This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32322d3234203d3e20313338393638.roa
File: 3130332e3133322e3136302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier: QlCDhq7S/x4Y06sFbiWvvL/FzfgAlRQ18vTHXuUPnm4=
Subject key identifier: CA:29:55:A1:20:65:D2:3C:D7:6F:46:F7:97:54:DB:CC:C8:A1:E7:B5
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 7D3DFA81CA72CBAEE5E35DF5E5B0AB910B91A310
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32322d3234203d3e20313338393638.roa
Signing time: Tue 20 Jan 2026 02:09:34 +0000
ROA not before: Tue 20 Jan 2026 02:04:34 +0000
ROA not after: Tue 19 Jan 2027 02:09:34 +0000
asID: 138968
IP address blocks: 103.132.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3d:fa:81:ca:72:cb:ae:e5:e3:5d:f5:e5:b0:ab:91:0b:91:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:34 2026 GMT
Not After : Jan 19 02:09:34 2027 GMT
Subject: CN=CA2955A12065D23CD76F46F79754DBCCC8A1E7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:72:58:db:05:44:0e:2d:3d:ec:33:7e:63:
62:5f:cc:48:d3:50:51:54:d6:3a:04:f6:83:5f:2c:
c4:d5:c6:b5:de:8c:91:6d:22:e4:3e:63:95:5e:42:
7c:d1:26:d1:b2:75:5a:89:ae:27:fb:7f:f2:03:40:
c2:f3:ba:66:ae:95:40:78:8b:5b:0f:ac:74:f3:01:
00:15:17:2d:c6:d0:73:08:a5:15:bc:69:be:d7:36:
2a:e2:8e:25:98:d2:1d:f7:5a:b1:35:5d:1d:c6:8f:
48:ed:45:5b:59:ad:68:65:3f:69:e4:9f:03:1f:78:
68:d3:73:96:0e:d2:6f:d0:0c:d4:51:12:15:9a:15:
ff:76:9a:b1:45:38:2c:71:7b:5c:6d:cc:9f:8f:64:
3f:d9:2f:92:39:3a:1f:08:5c:bb:c9:38:8b:26:04:
03:75:7c:ee:2d:92:76:f2:e3:7f:f3:21:e0:32:6b:
a8:f6:89:8b:ef:79:ed:03:d7:d7:93:ac:ee:bf:d8:
40:31:82:70:37:6c:7a:c5:1a:27:3a:f3:55:68:eb:
1d:a8:73:6c:86:6c:c0:e2:e6:03:9b:f5:b8:64:08:
0e:47:a4:af:d1:1a:61:d2:a1:9e:7d:1c:f0:b0:7e:
0d:73:9d:a4:f4:fd:87:27:03:88:6b:b4:2e:bb:16:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:55:A1:20:65:D2:3C:D7:6F:46:F7:97:54:DB:CC:C8:A1:E7:B5
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32322d3234203d3e20313338393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
29:fe:9f:78:39:7e:cf:62:20:ee:b1:f9:5e:1f:19:75:e1:57:
0f:33:70:0d:69:bd:6a:9c:d2:6e:e5:69:0d:79:ba:66:be:d6:
6f:b4:e5:9b:04:70:1f:b1:c6:17:88:d5:ef:50:8f:57:47:cd:
da:ff:7c:2c:1f:72:af:d9:64:dc:53:58:db:ab:31:3e:35:1e:
dc:dd:7f:52:74:de:b2:d4:26:75:cc:72:cd:d1:e7:75:bd:16:
5c:32:74:5b:b2:83:20:2e:39:e9:57:54:b1:ac:8a:2f:0a:3f:
ae:ef:a8:e0:2f:2f:f1:ee:af:96:1c:a0:a3:91:86:0d:21:c1:
d7:19:ab:33:42:91:b3:e0:04:5c:03:54:ca:90:4f:e1:ee:c6:
c1:2b:b0:dd:f0:48:e9:ba:e8:08:a7:76:e8:a8:54:5e:57:25:
3a:d9:be:0e:99:18:22:dc:49:55:25:b3:09:a9:8f:e7:0a:f1:
94:28:6f:d8:fc:b9:ba:25:af:dc:d1:26:1c:1e:97:90:a8:2e:
c2:14:52:32:41:f6:13:60:4b:ff:2b:e3:cb:43:4d:f8:dd:9d:
7b:40:6e:7b:bf:91:ca:53:11:9d:32:09:6f:8d:7c:c0:13:5a:
03:46:1c:25:8c:e7:17:74:3f:3d:0d:69:b8:26:a9:dc:4e:b0:
a5:9e:af:5e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUfT36gcpyy67l41315bCrkQuRoxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzRaFw0yNzAxMTkwMjA5MzRaMDMxMTAvBgNV
BAMTKENBMjk1NUExMjA2NUQyM0NENzZGNDZGNzk3NTREQkNDQzhBMUU3QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DXJY2wVEDi097DN+Y2JfzEjT
UFFU1joE9oNfLMTVxrXejJFtIuQ+Y5VeQnzRJtGydVqJrif7f/IDQMLzumaulUB4
i1sPrHTzAQAVFy3G0HMIpRW8ab7XNirijiWY0h33WrE1XR3Gj0jtRVtZrWhlP2nk
nwMfeGjTc5YO0m/QDNRREhWaFf92mrFFOCxxe1xtzJ+PZD/ZL5I5Oh8IXLvJOIsm
BAN1fO4tknby43/zIeAya6j2iYvvee0D19eTrO6/2EAxgnA3bHrFGic681Vo6x2o
c2yGbMDi5gOb9bhkCA5HpK/RGmHSoZ59HPCwfg1znaT0/YcnA4hrtC67FgnhAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUyilVoSBl0jzXb0b3l1TbzMih57UwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz
MTMzMzIyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzYz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmeEoDANBgkqhkiG9w0BAQsFAAOCAQEAKf6feDl+z2Ig7rH5
Xh8ZdeFXDzNwDWm9apzSbuVpDXm6Zr7Wb7TlmwRwH7HGF4jV71CPV0fN2v98LB9y
r9lk3FNY26sxPjUe3N1/UnTestQmdcxyzdHndb0WXDJ0W7KDIC456VdUsayKLwo/
ru+o4C8v8e6vlhygo5GGDSHB1xmrM0KRs+AEXANUypBP4e7GwSuw3fBI6broCKd2
6KhUXlclOtm+DpkYItxJVSWzCamP5wrxlChv2Py5uiWv3NEmHB6XkKguwhRSMkH2
E2BL/yvjy0NN+N2de0Bue7+RylMRnTIJb418wBNaA0YcJYznF3Q/PQ1puCap3E6w
pZ6vXg==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client