This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e20313334383233.roa
File: 3130332e3131382e3232302e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier: a+5f+aaRHw/HT5kZDU8TT4JOkTcV4vJiwdCeasJrwWQ=
Subject key identifier: E8:A2:83:39:D1:29:A9:19:85:C1:1D:12:C0:76:1B:6D:DA:5D:22:FD
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 624DB19575BD20DA1EC64412DA1C614DFF78CA96
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e20313334383233.roa
Signing time: Tue 20 Jan 2026 02:09:34 +0000
ROA not before: Tue 20 Jan 2026 02:04:34 +0000
ROA not after: Tue 19 Jan 2027 02:09:34 +0000
asID: 134823
IP address blocks: 103.118.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4d:b1:95:75:bd:20:da:1e:c6:44:12:da:1c:61:4d:ff:78:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:34 2026 GMT
Not After : Jan 19 02:09:34 2027 GMT
Subject: CN=E8A28339D129A91985C11D12C0761B6DDA5D22FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:a9:4c:4b:24:07:87:c5:16:cb:01:78:5e:
c4:7b:0b:bf:f4:ff:f0:9a:7f:29:b6:09:fb:2d:5a:
1d:54:cc:9f:09:60:06:7e:95:11:2a:e6:fb:f0:5c:
47:c2:59:22:82:65:33:0c:8c:3b:d7:2a:6d:e3:ce:
79:2e:aa:57:68:28:48:c2:56:11:68:01:b7:f9:58:
61:c4:80:06:2f:bb:55:82:d3:99:e5:f6:51:53:a4:
7b:67:1d:10:7c:e0:b8:58:04:62:f3:14:9a:f9:b5:
b8:c4:f3:af:d2:fe:fa:0e:e1:eb:94:42:0c:2c:82:
a2:84:18:8a:bf:dd:4c:3d:d5:95:f7:2c:09:c9:80:
16:45:2f:09:31:0c:ef:2b:36:58:9a:09:13:0d:11:
6e:20:62:2a:ca:9b:9e:13:b2:a0:a5:06:ec:17:80:
32:75:3b:56:d1:3c:6b:11:a3:f2:df:26:5d:f2:4c:
cb:0f:ee:ca:ab:40:8b:fe:be:4d:47:8b:87:c2:bd:
60:ca:fd:11:53:c7:a7:b5:f3:4e:64:dc:72:65:d1:
7a:16:fa:6b:a7:15:b1:79:b0:4b:5c:14:7f:ab:fb:
9e:18:4f:8c:22:f5:ea:f7:1b:39:dd:9a:98:16:88:
1b:33:63:f0:6c:60:9e:c7:63:81:66:94:3d:ca:b2:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:83:39:D1:29:A9:19:85:C1:1D:12:C0:76:1B:6D:DA:5D:22:FD
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3232302e302f32322d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:60:f5:81:14:3f:87:d6:82:0c:ac:be:f9:44:ff:5c:cd:56:
79:35:83:66:ea:1c:f8:e0:c1:d5:bf:28:8a:0c:cb:2f:5d:e4:
2c:b5:9f:eb:17:b2:52:22:27:e7:53:3e:c8:45:19:4b:74:29:
43:eb:e2:12:7f:0d:a9:ee:31:32:42:3e:82:f6:7f:a8:9d:73:
26:5d:bb:c1:23:5b:ae:8d:ad:9e:c3:14:78:24:e4:23:4d:eb:
df:e3:aa:0f:09:ad:14:92:e3:c2:b4:a5:0e:eb:be:e8:89:be:
8a:94:4d:7e:3b:d8:1e:8b:25:d9:ee:1a:69:d8:f1:e3:af:ea:
72:0f:5e:3d:c6:3c:92:45:c2:96:14:33:4d:a2:cd:da:39:c6:
8c:9c:35:4a:3b:06:60:eb:c9:02:1b:23:0c:c2:08:91:50:1f:
8b:80:9f:23:2d:20:c1:09:fa:c0:46:b5:bd:df:2d:f7:6e:b6:
6f:96:09:13:89:94:03:ba:7c:27:2b:c7:db:04:6d:a9:61:24:
55:fc:2d:df:86:e2:70:25:52:0a:ba:67:94:23:8b:74:d4:ea:
9b:49:06:dd:56:70:9e:2c:39:4c:ee:45:b8:a8:bb:31:e2:af:
77:51:1f:f9:d5:c8:65:00:b1:28:ac:68:33:15:62:17:e5:05:
c2:f6:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client