This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa
File: 3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa (raw, json)
Hash identifier: EHIi4NXlLritT9DxD6InI0XfLdpY0y/0PZpC2NBgpX0=
Subject key identifier: AB:2F:6D:8B:1E:8F:6F:8A:5A:76:4C:CD:35:53:A6:5E:07:68:FD:26
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 7E7256EAEBDAE1FACCBF44C39AE815CF1030E6F8
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa
Signing time: Tue 20 Jan 2026 02:09:39 +0000
ROA not before: Tue 20 Jan 2026 02:04:39 +0000
ROA not after: Tue 19 Jan 2027 02:09:39 +0000
asID: 134121
IP address blocks: 103.118.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:72:56:ea:eb:da:e1:fa:cc:bf:44:c3:9a:e8:15:cf:10:30:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:39 2026 GMT
Not After : Jan 19 02:09:39 2027 GMT
Subject: CN=AB2F6D8B1E8F6F8A5A764CCD3553A65E0768FD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:7a:3b:2c:7c:46:d4:46:b6:dc:41:c2:74:
b1:db:1d:24:f2:2d:99:58:2d:34:7c:db:5f:59:0a:
a6:fe:53:71:cf:0c:04:29:15:94:1d:d1:b5:b1:6f:
8d:5c:0f:2f:70:7c:8d:d0:ee:d6:97:a2:b5:db:8a:
f9:de:d3:b6:f9:2a:5f:87:2f:fd:7f:a4:fb:3f:a0:
54:d0:8f:0d:43:c9:18:78:76:66:9a:24:56:10:37:
d1:7c:42:bd:5f:b3:84:1c:2f:4f:60:92:23:d8:e0:
69:aa:2c:fe:5f:df:2d:51:ce:09:36:bb:f0:b5:d3:
01:f4:a3:08:fc:b4:1a:d8:a6:a0:ba:c0:00:92:e1:
b4:43:06:db:f6:73:a7:c4:e8:86:20:b7:36:09:4e:
a4:5d:b7:ba:87:a9:ee:3a:4a:0a:52:a1:2b:35:b2:
5e:1a:0d:ad:5c:13:71:28:b2:67:dd:7f:92:7a:6a:
fd:04:39:48:bd:e3:31:3b:d3:78:97:65:fb:21:fa:
8b:f8:5f:84:bd:0a:5f:bd:5c:9f:f3:dc:ae:96:d5:
1c:c7:81:f6:dd:99:f6:e5:42:0e:34:cc:14:dc:0b:
01:06:7b:30:37:89:92:f3:8e:0c:89:d7:89:4e:eb:
b7:53:fc:d7:5d:c5:b4:08:c2:b4:fa:02:4b:58:cb:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:6D:8B:1E:8F:6F:8A:5A:76:4C:CD:35:53:A6:5E:07:68:FD:26
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:3f:6d:04:69:06:a0:64:8b:ba:10:dd:10:c1:c2:86:0a:0a:
1b:13:1a:88:40:03:37:63:26:5e:3f:29:d5:b4:7a:b4:c7:ba:
9d:98:24:63:9b:e1:20:0c:2d:a2:c6:ea:5a:82:2d:a8:2b:70:
21:a9:f2:ea:22:56:5d:f4:73:b4:ac:60:c9:e8:63:65:a2:24:
e3:7a:3b:c0:22:e8:14:7f:c6:c3:ef:86:39:be:44:fc:67:c6:
28:c3:dd:da:2c:00:a1:63:49:e2:53:ca:56:68:13:fc:5f:45:
ba:2c:fd:9b:b3:a7:d8:93:5f:eb:6d:37:b2:4a:b8:d3:05:3d:
98:98:c7:71:17:8b:1d:fa:11:23:74:75:e3:5a:97:a5:7d:45:
e2:80:ea:fd:14:77:bb:b5:aa:ee:58:28:18:4a:e7:75:0b:71:
4c:5f:5e:92:d0:33:f0:12:c5:86:88:4f:f5:aa:8a:84:d3:d6:
c2:b8:79:59:dc:2f:02:0c:3c:5e:7d:5c:15:93:8a:8f:ac:4d:
fb:e1:f3:dc:50:ea:e8:3a:4d:1b:1e:39:a2:24:e6:7e:e6:b6:
49:6c:1b:e0:9a:b7:27:2e:75:5b:4c:df:74:dd:10:d0:a4:22:
00:73:32:ef:57:00:57:46:18:3c:e8:49:9b:1a:0b:bb:57:a2:
c6:a0:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:20 2026 by rpki-client