This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31362e302f32322d3234203d3e203535393333.roa
File: 3130332e3131392e31362e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier: 8j4XQQELw5+LvwfgA835U2z194Z7rLb+/CeZ099q/Bc=
Subject key identifier: 0A:A6:BC:E8:64:F3:23:7B:B6:C8:E5:7F:C4:BD:5E:73:A9:CC:8A:C2
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 0A01DB0CC47F2F5CB61448A55508EA1CFF0B5A88
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31362e302f32322d3234203d3e203535393333.roa
Signing time: Tue 20 Jan 2026 02:09:34 +0000
ROA not before: Tue 20 Jan 2026 02:04:34 +0000
ROA not after: Tue 19 Jan 2027 02:09:34 +0000
asID: 55933
IP address blocks: 103.119.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:01:db:0c:c4:7f:2f:5c:b6:14:48:a5:55:08:ea:1c:ff:0b:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:34 2026 GMT
Not After : Jan 19 02:09:34 2027 GMT
Subject: CN=0AA6BCE864F3237BB6C8E57FC4BD5E73A9CC8AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:15:8b:9e:64:64:d0:98:ff:22:7b:a7:af:
8f:25:b5:e5:c7:6f:b4:1a:5d:dc:e1:d5:5f:52:64:
6c:e7:e9:1c:d4:fd:7b:3a:f4:21:3f:e6:4f:6f:76:
2a:28:63:b9:58:ea:c9:12:10:d5:83:1d:f3:31:28:
54:61:66:9b:3f:a5:36:93:59:2a:64:fc:0c:79:13:
75:d3:3f:5e:ed:a0:8b:87:ee:f9:36:7c:be:e5:e4:
16:e8:c2:c4:c0:7b:8a:69:f7:54:3e:43:39:ef:72:
21:5e:7e:2a:96:19:05:92:58:78:ac:c1:07:20:ef:
07:01:14:ca:ba:7c:1c:ec:d7:56:a3:ce:9f:ad:c6:
29:79:6f:81:a8:c3:ee:a7:83:66:81:30:6a:df:f1:
27:13:ad:16:23:6a:49:8f:a1:57:42:ea:8a:c0:0d:
5c:20:8a:72:8e:ac:cb:f7:f6:ea:24:0a:65:3a:91:
a6:a4:a8:18:6b:06:e1:55:0f:fd:45:56:9f:d5:a2:
c9:0a:cb:9a:33:30:e7:c3:02:05:ff:9e:c8:17:33:
63:7d:66:26:2d:82:96:e5:ea:54:1f:54:58:fc:d3:
2d:b9:30:d6:e0:54:d6:1d:f0:61:6e:91:61:8d:53:
50:db:60:c1:c1:ab:61:ce:71:40:ab:82:06:82:d8:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:BC:E8:64:F3:23:7B:B6:C8:E5:7F:C4:BD:5E:73:A9:CC:8A:C2
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31362e302f32322d3234203d3e203535393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
14:a0:50:c6:4e:ac:78:77:52:3c:64:92:9a:bf:4c:c6:5a:96:
70:9b:38:7d:48:54:9b:06:f8:4c:04:98:2a:5b:50:69:a0:a5:
68:ae:1f:09:7d:1c:c5:90:83:a4:f0:0d:90:ed:b7:8b:fc:21:
d8:a2:cb:3a:dd:1d:b1:e4:bc:ce:6d:bd:8a:d2:32:e7:2a:4f:
77:75:e3:54:00:39:b9:5b:0c:b4:4f:de:b1:30:88:95:4a:87:
43:d6:3a:29:a7:b6:35:89:96:6c:4c:fa:a8:2c:7c:97:c6:81:
67:de:0b:f5:d6:46:96:8a:53:a2:73:b3:9b:30:9e:a4:78:d6:
47:f5:37:ef:c4:8b:24:53:f0:05:93:26:6e:04:bb:eb:fe:55:
f2:e6:71:b1:10:be:e9:b4:7e:95:3f:fa:bc:ba:e3:0b:00:ff:
9c:48:2f:dd:83:20:9d:34:2f:a6:09:c7:54:d3:2c:08:c1:ae:
41:6a:f5:4e:30:a0:db:2c:0f:b1:0c:71:18:e3:7f:e2:ba:4e:
b4:aa:e6:7d:cf:77:29:40:b3:82:22:45:2a:05:67:f3:56:ca:
8f:78:49:bb:8e:5a:fe:d2:24:31:52:82:e9:3c:bc:b4:de:4f:
5e:77:f4:86:d1:8e:4d:ac:c2:7d:52:a0:3f:4a:8a:e9:e0:7b:
11:02:59:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:22 2026 by rpki-client