This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32382e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e32382e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: y6FqHlZRDRKKT5wR993Wr7/Q37aHHpzzZnFM/WT2tZo=
Subject key identifier: 4B:C4:44:CB:0C:10:D7:AF:A8:E8:7D:AE:5A:32:92:19:7C:02:41:D0
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 0F7AFBB931AED7CA4A710CC4D2376E5B1B714E63
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32382e302f32322d3232203d3e203234343236.roa
Signing time: Tue 20 Jan 2026 01:19:05 +0000
ROA not before: Tue 20 Jan 2026 01:14:05 +0000
ROA not after: Tue 19 Jan 2027 01:19:05 +0000
asID: 24426
IP address blocks: 103.236.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7a:fb:b9:31:ae:d7:ca:4a:71:0c:c4:d2:37:6e:5b:1b:71:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jan 20 01:14:05 2026 GMT
Not After : Jan 19 01:19:05 2027 GMT
Subject: CN=4BC444CB0C10D7AFA8E87DAE5A3292197C0241D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:e7:35:1f:97:a9:03:6d:8a:12:fb:ee:32:
c5:37:73:d9:8c:f7:42:b5:2f:81:8b:16:6f:cb:8b:
24:bc:ee:7d:60:de:e0:6f:d6:39:65:4a:36:3e:96:
43:fe:3d:61:af:f1:3d:9b:44:b9:ce:c2:a7:9e:9a:
2f:c9:d7:21:0e:b3:5f:5b:3d:64:92:e5:c1:85:61:
ca:44:d2:cd:3e:8e:6f:19:5c:c2:4d:4a:97:c9:bf:
18:58:89:63:80:83:ae:57:5d:87:ce:26:47:e9:09:
65:e4:f3:a1:22:7e:fb:af:34:52:e9:29:14:45:f9:
e2:b1:14:61:4b:0d:15:3f:6d:33:4b:e7:a1:ac:f9:
20:45:f5:82:9a:e5:45:04:67:c6:cb:8b:f9:65:a0:
be:58:fd:46:a0:c3:9d:9c:5f:3e:ec:5c:7f:3c:0b:
4a:ca:3e:e2:34:ee:ac:22:47:69:c9:4c:4e:d8:05:
e1:e7:f4:74:72:f1:9b:ee:68:5b:29:3b:74:fa:24:
1b:0f:de:f9:68:c0:61:5e:dd:eb:10:ec:83:60:91:
3d:5c:d7:a2:5c:3a:59:7a:28:d8:ce:8f:a5:61:37:
86:07:4b:25:de:dd:31:71:ff:ad:54:86:6e:88:3a:
98:6f:fc:8d:ba:76:1a:fd:74:30:9e:7f:c3:ff:84:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:44:CB:0C:10:D7:AF:A8:E8:7D:AE:5A:32:92:19:7C:02:41:D0
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32382e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.28.0/22
Signature Algorithm: sha256WithRSAEncryption
72:11:58:d2:4c:04:02:9d:30:43:9f:fd:27:f2:a7:6b:59:32:
74:99:23:93:c9:8c:50:b5:76:be:69:c0:8c:0e:be:cf:30:85:
be:c5:5a:f0:12:4a:a8:88:95:c6:38:03:2f:0c:64:2c:a5:45:
30:c2:2a:8e:e8:b1:42:5e:c9:7f:4c:9b:5d:aa:9d:e9:c7:1d:
40:07:a5:d9:1c:17:5b:d4:cd:c9:a8:fd:51:40:36:06:6c:76:
ff:e3:19:23:9f:26:64:5f:c4:2c:db:9e:3e:f3:76:4e:3d:a4:
74:30:72:ee:7f:7a:ab:11:74:88:4a:60:15:0b:ec:b0:69:45:
11:41:6e:5c:f0:bc:96:7f:00:54:c6:d2:78:b3:a3:02:85:d1:
cd:c2:24:82:3a:a4:89:09:04:b5:18:8d:90:e1:ea:e6:58:11:
34:b3:95:b8:7c:3e:5f:53:9a:bc:ea:80:29:06:28:17:01:04:
99:3e:c2:8c:ab:c6:17:2e:51:cb:ba:92:a6:63:cf:db:80:00:
e0:e3:4a:b1:69:0e:8d:df:f8:11:d3:50:f4:1a:23:0b:b6:34:
a6:8d:93:b0:d9:b2:09:b8:ef:9c:57:25:0b:86:b7:00:ad:4b:
02:66:8b:b2:50:76:79:90:e3:9a:8a:f4:d2:9f:71:0a:d0:29:
03:4e:6a:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:23 2026 by rpki-client