5f:f5:e4:b2:d6:3a:69:a4:ff:ac:8c:55:ca:
4b:13:22:a0:72:d9:de:4f:c2:1a:b9:fc:ab:78:54:f0:6a:c0:
41:16:de:eb:e1:7f:e3:ea:7b:22:e9:2e:72:c4:77:e5:6c:64:
06:0f:e7:32:ec:7b:25:07:b2:a0:a6:77:57:50:cd:9d:27:dc:
14:65:3f:e1:c3:72:0f:7d:1a:0a:9a:09:2b:e1:39:47:84:d7:
83:af:45:d4:ee:91:c4:04:ba:19:6b:9f:60:7c:48:c8:0a:84:
e2:45:e9:4d:4a:a4:ef:15:20:d0:2e:97:9e:ec:14:77:c9:dc:
dc:48:19:e1:da:98:db:50:31:bc:b0:66:56:c8:99:cf:46:0f:
07:de:7b:61:66:8a:6c:5f:07:cf:d7:d5:61:95:a8:1c:b2:f6:
8b:af:af:db:a1:85:cd:17:89:c3:12:40:6c:65:c1:c2:53:98:
89:b2:f1:70
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUfyCaqJbgjKRvhOa8whPaimq7kiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzlaFw0yNzAxMTkwMjA5MzlaMDMxMTAvBgNV
BAMTKEUwM0RDMDMyQkQ5RDhDRDIyNUQ4NzYzMUE0NTc4NDE4NTQ0NDVGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3avh2Ou9DGoCzUa+BIaaCT9wV
soa1fAQbN3ZpBbIdGkBIagEhvRITouMvWxKXCMDi5tpsGVPlgUVCqW8ri4zlWrG0
ZkD4D6RuaS2bTd4+WdqDBpL8/lh+K+/eR15hwKvrzHfe2iUjZazOPiV/IiRffi9N
EhBOjxQz3NCVPh0hM/sWKtXaI5u9GCkREj8es1xM2mKNkjHgC64uj/oHcZoz/HEE
vgoVyF2/lYqnuhMQgwIwOfp61UkrBo7RX0PCOwAJF/QuJ2hjHl2+D/X8YV4eQR64
5Oi8W7j3m1Xd1R2FbQGiZ+nuwgeV88ZYClaSDGwmPO9IZhny2Xedpcbwjqe9AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU4D3AMr2djNIl2HYxpFeEGFREX2UwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz
MTMxMzgyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzNzM1MzAz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmd2zDANBgkqhkiG9w0BAQsFAAOCAQEAZ2SLumz0iYTcw9nj
0rKIKFudEHWObhUkSNrqJ6N6j85LfAZkykTUiKM9+xa2j9YcG4qY/yqqCDHMw4KL
G93FYuMdnGnYuMJ9E+X7nc5f9eSy1jpppP+sjFXKSxMioHLZ3k/CGrn8q3hU8GrA
QRbe6+F/4+p7IukucsR35WxkBg/nMux7JQeyoKZ3V1DNnSfcFGU/4cNyD30aCpoJ
K+E5R4TXg69F1O6RxAS6GWufYHxIyAqE4kXpTUqk7xUg0C6XnuwUd8nc3EgZ4dqY
21AxvLBmVsiZz0YPB957YWaKbF8Hz9fVYZWoHLL2i6+v26GFzReJwxJAbGXBwlOY
ibLxcA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:22 2026 by rpki-client