This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e203535393333.roa
File: 3130332e3131382e3234382e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier: aYDZ6DD5v1cpkGaHlBOonwU1y1UddhgRuGJ0UtBguL0=
Subject key identifier: F3:68:8F:E4:41:CF:8A:EF:FB:6B:5F:F7:00:A2:10:65:A9:3D:D7:90
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 291BD7DBA45CCA0C04CCF93B2B441CB2191CA39F
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e203535393333.roa
Signing time: Tue 20 Jan 2026 02:09:37 +0000
ROA not before: Tue 20 Jan 2026 02:04:37 +0000
ROA not after: Tue 19 Jan 2027 02:09:37 +0000
asID: 55933
IP address blocks: 103.118.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1b:d7:db:a4:5c:ca:0c:04:cc:f9:3b:2b:44:1c:b2:19:1c:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:37 2026 GMT
Not After : Jan 19 02:09:37 2027 GMT
Subject: CN=F3688FE441CF8AEFFB6B5FF700A21065A93DD790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:f9:ce:97:6b:e9:32:ab:9e:54:76:51:c5:
f2:5d:0e:9f:3a:f1:2e:a0:60:22:43:55:ae:71:d3:
90:16:0e:b4:0c:97:d2:e3:04:9d:83:25:d7:8f:c8:
05:ee:a4:ec:67:35:39:86:fe:c6:ed:24:e5:de:cb:
c7:08:90:97:34:db:23:eb:d8:c5:7b:a6:49:81:e5:
fc:fb:60:65:61:06:d1:10:b7:95:6a:ec:fe:eb:7f:
af:94:ff:70:f4:6e:21:20:4a:15:4b:c8:12:b3:22:
aa:df:5f:46:5c:d0:de:7e:48:39:c2:35:9d:39:25:
81:da:61:ad:a8:9d:63:fe:69:77:d7:df:19:d6:ce:
8f:3a:4c:ea:56:14:56:67:33:2a:ed:7a:27:26:fd:
06:d9:4a:d4:84:f9:4e:7e:5b:a3:d9:8b:39:b4:51:
8d:42:68:1e:97:3b:06:e8:d1:b2:c9:b1:9c:aa:34:
83:89:5f:76:00:1d:15:b6:09:7e:58:25:c0:97:be:
40:67:e8:10:6a:99:b9:3b:f0:3c:d4:14:f2:c7:87:
25:5c:b5:7d:dd:20:aa:c1:3c:33:5f:12:ba:d2:25:
f4:73:9a:15:2f:13:20:f1:c9:8f:87:2e:cd:4b:6c:
cd:2e:91:cd:94:61:2c:dd:42:9b:f2:04:de:d5:63:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:8F:E4:41:CF:8A:EF:FB:6B:5F:F7:00:A2:10:65:A9:3D:D7:90
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234382e302f32322d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:68:de:43:de:d5:5c:e8:4d:95:00:b0:21:4b:7d:8d:b0:87:
94:82:40:c5:6a:3e:00:0d:87:43:c0:d6:6c:5f:f6:91:78:ae:
c1:91:38:a2:17:34:34:78:f0:8e:6b:cc:29:1d:30:d7:7f:24:
91:99:28:99:17:fb:17:6e:c2:b5:4e:e7:32:96:ce:fc:16:1e:
94:7e:ec:a9:ab:cf:3e:16:3c:a3:5a:9c:5c:ca:75:f4:6f:57:
5b:e9:d0:32:89:68:be:40:65:57:0b:a4:03:80:71:a3:4c:ff:
b2:c9:97:91:d3:5f:42:d2:ad:08:14:32:1c:48:59:22:44:91:
c8:91:e3:72:07:2d:be:5e:5c:94:9f:85:3c:b4:cd:ed:18:c4:
09:e5:c8:3e:6a:f1:22:37:44:e4:fb:cd:47:5e:de:6a:94:ef:
00:f5:30:84:a0:9c:ed:00:a8:6b:4f:80:df:52:9d:26:3a:72:
f2:e7:53:e1:71:32:c3:b2:f2:fe:87:09:5e:3d:dc:3e:fa:8c:
5d:95:ab:d6:66:6d:38:50:59:75:39:14:0c:2d:0e:4a:af:04:
f5:3b:93:43:e7:1e:c2:85:6e:3b:11:79:70:a7:7e:92:cc:ad:
ba:3f:83:5a:8b:b8:56:51:65:79:d7:ca:c1:f5:51:56:3c:c3:
1a:6e:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:14 2026 by rpki-client