This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235322e302f32322d3234203d3e203535393333.roa
File: 3130332e3131382e3235322e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier: oId5NlWK1EtHA/fhyhDxPuSRIbcskosm7OSoAq6E97k=
Subject key identifier: C8:C0:C2:C0:DC:11:AC:7C:3E:D6:C9:F2:9E:9B:E7:76:3B:2F:C0:57
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 4C2E526FC57027D336BF3FDCFA48520AE4AE6202
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235322e302f32322d3234203d3e203535393333.roa
Signing time: Tue 20 Jan 2026 02:09:37 +0000
ROA not before: Tue 20 Jan 2026 02:04:37 +0000
ROA not after: Tue 19 Jan 2027 02:09:37 +0000
asID: 55933
IP address blocks: 103.118.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2e:52:6f:c5:70:27:d3:36:bf:3f:dc:fa:48:52:0a:e4:ae:62:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:37 2026 GMT
Not After : Jan 19 02:09:37 2027 GMT
Subject: CN=C8C0C2C0DC11AC7C3ED6C9F29E9BE7763B2FC057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:bc:00:72:6d:41:89:e6:3f:f0:29:19:58:
41:59:d6:69:b5:5f:06:81:cd:05:63:3d:22:ff:d7:
2f:d8:34:9a:5e:3d:86:0a:a2:9a:c6:eb:10:aa:66:
95:a1:27:54:ab:30:a5:e7:04:46:6d:88:88:26:a5:
97:20:c5:60:f8:16:7d:1d:ce:c7:cb:9a:c5:a2:17:
63:42:6b:12:44:d2:13:02:ce:e0:de:a2:d4:d0:e7:
d6:3e:55:d8:dd:e3:30:32:a3:07:19:44:0e:e0:e9:
11:ac:e7:2f:28:bc:13:20:85:ed:c3:44:26:fb:ed:
80:2a:77:f7:f3:0b:e1:be:96:87:63:99:85:df:40:
ee:39:70:aa:31:64:c7:f3:f5:3f:3d:c2:07:d9:7e:
74:e7:f1:ce:a3:ac:bd:50:90:be:4d:f8:ed:9f:c2:
30:83:5f:23:81:b3:b0:4e:7b:46:a8:dd:1c:70:c5:
3a:87:0b:5b:5f:0d:d3:d9:02:58:24:89:23:90:26:
92:b4:03:f2:e7:48:e1:30:b4:51:b8:70:8b:62:c1:
94:22:c7:a9:34:cb:41:70:7b:9e:41:5c:9d:b8:e5:
67:a8:1b:91:e2:e3:48:0e:b3:27:c7:c3:56:c4:2b:
39:42:13:06:80:e2:d6:06:fd:c4:9e:15:72:41:ea:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:C2:C0:DC:11:AC:7C:3E:D6:C9:F2:9E:9B:E7:76:3B:2F:C0:57
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235322e302f32322d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.252.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8c:43:e2:36:0e:f1:99:24:84:05:3b:3a:f2:8f:ee:76:89:
25:fa:aa:5b:99:03:45:5c:3b:17:3b:55:6f:d5:62:36:1d:3c:
a6:95:82:e4:03:c1:7b:07:38:97:0c:d8:bd:7e:78:85:0e:ef:
5c:d4:07:79:d9:12:f3:da:f0:96:a8:c3:0b:5a:e9:41:f0:e2:
3b:bf:58:f6:a4:ee:78:a4:be:6a:13:a5:8d:a9:a6:27:c9:ef:
0e:43:8e:39:f8:b9:82:1a:04:fe:70:3c:46:b7:df:4e:0e:50:
fc:c0:52:15:c0:da:7b:9a:6c:34:1b:c7:06:b2:31:f3:01:73:
c0:a0:ff:b5:53:ee:cd:18:4c:62:f6:a0:f4:ce:8b:09:1c:9f:
76:b4:36:46:09:79:cb:af:1a:34:30:97:1b:e8:12:ea:cd:29:
9a:2d:e1:5e:a1:0e:ac:d3:0b:eb:3d:be:e9:b5:2e:c1:3e:56:
80:5c:61:7d:dc:27:f1:54:50:0a:47:ec:75:85:cf:be:5c:85:
eb:c4:0a:8f:82:ac:8d:16:4e:22:62:0e:31:b2:2e:52:25:fd:
15:11:24:50:85:6e:bb:b7:26:11:58:22:08:73:e9:d9:af:9d:
0b:3b:f6:7b:33:3e:17:d6:b6:0e:e8:d4:e2:17:df:15:18:42:
17:56:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:55 2026 by rpki-client