This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e20313334383233.roa
File: 3130332e3131382e3234382e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier: 1FpNgexm7RwgR8BOxWHDNoJ3OoVBA89TxBd+nWz9J5w=
Subject key identifier: EB:0E:3B:6E:C2:0E:33:6D:13:E2:0B:38:05:F1:94:A8:4E:39:B5:43
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 6CA0BD5FBAC1C9951FF10124EB315861633E2AB9
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e20313334383233.roa
Signing time: Tue 20 Jan 2026 02:09:33 +0000
ROA not before: Tue 20 Jan 2026 02:04:33 +0000
ROA not after: Tue 19 Jan 2027 02:09:33 +0000
asID: 134823
IP address blocks: 103.118.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:bd:5f:ba:c1:c9:95:1f:f1:01:24:eb:31:58:61:63:3e:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:33 2026 GMT
Not After : Jan 19 02:09:33 2027 GMT
Subject: CN=EB0E3B6EC20E336D13E20B3805F194A84E39B543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:3c:3b:a3:03:fc:b1:8d:34:40:db:10:aa:
23:11:52:2f:31:0d:c1:2a:35:84:77:af:73:e0:43:
df:55:73:5c:6a:42:8b:ce:3a:08:73:f0:74:2c:5d:
e7:34:c0:ce:23:0b:2e:d9:39:e9:f3:43:d1:73:c8:
d5:21:6e:9c:5a:1a:2e:94:01:41:a2:cf:db:64:f8:
0b:38:52:9d:21:1c:cb:27:c6:dc:74:ea:3e:5e:e3:
a3:2f:ba:46:69:e5:b5:b1:46:8c:17:7d:76:f0:b9:
36:b2:50:f3:77:76:4a:31:76:a7:e9:52:07:33:d1:
21:27:30:1b:6c:65:27:b1:cf:04:f6:6d:74:da:b3:
03:3c:35:3f:85:40:4c:ef:50:bf:4c:33:a6:39:79:
12:4b:22:ba:63:99:f4:d5:91:33:e4:89:80:dd:cb:
e0:1d:5f:4b:96:b6:87:b8:3e:95:14:55:c9:53:c6:
bb:0a:50:1f:92:a5:69:36:ca:0f:29:d2:ff:a6:49:
ed:43:a8:98:0f:37:6d:f8:7b:8c:dc:db:5c:30:d6:
b2:7d:76:80:99:55:b1:ab:17:8f:13:de:c4:ab:af:
07:b8:2c:69:a5:28:b6:ba:3f:94:26:59:2d:33:c7:
da:68:0f:77:8c:d5:1e:81:27:ec:27:f6:c9:65:68:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:3B:6E:C2:0E:33:6D:13:E2:0B:38:05:F1:94:A8:4E:39:B5:43
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
46:30:96:56:4e:0e:9d:9c:71:9f:f0:11:67:11:ea:85:15:a2:
df:64:1c:96:6a:e5:1c:d9:7c:2a:2e:47:e6:2d:3e:82:d0:a2:
eb:91:00:6f:b1:58:ba:02:62:09:ad:00:78:d5:34:43:0c:c4:
e4:88:0b:4d:7d:4e:fa:95:a6:bf:29:6e:a8:76:54:6c:b6:94:
c4:6d:5c:09:f7:bb:85:6a:5b:1a:0e:41:3f:cd:cb:e7:a4:78:
99:dc:f8:5c:be:be:61:37:25:fd:e6:42:d2:c6:e2:ec:a6:0f:
9c:1f:0c:6c:f1:54:21:8e:c8:5e:2a:a2:38:e6:10:ad:0d:7f:
7a:68:e7:1f:09:48:c1:13:62:39:21:21:52:f4:9e:ac:9f:9d:
e4:7a:61:99:dd:bb:60:fa:cc:b8:64:87:cc:80:48:c6:b6:2b:
06:48:5d:2f:d5:9f:b9:5c:83:6f:fa:83:20:34:7f:28:fd:c9:
73:bf:0d:2a:5d:2c:43:c7:a4:97:60:ff:67:c8:6d:2a:62:bb:
d3:eb:51:be:49:25:d1:be:c8:4f:4d:92:03:9e:c1:a0:c2:67:
30:9f:59:3a:26:3d:df:2a:3b:0f:91:17:00:5d:d1:24:f3:05:
39:b5:a4:7b:70:27:aa:8b:1f:87:a7:b7:4e:35:38:3c:92:88:
db:98:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client