This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32302e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e32302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: 1UAG7bl3tYiPSaoLyTbIaiVXvv2hPeDrQqO26ayda44=
Subject key identifier: 5A:7E:97:50:76:96:D5:BA:F9:4F:2B:15:C5:52:D0:2D:F4:E0:58:6F
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 31E2FDA99BF607985088DFB68380BB305403F127
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32302e302f32322d3232203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:05 +0000
ROA not before: Tue 20 Jan 2026 01:14:05 +0000
ROA not after: Tue 19 Jan 2027 01:19:05 +0000
asID: 24426
IP address blocks: 103.236.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e2:fd:a9:9b:f6:07:98:50:88:df:b6:83:80:bb:30:54:03:f1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:05 2026 GMT
Not After : Jan 19 01:19:05 2027 GMT
Subject: CN=5A7E97507696D5BAF94F2B15C552D02DF4E0586F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:a6:d8:ff:81:ef:f5:5a:5a:ae:c2:f5:f5:
01:72:1f:18:c3:8e:a1:0b:3a:a3:f7:7a:4c:cb:ab:
eb:e9:c3:37:b0:d8:9c:92:8a:12:65:a1:51:2b:b5:
d4:bc:29:6e:2f:ec:26:98:66:b3:0a:13:65:ad:bf:
bd:45:70:3f:00:8f:f3:37:91:e3:a9:d5:ae:3d:c4:
37:53:91:18:52:bf:3d:63:b0:07:48:f6:d4:74:cd:
da:9d:35:3d:2e:98:3d:71:64:4f:de:9f:af:45:80:
e8:be:b8:dd:ca:b4:57:71:cb:46:cb:54:b0:f9:e6:
98:a7:d2:0d:25:1c:bb:1b:80:a2:87:3d:2c:c8:2f:
97:01:95:e9:17:bb:2a:66:33:5b:49:ad:53:d7:40:
ed:9a:15:64:7b:3b:31:c0:69:3f:78:03:2d:cb:3e:
6a:2f:b3:fa:1d:4e:f9:17:aa:9a:b5:04:4b:7b:c3:
d4:ab:e0:14:be:ab:54:66:a7:66:07:7e:5e:b0:d2:
4a:53:bf:ed:53:44:63:22:dc:09:71:60:20:c2:c2:
e1:15:64:c2:e2:fe:aa:e9:de:9c:7b:ff:df:f1:9c:
f4:5a:89:fd:d3:8b:86:14:d3:ee:e4:9d:79:28:6d:
be:8d:c5:f3:27:98:35:eb:36:73:5d:34:45:1e:24:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:97:50:76:96:D5:BA:F9:4F:2B:15:C5:52:D0:2D:F4:E0:58:6F
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32302e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.20.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:58:2d:27:a3:1a:ea:7d:78:0e:1b:4a:78:3f:bd:90:bb:52:
c9:b3:ca:49:2a:07:df:f1:63:7c:6b:be:33:af:39:19:39:f7:
e3:d7:61:b6:01:57:c0:b3:74:d2:43:1b:75:1f:f0:5e:92:05:
49:08:3c:46:1b:bd:cb:1f:80:57:57:a1:cf:9f:93:77:00:41:
a6:3a:ff:09:25:f3:e3:9f:43:7e:ef:33:71:2d:fd:94:ef:85:
13:e3:ff:64:67:cc:37:c4:c0:d5:78:26:a0:01:33:c4:95:d6:
22:42:89:cf:b3:05:2b:7c:6e:55:e8:1c:12:c7:23:a9:d0:25:
79:96:df:7e:f1:50:af:a5:1e:69:98:f6:6f:49:47:a6:73:7b:
46:e3:84:34:87:a0:c0:2d:1b:49:0f:a7:c8:ec:10:98:a6:4a:
41:9e:04:51:37:85:49:c3:d3:ec:d4:6c:b8:79:0f:1d:85:85:
b2:27:79:8d:30:3c:8d:34:8c:c7:c3:93:cf:3c:46:ef:dc:49:
25:3c:a5:71:c6:cc:2e:95:d2:f8:aa:d3:07:0c:ef:4c:5b:de:
cf:fb:d8:9a:86:41:ed:9b:21:7c:78:29:48:e8:41:39:68:b6:
de:0c:d7:7d:dd:d5:aa:df:15:7d:1b:ce:67:b2:d2:c1:f1:0c:
a5:e1:38:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:33 2026 by rpki-client