This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e203430303635.roa
File: 3130332e3131382e3234382e302f32322d3234203d3e203430303635.roa (raw, json)
Hash identifier: aVkesREWdQr16kLn6KD1dNc8oZEpBBwPN4bdGpA8Las=
Subject key identifier: F5:2F:DF:2A:A4:0D:75:D7:47:1E:4D:F9:13:F1:EE:FA:29:6E:8A:15
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 22BE1B87CB147D3082FE809D84F701E2BD9A3147
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e203430303635.roa
Signing time: Tue 20 Jan 2026 02:09:36 +0000
ROA not before: Tue 20 Jan 2026 02:04:36 +0000
ROA not after: Tue 19 Jan 2027 02:09:36 +0000
asID: 40065
IP address blocks: 103.118.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Jan 2026 14:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:be:1b:87:cb:14:7d:30:82:fe:80:9d:84:f7:01:e2:bd:9a:31:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:36 2026 GMT
Not After : Jan 19 02:09:36 2027 GMT
Subject: CN=F52FDF2AA40D75D7471E4DF913F1EEFA296E8A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:93:3a:b3:ab:8b:cf:55:25:41:66:5c:83:
aa:c4:44:50:3f:fb:d5:c7:37:7e:84:11:cd:9e:73:
10:14:87:31:8b:9d:08:b0:52:ad:46:1c:95:27:9f:
38:2f:4d:ce:62:de:8b:c7:ea:e7:45:72:c0:0f:2d:
29:a5:de:bf:9f:04:00:31:e9:3c:52:ef:7d:ab:c7:
c0:62:2e:3c:5f:4b:99:86:84:51:9d:de:d8:6c:33:
68:eb:82:2e:21:9d:7b:d5:5e:0d:ad:40:61:a5:88:
cd:f3:de:5e:7a:05:8d:d3:c9:40:63:a7:e6:43:16:
bc:50:e6:16:cc:32:a8:08:db:6c:11:8a:0a:2a:ec:
9b:e6:90:94:f2:64:6b:3a:bc:e6:32:59:ba:7a:83:
01:02:7e:18:af:fe:96:2c:a7:86:42:0b:95:f6:69:
ba:b3:b7:ac:5c:6b:80:f6:05:d7:16:90:1b:d7:6a:
3e:e5:68:e2:67:65:5a:50:c3:86:d2:11:7d:3f:77:
55:c4:fe:2e:5d:c6:32:14:d2:4e:2c:91:2d:45:57:
fb:5f:d9:95:bc:43:e5:ca:6b:8d:7b:2c:8f:c9:35:
3a:f9:c8:99:50:5f:89:00:9d:64:1d:4b:6e:92:03:
82:70:a6:1c:7c:be:bb:a8:ca:d6:96:20:16:31:94:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:DF:2A:A4:0D:75:D7:47:1E:4D:F9:13:F1:EE:FA:29:6E:8A:15
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e203430303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a3:b8:af:e4:de:56:ea:51:a2:09:7b:69:dc:80:fa:42:64:
92:76:53:e9:5d:49:74:6e:4b:3a:78:d4:f2:cd:a4:57:c9:8d:
e3:18:47:65:ac:db:d0:b4:06:af:6c:9d:fe:94:95:b3:b7:de:
28:00:53:2b:e3:b4:13:96:97:15:05:73:d2:4b:18:22:2e:fe:
be:49:62:92:6c:88:d6:72:5f:a1:d8:13:07:72:4e:87:6d:f1:
f1:48:9d:c4:93:36:f6:bf:78:94:94:8d:00:a6:26:a3:e4:d8:
72:df:b1:c1:69:b4:c7:1e:cf:36:b8:ef:0d:f0:f8:75:bc:46:
95:18:13:bc:43:ee:9e:49:56:0b:c7:e4:2f:57:5c:64:91:5a:
22:a7:80:a5:a4:c7:7e:96:1d:3f:da:b6:d0:f2:37:20:58:46:
a6:ca:d1:93:ba:ff:d3:32:be:d4:f1:41:ac:eb:cc:c2:24:09:
b3:6a:8c:62:d0:ae:00:d8:d1:1a:26:d1:f3:86:c8:07:47:7e:
bc:3a:27:c4:ea:01:fa:f7:a1:5a:71:44:b3:82:24:c2:25:9b:
cd:90:ef:39:b6:67:d9:2a:43:c4:b7:51:57:62:1d:a3:4a:99:
a9:71:03:44:a1:10:92:e2:51:1f:25:11:10:8b:4d:ad:20:10:
6f:60:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:05:25 2026 by rpki-client