This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa
File: 3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa (raw, json)
Hash identifier: aA6n6OcXV3YaZUm3/cXMydh8uuMQFDhYxVXm1N4arzw=
Subject key identifier: FF:03:CC:2A:70:5F:36:2B:B4:88:CB:3D:FC:AC:7C:89:39:EC:74:D5
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 10F95F748BE023808D1916CB65A36837EAF6EAE0
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa
Signing time: Tue 20 Jan 2026 02:09:39 +0000
ROA not before: Tue 20 Jan 2026 02:04:39 +0000
ROA not after: Tue 19 Jan 2027 02:09:39 +0000
asID: 152918
IP address blocks: 103.118.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f9:5f:74:8b:e0:23:80:8d:19:16:cb:65:a3:68:37:ea:f6:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:39 2026 GMT
Not After : Jan 19 02:09:39 2027 GMT
Subject: CN=FF03CC2A705F362BB488CB3DFCAC7C8939EC74D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:73:60:fc:ab:24:a6:82:39:4d:49:c4:10:
5a:fe:20:a7:b9:0e:e7:9b:75:46:93:f3:6a:ee:5b:
de:a8:a2:cb:98:ed:b7:11:70:a8:a3:05:1e:96:30:
24:8a:f0:ed:8f:c9:22:8c:73:a0:ce:53:ef:dc:70:
5a:93:5e:71:62:29:30:5f:1e:54:e6:bc:9f:80:e0:
53:db:61:c9:b9:17:67:77:7c:40:30:eb:20:1a:f5:
4a:58:81:56:85:e2:fc:24:b4:69:09:e4:eb:ed:9b:
97:da:3d:9c:00:6b:33:68:98:fc:0d:e6:e3:21:fe:
40:21:ca:cf:cb:6c:a7:8f:78:0b:97:ac:80:08:63:
17:6a:5f:94:d8:a1:15:0e:f4:ce:17:3b:98:4a:50:
fa:2b:9a:5c:6c:74:d0:d1:dd:b1:6a:2e:4b:ea:5b:
a4:2f:44:cf:1e:cd:fb:f5:12:22:1a:ff:c7:bb:14:
ef:7b:8c:93:b2:59:d5:f3:7f:24:f7:c3:56:fd:5b:
ed:ed:26:27:ff:4a:82:eb:78:41:85:4a:be:4b:05:
09:8e:ea:98:9e:aa:cb:dd:a5:f3:e4:c3:c5:85:0b:
64:34:52:45:2a:1a:72:ad:ec:36:71:b6:21:69:60:
33:7c:18:a8:dd:a6:82:62:5a:be:ef:79:5e:fc:98:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:CC:2A:70:5F:36:2B:B4:88:CB:3D:FC:AC:7C:89:39:EC:74:D5
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.243.0/24
Signature Algorithm: sha256WithRSAEncryption
00:29:d8:74:84:eb:67:cd:de:3d:f8:15:09:ab:13:7d:cd:18:
db:be:d7:87:55:d6:f4:b9:47:b5:5c:f1:33:b8:94:b8:a3:87:
19:d5:8c:74:a1:ac:e4:66:5a:38:16:f6:69:c6:c9:48:1d:a6:
77:28:e8:91:27:0e:c3:f2:26:c3:3b:ca:db:69:21:6f:51:a2:
db:dd:13:42:30:73:65:6a:22:e5:d3:48:4f:de:8b:c6:6f:df:
ac:10:cc:8f:d3:31:c2:91:76:0d:a9:35:bd:81:c2:8c:31:9b:
38:ed:73:6b:e2:ad:eb:59:ad:7f:9f:f5:42:6c:5d:cb:70:a3:
39:4d:3f:8b:4b:b2:98:0d:7a:11:37:38:53:88:08:49:17:48:
f8:41:4b:f4:3d:09:31:83:79:ce:42:b0:c6:39:22:d3:45:2b:
74:7a:d3:0a:56:b3:53:d8:f9:3a:8d:8f:64:c1:f3:ad:1f:ab:
6d:01:a9:2a:09:64:a3:a6:37:83:e0:ed:9f:ea:dd:a2:4a:e7:
e8:46:b7:fd:08:fd:11:a5:d4:44:da:66:5c:27:6c:22:83:2b:
54:99:e7:fb:4e:52:e7:49:ab:c4:85:59:fe:16:da:24:51:e9:
c7:cd:f1:68:81:e7:84:37:5c:71:8c:4a:6d:6d:90:c7:3d:66:
d2:80:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:12 2026 by rpki-client