This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234342e302f32322d3234203d3e20313338393638.roa
File: 3130332e3131382e3234342e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier: DAkVLgSdIsDFAXKRV2ru14i8opAkvW1LMP5ZeGsSRjQ=
Subject key identifier: 27:59:EF:F5:2B:BB:10:50:A5:B7:8F:EB:C3:AF:DA:86:CA:7C:C4:28
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 3194288CDC0FEA5EBE7D53AAE01E69C5A376B3FB
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234342e302f32322d3234203d3e20313338393638.roa
Signing time: Tue 20 Jan 2026 02:09:37 +0000
ROA not before: Tue 20 Jan 2026 02:04:37 +0000
ROA not after: Tue 19 Jan 2027 02:09:37 +0000
asID: 138968
IP address blocks: 103.118.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:94:28:8c:dc:0f:ea:5e:be:7d:53:aa:e0:1e:69:c5:a3:76:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:37 2026 GMT
Not After : Jan 19 02:09:37 2027 GMT
Subject: CN=2759EFF52BBB1050A5B78FEBC3AFDA86CA7CC428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:5d:5a:0e:a0:8c:e5:ad:ae:8c:3c:0e:28:
45:08:2e:e5:a0:f8:29:63:65:a3:95:c7:55:cc:c1:
16:74:eb:a1:ad:1d:38:f4:98:da:2c:52:ed:7c:f5:
17:72:22:24:14:be:23:53:6a:11:b2:d5:03:91:76:
f6:89:33:6d:15:85:5d:c2:7f:21:e4:bf:63:13:a5:
68:e9:de:61:39:b8:9d:57:35:ea:37:14:ec:55:3c:
38:84:f5:d2:b8:f9:90:12:33:0f:bb:80:88:8d:a4:
54:ec:1a:b3:9a:36:55:a0:67:8b:84:40:0e:20:62:
f1:09:41:4b:75:03:3a:c2:e8:7b:19:9b:dd:42:9a:
8e:86:70:ad:60:07:7b:9a:e4:87:5f:1c:06:53:19:
d7:67:64:0d:fd:9b:b5:56:75:c3:44:46:16:9d:f3:
62:54:9d:a6:33:ba:97:87:b2:ef:94:29:09:dc:d3:
e7:52:15:06:c3:ed:c6:3a:29:6e:9e:76:e4:5e:c2:
9f:4b:b2:b7:e0:fe:5d:d6:88:df:94:0d:76:01:5f:
67:65:6f:8a:01:0e:0c:ae:ec:a5:4e:96:a2:4a:49:
6b:e2:8a:a1:de:76:c4:50:95:94:c5:c8:47:97:88:
57:ae:92:a0:be:b0:18:c4:5e:74:af:f5:26:a1:18:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:59:EF:F5:2B:BB:10:50:A5:B7:8F:EB:C3:AF:DA:86:CA:7C:C4:28
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234342e302f32322d3234203d3e20313338393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.244.0/22
Signature Algorithm: sha256WithRSAEncryption
88:2b:6d:50:0a:7f:08:0a:56:73:67:0a:a9:fc:6e:8e:b1:d3:
1a:52:07:a2:88:01:b6:96:24:56:b3:9e:14:64:b8:89:36:1c:
8e:5f:68:4b:a8:db:cb:b3:37:92:be:9b:e1:35:ae:d8:fa:80:
63:9b:49:98:f0:d0:b3:d2:5c:a1:03:ad:bf:da:46:30:e6:dc:
fe:c4:de:e8:cd:3c:53:cc:9c:ba:bc:4f:b4:0d:db:95:18:a9:
a2:4c:79:b8:ac:4e:e2:33:7b:5e:f3:4d:22:82:8c:db:f1:dd:
21:a2:45:81:95:e2:5d:68:e3:1a:3e:93:58:28:d9:a0:9b:5b:
d3:aa:46:fa:ef:04:32:2c:29:07:4c:33:fa:5c:19:31:d7:e9:
66:28:31:ab:81:77:72:68:b3:03:fe:83:49:e9:8f:95:cb:bd:
da:52:a2:03:76:f1:b5:fa:5b:3a:a5:92:85:25:c4:1d:f7:eb:
01:b3:79:9c:00:f1:a5:1a:2d:b1:b3:25:a4:ae:f0:7f:55:19:
70:0b:e6:6f:f9:8a:4b:e3:d6:c2:43:57:cf:a4:44:06:bf:0c:
7b:cf:b1:19:5a:42:18:ed:f1:10:b6:4c:ac:5d:32:20:bb:e2:
4f:47:d7:92:60:9a:37:d4:ed:f5:77:ce:c1:86:94:fc:59:0a:
b1:dd:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client